last executing test programs: 3m13.237414295s ago: executing program 3 (id=6767): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x6, 0x8, 0x409, 0x2, 0x8, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 3m13.129393905s ago: executing program 3 (id=6770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 3m12.980595389s ago: executing program 3 (id=6774): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) 3m12.924666606s ago: executing program 3 (id=6778): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000580)={0x2, @long={0x3, 0xffff, {0xc3f162150e0db309}}}, 0x14) 3m12.840434521s ago: executing program 3 (id=6781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x2, 0x0, 0x7}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}}, 0xea5bc50b6199d77e) 3m12.667303908s ago: executing program 3 (id=6788): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) 2m57.552775871s ago: executing program 32 (id=6788): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c905}, 0x0) 2m41.080807878s ago: executing program 2 (id=7439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000300)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) 2m40.808448183s ago: executing program 2 (id=7444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x48}}, 0x4008000) 2m40.52314498s ago: executing program 2 (id=7448): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x100000) 2m40.274545788s ago: executing program 2 (id=7453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x6, 0x4) 2m40.029801951s ago: executing program 2 (id=7458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000405"], 0x1c}, 0x1, 0x0, 0x0, 0x24008895}, 0x80) 2m39.71511764s ago: executing program 2 (id=7463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x3}}, 0x14}}, 0x4004804) 2m24.338063076s ago: executing program 33 (id=7463): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbfe, {0x3}}, 0x14}}, 0x4004804) 2m9.146401444s ago: executing program 6 (id=7988): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 2m7.480834999s ago: executing program 6 (id=7992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 2m7.223709282s ago: executing program 6 (id=7996): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 2m6.851762164s ago: executing program 6 (id=8003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x0, 0xfffffffe}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2m6.542498505s ago: executing program 6 (id=8008): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 2m6.248623926s ago: executing program 6 (id=8012): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m50.843502037s ago: executing program 34 (id=8012): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2.405472744s ago: executing program 4 (id=10224): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast1}, 0xc) 2.210995993s ago: executing program 4 (id=10228): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 2.059453602s ago: executing program 4 (id=10232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 1.761945894s ago: executing program 4 (id=10237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 1.547781879s ago: executing program 7 (id=10241): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x5411, &(0x7f0000000940)) 1.483696212s ago: executing program 4 (id=10242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb8}, @NFTA_PAYLOAD_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1.332873707s ago: executing program 7 (id=10245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb0}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20008084) 1.286928759s ago: executing program 4 (id=10246): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) 1.232972379s ago: executing program 0 (id=10247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x809}, 0x20) 1.139159639s ago: executing program 7 (id=10250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd700000f900000400000004000e0004001d"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.052387623s ago: executing program 0 (id=10251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.014783987s ago: executing program 5 (id=10253): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x28, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) 855.508407ms ago: executing program 0 (id=10254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 840.229316ms ago: executing program 1 (id=10255): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0xe, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000001c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0xba10, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0x40}, 0x24000052) 810.314734ms ago: executing program 5 (id=10256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 708.169875ms ago: executing program 7 (id=10257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xfb}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 692.05652ms ago: executing program 1 (id=10258): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xada6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x12, &(0x7f0000000100)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) 626.982429ms ago: executing program 5 (id=10259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="df320200201a010a140003006e657464657673696d30000000000000200016801c0001"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x880) 535.977024ms ago: executing program 0 (id=10260): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x33, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@remote}]}]}, 0x20}}, 0x4010) 508.984816ms ago: executing program 1 (id=10261): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e23ac1e0101"], 0x110) 443.735704ms ago: executing program 7 (id=10262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 407.796633ms ago: executing program 0 (id=10263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 359.201386ms ago: executing program 1 (id=10264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 358.755555ms ago: executing program 5 (id=10265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 264.849525ms ago: executing program 7 (id=10266): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38000d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 250.691905ms ago: executing program 0 (id=10267): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2, 0x14, 0x2, 0x8, 0x7, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0x6c, 0x1a0, 0x0, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x5}}]}, 0x38}}, 0x40) 203.71878ms ago: executing program 5 (id=10268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="f3"]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 154.589945ms ago: executing program 1 (id=10269): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f00000000c0)) 10.208209ms ago: executing program 1 (id=10270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000a0000000900020073797a31000000000500010007000000050005000a0000001400078008001240fffffffa08000b0000000401050004000000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 0s ago: executing program 5 (id=10271): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) kernel console output (not intermixed with test programs): yz.3.3809': attribute type 2 has an invalid length. [ 237.676802][T13778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3809'. [ 237.872181][T13787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3813'. [ 238.027040][T13792] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.049168][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3815'. [ 238.686452][T13821] TCP: TCP_TX_DELAY enabled [ 239.470484][T13854] validate_nla: 1 callbacks suppressed [ 239.470501][T13854] netlink: 'syz.3.3845': attribute type 2 has an invalid length. [ 240.387738][T13898] netlink: 'syz.4.3867': attribute type 3 has an invalid length. [ 240.441783][T13898] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 240.484514][T13898] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3867'. [ 240.531889][T13898] NCSI netlink: No device for ifindex 0 [ 240.583883][T13906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 240.825802][T13915] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 240.882245][T13921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3878'. [ 241.387598][T13947] netlink: 'syz.4.3890': attribute type 1 has an invalid length. [ 241.423665][T13947] netlink: 'syz.4.3890': attribute type 1 has an invalid length. [ 241.986714][T13985] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3907'. [ 242.517379][T14016] __nla_validate_parse: 2 callbacks suppressed [ 242.517396][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3919'. [ 242.571795][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3919'. [ 242.724362][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 242.742578][T14020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.207178][T14056] --map-set only usable from mangle table [ 243.363415][T14057] bond3 (unregistering): Released all slaves [ 243.526472][T14078] netlink: 'syz.0.3941': attribute type 23 has an invalid length. [ 244.111438][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 244.673505][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 245.257377][T14169] netlink: 600 bytes leftover after parsing attributes in process `syz.4.3981'. [ 245.308562][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.336819][T14169] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 245.799459][T14197] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3996'. [ 245.951402][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4000'. [ 246.106562][T14216] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.256335][T14225] debugfs: '1^!' already exists in 'ieee80211' [ 246.350379][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4012'. [ 246.392260][T14230] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4012'. [ 246.815162][T14259] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4027'. [ 246.836833][T14254] bond5: entered promiscuous mode [ 246.842128][T14254] bond5: entered allmulticast mode [ 246.848294][T14254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.898890][T14263] debugfs: '1^!' already exists in 'ieee80211' [ 246.999844][T14267] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 247.320749][T14287] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 247.838399][T14318] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 248.250519][T14339] __nla_validate_parse: 3 callbacks suppressed [ 248.250536][T14339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4067'. [ 248.581741][T14352] xt_socket: unknown flags 0x4 [ 249.463702][T14391] netlink: 'syz.4.4092': attribute type 8 has an invalid length. [ 249.589030][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 249.770670][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4097'. [ 249.793704][T14402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.070801][T14416] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4104'. [ 250.146602][T14419] xt_limit: Overflow, try lower: 268435456/134217728 [ 250.235947][T14424] netlink: 'syz.2.4107': attribute type 61 has an invalid length. [ 250.433934][ T36] IPVS: starting estimator thread 0... [ 250.545663][T14437] IPVS: using max 27 ests per chain, 64800 per kthread [ 251.084174][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4130'. [ 251.102115][T14473] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 251.251549][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 251.324692][T14481] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 251.588827][T14498] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4144'. [ 251.700092][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'. [ 252.125138][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 252.201220][T14531] netlink: 2136 bytes leftover after parsing attributes in process `syz.0.4160'. [ 253.159357][T14564] netlink: 'syz.3.4177': attribute type 2 has an invalid length. [ 253.341495][T14570] __nla_validate_parse: 1 callbacks suppressed [ 253.341512][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 253.723945][T14592] netlink: 'syz.3.4191': attribute type 2 has an invalid length. [ 253.882462][T14600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.044066][T14610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.306869][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4209'. [ 254.320530][T14628] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 254.559396][T14642] Timeout policy `syz1' can only be used by L3 protocol number 35064 [ 254.741039][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4219'. [ 254.786720][T14651] openvswitch: netlink: Missing key (keys=40, expected=100) [ 255.242602][T14678] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 255.526203][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741830][T14705] netlink: 'syz.3.4241': attribute type 5 has an invalid length. [ 255.792117][T14710] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.356750][T14741] netlink: 'syz.0.4255': attribute type 21 has an invalid length. [ 256.392769][T14741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4255'. [ 256.848014][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4268'. [ 256.947874][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4270'. [ 257.166680][T14790] xt_HMARK: proto mask must be zero with L3 mode [ 257.234673][T14796] netlink: 'syz.2.4278': attribute type 22 has an invalid length. [ 257.356408][T14805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4282'. [ 257.394124][T14805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4282'. [ 257.519876][T14814] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4286'. [ 257.566569][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 257.623345][T14818] netlink: 'syz.1.4288': attribute type 1 has an invalid length. [ 257.647034][T14818] netlink: 'syz.1.4288': attribute type 2 has an invalid length. [ 257.864104][T14833] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 257.971900][T14837] ip6tnl3: entered allmulticast mode [ 257.990081][ T36] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 258.262129][T14856] netlink: 'syz.3.4308': attribute type 2 has an invalid length. [ 258.668462][T14882] netlink: 'syz.4.4320': attribute type 2 has an invalid length. [ 258.942196][T14897] netlink: 'syz.0.4329': attribute type 4 has an invalid length. [ 258.956304][T14895] __nla_validate_parse: 7 callbacks suppressed [ 258.956321][T14895] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4327'. [ 258.984327][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4329'. [ 258.995991][T14901] netlink: 'syz.4.4331': attribute type 25 has an invalid length. [ 259.006444][T14901] netlink: 'syz.4.4331': attribute type 3 has an invalid length. [ 259.014724][T14901] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4331'. [ 259.037190][T14902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4330'. [ 259.540709][T14932] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 259.890443][T14951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4355'. [ 260.074775][T14963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.634678][T14989] x_tables: duplicate underflow at hook 4 [ 260.748156][T14993] netlink: zone id is out of range [ 260.769369][T14993] netlink: zone id is out of range [ 260.787122][T14993] netlink: zone id is out of range [ 260.805398][T14993] netlink: zone id is out of range [ 260.831236][T14993] netlink: zone id is out of range [ 260.847252][T14993] netlink: zone id is out of range [ 260.875268][T14993] netlink: zone id is out of range [ 260.890914][T14993] netlink: zone id is out of range [ 261.224765][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4387'. [ 261.284450][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 261.696970][T15040] validate_nla: 1 callbacks suppressed [ 261.696987][T15040] netlink: 'syz.0.4398': attribute type 2 has an invalid length. [ 261.729088][T15040] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4398'. [ 261.755628][T15045] netlink: 'syz.2.4401': attribute type 1 has an invalid length. [ 261.861029][T15047] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 261.934446][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4406'. [ 262.324460][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 262.492486][T15079] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.929495][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4432'. [ 262.943083][T15103] xt_CT: No such helper "syz0" [ 263.831820][T15162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4454'. [ 263.991879][T15170] netlink: 'syz.0.4457': attribute type 1 has an invalid length. [ 264.033618][T15170] netlink: 756 bytes leftover after parsing attributes in process `syz.0.4457'. [ 264.301473][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.426081][T15195] netlink: 'syz.2.4469': attribute type 2 has an invalid length. [ 264.454305][T15195] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4469'. [ 264.632732][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'. [ 264.728133][T15209] netlink: 'syz.0.4476': attribute type 9 has an invalid length. [ 264.738784][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4476'. [ 264.870201][T15217] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 264.909871][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4481'. [ 265.095841][T15229] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4487'. [ 265.621277][T15259] net_ratelimit: 1707 callbacks suppressed [ 265.621295][T15259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.757383][T15269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4506'. [ 265.875146][T15276] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 265.887715][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 265.944596][T15277] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4507'. [ 265.966770][T15279] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4511'. [ 267.201051][T15343] netlink: 'syz.4.4542': attribute type 1 has an invalid length. [ 267.461122][T15358] netlink: 'syz.1.4550': attribute type 32 has an invalid length. [ 267.545728][T15355] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 267.578237][T15355] bond0 (unregistering): Released all slaves [ 267.810413][T15362] bond0: option lacp_active: invalid value (5) [ 267.850148][T15362] bond0 (unregistering): Released all slaves [ 267.925978][T15378] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 268.179488][T15393] netlink: 'syz.3.4569': attribute type 2 has an invalid length. [ 268.202963][T15396] netlink: 'syz.4.4568': attribute type 1 has an invalid length. [ 268.345765][T15403] openvswitch: netlink: IP tunnel dst address not specified [ 268.696253][T15421] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 268.711097][T15421] bond6 (unregistering): Released all slaves [ 269.611237][T15467] openvswitch: netlink: Multiple metadata blocks provided [ 269.618605][T15463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.891085][T15481] __nla_validate_parse: 11 callbacks suppressed [ 269.891102][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4609'. [ 270.105080][T15494] netlink: 'syz.2.4615': attribute type 21 has an invalid length. [ 270.146402][T15494] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.181217][T15494] netlink: 'syz.2.4615': attribute type 1 has an invalid length. [ 270.407406][T15511] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4624'. [ 270.729143][T15525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.952459][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4638'. [ 271.060069][T15541] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.521812][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4653'. [ 271.534416][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 271.587364][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4653'. [ 271.654182][T15573] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4656'. [ 271.657773][T15575] netlink: 'syz.4.4657': attribute type 3 has an invalid length. [ 271.896379][T15586] netlink: 'syz.3.4662': attribute type 15 has an invalid length. [ 271.960622][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4666'. [ 272.029569][T15595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4667'. [ 272.322408][T15612] netlink: 'syz.1.4675': attribute type 1 has an invalid length. [ 272.380097][T15612] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4675'. [ 272.387391][T15619] tc_dump_action: action bad kind [ 272.439728][T15621] netlink: 'syz.0.4680': attribute type 21 has an invalid length. [ 272.485004][T15621] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4680'. [ 272.546502][T15621] netlink: 'syz.0.4680': attribute type 4 has an invalid length. [ 272.564445][T15621] netlink: 'syz.0.4680': attribute type 3 has an invalid length. [ 272.701765][T15627] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 272.756998][T15627] bond2 (unregistering): Released all slaves [ 272.992625][T15649] bond3: entered promiscuous mode [ 273.009976][T15649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.228225][T15666] netlink: 'syz.2.4702': attribute type 4 has an invalid length. [ 273.741281][T15690] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 274.732547][T15746] gtp0: entered allmulticast mode [ 275.172262][T15775] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 275.277492][T15780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.385215][T15787] __nla_validate_parse: 7 callbacks suppressed [ 275.385233][T15787] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4760'. [ 275.421498][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4760'. [ 275.471712][T15787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4760'. [ 275.511023][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4760'. [ 275.549799][T15796] : renamed from lo [ 275.816117][T15812] geneve1: entered promiscuous mode [ 275.891069][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4773'. [ 276.229234][T15833] netlink: zone id is out of range [ 276.255856][T15833] netlink: zone id is out of range [ 276.275195][T15833] netlink: zone id is out of range [ 276.285754][T15833] netlink: zone id is out of range [ 276.291626][T15833] netlink: zone id is out of range [ 276.305712][T15833] netlink: zone id is out of range [ 276.319233][T15833] netlink: zone id is out of range [ 276.372628][T15840] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 276.467919][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4787'. [ 276.677416][T15847] bond0: option all_slaves_active: invalid value (255) [ 276.738870][T15847] bond0 (unregistering): Released all slaves [ 277.080503][T15863] bond2: entered promiscuous mode [ 277.089722][T15863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.343530][T15886] netlink: 'syz.3.4804': attribute type 10 has an invalid length. [ 277.370727][T15886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4804'. [ 278.120889][T15936] netlink: 'syz.4.4830': attribute type 2 has an invalid length. [ 278.145293][T15936] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4830'. [ 278.352283][T15949] xt_nfacct: accounting object `' does not exist [ 278.439245][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 278.675857][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 279.603499][T16018] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 279.690507][T16018] bond4 (unregistering): Released all slaves [ 279.728244][T16036] raw_sendmsg: syz.2.4876 forgot to set AF_INET. Fix it! [ 279.783405][T16040] netlink: 'syz.1.4879': attribute type 13 has an invalid length. [ 279.953344][T16048] netlink: 'syz.1.4883': attribute type 1 has an invalid length. [ 280.105425][T16057] bond0: option resend_igmp: invalid value (2878) [ 280.111916][T16057] bond0: option resend_igmp: allowed values 0 - 255 [ 280.122265][T16057] bond0 (unregistering): Released all slaves [ 280.476790][T16080] bridge0: port 3(bond0) entered blocking state [ 280.495761][T16080] bridge0: port 3(bond0) entered disabled state [ 280.514728][T16080] bond0: entered allmulticast mode [ 280.521375][T16080] bond_slave_0: entered allmulticast mode [ 280.531529][T16080] bond_slave_1: entered allmulticast mode [ 280.576094][T16080] bond0: entered promiscuous mode [ 280.599013][T16080] bond_slave_0: entered promiscuous mode [ 280.631329][T16080] bond_slave_1: entered promiscuous mode [ 281.120734][T16109] __nla_validate_parse: 3 callbacks suppressed [ 281.120751][T16109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4912'. [ 281.360826][T16121] netlink: 'syz.2.4918': attribute type 1 has an invalid length. [ 281.542697][T16127] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4921'. [ 281.681287][T16135] netlink: zone id is out of range [ 281.702389][T16135] netlink: zone id is out of range [ 281.720062][T16135] netlink: zone id is out of range [ 281.735819][T16135] netlink: zone id is out of range [ 281.754825][T16135] netlink: zone id is out of range [ 281.787777][T16135] netlink: zone id is out of range [ 281.805010][T16135] netlink: zone id is out of range [ 281.820221][T16135] netlink: zone id is out of range [ 281.835120][T16135] netlink: zone id is out of range [ 281.878538][T16135] netlink: zone id is out of range [ 282.918165][T16197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4955'. [ 282.948625][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4955'. [ 283.166970][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'. [ 283.177161][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4963'. [ 283.350773][T16223] netlink: 'syz.3.4968': attribute type 7 has an invalid length. [ 283.371618][T16223] netlink: 'syz.3.4968': attribute type 8 has an invalid length. [ 283.992628][T16258] netlink: 660 bytes leftover after parsing attributes in process `syz.4.4987'. [ 284.024927][T16258] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4987'. [ 284.194897][T16271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4993'. [ 284.671409][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5008'. [ 285.772736][T16359] tipc: Can't bind to reserved service type 0 [ 285.901629][T16365] netlink: 'syz.0.5039': attribute type 362 has an invalid length. [ 286.059491][T16374] netlink: 'syz.0.5044': attribute type 1 has an invalid length. [ 286.923733][T16415] xt_l2tp: missing protocol rule (udp|l2tpip) [ 287.082796][T16426] __nla_validate_parse: 3 callbacks suppressed [ 287.082813][T16426] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5070'. [ 287.414168][T16448] x_tables: unsorted entry at hook 2 [ 287.561692][T16455] netlink: 'syz.3.5084': attribute type 11 has an invalid length. [ 287.623404][T16459] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5085'. [ 288.071133][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5093'. [ 288.244166][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5096'. [ 288.703446][T16512] netlink: 'syz.2.5107': attribute type 7 has an invalid length. [ 288.850668][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5112'. [ 289.501262][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5133'. [ 289.511173][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5133'. [ 289.794661][T11599] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 289.898912][T16582] netlink: 'syz.2.5142': attribute type 21 has an invalid length. [ 290.043617][T16588] netlink: 'syz.0.5144': attribute type 3 has an invalid length. [ 290.074916][T11599] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 290.084391][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 290.636562][T16622] veth0_to_hsr: entered promiscuous mode [ 290.693288][T16622] net_ratelimit: 4 callbacks suppressed [ 290.693306][T16622] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 290.758979][T16630] netlink: 'syz.4.5166': attribute type 1 has an invalid length. [ 290.773871][T16630] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5166'. [ 291.039583][T16646] xt_TCPMSS: Only works on TCP SYN packets [ 291.082313][T16649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.082510][T16651] netlink: 'syz.4.5176': attribute type 1 has an invalid length. [ 291.344544][T16666] xt_l2tp: v2 sid > 0xffff: 33554432 [ 291.516309][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5189'. [ 291.563392][T16676] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5189'. [ 291.957065][T16702] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 292.572193][T16734] bond0 (unregistering): Released all slaves [ 293.417041][T16787] bond6 (unregistering): Released all slaves [ 293.666867][T16811] __nla_validate_parse: 2 callbacks suppressed [ 293.666884][T16811] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5255'. [ 293.851719][T16827] x_tables: unsorted entry at hook 1 [ 294.071147][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5268'. [ 294.317357][T16856] netlink: 279 bytes leftover after parsing attributes in process `syz.2.5275'. [ 294.335865][T16856] veth0_to_bond: default FDB implementation only supports local addresses [ 294.633438][T16875] netlink: 'syz.0.5285': attribute type 4 has an invalid length. [ 294.891995][T16881] bond3: entered promiscuous mode [ 294.907551][T16881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.573310][T16936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5314'. [ 295.605957][T16936] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5314'. [ 296.011148][T16962] netlink: 'syz.3.5325': attribute type 5 has an invalid length. [ 296.256728][T16981] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 296.421694][T16989] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 296.458558][T16991] netlink: 'syz.0.5338': attribute type 1 has an invalid length. [ 296.460521][T16994] netlink: 'syz.4.5337': attribute type 11 has an invalid length. [ 296.495827][T16991] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5338'. [ 296.522761][T16997] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 296.557682][T16997] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 296.569726][T16999] xt_hashlimit: max too large, truncated to 1048576 [ 296.590239][T16997] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 296.812565][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5345'. [ 297.003119][T17022] IPVS: lc: FWM 3 0x00000003 - no destination available [ 297.023859][T17025] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 297.068349][T17030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5353'. [ 297.276172][T17043] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 297.397065][T17050] xt_hashlimit: size too large, truncated to 1048576 [ 297.533777][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5365'. [ 297.764467][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 297.798815][T17079] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 298.683545][T17126] netlink: 'syz.0.5395': attribute type 1 has an invalid length. [ 299.335174][T17162] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 299.658310][T17181] netlink: 'syz.4.5422': attribute type 21 has an invalid length. [ 299.696151][T17181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5422'. [ 299.718963][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5422'. [ 300.431140][T17221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5440'. [ 300.661288][T17239] netlink: 'syz.4.5448': attribute type 21 has an invalid length. [ 300.684092][T17239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5448'. [ 300.993976][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5458'. [ 301.014899][T17257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5458'. [ 301.026789][T17260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.081835][T17264] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 301.273843][T17276] netlink: 'syz.1.5469': attribute type 23 has an invalid length. [ 302.126908][T17325] openvswitch: netlink: Message has -2 unknown bytes. [ 302.145074][T17325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.263323][T17335] netlink: 'syz.2.5497': attribute type 4 has an invalid length. [ 302.290022][T17337] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 302.438196][T17346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5502'. [ 302.460323][T17347] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 302.465238][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5502'. [ 302.697254][T17362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5510'. [ 302.741648][T17365] : renamed from bond_slave_0 [ 302.909709][T17378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5516'. [ 302.921909][T17379] Timeout policy `syz0' can only be used by L3 protocol number 37376 [ 303.429797][T17412] netlink: 'syz.3.5534': attribute type 21 has an invalid length. [ 303.521619][T17416] bridge3: entered allmulticast mode [ 303.763068][T17434] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 303.785949][T17434] bond4 (unregistering): Released all slaves [ 304.731687][T17492] __nla_validate_parse: 4 callbacks suppressed [ 304.731740][T17492] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5570'. [ 304.732229][T17493] netlink: 'syz.2.5571': attribute type 6 has an invalid length. [ 304.899465][T17505] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 304.949117][T17507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5577'. [ 304.997802][T17509] netlink: 'syz.1.5578': attribute type 1 has an invalid length. [ 305.159280][T17519] netlink: 'syz.4.5582': attribute type 29 has an invalid length. [ 305.254791][T17527] ip6t_REJECT: ECHOREPLY is not supported [ 306.003431][T17556] netlink: 'syz.0.5600': attribute type 12 has an invalid length. [ 306.110948][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5607'. [ 306.371063][T17587] netlink: 'syz.1.5614': attribute type 1 has an invalid length. [ 306.391141][T17587] netlink: 'syz.1.5614': attribute type 2 has an invalid length. [ 306.415843][T17589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5615'. [ 306.540646][T17601] openvswitch: netlink: Multiple metadata blocks provided [ 306.726657][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5624'. [ 306.866058][T17615] IPVS: Unknown mcast interface: ip6gretap0 [ 306.987708][T17620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5629'. [ 307.164997][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5637'. [ 307.287363][T17637] bond4: entered promiscuous mode [ 307.292581][T17637] bond4: entered allmulticast mode [ 307.367319][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5643'. [ 307.479051][T17652] IPVS: Unknown mcast interface: lo [ 307.729312][T17672] netlink: 'syz.0.5654': attribute type 11 has an invalid length. [ 307.786641][T17675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5657'. [ 308.087579][T17694] netlink: 'syz.1.5665': attribute type 1 has an invalid length. [ 308.364068][T17714] netlink: 'syz.0.5675': attribute type 1 has an invalid length. [ 308.439602][T17719] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5679'. [ 308.591555][T17727] netlink: 'syz.0.5681': attribute type 9 has an invalid length. [ 308.839867][T17739] smbdirect: ib_dev[syz2] renamed to [sy] [ 309.298452][T17770] openvswitch: netlink: Duplicate or invalid key (type 0). [ 309.416293][T17778] SET target dimension over the limit! [ 310.437094][T17829] validate_nla: 1 callbacks suppressed [ 310.437110][T17829] netlink: 'syz.4.5733': attribute type 2 has an invalid length. [ 310.474672][T17829] __nla_validate_parse: 2 callbacks suppressed [ 310.474688][T17829] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5733'. [ 311.020460][T17848] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.028137][T17848] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.240926][T17848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.268243][T17848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.494936][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.506455][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.537467][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.570959][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.589418][T17877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.628107][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5758'. [ 311.762711][T17887] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5761'. [ 312.029462][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5769'. [ 312.070123][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5772'. [ 312.206306][T17919] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 312.273948][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5779'. [ 312.704563][T17955] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5794'. [ 312.993709][T17973] openvswitch: netlink: IPv4 tunnel dst address is zero [ 313.412380][T17997] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 313.724906][T18020] ipip0: entered promiscuous mode [ 314.088372][T18044] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 314.106117][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 314.198168][T18052] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5843'. [ 314.213248][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5843'. [ 315.233495][T18127] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 315.404701][T18140] netlink: 'syz.0.5885': attribute type 23 has an invalid length. [ 315.948234][T18180] netlink: 'syz.0.5906': attribute type 1 has an invalid length. [ 316.353232][T18202] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 316.401104][T18202] bond6 (unregistering): Released all slaves [ 316.403442][T18215] netlink: 'syz.2.5923': attribute type 7 has an invalid length. [ 316.450491][T18214] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 317.252414][T18271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5951'. [ 317.395671][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5953'. [ 318.340705][T18349] netlink: 'syz.3.5990': attribute type 3 has an invalid length. [ 318.680630][T18373] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 318.891364][T18392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6012'. [ 318.989126][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6014'. [ 319.061734][T18403] netlink: 'syz.3.6015': attribute type 15 has an invalid length. [ 319.588006][T18440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.289655][T18482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6056'. [ 320.354080][T18485] netlink: 'syz.4.6058': attribute type 2 has an invalid length. [ 320.447143][T18485] : entered promiscuous mode [ 320.539128][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 320.782151][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 320.951449][T18524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.309399][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6089'. [ 321.329079][T18548] netlink: 'syz.1.6088': attribute type 2 has an invalid length. [ 321.345851][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6088'. [ 321.413741][T18557] No such timeout policy "s" [ 321.423631][T18557] netlink: Failed to associated timeout policy 's' [ 321.736266][T18580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6105'. [ 321.931745][T18597] netlink: 'syz.0.6112': attribute type 1 has an invalid length. [ 321.940017][T18597] netlink: 'syz.0.6112': attribute type 12 has an invalid length. [ 322.495796][T18635] netlink: 'syz.1.6130': attribute type 32 has an invalid length. [ 322.524174][T18635] __nla_validate_parse: 1 callbacks suppressed [ 322.524190][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'. [ 322.594971][T18644] netlink: 'syz.2.6133': attribute type 2 has an invalid length. [ 322.648632][T18635] bond5: Setting coupled_control to off (0) [ 322.708522][T18644] : entered promiscuous mode [ 322.746945][T18657] netlink: 'syz.4.6141': attribute type 3 has an invalid length. [ 323.368067][T18702] netlink: 'syz.3.6163': attribute type 11 has an invalid length. [ 323.404320][T18702] netlink: 'syz.3.6163': attribute type 4 has an invalid length. [ 323.437384][T18702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6163'. [ 323.480277][T18711] xt_TCPMSS: Only works on TCP SYN packets [ 323.564409][T18716] batadv0: entered promiscuous mode [ 323.571128][T18716] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 323.718309][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6175'. [ 323.753435][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 324.103141][T18754] netlink: 'syz.4.6189': attribute type 11 has an invalid length. [ 324.125361][T18754] netlink: 'syz.4.6189': attribute type 4 has an invalid length. [ 324.138977][T18754] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6189'. [ 324.192587][T18762] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6193'. [ 324.223550][T18764] netlink: 'syz.2.6192': attribute type 2 has an invalid length. [ 324.331171][T18772] netlink: 'syz.3.6198': attribute type 1 has an invalid length. [ 324.364288][T18772] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6198'. [ 324.567084][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6207'. [ 324.642683][T18792] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 324.745445][T18800] xt_hashlimit: max too large, truncated to 1048576 [ 324.769359][T18800] xt_hashlimit: overflow, try lower: 0/0 [ 325.705321][T18859] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6238'. [ 325.737033][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6238'. [ 326.163202][T18890] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.195304][T18890] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.202551][T18890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.251480][T18890] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 326.497731][T18911] validate_nla: 2 callbacks suppressed [ 326.497747][T18911] netlink: 'syz.4.6263': attribute type 3 has an invalid length. [ 326.527822][T18913] netlink: 'syz.1.6265': attribute type 1 has an invalid length. [ 327.571461][T18990] __nla_validate_parse: 2 callbacks suppressed [ 327.571479][T18990] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6302'. [ 327.764172][T18998] sock: sock_timestamping_bind_phc: sock not bind to device [ 327.902620][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6310'. [ 327.959145][T19011] openvswitch: netlink: IP tunnel dst address not specified [ 328.005839][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6314'. [ 328.328893][T19031] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6320'. [ 328.355057][T19031] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6320'. [ 328.470670][T19040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.736956][T19063] tunl0: entered promiscuous mode [ 328.753719][T19063] netlink: 'syz.0.6336': attribute type 4 has an invalid length. [ 328.762336][T19063] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6336'. [ 329.186329][T19095] netlink: 'syz.4.6352': attribute type 1 has an invalid length. [ 329.389633][T19111] openvswitch: netlink: Actions may not be safe on all matching packets [ 329.402919][T19112] geneve2: entered allmulticast mode [ 329.612341][T19122] bond0 (unregistering): Released all slaves [ 329.689767][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6368'. [ 329.750229][T19131] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6369'. [ 329.885437][T19138] xt_hashlimit: size too large, truncated to 1048576 [ 329.905750][T19138] xt_hashlimit: max too large, truncated to 1048576 [ 330.185022][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6384'. [ 330.223192][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6384'. [ 330.365915][T19171] netlink: 'syz.3.6389': attribute type 10 has an invalid length. [ 330.431365][T19171] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 330.631777][T19189] netlink: 'syz.3.6398': attribute type 9 has an invalid length. [ 331.366908][T19243] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.488853][T19322] netlink: 'syz.2.6463': attribute type 2 has an invalid length. [ 332.930846][T19356] netlink: 'syz.3.6480': attribute type 3 has an invalid length. [ 333.120846][T19360] bond6: option updelay: invalid value (18446744073709518847) [ 333.149040][T19360] bond6: option updelay: allowed values 0 - 2147483647 [ 333.176866][T19360] bond6 (unregistering): Released all slaves [ 333.372596][T19378] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 333.386895][T19379] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 333.568184][T19393] netlink: 'syz.0.6498': attribute type 1 has an invalid length. [ 333.919029][T19421] netlink: 'syz.4.6512': attribute type 10 has an invalid length. [ 334.581514][T19464] xt_connbytes: Forcing CT accounting to be enabled [ 334.597899][T19464] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.428253][T19519] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 335.677980][T19540] __nla_validate_parse: 6 callbacks suppressed [ 335.677998][T19540] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6569'. [ 335.779205][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6570'. [ 335.805603][T19547] netlink: 'syz.0.6572': attribute type 1 has an invalid length. [ 335.827574][T19547] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6572'. [ 335.963784][T19558] x_tables: duplicate entry at hook 3 [ 336.156125][T19572] openvswitch: netlink: IPv4 tunnel dst address is zero [ 336.172982][T19574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6585'. [ 336.571954][T19600] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 336.759698][T19611] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 337.108828][T19633] Cannot find map_set index 65533 as target [ 337.572770][T19663] netlink: 'syz.4.6630': attribute type 13 has an invalid length. [ 338.008010][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6646'. [ 338.332811][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6656'. [ 338.368301][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6656'. [ 338.380596][T19716] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 338.479205][T19730] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 338.888758][T19761] netlink: 'syz.0.6679': attribute type 4 has an invalid length. [ 339.418436][T19797] netlink: 'syz.2.6695': attribute type 1 has an invalid length. [ 339.448517][T19797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6695'. [ 339.706548][T19820] openvswitch: netlink: Duplicate or invalid key (type 0). [ 340.059639][T19849] netlink: 'syz.4.6722': attribute type 7 has an invalid length. [ 340.136552][T19848] bond6: Unable to set down delay as MII monitoring is disabled [ 340.175585][T19848] bond6 (unregistering): Released all slaves [ 340.371115][T19868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6731'. [ 340.483681][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6735'. [ 340.930311][T19914] __nla_validate_parse: 1 callbacks suppressed [ 340.930328][T19914] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6754'. [ 341.497447][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6772'. [ 341.751190][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6780'. [ 342.607073][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'. [ 342.898274][T20048] xt_hashlimit: max too large, truncated to 1048576 [ 342.920019][T20048] xt_hashlimit: overflow, try lower: 137438953472/8 [ 343.659061][T20102] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 343.903441][T20120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6857'. [ 343.990824][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'. [ 344.000462][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'. [ 344.070540][T20128] bond0: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 344.080226][T20128] bond0: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 344.092610][T20128] bond0: entered allmulticast mode [ 344.098602][T20128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.530838][T20157] netlink: 'syz.4.6875': attribute type 3 has an invalid length. [ 344.543175][T20159] netlink: 'syz.1.6878': attribute type 23 has an invalid length. [ 344.553222][T20159] netlink: 'syz.1.6878': attribute type 21 has an invalid length. [ 344.572713][T20159] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.686192][T20169] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6881'. [ 344.718515][T20171] netlink: 'syz.2.6883': attribute type 1 has an invalid length. [ 344.750878][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6882'. [ 344.969297][T20188] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6890'. [ 344.986763][T20188] netlink: 'syz.4.6890': attribute type 2 has an invalid length. [ 345.405619][T20217] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 345.432054][T20217] bond6 (unregistering): Released all slaves [ 345.464342][T20223] =v: renamed from veth0_to_bond [ 345.657255][T20236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.778154][T20244] netlink: 'syz.4.6919': attribute type 21 has an invalid length. [ 346.234867][T20275] netlink: 'syz.1.6931': attribute type 55 has an invalid length. [ 346.311133][T20280] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 346.720441][T20313] netlink: 'syz.2.6951': attribute type 5 has an invalid length. [ 346.911944][T20326] netlink: 'syz.1.6957': attribute type 13 has an invalid length. [ 346.922236][T20326] netlink: 'syz.1.6957': attribute type 12 has an invalid length. [ 347.067425][T20337] __nla_validate_parse: 7 callbacks suppressed [ 347.067442][T20337] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6963'. [ 347.240244][T20347] openvswitch: netlink: Key type 226 is out of range max 32 [ 347.869852][T20380] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 347.951375][T20386] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6987'. [ 348.489930][T20407] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 349.161227][T20428] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 349.712543][T20454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7020'. [ 349.743687][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7020'. [ 349.762104][T20454] validate_nla: 4 callbacks suppressed [ 349.762120][T20454] netlink: 'syz.4.7020': attribute type 2 has an invalid length. [ 350.291413][T20477] openvswitch: netlink: IP tunnel TTL not specified. [ 350.514850][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7036'. [ 351.056041][T20509] netlink: 'syz.2.7047': attribute type 1 has an invalid length. [ 351.080860][T20509] netlink: 9528 bytes leftover after parsing attributes in process `syz.2.7047'. [ 351.102016][T20505] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 351.167984][T20505] bond7 (unregistering): Released all slaves [ 351.640858][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7058'. [ 351.652348][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7061'. [ 351.664802][T20534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7061'. [ 352.341959][T20562] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.925940][T20595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7090'. [ 353.091737][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7093'. [ 353.297808][T20613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7097'. [ 353.561647][T20624] netlink: 'syz.1.7103': attribute type 1 has an invalid length. [ 353.597803][T20624] netlink: 'syz.1.7103': attribute type 2 has an invalid length. [ 354.167309][T20649] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7116'. [ 354.378567][T20656] IPVS: length: 15 != 8 [ 354.550343][T20664] netlink: 'syz.2.7123': attribute type 1 has an invalid length. [ 354.572897][T20664] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7123'. [ 355.011889][T20683] IPVS: length: 35 != 24 [ 355.047238][T20687] netlink: 'syz.1.7135': attribute type 1 has an invalid length. [ 355.066012][T20687] netlink: 'syz.1.7135': attribute type 1 has an invalid length. [ 355.146980][T20691] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7137'. [ 355.656187][T20715] netlink: 'syz.4.7149': attribute type 1 has an invalid length. [ 355.683133][T20715] netlink: 'syz.4.7149': attribute type 1 has an invalid length. [ 356.192792][T20735] netlink: 'syz.2.7159': attribute type 2 has an invalid length. [ 356.418044][T20743] veth1_macvtap: left promiscuous mode [ 357.422795][T20790] netlink: 'syz.2.7184': attribute type 11 has an invalid length. [ 357.480682][T20790] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7184'. [ 357.554578][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.564372][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.575640][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.584699][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.592382][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.714121][T20798] ip6erspan1: entered allmulticast mode [ 358.391315][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7198'. [ 358.552828][ T5269] veth1_macvtap: entered promiscuous mode [ 358.958106][T20857] netlink: 'syz.1.7207': attribute type 28 has an invalid length. [ 359.143524][T20866] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 359.166703][T20868] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7211'. [ 359.684476][ T5808] Bluetooth: hci5: command tx timeout [ 361.137668][T20792] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.178692][T20792] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.200398][T20792] bridge_slave_0: entered allmulticast mode [ 361.231594][T20792] bridge_slave_0: entered promiscuous mode [ 361.267777][T20792] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.296088][T20792] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.310222][T20945] netlink: 'syz.1.7240': attribute type 5 has an invalid length. [ 361.331213][T20792] bridge_slave_1: entered allmulticast mode [ 361.351966][T20792] bridge_slave_1: entered promiscuous mode [ 361.502244][T20792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.556324][T20792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.633391][T20956] netlink: 'syz.0.7245': attribute type 11 has an invalid length. [ 361.703110][T20792] team0: Port device team_slave_0 added [ 361.727416][T20792] team0: Port device team_slave_1 added [ 361.764356][ T5808] Bluetooth: hci5: command tx timeout [ 361.811395][T20792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.818647][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.849512][T20792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.881170][T20792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.907426][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.000192][T20792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.248072][T20792] hsr_slave_0: entered promiscuous mode [ 362.267829][T20792] hsr_slave_1: entered promiscuous mode [ 362.287749][T20792] debugfs: 'hsr0' already exists in 'hsr' [ 362.310338][T20792] Cannot create hsr debugfs directory [ 362.322514][T20982] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7257'. [ 362.358397][T20982] unsupported nlmsg_type 40 [ 362.442422][T20986] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 362.526877][T20989] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 362.946604][T21003] xt_socket: unknown flags 0x4c [ 363.202229][T21015] netlink: 'syz.1.7273': attribute type 1 has an invalid length. [ 363.243015][T21015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7273'. [ 363.288843][T20792] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.334066][T20792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.362282][T20792] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.407353][T20792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.435153][T20792] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.521701][T20792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.553999][T20792] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.590086][T21031] netlink: 'syz.1.7280': attribute type 21 has an invalid length. [ 363.599839][T20792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.624402][T21031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.631671][T21031] IPv6: NLM_F_CREATE should be set when creating new route [ 363.638962][T21031] IPv6: NLM_F_CREATE should be set when creating new route [ 363.646226][T21031] IPv6: NLM_F_CREATE should be set when creating new route [ 363.652408][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7283'. [ 363.844430][ T5808] Bluetooth: hci5: command tx timeout [ 363.874089][T21049] netlink: 'syz.1.7287': attribute type 16 has an invalid length. [ 363.916318][T20792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.935052][T21049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7287'. [ 363.953263][T20792] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.980181][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.987372][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.037169][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.044375][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.500658][T21065] bond7 (unregistering): Released all slaves [ 364.600129][T21069] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7295'. [ 364.617282][T21069] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7295'. [ 365.043817][T21099] netlink: 'syz.2.7307': attribute type 29 has an invalid length. [ 365.069757][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7307'. [ 365.560440][T21117] 8021q: VLANs not supported on ipvlan0 [ 365.602375][T21118] netlink: 'syz.0.7314': attribute type 6 has an invalid length. [ 365.615412][T20792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.658485][T21118] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.924953][ T5808] Bluetooth: hci5: command tx timeout [ 366.200848][T21137] netlink: 'syz.2.7322': attribute type 39 has an invalid length. [ 366.531708][T21141] xt_CT: No such helper "snmp_trap" [ 366.697840][T20792] veth0_vlan: entered promiscuous mode [ 366.740744][T20792] veth1_vlan: entered promiscuous mode [ 366.779486][T21156] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7330'. [ 366.875730][T20792] veth0_macvtap: entered promiscuous mode [ 366.928833][T20792] veth1_macvtap: entered promiscuous mode [ 367.031822][T20792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.121959][T20792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.172969][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7334'. [ 367.224088][T21169] netlink: 'syz.2.7335': attribute type 3 has an invalid length. [ 367.262014][T21169] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7335'. [ 367.297147][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.565140][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.594737][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.648558][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.760207][T21181] ip6erspan1: entered allmulticast mode [ 367.926853][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.978456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.099828][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.142354][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.764480][T21227] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 368.850122][T21230] netlink: 'syz.5.7363': attribute type 39 has an invalid length. [ 369.011141][T21239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7368'. [ 369.032256][T21239] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7368'. [ 369.338837][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7374'. [ 370.226931][T21279] xt_CT: No such helper "snmp_trap" [ 370.665907][T21304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7397'. [ 370.880400][T21316] netlink: 'syz.0.7403': attribute type 9 has an invalid length. [ 370.900276][T21314] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 370.906140][T21316] netlink: 'syz.0.7403': attribute type 6 has an invalid length. [ 370.954300][T21316] netlink: 'syz.0.7403': attribute type 7 has an invalid length. [ 371.012235][T21316] netlink: 'syz.0.7403': attribute type 8 has an invalid length. [ 371.016620][T21320] x_tables: unsorted underflow at hook 2 [ 371.081631][T21318] bridge0: port 3(bond0) entered blocking state [ 371.088132][T21318] bridge0: port 3(bond0) entered forwarding state [ 371.119440][T21318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.147380][T21318] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.230287][T21318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.442738][T21318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.481278][T21318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.518468][T21318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.544300][T21318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.623249][T21340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.651095][T21318] veth1_vlan: left promiscuous mode [ 371.682169][T21318] veth0_vlan: left promiscuous mode [ 371.708766][T21318] veth0_vlan: entered promiscuous mode [ 371.746374][T21318] veth1_vlan: entered promiscuous mode [ 371.838368][T21318] veth1_macvtap: left promiscuous mode [ 371.871235][T21318] veth0_macvtap: left promiscuous mode [ 371.908524][T21318] veth0_macvtap: entered promiscuous mode [ 371.939904][T21318] veth1_macvtap: entered promiscuous mode [ 371.958321][T21318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.967651][T21318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.978786][T21318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.991721][T21318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.068573][T21318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.079365][T21318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 372.093431][T21318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.108748][T21318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.119258][T21318] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 372.149393][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.156656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.188842][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.196100][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.472420][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.506504][T21353] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 372.561136][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.609386][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.681882][ T48] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 372.800994][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.284703][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.499817][T21394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7438'. [ 373.533037][T21394] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 373.840076][T21408] netlink: 'syz.1.7443': attribute type 1 has an invalid length. [ 373.883534][T21408] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7443'. [ 374.179012][T21420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.238434][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7451'. [ 374.283448][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7452'. [ 374.592758][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7458'. [ 376.577349][T21518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.842402][T21528] netlink: 'syz.1.7494': attribute type 210 has an invalid length. [ 376.884392][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.255578][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7504'. [ 377.270331][T21546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7504'. [ 377.631751][T21562] netlink: 'syz.4.7511': attribute type 11 has an invalid length. [ 377.664434][T21562] netlink: 'syz.4.7511': attribute type 4 has an invalid length. [ 377.688149][T21562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7511'. [ 377.800935][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7513'. [ 377.832114][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7513'. [ 377.969731][T21574] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7517'. [ 378.083032][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7518'. [ 378.214758][T21587] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 378.470507][T21597] xt_addrtype: ipv6 does not support BROADCAST matching [ 379.200681][T21631] Unsupported ieee802154 address type: 0 [ 379.388659][T21643] __nla_validate_parse: 3 callbacks suppressed [ 379.388709][T21643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7551'. [ 379.392841][T21644] netlink: 2612 bytes leftover after parsing attributes in process `syz.5.7549'. [ 379.840002][T21663] bond0: Error: Cannot enslave bond to itself. [ 380.295310][T21679] netlink: 'syz.4.7569': attribute type 1 has an invalid length. [ 380.662526][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7573'. [ 381.247424][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7584'. [ 381.372881][T21716] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7586'. [ 381.394629][T21716] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7586'. [ 381.493593][T21722] netlink: 'syz.1.7589': attribute type 3 has an invalid length. [ 381.647459][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7593'. [ 381.656612][T21727] netlink: 'syz.1.7593': attribute type 1 has an invalid length. [ 381.842644][T21738] openvswitch: netlink: Key type 65 is out of range max 32 [ 382.133454][T21750] ip6tnl5: entered allmulticast mode [ 382.367140][T21762] netlink: 'syz.0.7609': attribute type 10 has an invalid length. [ 382.608978][ T48] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 382.655833][ T48] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 382.664893][T11603] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 383.037736][T21793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7624'. [ 383.186027][T11603] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 383.215977][T11603] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 383.427203][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7634'. [ 383.598656][T21820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7638'. [ 384.140539][T21836] bond7: Removing last ns target with arp_interval on [ 384.490119][T21857] xt_l2tp: invalid flags combination: 8 [ 384.775216][T21867] bridge0: port 3(veth1_vlan) entered blocking state [ 384.791722][T21867] bridge0: port 3(veth1_vlan) entered disabled state [ 384.819981][T21867] veth1_vlan: entered allmulticast mode [ 384.833996][T21867] veth1_vlan: left allmulticast mode [ 385.385987][T21893] __nla_validate_parse: 1 callbacks suppressed [ 385.386005][T21893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7674'. [ 385.446237][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 385.522467][T21897] netlink: 'syz.0.7676': attribute type 3 has an invalid length. [ 385.542630][T21897] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7676'. [ 386.005253][T21922] netlink: 'syz.4.7688': attribute type 11 has an invalid length. [ 386.025010][T21922] netlink: 'syz.4.7688': attribute type 11 has an invalid length. [ 386.052509][T21922] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7688'. [ 386.092722][T21924] netlink: 'syz.1.7689': attribute type 2 has an invalid length. [ 386.139540][T21924] : entered promiscuous mode [ 386.343839][T21934] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7693'. [ 386.884391][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 386.912882][T21952] netlink: 'syz.4.7703': attribute type 15 has an invalid length. [ 387.497290][T21982] netlink: 'syz.0.7717': attribute type 8 has an invalid length. [ 388.422597][T22020] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7736'. [ 388.578470][T22029] netlink: 'syz.4.7741': attribute type 9 has an invalid length. [ 388.604887][T22029] netlink: 'syz.4.7741': attribute type 6 has an invalid length. [ 388.624345][T22029] netlink: 'syz.4.7741': attribute type 7 has an invalid length. [ 388.734783][T22029] netlink: 'syz.4.7741': attribute type 8 has an invalid length. [ 389.006346][T22041] xt_connbytes: Forcing CT accounting to be enabled [ 389.790898][T22069] syz.1.7759: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 389.828178][T22069] CPU: 1 UID: 0 PID: 22069 Comm: syz.1.7759 Not tainted syzkaller #0 PREEMPT(full) [ 389.828205][T22069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.828224][T22069] Call Trace: [ 389.828305][T22069] [ 389.828353][T22069] dump_stack_lvl+0xe8/0x150 [ 389.828482][T22069] warn_alloc+0x24c/0x270 [ 389.828538][T22069] ? __pfx_warn_alloc+0x10/0x10 [ 389.828591][T22069] ? xskq_create+0x56/0x220 [ 389.828712][T22069] ? xsk_setsockopt+0x52a/0x960 [ 389.828737][T22069] ? do_syscall_64+0x174/0x580 [ 389.828843][T22069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.828897][T22069] __vmalloc_node_range_noprof+0x12c/0x1730 [ 389.828945][T22069] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 389.828969][T22069] ? __kmalloc_cache_noprof+0x32d/0x660 [ 389.828998][T22069] ? __kmalloc_cache_noprof+0x150/0x660 [ 389.829018][T22069] ? xskq_create+0x56/0x220 [ 389.829045][T22069] xskq_create+0x148/0x220 [ 389.829072][T22069] ? xsk_init_queue+0x8a/0xe0 [ 389.829099][T22069] xsk_init_queue+0x8a/0xe0 [ 389.829124][T22069] xsk_setsockopt+0x52a/0x960 [ 389.829147][T22069] ? __fget_files+0x2a/0x420 [ 389.829182][T22069] ? __pfx_xsk_setsockopt+0x10/0x10 [ 389.829205][T22069] ? __pfx_aa_sk_perm+0x10/0x10 [ 389.829328][T22069] ? aa_sock_opt_perm+0xff/0x1a0 [ 389.829386][T22069] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 389.829425][T22069] ? __pfx_xsk_setsockopt+0x10/0x10 [ 389.829449][T22069] do_sock_setsockopt+0x17c/0x1b0 [ 389.829532][T22069] __x64_sys_setsockopt+0x13d/0x1b0 [ 389.829555][T22069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.829577][T22069] do_syscall_64+0x174/0x580 [ 389.829605][T22069] ? trace_irq_disable+0x3b/0x140 [ 389.829641][T22069] ? clear_bhb_loop+0x70/0xc0 [ 389.829665][T22069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.829688][T22069] RIP: 0033:0x7f9f4579e0d9 [ 389.829716][T22069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.829733][T22069] RSP: 002b:00007f9f439f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 389.829792][T22069] RAX: ffffffffffffffda RBX: 00007f9f45a25fa0 RCX: 00007f9f4579e0d9 [ 389.829804][T22069] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 389.829816][T22069] RBP: 00007f9f45835024 R08: 0000000000000004 R09: 0000000000000000 [ 389.829828][T22069] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.829839][T22069] R13: 00007f9f45a26038 R14: 00007f9f45a25fa0 R15: 00007ffd4b3fa788 [ 389.829868][T22069] [ 390.089946][T22069] Mem-Info: [ 390.094336][T22069] active_anon:6501 inactive_anon:0 isolated_anon:0 [ 390.094336][T22069] active_file:13 inactive_file:43281 isolated_file:0 [ 390.094336][T22069] unevictable:0 dirty:243 writeback:0 [ 390.094336][T22069] slab_reclaimable:11569 slab_unreclaimable:110924 [ 390.094336][T22069] mapped:34425 shmem:525 pagetables:3601 [ 390.094336][T22069] sec_pagetables:0 bounce:0 [ 390.094336][T22069] kernel_misc_reclaimable:0 [ 390.094336][T22069] free:1301508 free_pcp:8669 free_cma:0 [ 390.219443][T22069] Node 0 active_anon:27304kB inactive_anon:0kB active_file:52kB inactive_file:172916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139400kB dirty:972kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:14260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 390.308735][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7764'. [ 390.384541][T22069] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 390.422519][T22069] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.516755][T22069] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 390.522773][T22069] Node 0 DMA32 free:1194200kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27104kB inactive_anon:0kB active_file:52kB inactive_file:172916kB unevictable:0kB writepending:972kB zspages:0kB present:3129332kB managed:2548612kB mlocked:0kB bounce:0kB free_pcp:32972kB local_pcp:20476kB free_cma:0kB [ 390.633549][T22069] lowmem_reserve[]: 0 0 0 0 0 [ 390.638464][T22069] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.669501][T22069] lowmem_reserve[]: 0 0 0 0 0 [ 390.674772][T22069] Node 1 Normal free:3950976kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.711769][T22069] lowmem_reserve[]: 0 0 0 0 [ 390.712672][ T4924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.731102][ T4924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.739379][ T4924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.747689][ T4924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.755604][ T4924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 390.790526][T22069] 0 [ 390.793109][T22069] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.817179][T22069] Node 0 DMA32: 649*4kB (UM) 643*8kB (UM) 288*16kB (UME) 251*32kB (UME) 790*64kB (UME) 558*128kB (UM) 376*256kB (UME) 228*512kB (UM) 117*1024kB (UM) 7*2048kB (UM) 172*4096kB (UM) = 1194012kB [ 390.872139][T22069] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 390.951404][T22069] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 963*4096kB (M) = 3950976kB [ 390.997920][T22069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.000779][T22097] netlink: 'syz.4.7771': attribute type 15 has an invalid length. [ 391.022289][T22099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.024276][T22069] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 391.056317][T22097] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7771'. [ 391.061128][T22069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.104800][T22069] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 391.135733][T22069] 43816 total pagecache pages [ 391.176467][T22069] 0 pages in swap cache [ 391.191181][T22069] Free swap = 124996kB [ 391.264381][T22069] Total swap = 124996kB [ 391.278957][T22069] 2097051 pages RAM [ 391.300364][T22069] 0 pages HighMem/MovableOnly [ 391.322633][T22069] 428217 pages reserved [ 391.349283][T22069] 0 pages cma reserved [ 392.648960][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7796'. [ 392.676507][T22152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7796'. [ 392.807076][ T5808] Bluetooth: hci6: command tx timeout [ 393.373828][T22183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7808'. [ 393.407087][T22082] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.429700][T22082] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.467583][T22082] bridge_slave_0: entered allmulticast mode [ 393.508997][T22082] bridge_slave_0: entered promiscuous mode [ 393.540843][T22082] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.564579][T22082] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.587269][T22082] bridge_slave_1: entered allmulticast mode [ 393.613675][T22082] bridge_slave_1: entered promiscuous mode [ 393.790110][T22082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.836274][T22082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.989298][T22082] team0: Port device team_slave_0 added [ 394.009371][T22082] team0: Port device team_slave_1 added [ 394.139581][T22082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.173502][T22082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.293008][T22082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.349063][T22082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.377526][T22082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.461855][T22082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.607848][T22082] hsr_slave_0: entered promiscuous mode [ 394.621821][T22082] hsr_slave_1: entered promiscuous mode [ 394.636415][T22082] debugfs: 'hsr0' already exists in 'hsr' [ 394.649144][T22082] Cannot create hsr debugfs directory [ 394.884976][ T5808] Bluetooth: hci6: command tx timeout [ 395.641452][T22082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.684418][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 395.943369][T22244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7834'. [ 396.158682][T22082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.202124][T22238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7831'. [ 396.223900][T22082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 396.283606][T22082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.320543][T22082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 396.965369][ T5808] Bluetooth: hci6: command tx timeout [ 397.236736][T22082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.306134][T22258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7841'. [ 397.321602][T22082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.342253][T22082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.610357][T22294] netlink: 'syz.1.7855': attribute type 21 has an invalid length. [ 397.643941][T22294] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7855'. [ 397.667806][T22294] netlink: 'syz.1.7855': attribute type 4 has an invalid length. [ 397.677315][T22294] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7855'. [ 397.786833][T22082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.843138][T22301] netlink: 'syz.0.7859': attribute type 30 has an invalid length. [ 397.886367][T22082] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.955305][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.962486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.029413][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.036633][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.395961][T22322] netlink: 'syz.1.7869': attribute type 49 has an invalid length. [ 399.047049][ T5808] Bluetooth: hci6: command tx timeout [ 399.377442][T22359] netlink: 'syz.4.7883': attribute type 4 has an invalid length. [ 399.877115][T22082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.866998][T22409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7904'. [ 400.911941][T22411] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7905'. [ 401.038760][T22082] veth0_vlan: entered promiscuous mode [ 401.063885][T22414] netlink: 'syz.1.7906': attribute type 21 has an invalid length. [ 401.098272][T22082] veth1_vlan: entered promiscuous mode [ 401.144658][T22414] netlink: 'syz.1.7906': attribute type 6 has an invalid length. [ 401.187930][T22414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7906'. [ 401.396770][T22082] veth0_macvtap: entered promiscuous mode [ 401.444461][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 401.477260][T22082] veth1_macvtap: entered promiscuous mode [ 401.630811][T22082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.713590][T22082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.885012][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.941338][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.015146][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.063812][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.176757][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.212217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.367019][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.386933][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.927174][T22478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7937'. [ 402.945543][T22478] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7937'. [ 403.229210][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7945'. [ 403.761582][T22515] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7955'. [ 404.176923][T22522] netlink: 200 bytes leftover after parsing attributes in process `syz.5.7958'. [ 404.202374][T22522] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 404.232902][T22522] openvswitch: netlink: Message has 208 unknown bytes. [ 404.268028][T22529] netlink: 'syz.4.7961': attribute type 12 has an invalid length. [ 404.315971][T22529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7961'. [ 404.422137][T22534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7974'. [ 404.441751][T22535] netlink: 'syz.1.7964': attribute type 3 has an invalid length. [ 404.461502][T22535] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7964'. [ 405.111799][T22569] openvswitch: netlink: IPv4 tun info is not correct [ 405.577741][T22566] bridge0: port 3(bond0) entered disabled state [ 405.584751][T22566] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.592200][T22566] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.025425][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.064133][T22566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.925173][ T1018] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.974754][ T1018] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.025374][ T1018] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.101427][ T1018] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.241699][T22593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.467164][T22597] netlink: 45 bytes leftover after parsing attributes in process `syz.6.7996'. [ 408.299794][T22626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.536850][T22640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 408.832523][T22653] netlink: 'syz.0.8023': attribute type 11 has an invalid length. [ 408.858569][T22653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8023'. [ 409.119538][T22663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.260335][T22670] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8032'. [ 409.388509][T22678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8035'. [ 409.438426][T22678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8035'. [ 409.646671][T22688] xt_connbytes: Forcing CT accounting to be enabled [ 409.834401][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8041'. [ 410.705924][T22716] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.713643][T22716] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.803549][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8059'. [ 410.872062][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.898932][T22716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.081517][T22717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8054'. [ 411.091869][T22717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8054'. [ 411.144416][ T48] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.170090][ T48] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.201396][ T48] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.237047][ T48] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.993573][T22759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8072'. [ 424.104141][ T4924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 424.116302][ T4924] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 424.124159][ T4924] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.134649][ T4924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.145170][ T4924] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.256796][T22772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8078'. [ 425.910063][T22847] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 425.923593][T22851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8115'. [ 425.933286][T22847] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 425.944049][T22847] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 426.244323][ T4924] Bluetooth: hci7: command tx timeout [ 426.448738][T22764] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.456333][T22764] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.463954][T22764] bridge_slave_0: entered allmulticast mode [ 426.472759][T22764] bridge_slave_0: entered promiscuous mode [ 426.482493][T22764] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.491893][T22764] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.499660][T22764] bridge_slave_1: entered allmulticast mode [ 426.509216][T22764] bridge_slave_1: entered promiscuous mode [ 426.558409][T22764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.572104][T22764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.620769][T22764] team0: Port device team_slave_0 added [ 426.630930][T22764] team0: Port device team_slave_1 added [ 426.679547][T22764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.686925][T22764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.715340][T22764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.784609][T22764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.820383][T22764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.908397][T22866] netlink: 'syz.5.8119': attribute type 9 has an invalid length. [ 426.931091][T22866] netlink: 'syz.5.8119': attribute type 6 has an invalid length. [ 426.941749][T22764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.135642][T22764] hsr_slave_0: entered promiscuous mode [ 427.143867][T22764] hsr_slave_1: entered promiscuous mode [ 427.165994][T22764] debugfs: 'hsr0' already exists in 'hsr' [ 427.184243][T22764] Cannot create hsr debugfs directory [ 427.878241][T22909] xt_NFQUEUE: number of total queues is 0 [ 428.094776][T22764] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.100490][T22916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8144'. [ 428.137587][T22764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.162287][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8144'. [ 428.180800][T22764] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.193122][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8144'. [ 428.223372][T22920] netlink: 'syz.1.8147': attribute type 1 has an invalid length. [ 428.246646][T22920] netlink: 'syz.1.8147': attribute type 2 has an invalid length. [ 428.324617][ T4924] Bluetooth: hci7: command tx timeout [ 428.339232][T22764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.378470][T22764] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.431866][T22764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.479727][T22764] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.550864][T22764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.928190][T22764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.993190][T22764] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.036619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.043829][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.103578][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.110793][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.281968][T22961] Timeout policy `syz1' can only be used by L3 protocol number 35018 [ 430.211402][T23008] netlink: 'syz.1.8180': attribute type 29 has an invalid length. [ 430.291438][T22764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.404350][ T4924] Bluetooth: hci7: command tx timeout [ 430.591007][T23023] netlink: 'syz.5.8187': attribute type 3 has an invalid length. [ 431.211333][T22764] veth0_vlan: entered promiscuous mode [ 431.242487][T22764] veth1_vlan: entered promiscuous mode [ 431.266365][T23054] --map-set only usable from mangle table [ 431.319727][T22764] veth0_macvtap: entered promiscuous mode [ 431.355770][T22764] veth1_macvtap: entered promiscuous mode [ 431.412791][T22764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.474574][T22764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.507309][T23062] netlink: 'syz.4.8206': attribute type 1 has an invalid length. [ 431.676720][ T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.736355][ T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.885600][T23077] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8218'. [ 431.958235][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.994723][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.382336][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.400440][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.484397][ T4924] Bluetooth: hci7: command tx timeout [ 432.550268][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.587533][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.821745][T23103] netlink: 820 bytes leftover after parsing attributes in process `syz.1.8224'. [ 432.864484][T23103] netlink: 820 bytes leftover after parsing attributes in process `syz.1.8224'. [ 433.116006][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8229'. [ 433.197888][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8229'. [ 433.235561][T23117] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8229'. [ 434.060294][T23157] openvswitch: netlink: Duplicate or invalid key (type 0). [ 434.315687][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8254'. [ 434.350549][T23169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8254'. [ 434.393410][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8258'. [ 434.618628][T23183] ip_tables: iptables: counters copy to user failed while replacing table [ 434.686820][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8264'. [ 434.850791][T23191] xt_CT: No such helper "syz1" [ 434.896264][T23197] netlink: 'syz.0.8268': attribute type 1 has an invalid length. [ 435.361976][T23218] netlink: 'syz.1.8279': attribute type 1 has an invalid length. [ 435.555836][T23226] xt_CT: No such helper "syz1" [ 435.894059][T23245] netlink: del zone limit has 8 unknown bytes [ 436.315843][T23263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.348676][T23265] netlink: 'syz.1.8301': attribute type 1 has an invalid length. [ 436.531961][T23275] netlink: del zone limit has 8 unknown bytes [ 437.118350][T23305] __nla_validate_parse: 3 callbacks suppressed [ 437.118368][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8321'. [ 437.147778][T23308] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8323'. [ 437.250475][T23312] batadv1: entered promiscuous mode [ 437.285301][T23312] batadv1: entered allmulticast mode [ 437.380174][T23317] netlink: 'syz.7.8327': attribute type 4 has an invalid length. [ 437.539239][T23326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8332'. [ 438.346746][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8350'. [ 438.361372][T23363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8350'. [ 438.757113][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8360'. [ 440.145379][T23452] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8393'. [ 440.185029][T23452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8393'. [ 440.211595][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8393'. [ 440.965906][T23486] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8409'. [ 442.104475][T23533] netlink: 'syz.5.8430': attribute type 8 has an invalid length. [ 442.385044][T23544] __nla_validate_parse: 2 callbacks suppressed [ 442.385063][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8436'. [ 442.486445][T23546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8437'. [ 442.544323][T23546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8437'. [ 442.709465][T23554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8442'. [ 442.824546][T23554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8442'. [ 443.413214][T23576] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 443.805703][T23590] netlink: 'syz.0.8460': attribute type 1 has an invalid length. [ 443.851891][T23590] netlink: 'syz.0.8460': attribute type 2 has an invalid length. [ 444.050492][T23601] netlink: 'syz.5.8465': attribute type 28 has an invalid length. [ 444.072505][T23601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8465'. [ 444.108115][T23607] netlink: 'syz.1.8468': attribute type 62 has an invalid length. [ 444.175580][T23609] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 444.710532][T23638] netlink: 'syz.4.8482': attribute type 28 has an invalid length. [ 444.747994][T23638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8482'. [ 444.894372][T23644] netlink: 'syz.1.8485': attribute type 21 has an invalid length. [ 444.936512][T23644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8485'. [ 445.196068][T23656] netlink: 'syz.7.8493': attribute type 1 has an invalid length. [ 446.254428][T23696] netlink: 'syz.0.8512': attribute type 1 has an invalid length. [ 446.870244][T23717] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 447.038922][T23726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8526'. [ 447.088199][T23726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8526'. [ 447.133689][T23729] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 448.417671][T23774] __nla_validate_parse: 1 callbacks suppressed [ 448.417689][T23774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8549'. [ 448.471327][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8549'. [ 448.547682][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8552'. [ 449.276953][T23804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8564'. [ 449.724933][T23822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8573'. [ 449.758766][T23822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8573'. [ 449.788118][T23822] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8573'. [ 450.654491][T23864] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8595'. [ 451.634512][T23903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8612'. [ 451.669183][T23903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8612'. [ 452.293500][T23935] netlink: 'syz.5.8630': attribute type 1 has an invalid length. [ 452.970473][T23972] netlink: 'syz.5.8648': attribute type 21 has an invalid length. [ 453.450499][T23993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.231891][T24026] __nla_validate_parse: 8 callbacks suppressed [ 454.231910][T24026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8674'. [ 454.303964][T24026] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8674'. [ 454.818219][T24052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8687'. [ 454.846856][T24052] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8687'. [ 454.980298][T24055] netlink: 'syz.1.8688': attribute type 5 has an invalid length. [ 454.990155][T24056] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8689'. [ 455.420447][T24071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8693'. [ 455.469670][T24071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8693'. [ 455.622962][T24080] x_tables: ip_tables: osf match: only valid for protocol 6 [ 455.692529][T24084] netlink: 'syz.4.8703': attribute type 6 has an invalid length. [ 456.968282][T24153] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 457.314960][T24167] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 457.533606][T24177] ipip1: entered promiscuous mode [ 458.143094][T24199] netlink: 'syz.1.8760': attribute type 2 has an invalid length. [ 459.002686][T24230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.113268][T24234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8777'. [ 459.193490][T24234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8777'. [ 460.606052][T24299] netlink: 'syz.7.8809': attribute type 32 has an invalid length. [ 460.626549][T24299] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8809'. [ 460.669149][T24305] netlink: 'syz.1.8812': attribute type 3 has an invalid length. [ 460.991191][T24322] netlink: 'syz.5.8819': attribute type 49 has an invalid length. [ 461.193413][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8823'. [ 461.220967][T24333] xt_TCPMSS: Only works on TCP SYN packets [ 461.228152][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8823'. [ 461.651421][T24348] nft_compat: unsupported protocol 1 [ 462.098177][T24371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.355296][T24385] netlink: 'syz.0.8852': attribute type 10 has an invalid length. [ 462.492247][T24390] netlink: 'syz.1.8854': attribute type 1 has an invalid length. [ 462.521805][T24390] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8854'. [ 462.543477][T24395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8857'. [ 462.547803][T24390] NCSI netlink: No device for ifindex 0 [ 462.565941][T24393] ip_tables: iptables: counters copy to user failed while replacing table [ 463.527979][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8881'. [ 463.616295][T24447] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8882'. [ 463.657460][T24447] netlink: 'syz.4.8882': attribute type 2 has an invalid length. [ 463.699331][T24447] netlink: 'syz.4.8882': attribute type 1 has an invalid length. [ 463.733045][T24447] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8882'. [ 464.289676][T24465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8891'. [ 464.692563][T24480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8898'. [ 466.419188][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8927'. [ 466.476436][T24546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8927'. [ 466.502956][T24546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8927'. [ 467.818233][T24610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8944'. [ 467.858816][T24610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8944'. [ 468.029354][T24620] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 468.398766][T24635] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8955'. [ 468.717353][T24649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8960'. [ 469.893301][T24693] x_tables: duplicate underflow at hook 3 [ 470.064254][T24698] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.090973][T24701] x_tables: unsorted entry at hook 2 [ 470.289378][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8983'. [ 471.175408][T24745] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 471.455757][T24761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9009'. [ 471.982540][T24777] veth1_to_hsr: entered promiscuous mode [ 472.030635][T24777] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9016'. [ 472.062590][T24779] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 472.092817][T24777] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 472.146747][T24783] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9019'. [ 472.620275][T24797] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9025'. [ 473.005458][T24811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9033'. [ 473.167118][T24820] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 473.223329][T24822] netlink: NAT attribute has 5 unknown bytes [ 473.244782][T24822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.584835][T24834] netlink: 'syz.1.9044': attribute type 1 has an invalid length. [ 473.655526][T24839] netlink: 'syz.7.9046': attribute type 11 has an invalid length. [ 473.819631][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9048'. [ 473.837147][T24845] netlink: 'syz.0.9049': attribute type 1 has an invalid length. [ 473.906246][T24849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.827747][T24875] netlink: 'syz.7.9061': attribute type 7 has an invalid length. [ 474.859469][T24875] netlink: 148 bytes leftover after parsing attributes in process `syz.7.9061'. [ 475.018653][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9064'. [ 475.191371][T24887] netlink: 'syz.1.9068': attribute type 1 has an invalid length. [ 475.438609][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9073'. [ 475.796647][T24907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9075'. [ 476.103099][T24910] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 476.147403][T24910] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 476.178370][T24910] bond1: entered allmulticast mode [ 477.078645][T24947] xt_time: unknown flags 0x4 [ 477.486620][T24965] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 477.504994][T24967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.536622][T24971] netlink: 'syz.0.9106': attribute type 2 has an invalid length. [ 477.971557][T24991] ip_tables: iptables: counters copy to user failed while replacing table [ 478.093243][T24995] bond2: option miimon: invalid value (18446744073709551615) [ 478.101123][T24995] bond2: option miimon: allowed values 0 - 2147483647 [ 478.115717][T24995] bond2 (unregistering): Released all slaves [ 478.419789][T25007] netlink: 'syz.0.9123': attribute type 1 has an invalid length. [ 478.945687][T25036] netlink: 'syz.5.9137': attribute type 1 has an invalid length. [ 478.984764][T25036] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9137'. [ 479.036519][T25036] NCSI netlink: No device for ifindex 0 [ 479.085021][T25042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9138'. [ 479.118462][T25037] bond2: option miimon: invalid value (18446744073709551615) [ 479.148753][T25037] bond2: option miimon: allowed values 0 - 2147483647 [ 479.169563][T25044] netlink: 'syz.1.9139': attribute type 1 has an invalid length. [ 479.216042][T25037] bond2 (unregistering): Released all slaves [ 480.155313][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9148'. [ 480.442107][T25077] netlink: 'syz.5.9156': attribute type 58 has an invalid length. [ 480.463164][T25077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9156'. [ 481.335265][T25120] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9174'. [ 482.196159][T25161] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9192'. [ 482.641409][T25184] netlink: 'syz.4.9203': attribute type 11 has an invalid length. [ 482.678993][T25184] netlink: 'syz.4.9203': attribute type 4 has an invalid length. [ 482.709744][T25184] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9203'. [ 482.993813][T25199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9208'. [ 484.099727][T25244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.538963][T25265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9235'. [ 484.555206][T25267] netlink: 'syz.1.9236': attribute type 2 has an invalid length. [ 484.637902][T25265] ip6tnl3: entered allmulticast mode [ 484.702177][T25271] ipt_ECN: cannot use operation on non-tcp rule [ 484.862662][T25282] netlink: ct_mark mask cannot be 0 [ 484.890295][T25282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.054476][T25290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 485.551376][T25308] ipt_ECN: cannot use operation on non-tcp rule [ 485.653536][T25315] Unsupported ieee802154 address type: 0 [ 485.854496][T25323] netlink: ct_mark mask cannot be 0 [ 485.892446][T25323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.924004][T25357] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9275'. [ 486.951370][T25359] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9277'. [ 487.149044][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9280'. [ 487.454814][T25384] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 487.514901][T25384] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 487.930186][T25401] sctp: [Deprecated]: syz.4.9294 (pid 25401) Use of int in max_burst socket option. [ 487.930186][T25401] Use struct sctp_assoc_value instead [ 488.359800][T25422] sit0: entered promiscuous mode [ 488.393203][T25422] netlink: 'syz.7.9308': attribute type 1 has an invalid length. [ 488.408898][T25422] netlink: 1 bytes leftover after parsing attributes in process `syz.7.9308'. [ 488.544178][T25430] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 488.576109][T25430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 489.070505][T25459] sit0: entered promiscuous mode [ 489.076854][T25459] netlink: 'syz.5.9323': attribute type 1 has an invalid length. [ 489.094894][T25459] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9323'. [ 489.255740][T25467] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 489.284652][T25467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 489.865613][T25500] : renamed from veth0_to_bond (while UP) [ 490.156349][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9352'. [ 490.370729][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9357'. [ 492.088790][T25595] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 492.546762][T25617] netlink: 'syz.4.9401': attribute type 2 has an invalid length. [ 492.573829][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9401'. [ 492.602741][T25617] : entered promiscuous mode [ 493.042945][T25640] netlink: 'syz.5.9413': attribute type 8 has an invalid length. [ 493.973876][T25671] bond8: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 494.000119][T25671] bond8 (unregistering): Released all slaves [ 494.749656][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9440'. [ 494.816255][T25704] netlink: 'syz.4.9443': attribute type 29 has an invalid length. [ 494.836548][T25704] netlink: 'syz.4.9443': attribute type 1 has an invalid length. [ 495.290594][T25725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.107336][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9474'. [ 496.167920][T25770] netlink: 'syz.1.9475': attribute type 1 has an invalid length. [ 496.332513][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9478'. [ 496.359971][T25774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9478'. [ 496.366210][T25779] netlink: 'syz.7.9479': attribute type 1 has an invalid length. [ 497.098337][T25805] xt_CT: No such helper "netbios-ns" [ 497.332804][T25821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9499'. [ 498.029844][T25851] netlink: 'syz.7.9514': attribute type 1 has an invalid length. [ 498.057714][T25851] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9514'. [ 498.677081][T25885] netlink: 'syz.1.9531': attribute type 1 has an invalid length. [ 498.705178][T25885] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9531'. [ 498.758639][T24580] IPVS: starting estimator thread 0... [ 498.886604][T25890] IPVS: using max 30 ests per chain, 72000 per kthread [ 499.173563][T25908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9541'. [ 499.192906][T25908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9541'. [ 499.222598][T25908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9541'. [ 499.659544][T25933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9553'. [ 500.943162][T25992] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 501.679388][T26032] netlink: 'syz.5.9604': attribute type 40 has an invalid length. [ 501.723772][T26035] __nla_validate_parse: 4 callbacks suppressed [ 501.723790][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9602'. [ 501.794338][T26035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9602'. [ 502.023094][T26049] netlink: 'syz.1.9611': attribute type 3 has an invalid length. [ 502.158533][T26048] bond6: option mode: invalid value (254) [ 502.349431][T26048] bond6 (unregistering): Released all slaves [ 502.588241][T26062] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9617'. [ 502.746355][T26066] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 502.817800][T26070] netlink: 112 bytes leftover after parsing attributes in process `syz.5.9621'. [ 502.836443][T26070] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9621'. [ 503.633171][T26104] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 503.918366][T26114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9643'. [ 503.952156][T26114] openvswitch: netlink: Message has 4 unknown bytes. [ 504.309177][T26129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9649'. [ 504.544865][T26140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9655'. [ 504.729884][T26142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9656'. [ 504.757446][T26142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9656'. [ 504.801848][T26146] tc_dump_action: action bad kind [ 504.818557][T26149] netlink: 'syz.1.9659': attribute type 21 has an invalid length. [ 504.831401][T26149] netlink: 'syz.1.9659': attribute type 1 has an invalid length. [ 505.750176][T26181] SET target dimension over the limit! [ 506.389094][T26209] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 506.428595][T26211] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 506.570078][T26217] xt_TCPMSS: Only works on TCP SYN packets [ 506.738987][T26225] xt_bpf: check failed: parse error [ 506.883182][T26231] __nla_validate_parse: 13 callbacks suppressed [ 506.883203][T26231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9699'. [ 507.330508][T26258] netlink: 'syz.0.9711': attribute type 5 has an invalid length. [ 507.408643][T26253] bond2: option mode: invalid value (254) [ 508.159270][T26253] bond2 (unregistering): Released all slaves [ 508.817869][T26284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9725'. [ 508.985086][T26291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9728'. [ 509.409933][T26308] netlink: 'syz.1.9736': attribute type 49 has an invalid length. [ 509.483717][T26312] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 509.511473][T26312] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 511.093385][T26378] netlink: 'syz.4.9770': attribute type 1 has an invalid length. [ 511.119703][T26378] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9770'. [ 511.445943][T26394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9779'. [ 511.493297][T26394] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9779'. [ 511.796438][T26406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9785'. [ 513.102580][T26450] netlink: 'syz.4.9804': attribute type 21 has an invalid length. [ 513.139081][T26450] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9804'. [ 513.179029][T26450] netlink: 'syz.4.9804': attribute type 4 has an invalid length. [ 513.201104][T26450] netlink: 'syz.4.9804': attribute type 5 has an invalid length. [ 513.225416][T26450] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9804'. [ 513.396012][T26462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.489752][T26466] xt_l2tp: v2 sid > 0xffff: 16777220 [ 513.612119][ T5808] Bluetooth: hci6: command 0x0406 tx timeout [ 514.028663][T26490] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 514.210748][T26496] SET target dimension over the limit! [ 514.334524][T26498] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 514.505798][T26508] netlink: 'syz.4.9833': attribute type 5 has an invalid length. [ 515.243885][T26545] : renamed from bond_slave_0 (while UP) [ 515.679820][T26566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9862'. [ 516.130998][T26586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.922012][T26628] sctp: [Deprecated]: syz.5.9892 (pid 26628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.922012][T26628] Use struct sctp_sack_info instead [ 517.370530][T26650] netlink: 'syz.5.9903': attribute type 2 has an invalid length. [ 517.408166][T26650] netlink: 'syz.5.9903': attribute type 1 has an invalid length. [ 517.438132][T26650] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9903'. [ 517.855289][T26674] netlink: 'syz.4.9913': attribute type 3 has an invalid length. [ 517.871700][T26672] set match dimension is over the limit! [ 517.877906][T26674] netlink: 'syz.4.9913': attribute type 3 has an invalid length. [ 517.890025][T26676] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 518.758714][T26720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9938'. [ 519.023547][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9944'. [ 519.153574][T26736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.420749][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9954'. [ 519.456520][T26753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9954'. [ 520.173077][T26790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9973'. [ 520.306258][T26797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.592953][T26811] xt_ecn: cannot match TCP bits for non-tcp packets [ 520.772297][T26819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9987'. [ 521.809476][T26873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10014'. [ 521.870115][T26875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10013'. [ 521.992047][T26881] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 522.231971][T26891] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10022'. [ 522.776097][T26911] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 523.003136][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10034'. [ 523.493424][T26939] ipt_rpfilter: unknown options [ 523.756849][T26952] netlink: 'syz.5.10052': attribute type 1 has an invalid length. [ 523.788560][T26952] __nla_validate_parse: 1 callbacks suppressed [ 523.788578][T26952] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10052'. [ 523.859554][ T4924] Bluetooth: hci5: command 0x0406 tx timeout [ 523.982197][T26963] netlink: 'syz.7.10057': attribute type 2 has an invalid length. [ 524.007591][T26963] netlink: 'syz.7.10057': attribute type 8 has an invalid length. [ 524.054875][T26963] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10057'. [ 524.177505][T26967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10059'. [ 525.153111][T27001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10076'. [ 525.614650][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10087'. [ 527.231051][T24582] IPVS: starting estimator thread 0... [ 527.345318][T27085] IPVS: using max 32 ests per chain, 76800 per kthread [ 527.816929][T27117] netlink: 'syz.7.10130': attribute type 1 has an invalid length. [ 527.845387][T27117] netlink: 248 bytes leftover after parsing attributes in process `syz.7.10130'. [ 528.069508][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10135'. [ 528.241358][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10138'. [ 528.297525][T27135] netlink: 'syz.0.10139': attribute type 27 has an invalid length. [ 528.606848][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10147'. [ 529.504979][T27195] netlink: 'syz.0.10169': attribute type 1 has an invalid length. [ 529.722753][T27205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 529.839922][T27211] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10177'. [ 529.984559][T27209] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 530.052459][T27209] bond6 (unregistering): Released all slaves [ 530.521135][T27235] netlink: 393 bytes leftover after parsing attributes in process `syz.1.10189'. [ 530.662644][T27241] openvswitch: netlink: Duplicate or invalid key (type 0). [ 531.122773][T27265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10204'. [ 531.500469][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10212'. [ 532.096615][T27305] netlink: 'syz.1.10222': attribute type 2 has an invalid length. [ 532.124635][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10222'. [ 532.214558][T27309] No such timeout policy "syz0" [ 532.258833][T27311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10225'. [ 532.292657][T27311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10225'. [ 532.670508][T27329] netlink: 'syz.0.10235': attribute type 10 has an invalid length. [ 532.706884][T27329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.777313][T27329] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 532.797838][T27332] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10237'. [ 533.179568][T27347] netlink: 'syz.1.10244': attribute type 4 has an invalid length. [ 533.951776][T27377] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10259'. [ 533.993374][T27377] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 534.025609][T27377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10259'. [ 534.392283][T27397] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 534.565552][ T31] INFO: task syz.2.7463:21455 blocked for more than 143 seconds. [ 534.594026][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.623237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.683727][ T31] task:syz.2.7463 state:D stack:27200 pid:21455 tgid:21453 ppid:5804 task_flags:0x400040 flags:0x00080002 [ 534.796339][ T31] Call Trace: [ 534.809326][ T31] [ 534.824315][ T31] __schedule+0x17d9/0x56c0 [ 534.851593][ T31] ? __lock_acquire+0x683/0x2cf0 [ 534.887396][ T31] ? __lock_acquire+0x683/0x2cf0 [ 534.892931][ T31] ? __pfx___schedule+0x10/0x10 [ 534.898595][ T31] ? schedule+0x90/0x2b0 [ 534.902883][ T31] schedule+0x164/0x2b0 [ 534.907431][ T31] schedule_preempt_disabled+0x13/0x30 [ 534.912932][ T31] __mutex_lock+0x7bf/0x1550 [ 534.917896][ T31] ? __mutex_lock+0x5d4/0x1550 [ 534.922706][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 534.930229][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 534.939292][ T31] ? __nlmsg_put+0xef/0x1b0 [ 534.948480][ T31] ? genlmsg_put+0x137/0x2e0 [ 534.970686][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 534.977348][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 534.994265][ T31] ? __nla_parse+0x40/0x60 [ 534.998875][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 535.014566][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 535.025929][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 535.039183][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 535.064837][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 535.070934][ T31] genl_rcv_msg+0x614/0x7a0 [ 535.084332][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.090208][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 535.104332][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 535.114324][ T31] ? __asan_memcpy+0x40/0x70 [ 535.125129][ T31] ? __skb_clone+0x5c/0x6c0 [ 535.134355][ T31] netlink_rcv_skb+0x226/0x4a0 [ 535.145753][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 535.156760][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.168087][ T31] ? down_read+0x2be/0x330 [ 535.184348][ T31] genl_rcv+0x28/0x40 [ 535.188650][ T31] netlink_unicast+0x7bb/0x940 [ 535.204342][ T31] netlink_sendmsg+0x813/0xb40 [ 535.209159][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.224273][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 535.229267][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.244304][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 535.251504][ T31] ____sys_sendmsg+0x54e/0x850 [ 535.265621][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.276580][ T31] ? import_iovec+0x73/0xa0 [ 535.290527][ T31] ___sys_sendmsg+0x2a5/0x360 [ 535.296710][ T31] ? __lock_acquire+0x683/0x2cf0 [ 535.301726][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.308620][ T31] ? futex_wait+0x2a2/0x390 [ 535.313216][ T31] ? __fget_files+0x2a/0x420 [ 535.318210][ T31] ? __fget_files+0x3a2/0x420 [ 535.322932][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 535.329185][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.335012][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.341114][ T31] do_syscall_64+0x174/0x580 [ 535.346080][ T31] ? trace_irq_disable+0x3b/0x140 [ 535.351144][ T31] ? clear_bhb_loop+0x70/0xc0 [ 535.356218][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.362144][ T31] RIP: 0033:0x7f473b99e0d9 [ 535.368512][ T31] RSP: 002b:00007f4739bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.379622][ T31] RAX: ffffffffffffffda RBX: 00007f473bc25fa0 RCX: 00007f473b99e0d9 [ 535.387851][ T31] RDX: 0000000004004804 RSI: 0000200000000640 RDI: 0000000000000003 [ 535.396117][ T31] RBP: 00007f473ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 535.404122][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.412513][ T31] R13: 00007f473bc26038 R14: 00007f473bc25fa0 R15: 00007ffdce5f4dc8 [ 535.422101][ T31] [ 535.425470][ T31] [ 535.425470][ T31] Showing all locks held in the system: [ 535.490587][ T31] 1 lock held by khungtaskd/31: [ 535.517570][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 535.548135][ T31] 2 locks held by getty/5362: [ 535.564267][ T31] #0: ffff888036a660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 535.594319][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 535.624273][ T31] 1 lock held by syz-executor/5793: [ 535.641421][ T31] 2 locks held by syz-executor/5799: [ 535.657985][ T31] #0: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 535.705740][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 535.746000][ T31] 3 locks held by kworker/0:16/11597: [ 535.784345][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 535.817175][ T31] #1: ffffc9000e7afc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 535.864451][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 535.905957][ T31] 3 locks held by kworker/0:17/11598: [ 536.004247][ T31] #0: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 536.026854][ T31] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 536.036038][ T31] #2: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: finish_task_switch+0x15d/0xc60 [ 536.046765][ T31] 2 locks held by syz.3.6788/19984: [ 536.051993][ T31] #0: ffffffff90098828 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.062531][ T31] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 536.073005][ T31] 4 locks held by syz-executor/20792: [ 536.078610][ T31] #0: ffff8880565e4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 536.097436][ T31] #1: ffff8880565e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10a0 [ 536.107517][ T31] #2: ffffffff901b0340 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260 [ 536.117790][ T31] #3: ffff8880779ec2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 536.127558][ T31] 2 locks held by syz.2.7463/21455: [ 536.132773][ T31] #0: ffffffff90098828 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.141206][ T31] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 536.151490][ T31] 2 locks held by syz.6.8012/22632: [ 536.157950][ T31] #0: ffffffff90098828 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.169690][ T31] #1: ffffffff8ee8db80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 536.179854][ T31] 1 lock held by syz-executor/22764: [ 536.185419][ T31] #0: ffff888050988ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 536.196767][ T31] 1 lock held by dhcpcd/27403: [ 536.201557][ T31] #0: ffff88807b52e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 536.233222][ T31] [ 536.235647][ T31] ============================================= [ 536.235647][ T31] [ 536.244136][ T31] NMI backtrace for cpu 0 [ 536.244153][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 536.244191][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.244210][ T31] Call Trace: [ 536.244217][ T31] [ 536.244224][ T31] dump_stack_lvl+0xe8/0x150 [ 536.244252][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 536.244398][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 536.244433][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 536.244456][ T31] sys_info+0x135/0x170 [ 536.244474][ T31] watchdog+0xfd7/0x1030 [ 536.244499][ T31] ? watchdog+0x1c7/0x1030 [ 536.244524][ T31] kthread+0x388/0x470 [ 536.244545][ T31] ? __pfx_watchdog+0x10/0x10 [ 536.244562][ T31] ? __pfx_kthread+0x10/0x10 [ 536.244583][ T31] ret_from_fork+0x514/0xb70 [ 536.244622][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 536.244643][ T31] ? __switch_to+0xc89/0x1420 [ 536.244664][ T31] ? __pfx_kthread+0x10/0x10 [ 536.244685][ T31] ret_from_fork_asm+0x1a/0x30 [ 536.244722][ T31] [ 536.349789][ T31] Sending NMI from CPU 0 to CPUs 1: [ 536.355501][ C1] NMI backtrace for cpu 1 [ 536.355519][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 536.355537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.355547][ C1] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 536.355568][ C1] Code: c7 20 ba 4b 8c 48 c7 c6 60 ba 4b 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 65 8b 05 97 1d 9b 07 65 8b 0d 8c 1d 9b 07 f7 c1 [ 536.355580][ C1] RSP: 0018:ffffc90000a08fc8 EFLAGS: 00000046 [ 536.355594][ C1] RAX: ffff88801e690000 RBX: ffffc900001d7c18 RCX: dffffc0000000000 [ 536.355606][ C1] RDX: 0000000000010100 RSI: ffffffff8be8ed20 RDI: ffffffff8c4bba80 [ 536.355617][ C1] RBP: 0000000000000000 R08: ffffffff90575b37 R09: 1ffffffff20aeb66 [ 536.355628][ C1] R10: dffffc0000000000 R11: ffffc90000a08ff8 R12: dffffc0000000000 [ 536.355639][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.355649][ C1] FS: 0000000000000000(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 536.355661][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.355671][ C1] CR2: 0000555b436fc168 CR3: 000000007ec24000 CR4: 00000000003526f0 [ 536.355685][ C1] Call Trace: [ 536.355691][ C1] [ 536.355697][ C1] __sysvec_apic_timer_interrupt+0x24/0x430 [ 536.355723][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 536.355744][ C1] [ 536.355749][ C1] [ 536.355756][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.355772][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 536.355854][ C1] Code: f7 e8 2d 5d cf f5 f7 c3 00 02 00 00 74 05 e8 00 3e fb f5 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c4 70 c0 f5 65 8b 05 bd 80 98 07 85 c0 74 18 5b 41 5e c3 cc cc [ 536.355865][ C1] RSP: 0018:ffffc900001d7cc8 EFLAGS: 00000206 [ 536.355878][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000080000101 [ 536.355888][ C1] RDX: 0000000000000000 RSI: ffffffff8e22c4a7 RDI: 0000000000000001 [ 536.355898][ C1] RBP: ffffffff8e80a100 R08: ffffffff90575b37 R09: 1ffffffff20aeb66 [ 536.355909][ C1] R10: dffffc0000000000 R11: fffffbfff20aeb67 R12: 0000000000000009 [ 536.355920][ C1] R13: 0000000000000008 R14: ffff8880b87281c0 R15: 0000000000000001 [ 536.355941][ C1] handle_softirqs+0x225/0x840 [ 536.355959][ C1] ? run_ksoftirqd+0x36/0x60 [ 536.355981][ C1] run_ksoftirqd+0x36/0x60 [ 536.355997][ C1] smpboot_thread_fn+0x57c/0xa80 [ 536.356016][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 536.356037][ C1] kthread+0x388/0x470 [ 536.356056][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 536.356071][ C1] ? __pfx_kthread+0x10/0x10 [ 536.356090][ C1] ret_from_fork+0x514/0xb70 [ 536.356111][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 536.356130][ C1] ? __switch_to+0xc89/0x1420 [ 536.356148][ C1] ? __pfx_kthread+0x10/0x10 [ 536.356167][ C1] ret_from_fork_asm+0x1a/0x30 [ 536.356195][ C1] [ 536.645024][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 536.651894][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 536.661001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.671055][ T31] Call Trace: [ 536.674331][ T31] [ 536.677265][ T31] vpanic+0x56c/0xa60 [ 536.681256][ T31] ? __pfx___schedule+0x10/0x10 [ 536.686115][ T31] ? __pfx_vpanic+0x10/0x10 [ 536.690626][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 536.696789][ T31] panic+0xc5/0xd0 [ 536.700522][ T31] ? __pfx_panic+0x10/0x10 [ 536.704949][ T31] ? preempt_schedule_common+0x82/0xd0 [ 536.710424][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 536.715804][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 536.721975][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 536.728138][ T31] watchdog+0x1030/0x1030 [ 536.732479][ T31] ? watchdog+0x1c7/0x1030 [ 536.736908][ T31] kthread+0x388/0x470 [ 536.740982][ T31] ? __pfx_watchdog+0x10/0x10 [ 536.745663][ T31] ? __pfx_kthread+0x10/0x10 [ 536.750262][ T31] ret_from_fork+0x514/0xb70 [ 536.754864][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 536.759986][ T31] ? __switch_to+0xc89/0x1420 [ 536.764679][ T31] ? __pfx_kthread+0x10/0x10 [ 536.769277][ T31] ret_from_fork_asm+0x1a/0x30 [ 536.774066][ T31] [ 536.777354][ T31] Kernel Offset: disabled [ 536.781665][ T31] Rebooting in 86400 seconds..