last executing test programs: 1.978208077s ago: executing program 3 (id=10380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000000001000000090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000000101040000000000000000020000002400018014000180080001006401010208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200000000000800074000000800440005"], 0xa8}}, 0x0) 1.703121178s ago: executing program 3 (id=10386): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.648418579s ago: executing program 2 (id=10388): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x12504000) 1.622525809s ago: executing program 4 (id=10389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) 1.506249531s ago: executing program 2 (id=10391): r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x20400) connect$inet(r0, 0x0, 0x0) 1.4860482s ago: executing program 1 (id=10392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.37433372s ago: executing program 4 (id=10393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 1.361464789s ago: executing program 3 (id=10395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="e02742e868bfafff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.310247995s ago: executing program 2 (id=10396): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r0) 1.257264804s ago: executing program 1 (id=10397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.23916546s ago: executing program 4 (id=10398): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffff79}]}}]}, 0x38}}, 0x40) 1.178254965s ago: executing program 2 (id=10399): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n'], 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1.169404298s ago: executing program 3 (id=10401): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r0, 0x917}, 0x14}}, 0x0) 1.058211368s ago: executing program 2 (id=10402): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.007321737s ago: executing program 1 (id=10404): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18200000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fffdffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000040)) 1.007023742s ago: executing program 4 (id=10405): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r0, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0) 941.527696ms ago: executing program 1 (id=10406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x20000000) 941.013535ms ago: executing program 3 (id=10407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x270bd25, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x401, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) 791.326467ms ago: executing program 4 (id=10409): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3d, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x50}}, 0x4000010) 776.786337ms ago: executing program 1 (id=10410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/17, &(0x7f0000000240)=0x11) 586.18548ms ago: executing program 1 (id=10412): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0x0) 569.313917ms ago: executing program 0 (id=10413): unshare(0x8000400) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 499.50621ms ago: executing program 0 (id=10414): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) 386.147779ms ago: executing program 0 (id=10415): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x24000800) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) 362.864681ms ago: executing program 0 (id=10416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004b40)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x4) 267.377335ms ago: executing program 0 (id=10417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000080)="8fa9", &(0x7f0000000340)=""/69}, 0x20) 147.846115ms ago: executing program 0 (id=10418): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000000}]}, 0x24}}, 0x0) 12.806445ms ago: executing program 4 (id=10419): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44) 1.094269ms ago: executing program 3 (id=10420): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) 0s ago: executing program 2 (id=10421): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="5a000300010003", 0x7) kernel console output (not intermixed with test programs): attributes in process `syz.1.3538'. [ 251.609602][T13313] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 251.791555][T13322] xt_TCPMSS: Only works on TCP SYN packets [ 252.443431][T13359] netlink: 'syz.1.3566': attribute type 7 has an invalid length. [ 252.770346][T13377] netlink: 'syz.0.3575': attribute type 1 has an invalid length. [ 252.799983][T13377] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3575'. [ 252.815874][T13379] Unknown options in mask 1f4 [ 252.978417][T13388] netlink: 'syz.1.3579': attribute type 1 has an invalid length. [ 253.000698][T13388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.335084][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 253.384026][T13407] xt_l2tp: missing protocol rule (udp|l2tpip) [ 253.715453][T13423] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 253.735083][T13423] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 253.775651][T13428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.914165][T13433] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 255.770055][T13519] __nla_validate_parse: 2 callbacks suppressed [ 255.770224][T13519] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3646'. [ 255.770305][T13520] netlink: 'syz.2.3644': attribute type 15 has an invalid length. [ 255.842013][T13522] ieee802154 phy1 wpan1: encryption failed: -90 [ 255.967854][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.112567][T13528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.371590][T13549] netlink: 'syz.4.3659': attribute type 9 has an invalid length. [ 256.384621][T13551] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3660'. [ 257.242014][T13595] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 257.471260][T13608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 257.995964][T13635] netlink: 'syz.3.3703': attribute type 7 has an invalid length. [ 258.030834][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3704'. [ 258.399336][T13661] netlink: 'syz.3.3716': attribute type 10 has an invalid length. [ 258.442768][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.485728][T13661] team0: Port device batadv0 added [ 258.497705][T13663] netlink: 'syz.1.3717': attribute type 4 has an invalid length. [ 258.542652][T13666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3718'. [ 258.583538][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3718'. [ 258.613374][T13666] netlink: 'syz.4.3718': attribute type 2 has an invalid length. [ 258.882033][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 258.945066][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 259.129274][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'. [ 259.457951][T13714] openvswitch: netlink: IP tunnel dst address not specified [ 259.489562][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3739'. [ 260.866868][T13796] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3769'. [ 260.875572][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3770'. [ 260.885225][T13796] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3769'. [ 261.083155][T13805] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 261.522863][T13829] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 261.998638][T13858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.135264][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3797'. [ 263.314098][T13928] netlink: 'syz.1.3820': attribute type 21 has an invalid length. [ 263.363541][T13928] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3820'. [ 263.598479][T13942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.615088][T13942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.630405][T13942] hsr0: entered promiscuous mode [ 263.644147][T13942] hsr0: entered allmulticast mode [ 263.664619][T13942] hsr_slave_0: entered allmulticast mode [ 263.686328][T13942] hsr_slave_1: entered allmulticast mode [ 263.915407][T13955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 263.957848][T13955] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 263.975871][T13955] gretap1: entered promiscuous mode [ 263.981382][T13955] gretap1: entered allmulticast mode [ 264.021335][T13921] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 264.234052][T13971] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3840'. [ 264.488335][T13985] netlink: 'syz.1.3846': attribute type 2 has an invalid length. [ 264.525955][T13985] netlink: 'syz.1.3846': attribute type 2 has an invalid length. [ 264.839453][T14006] netlink: 'syz.4.3857': attribute type 9 has an invalid length. [ 265.246030][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 265.735157][T14046] delete_channel: no stack [ 265.995227][T14062] xt_cgroup: xt_cgroup: no path or classid specified [ 266.220161][T14074] netlink: 'syz.4.3890': attribute type 10 has an invalid length. [ 266.245140][T14074] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3890'. [ 266.283329][T14074] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 266.309559][T14074] team0: Port device virt_wifi0 added [ 266.731115][T14104] netlink: 'syz.3.3904': attribute type 1 has an invalid length. [ 266.935918][T14110] netlink: 'syz.2.3908': attribute type 5 has an invalid length. [ 267.793838][T14147] netlink: 'syz.1.3926': attribute type 10 has an invalid length. [ 267.834034][T14147] hsr0: left promiscuous mode [ 267.839108][T14149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.853031][T14147] hsr0: left allmulticast mode [ 267.865340][T14153] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 267.881637][T14152] netlink: 'syz.0.3928': attribute type 1 has an invalid length. [ 267.889690][T14147] hsr_slave_0: left allmulticast mode [ 267.911048][T14147] hsr_slave_1: left allmulticast mode [ 267.916712][T14152] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3928'. [ 267.932061][T14147] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 268.016087][T14159] netlink: 'syz.2.3932': attribute type 11 has an invalid length. [ 268.024304][T14159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3932'. [ 268.185170][T14167] netlink: 'syz.1.3934': attribute type 303 has an invalid length. [ 268.225272][T14169] tipc: Can't bind to reserved service type 2 [ 268.418865][T14173] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.426654][T14173] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.578013][T14173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.593283][T14173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.805154][T14173] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.814623][T14173] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.856039][T14173] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.875002][T14173] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.892384][T14173] geneve2: left promiscuous mode [ 268.905246][T14173] geneve2: left allmulticast mode [ 268.938091][T14173] veth3: left promiscuous mode [ 269.274161][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3957'. [ 269.667107][T14233] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3967'. [ 270.023465][T14256] ip6erspan0: entered promiscuous mode [ 270.415700][T14274] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 270.785138][ T5973] IPVS: starting estimator thread 0... [ 270.876818][T14287] IPVS: using max 19 ests per chain, 45600 per kthread [ 271.063571][T14299] netlink: 'syz.4.4002': attribute type 10 has an invalid length. [ 271.108254][T14299] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 271.140008][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'. [ 271.182223][T14304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4003'. [ 271.563090][T14324] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 272.415136][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4029'. [ 272.424163][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4029'. [ 272.485117][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'. [ 272.611361][T14369] netlink: 'syz.2.4034': attribute type 2 has an invalid length. [ 272.621332][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4034'. [ 272.665069][T14371] openvswitch: netlink: Duplicate or invalid key (type 0). [ 272.705146][T14371] openvswitch: netlink: Actions may not be safe on all matching packets [ 274.012023][T14426] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4062'. [ 274.033079][T14426] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4062'. [ 274.232221][T14438] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4068'. [ 274.537618][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4075'. [ 274.669236][T14462] netlink: 'syz.2.4077': attribute type 9 has an invalid length. [ 274.747780][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'. [ 274.773520][T14465] netlink: 'syz.0.4079': attribute type 3 has an invalid length. [ 274.940267][T14476] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 274.977853][T14478] geneve2: entered promiscuous mode [ 274.983139][T14478] geneve2: entered allmulticast mode [ 275.017140][T14476] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.746195][T14523] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.890111][T14532] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.4102'. [ 277.455270][T14621] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 277.896500][T14643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.080277][T14651] __nla_validate_parse: 4 callbacks suppressed [ 278.080299][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4145'. [ 278.273640][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 278.540246][T14674] netlink: 'syz.2.4153': attribute type 1 has an invalid length. [ 278.847683][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 279.360001][T14705] openvswitch: netlink: Key type 29 is not supported [ 280.193717][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4191'. [ 280.451687][T14765] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 280.504113][T14769] IPv6: sit1: Disabled Multicast RS [ 280.529314][T14769] sit1: entered allmulticast mode [ 280.550562][T14771] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4201'. [ 280.855603][T14786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.077547][T14799] netlink: 'syz.3.4214': attribute type 1 has an invalid length. [ 281.106766][T14799] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4214'. [ 281.190117][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4217'. [ 281.285908][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 281.312469][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 281.506397][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4226'. [ 282.004399][T14851] sctp: [Deprecated]: syz.1.4240 (pid 14851) Use of int in maxseg socket option. [ 282.004399][T14851] Use struct sctp_assoc_value instead [ 282.067329][T14853] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 282.132394][T14855] netlink: 'syz.2.4242': attribute type 5 has an invalid length. [ 282.154316][T14855] netlink: 'syz.2.4242': attribute type 5 has an invalid length. [ 282.841206][T14895] openvswitch: netlink: Duplicate key (type 32). [ 283.033016][T14907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.180773][T14915] __nla_validate_parse: 1 callbacks suppressed [ 283.180794][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4272'. [ 284.168418][T14973] SET target dimension over the limit! [ 284.296206][T14979] netlink: 'syz.1.4303': attribute type 5 has an invalid length. [ 284.335651][T14983] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 284.375143][T14983] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4304'. [ 284.939586][T15019] vlan0: entered promiscuous mode [ 285.191640][T15031] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 285.217714][T15032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4327'. [ 285.420121][T15044] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36380 - 0 [ 285.443614][T15044] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36380 - 0 [ 285.491237][T15044] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36380 - 0 [ 285.511751][T15044] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36380 - 0 [ 285.546761][T15044] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 57575 - 0 [ 285.555968][T15051] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 285.563917][T15051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4337'. [ 285.587229][T15044] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 57575 - 0 [ 285.599972][T15044] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 57575 - 0 [ 285.610347][T15044] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 57575 - 0 [ 285.620065][T15044] geneve3: entered promiscuous mode [ 285.645784][T15044] geneve3: entered allmulticast mode [ 286.341322][T15095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4356'. [ 286.920031][T15128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4373'. [ 287.294642][T15148] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 287.313625][T15146] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4382'. [ 287.348300][T15146] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4382'. [ 287.373637][T15146] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4382'. [ 287.755310][T15172] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4395'. [ 287.764679][T15172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.011528][T15182] xt_CT: No such helper "pptp" [ 288.436421][T15212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.593437][T15221] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 288.617267][T15225] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4419'. [ 288.628859][T15221] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 288.824914][T15233] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 289.103679][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4430'. [ 289.533102][T15267] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 289.569264][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.580714][T15271] netlink: 'syz.2.4443': attribute type 12 has an invalid length. [ 289.603127][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.621545][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.663379][T15269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 289.697249][T15269] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 289.707968][T15275] netlink: 'syz.0.4446': attribute type 1 has an invalid length. [ 289.740482][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.748710][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.755854][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.764274][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.776556][T15269] wg1 speed is unknown, defaulting to 1000 [ 289.916491][T15284] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 289.935333][T15284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.985446][T15292] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 290.018399][T15292] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 290.334818][T15307] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 290.405592][T15314] netlink: 'syz.1.4462': attribute type 8 has an invalid length. [ 290.625339][T15325] xt_l2tp: wrong L2TP version: 0 [ 290.956073][T15347] netlink: 412 bytes leftover after parsing attributes in process `syz.3.4474'. [ 291.229121][T15360] netlink: 'syz.3.4480': attribute type 16 has an invalid length. [ 291.253252][T15360] netlink: 'syz.3.4480': attribute type 3 has an invalid length. [ 291.281559][T15360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4480'. [ 292.147274][T15408] netlink: 'syz.2.4505': attribute type 13 has an invalid length. [ 292.160790][T15408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4505'. [ 292.184081][T15408] syz_tun: refused to change device tx_queue_len [ 292.190960][T15408] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 292.491422][T15428] ipvlan1: entered promiscuous mode [ 292.883461][T15449] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4522'. [ 292.921210][T15449] 0·: renamed from hsr_slave_1 [ 292.944644][T15449] 0·: entered allmulticast mode [ 292.950286][T15449] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 292.954769][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4524'. [ 293.119366][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'. [ 293.145155][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'. [ 293.548108][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4541'. [ 293.694036][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 293.709987][T15495] gre0: entered promiscuous mode [ 293.844347][T15499] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 294.541364][T15537] netlink: 'syz.1.4567': attribute type 3 has an invalid length. [ 294.766201][T15551] netlink: 'syz.2.4573': attribute type 11 has an invalid length. [ 294.863227][T15555] batadv0 speed is unknown, defaulting to 1000 [ 294.877932][T15555] batadv0 speed is unknown, defaulting to 1000 [ 294.884860][T15555] batadv0 speed is unknown, defaulting to 1000 [ 294.910937][T15555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 294.970016][T15555] batadv0 speed is unknown, defaulting to 1000 [ 294.971857][T15561] xt_l2tp: invalid flags combination: c [ 295.006555][T15555] batadv0 speed is unknown, defaulting to 1000 [ 295.013918][T15555] batadv0 speed is unknown, defaulting to 1000 [ 295.056236][T15555] batadv0 speed is unknown, defaulting to 1000 [ 295.074396][T15555] batadv0 speed is unknown, defaulting to 1000 [ 295.450654][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'. [ 295.991274][T15615] netlink: 'syz.2.4603': attribute type 1 has an invalid length. [ 296.218422][T15625] raw_sendmsg: syz.0.4607 forgot to set AF_INET. Fix it! [ 296.398195][T15631] netlink: 'syz.0.4611': attribute type 1 has an invalid length. [ 296.433235][T15631] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4611'. [ 297.605352][T15689] xt_CT: No such helper "netbios-ns" [ 297.707550][T15700] netlink: 'syz.1.4641': attribute type 2 has an invalid length. [ 297.723101][T15700] netlink: 'syz.1.4641': attribute type 9 has an invalid length. [ 297.742989][T15700] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4641'. [ 297.870694][T15706] netlink: 'syz.3.4646': attribute type 10 has an invalid length. [ 297.885686][T15706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4646'. [ 297.930208][T15706] batman_adv: batadv0: Adding interface: virt_wifi0 [ 297.947721][T15706] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.023432][T15706] batman_adv: batadv0: Interface activated: virt_wifi0 [ 298.117620][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 298.306092][T15724] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 298.547580][T15740] ipt_ECN: cannot use operation on non-tcp rule [ 298.944723][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4672'. [ 299.218888][T15773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.379598][T15783] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4683'. [ 299.489250][T15787] gretap2: entered promiscuous mode [ 299.803809][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4694'. [ 299.827069][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4694'. [ 299.837208][T15808] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4694'. [ 299.965413][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4696'. [ 299.994126][T15814] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 300.698681][T15846] veth5: entered promiscuous mode [ 300.703793][T15846] veth5: entered allmulticast mode [ 301.085364][T15871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4726'. [ 301.094424][T15871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4726'. [ 301.295044][T15888] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.153606][T15934] netlink: 'syz.0.4756': attribute type 29 has an invalid length. [ 302.196038][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4756'. [ 302.256389][T15938] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.615257][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4766'. [ 303.304210][T16002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.479877][T16011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.110637][T16043] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 305.315952][T16118] __nla_validate_parse: 1 callbacks suppressed [ 305.315974][T16118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4825'. [ 305.724344][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4834'. [ 306.040873][T16154] Cannot find set identified by id 0 to match [ 306.870683][T16180] gre0: left promiscuous mode [ 306.902818][T16180] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4856'. [ 306.913220][T16180] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 307.371880][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4864'. [ 307.395146][T16203] netlink: 'syz.4.4864': attribute type 1 has an invalid length. [ 307.433083][T16203] netlink: 'syz.4.4864': attribute type 2 has an invalid length. [ 307.476455][T16203] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4864'. [ 307.751298][T16221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4872'. [ 307.824647][T16226] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 308.113972][T16244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4883'. [ 308.139697][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 308.161040][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 308.192945][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 308.220925][T16244] netlink: 'syz.4.4883': attribute type 4 has an invalid length. [ 308.534028][T16263] netlink: 'syz.3.4890': attribute type 4 has an invalid length. [ 309.396792][T16318] xt_hashlimit: overflow, try lower: 0/0 [ 309.905185][T16343] netlink: 'syz.4.4922': attribute type 21 has an invalid length. [ 309.962725][T16346] netlink: 'syz.1.4924': attribute type 32 has an invalid length. [ 310.008854][T16346] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 310.062635][T16351] netlink: 'syz.2.4925': attribute type 13 has an invalid length. [ 310.880775][T16403] netlink: 'syz.2.4944': attribute type 10 has an invalid length. [ 310.917499][T16406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.936992][T16403] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 310.985477][T16403] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 311.015852][T16403] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 311.265342][T16425] __nla_validate_parse: 3 callbacks suppressed [ 311.265363][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'. [ 311.503610][T16436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4957'. [ 311.695282][T16447] netlink: 'syz.3.4961': attribute type 1 has an invalid length. [ 311.825483][T16456] netlink: 'syz.1.4964': attribute type 2 has an invalid length. [ 311.921199][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 311.952489][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 312.063609][T16470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4970'. [ 312.354671][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4976'. [ 313.102124][T16525] validate_nla: 1 callbacks suppressed [ 313.102147][T16525] netlink: 'syz.0.4989': attribute type 11 has an invalid length. [ 313.356347][T16542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4996'. [ 313.481553][T16549] xt_time: unknown flags 0x4 [ 313.652449][T16557] netlink: 'syz.4.5002': attribute type 10 has an invalid length. [ 313.689424][T16561] netlink: 'syz.3.5004': attribute type 7 has an invalid length. [ 313.693335][T16557] team0: left allmulticast mode [ 313.703296][T16557] team_slave_0: left allmulticast mode [ 313.735420][T16557] team_slave_1: left allmulticast mode [ 313.747090][T16557] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 313.795954][T16557] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.826202][T16557] bond0: (slave team0): Enslaving as an active interface with an up link [ 313.862230][T16569] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.311050][T16593] x_tables: duplicate underflow at hook 2 [ 314.462536][T16598] netlink: 'syz.0.5020': attribute type 1 has an invalid length. [ 314.488705][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5020'. [ 314.500314][T16602] netlink: 'syz.2.5022': attribute type 7 has an invalid length. [ 315.145088][T16637] netlink: 'syz.4.5033': attribute type 9 has an invalid length. [ 315.205141][T16637] netlink: 'syz.4.5033': attribute type 6 has an invalid length. [ 315.663830][T16667] bridge4: entered promiscuous mode [ 315.688941][T16670] ieee802154 phy1 wpan1: encryption failed: -90 [ 315.700988][T16667] bridge4: entered allmulticast mode [ 315.885324][T16679] netlink: 'syz.0.5050': attribute type 1 has an invalid length. [ 315.930084][T16679] netlink: 784 bytes leftover after parsing attributes in process `syz.0.5050'. [ 315.994532][T16683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.024205][T16691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5053'. [ 316.139113][T16695] openvswitch: netlink: IPv4 tunnel dst address is zero [ 316.741062][T16728] xt_SECMARK: invalid mode: 0 [ 317.407781][T16764] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5087'. [ 317.417814][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444005][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 317.650373][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5093'. [ 317.827133][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'. [ 317.946918][T16797] netlink: 'syz.0.5099': attribute type 4 has an invalid length. [ 317.954733][T16797] netlink: 'syz.0.5099': attribute type 11 has an invalid length. [ 318.005228][T16797] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5099'. [ 318.432077][T16824] netlink: 'syz.0.5111': attribute type 1 has an invalid length. [ 318.688048][T16840] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5118'. [ 318.798142][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5121'. [ 319.215558][T16866] x_tables: duplicate entry at hook 1 [ 319.396801][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5136'. [ 319.443386][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5136'. [ 319.459104][T16881] netlink: 'syz.3.5138': attribute type 5 has an invalid length. [ 319.508302][T16881] ip6erspan0: entered promiscuous mode [ 319.778969][T16896] wg1 speed is unknown, defaulting to 1000 [ 319.811787][T16896] batadv0 speed is unknown, defaulting to 1000 [ 319.845818][T16901] IPv6: addrconf: prefix option has invalid lifetime [ 319.968083][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 320.577658][T16944] openvswitch: netlink: Message has 13 unknown bytes. [ 320.603855][T16944] openvswitch: netlink: Actions may not be safe on all matching packets [ 321.401830][T16988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 322.213788][T17032] SET target dimension over the limit! [ 322.439086][T17044] __nla_validate_parse: 4 callbacks suppressed [ 322.439109][T17044] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5217'. [ 322.470394][T17044] unsupported nlmsg_type 40 [ 322.777812][T17060] netlink: 'syz.3.5225': attribute type 34 has an invalid length. [ 323.212851][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5234'. [ 323.616363][T17106] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5247'. [ 323.619450][T17104] sctp: [Deprecated]: syz.1.5245 (pid 17104) Use of int in maxseg socket option. [ 323.619450][T17104] Use struct sctp_assoc_value instead [ 324.469449][T17155] bridge0: port 3(netdevsim2) entered blocking state [ 324.505256][T17155] bridge0: port 3(netdevsim2) entered disabled state [ 324.512228][T17155] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 324.536586][T17155] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 324.579115][T17157] gre1: entered promiscuous mode [ 324.711530][T17168] netlink: 'syz.0.5274': attribute type 1 has an invalid length. [ 324.726968][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5274'. [ 324.768219][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5274'. [ 324.796008][T17170] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5273'. [ 324.935059][T17177] netlink: zone id is out of range [ 325.392375][T17204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.813686][T17227] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 325.836191][T17227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.895174][T17230] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.306400][T17313] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 327.387989][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 327.875641][T17346] netlink: 'syz.4.5344': attribute type 10 has an invalid length. [ 328.334737][T17375] netlink: 'syz.2.5356': attribute type 6 has an invalid length. [ 328.376858][T17375] netlink: 'syz.2.5356': attribute type 30 has an invalid length. [ 328.947715][T17410] x_tables: duplicate entry at hook 2 [ 329.214166][T17425] bridge0: port 1(netdevsim2) entered blocking state [ 329.241535][T17425] bridge0: port 1(netdevsim2) entered disabled state [ 329.260625][T17425] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 329.295285][T17425] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 329.378232][T17433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5378'. [ 329.465860][T17441] netlink: 'syz.0.5380': attribute type 1 has an invalid length. [ 329.492121][T17442] netlink: 'syz.4.5381': attribute type 1 has an invalid length. [ 329.545812][T17442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5381'. [ 330.176557][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5395'. [ 330.209687][T17479] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 330.215455][T17486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.469940][T17500] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 331.385429][T17552] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5422'. [ 331.488295][T17558] bridge7: entered allmulticast mode [ 331.826841][T17576] sock: sock_timestamping_bind_phc: sock not bind to device [ 332.118634][T17588] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 332.386178][T17607] sock: sock_timestamping_bind_phc: sock not bind to device [ 332.847421][T17630] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.892164][T17636] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5461'. [ 332.903062][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 332.924234][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 332.943979][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 333.218057][T17635] infiniband syz2: set active [ 333.223263][T17635] infiniband syz2: added vxcan1 [ 333.230575][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 333.283465][T17635] RDS/IB: syz2: added [ 333.288617][T17635] smc: adding ib device syz2 with port count 1 [ 333.295326][T17635] smc: ib device syz2 port 1 has pnetid [ 333.340482][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 333.364590][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 333.581413][T17656] netlink: 'syz.4.5470': attribute type 49 has an invalid length. [ 333.660126][T17661] netlink: 'syz.3.5472': attribute type 2 has an invalid length. [ 333.690547][T17660] wg1 speed is unknown, defaulting to 1000 [ 333.712162][T17660] batadv0 speed is unknown, defaulting to 1000 [ 333.848027][T17660] vxcan1 speed is unknown, defaulting to 1000 [ 333.881913][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5474'. [ 333.922287][T17669] xt_TCPMSS: Only works on TCP SYN packets [ 334.188227][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 334.229245][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5481'. [ 334.514894][T17688] bond0: entered promiscuous mode [ 334.536630][T17688] bond_slave_0: entered promiscuous mode [ 334.542910][T17688] bond_slave_1: entered promiscuous mode [ 334.571912][T17688] bridge0: entered promiscuous mode [ 334.601804][T17688] team0: entered promiscuous mode [ 334.619751][T17688] team_slave_0: entered promiscuous mode [ 334.649569][T17688] team_slave_1: entered promiscuous mode [ 334.664885][T17688] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 334.684519][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 334.781227][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'. [ 334.943652][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 335.182859][T17635] vxcan1 speed is unknown, defaulting to 1000 [ 335.415792][T17700] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 335.671181][T17732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5506'. [ 335.716416][T17732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5506'. [ 335.742427][T17735] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 336.355266][T17766] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 336.499890][T17774] netlink: 'syz.3.5528': attribute type 1 has an invalid length. [ 336.614263][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5530'. [ 336.864188][T17794] netlink: 'syz.0.5537': attribute type 11 has an invalid length. [ 336.884458][T17794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5537'. [ 336.899200][T17796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.278519][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5549'. [ 337.398570][T17824] netlink: 732 bytes leftover after parsing attributes in process `syz.0.5554'. [ 337.619587][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5559'. [ 337.666210][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5559'. [ 337.818128][T17848] netlink: 'syz.0.5563': attribute type 3 has an invalid length. [ 338.277873][T17875] netlink: 'syz.2.5576': attribute type 1 has an invalid length. [ 338.338543][T17875] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5576'. [ 338.650224][T17895] netlink: 'syz.3.5587': attribute type 1 has an invalid length. [ 338.767168][T17901] netlink: 'syz.4.5590': attribute type 2 has an invalid length. [ 339.238055][T17925] netlink: 'syz.3.5601': attribute type 1 has an invalid length. [ 339.475108][T17941] nft_compat: unsupported protocol 0 [ 339.809211][T17960] __nla_validate_parse: 2 callbacks suppressed [ 339.809233][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5619'. [ 339.886188][T17966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5620'. [ 340.150241][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5627'. [ 340.651279][T18008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5642'. [ 340.855652][T18018] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 341.741211][T18066] netlink: 'syz.1.5671': attribute type 12 has an invalid length. [ 341.752978][T18068] xt_l2tp: missing protocol rule (udp|l2tpip) [ 341.759355][T18066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5671'. [ 341.790794][T18070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5673'. [ 341.835115][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5673'. [ 341.982059][T18080] netlink: 'syz.4.5678': attribute type 10 has an invalid length. [ 342.261258][T18096] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 342.439420][T18105] x_tables: unsorted underflow at hook 2 [ 342.950280][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5704'. [ 342.986032][T18135] netlink: 'syz.1.5702': attribute type 1 has an invalid length. [ 343.234129][T18150] netlink: 'syz.4.5708': attribute type 13 has an invalid length. [ 343.281693][T18150] gretap0: refused to change device tx_queue_len [ 343.345059][T18150] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 343.806487][T18182] xt_hashlimit: size too large, truncated to 1048576 [ 343.822769][T18182] xt_hashlimit: max too large, truncated to 1048576 [ 343.840723][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5721'. [ 343.856037][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5724'. [ 343.871709][T18187] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 343.880388][T18187] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 343.894311][T18187] bridge0: port 3(netdevsim2) entered disabled state [ 343.904565][T18187] bridge_slave_1: left allmulticast mode [ 343.937281][T18187] bridge_slave_1: left promiscuous mode [ 343.943130][T18187] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.989890][T18187] bridge_slave_0: left allmulticast mode [ 343.998794][T18187] bridge_slave_0: left promiscuous mode [ 344.004803][T18187] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.005876][T18194] netlink: 'syz.3.5727': attribute type 21 has an invalid length. [ 344.090022][T18194] netlink: 'syz.3.5727': attribute type 4 has an invalid length. [ 344.125113][T18194] netlink: 'syz.3.5727': attribute type 3 has an invalid length. [ 344.408141][T18208] xt_TCPMSS: Only works on TCP SYN packets [ 344.943312][ T29] audit: type=1107 audit(1741765105.496:2): pid=18237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 344.956843][T18242] __nla_validate_parse: 5 callbacks suppressed [ 344.956865][T18242] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5749'. [ 345.392738][T18261] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5758'. [ 345.556255][T18270] SET target dimension over the limit! [ 346.242862][T18311] xt_TCPMSS: Only works on TCP SYN packets [ 346.443816][T18322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5787'. [ 346.802041][T18342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5798'. [ 346.921790][T18349] netlink: 'syz.3.5803': attribute type 2 has an invalid length. [ 347.009194][T18353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.139319][T18360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5808'. [ 347.428475][T18377] netlink: 'syz.1.5816': attribute type 16 has an invalid length. [ 347.466861][T18377] netlink: 'syz.1.5816': attribute type 17 has an invalid length. [ 347.774611][T18391] netlink: 'syz.4.5825': attribute type 1 has an invalid length. [ 347.782970][T18395] netlink: 'syz.2.5824': attribute type 6 has an invalid length. [ 348.340328][T18421] bond4: entered promiscuous mode [ 348.343284][T18427] netlink: 'syz.0.5840': attribute type 32 has an invalid length. [ 348.347585][T18421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.361364][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5841'. [ 349.131656][T18472] netlink: 'syz.1.5862': attribute type 3 has an invalid length. [ 349.159652][T18472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5862'. [ 349.278127][T18476] xt_recent: hitcount (486539264) is larger than allowed maximum (65535) [ 349.333446][T18483] netlink: 'syz.0.5866': attribute type 3 has an invalid length. [ 349.511610][T18492] IPv6: sit2: Disabled Multicast RS [ 349.641351][T18496] netlink: 'syz.1.5875': attribute type 10 has an invalid length. [ 349.683559][T18496] syz_tun: entered promiscuous mode [ 349.699889][T18504] xt_TCPMSS: Only works on TCP SYN packets [ 349.716831][T18496] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 350.407396][T18540] bridge0: entered promiscuous mode [ 350.513731][T18543] netlink: 'syz.4.5898': attribute type 10 has an invalid length. [ 350.534616][T18543] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5898'. [ 350.585607][T18543] bond0: (slave team0): Releasing backup interface [ 350.641548][T18543] bridge0: port 3(team0) entered blocking state [ 350.660227][T18543] bridge0: port 3(team0) entered disabled state [ 350.685339][T18543] team0: entered allmulticast mode [ 350.691301][T18543] team_slave_0: entered allmulticast mode [ 350.711893][T18543] team_slave_1: entered allmulticast mode [ 350.730164][T18543] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 351.918142][T18623] SET target dimension over the limit! [ 352.170340][T18637] xt_hashlimit: max too large, truncated to 1048576 [ 352.231945][T18643] xt_SECMARK: invalid mode: 129 [ 352.453927][T18653] netlink: 'syz.1.5949': attribute type 2 has an invalid length. [ 352.480487][T18653] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5949'. [ 352.574434][T18661] netlink: 'syz.0.5952': attribute type 58 has an invalid length. [ 352.645095][T18661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5952'. [ 352.721054][T18666] xt_l2tp: v2 sid > 0xffff: 262144 [ 352.724253][T18670] openvswitch: netlink: IP tunnel dst address not specified [ 352.853429][T18674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.962452][T18681] netlink: 'syz.1.5960': attribute type 2 has an invalid length. [ 352.998156][T18681] netlink: 'syz.1.5960': attribute type 1 has an invalid length. [ 353.850294][T18728] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 353.871874][T18734] ax25_connect(): syz.0.5981 uses autobind, please contact jreuter@yaina.de [ 353.904185][T18733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.057369][T18742] unsupported nla_type 33050 [ 354.164066][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5986'. [ 354.547325][T18769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5995'. [ 354.589432][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5995'. [ 354.877058][T18788] IPv6: sit3: Disabled Multicast RS [ 355.255713][T18809] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 355.287922][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6011'. [ 355.305771][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6011'. [ 355.345109][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6011'. [ 355.728590][T18833] SET target dimension over the limit! [ 355.861910][T18842] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 356.185963][T18863] set match dimension is over the limit! [ 357.285118][T18928] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6053'. [ 357.382243][T18932] netlink: 'syz.1.6057': attribute type 4 has an invalid length. [ 357.409090][T18932] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.6057'. [ 357.519108][T18938] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 357.546042][T18938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.568991][T18942] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6060'. [ 358.060805][T18969] ip_vti0: entered promiscuous mode [ 358.082479][T18971] netlink: 'syz.1.6072': attribute type 6 has an invalid length. [ 358.727047][T19004] netlink: 'syz.2.6082': attribute type 15 has an invalid length. [ 358.750133][T19007] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.6085'. [ 358.773259][T19007] openvswitch: netlink: Missing key (keys=40, expected=80) [ 359.813377][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'. [ 359.853648][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 360.032045][T19077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6112'. [ 360.271080][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6120'. [ 360.317892][T19093] netlink: 'syz.3.6121': attribute type 49 has an invalid length. [ 360.906272][T19122] No such timeout policy "syz0" [ 361.315783][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6144'. [ 361.349708][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6144'. [ 361.385138][T19140] netlink: 'syz.3.6144': attribute type 1 has an invalid length. [ 362.709770][T19214] netlink: 'syz.1.6180': attribute type 1 has an invalid length. [ 362.752480][T19214] __nla_validate_parse: 3 callbacks suppressed [ 362.752503][T19214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6180'. [ 362.835560][T19222] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.6182'. [ 362.886154][T19222] netlink: zone id is out of range [ 363.036889][T19232] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6188'. [ 363.238418][T19242] netlink: 'syz.3.6197': attribute type 21 has an invalid length. [ 363.264320][T19242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6197'. [ 363.290918][T19242] netlink: 'syz.3.6197': attribute type 1 has an invalid length. [ 363.303642][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6197'. [ 363.982743][T19286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6214'. [ 364.798513][T19326] bond4: entered promiscuous mode [ 364.803640][T19326] bond4: entered allmulticast mode [ 364.865526][T19326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 365.049404][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6241'. [ 365.364622][ T5887] wg1 speed is unknown, defaulting to 1000 [ 365.431526][T19368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6254'. [ 365.571702][T19372] netlink: 'syz.0.6256': attribute type 16 has an invalid length. [ 365.594089][T19372] netlink: 'syz.0.6256': attribute type 17 has an invalid length. [ 366.127860][T19405] netlink: 'syz.2.6270': attribute type 9 has an invalid length. [ 366.859500][T19442] netlink: 270 bytes leftover after parsing attributes in process `syz.2.6289'. [ 366.896368][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6291'. [ 367.642099][T19481] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 368.243957][T19516] __nla_validate_parse: 2 callbacks suppressed [ 368.243980][T19516] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6322'. [ 368.328431][T19522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.442866][T19526] netlink: 'syz.2.6327': attribute type 10 has an invalid length. [ 368.475101][T19526] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 368.493134][T19526] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 368.573536][T19534] IPVS: set_ctl: invalid protocol: 55 127.0.0.1:20003 [ 368.718804][T19541] xt_cgroup: invalid path, errno=-2 [ 368.734598][T19542] netlink: 'syz.1.6335': attribute type 1 has an invalid length. [ 369.133881][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6346'. [ 369.215405][T19568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6349'. [ 369.239564][T19569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6348'. [ 369.251836][T19568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6349'. [ 369.288868][T19569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6348'. [ 369.325328][T19569] netlink: 'syz.4.6348': attribute type 4 has an invalid length. [ 369.656576][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6359'. [ 369.859031][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6366'. [ 370.269950][T19626] netlink: 'syz.2.6378': attribute type 1 has an invalid length. [ 370.659369][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6387'. [ 370.706006][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6390'. [ 370.800286][T19654] netlink: 'syz.3.6391': attribute type 2 has an invalid length. [ 371.182657][T19678] netlink: 'syz.3.6400': attribute type 3 has an invalid length. [ 371.272735][T19684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.321162][T19684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.333638][T19689] ksmbd: Unknown IPC event: 4, ignore. [ 371.349694][T19684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.371085][T19684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.638216][T19706] xt_policy: output policy not valid in PREROUTING and INPUT [ 372.507855][T19746] netlink: 'syz.3.6429': attribute type 25 has an invalid length. [ 372.705250][T19758] openvswitch: netlink: Invalid VLAN frame [ 373.058167][T19775] netlink: 'syz.4.6444': attribute type 2 has an invalid length. [ 373.321391][T19790] netlink: 'syz.3.6451': attribute type 12 has an invalid length. [ 373.644217][T19808] __nla_validate_parse: 7 callbacks suppressed [ 373.644242][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6460'. [ 373.771541][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6462'. [ 373.805132][T19813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6462'. [ 374.090905][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6470'. [ 374.665597][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6485'. [ 374.784778][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6489'. [ 375.093019][T19884] netlink: 'syz.0.6498': attribute type 1 has an invalid length. [ 375.305856][T19897] ip6t_REJECT: ECHOREPLY is not supported [ 375.543978][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6511'. [ 375.594813][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6513'. [ 375.838025][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 375.875925][T19926] netlink: 'syz.3.6518': attribute type 1 has an invalid length. [ 376.130982][T19936] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6522'. [ 376.143905][T19936] netlink: 'syz.3.6522': attribute type 4 has an invalid length. [ 376.214183][T19938] netlink: 'syz.1.6524': attribute type 5 has an invalid length. [ 376.262281][T19938] ip6erspan0: entered promiscuous mode [ 376.493765][T19948] netlink: 'syz.4.6528': attribute type 1 has an invalid length. [ 376.521212][T19948] netlink: 'syz.4.6528': attribute type 2 has an invalid length. [ 377.981315][T20027] netlink: 'syz.3.6568': attribute type 10 has an invalid length. [ 378.922690][T20078] __nla_validate_parse: 5 callbacks suppressed [ 378.922714][T20078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6592'. [ 378.981951][T20078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6592'. [ 379.244744][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6601'. [ 379.655130][T20120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6612'. [ 380.496465][T20168] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 380.736633][T20180] netlink: 'syz.2.6643': attribute type 1 has an invalid length. [ 381.220107][T20204] netlink: 'syz.3.6654': attribute type 15 has an invalid length. [ 381.255039][T20204] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6654'. [ 381.803524][T20231] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 381.813073][T20234] warn_alloc: 1 callbacks suppressed [ 381.813121][T20234] syz.1.6669: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.911972][T20234] CPU: 0 UID: 0 PID: 20234 Comm: syz.1.6669 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 381.912007][T20234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.912025][T20234] Call Trace: [ 381.912033][T20234] [ 381.912042][T20234] dump_stack_lvl+0x241/0x360 [ 381.912077][T20234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.912102][T20234] ? __pfx__printk+0x10/0x10 [ 381.912128][T20234] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 381.912158][T20234] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 381.912229][T20234] warn_alloc+0x278/0x410 [ 381.912255][T20234] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 381.912281][T20234] ? __pfx_warn_alloc+0x10/0x10 [ 381.912304][T20234] ? kasan_save_track+0x3f/0x80 [ 381.912326][T20234] ? __kasan_kmalloc+0x98/0xb0 [ 381.912350][T20234] ? xsk_setsockopt+0x4aa/0x810 [ 381.912383][T20234] ? do_sock_setsockopt+0x3af/0x720 [ 381.912413][T20234] ? __x64_sys_setsockopt+0x1ee/0x280 [ 381.912434][T20234] ? do_syscall_64+0xf3/0x230 [ 381.912458][T20234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.912497][T20234] __vmalloc_node_range_noprof+0x126/0x1380 [ 381.912551][T20234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.912579][T20234] ? __kasan_kmalloc+0x98/0xb0 [ 381.912609][T20234] vmalloc_user_noprof+0x74/0x80 [ 381.912631][T20234] ? xskq_create+0xb6/0x170 [ 381.912661][T20234] xskq_create+0xb6/0x170 [ 381.912696][T20234] xsk_init_queue+0xa1/0x100 [ 381.912730][T20234] xsk_setsockopt+0x4aa/0x810 [ 381.912764][T20234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.912796][T20234] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.912830][T20234] ? aa_sock_opt_perm+0x79/0x120 [ 381.912869][T20234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.912899][T20234] do_sock_setsockopt+0x3af/0x720 [ 381.912927][T20234] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 381.912955][T20234] ? __fget_files+0x395/0x410 [ 381.912985][T20234] ? __fget_files+0x2a/0x410 [ 381.913025][T20234] __x64_sys_setsockopt+0x1ee/0x280 [ 381.913055][T20234] do_syscall_64+0xf3/0x230 [ 381.913082][T20234] ? clear_bhb_loop+0x35/0x90 [ 381.913115][T20234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.913153][T20234] RIP: 0033:0x7f78d038d169 [ 381.913173][T20234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.913191][T20234] RSP: 002b:00007f78d1160038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.913214][T20234] RAX: ffffffffffffffda RBX: 00007f78d05a5fa0 RCX: 00007f78d038d169 [ 381.913231][T20234] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 381.913244][T20234] RBP: 00007f78d040e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 381.913258][T20234] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.913272][T20234] R13: 0000000000000000 R14: 00007f78d05a5fa0 R15: 00007ffd165aa478 [ 381.913303][T20234] [ 381.913313][T20234] Mem-Info: [ 382.046540][T20244] vlan0: entered promiscuous mode [ 382.069519][T20234] active_anon:4675 inactive_anon:0 isolated_anon:0 [ 382.069519][T20234] active_file:1146 inactive_file:38414 isolated_file:0 [ 382.069519][T20234] unevictable:768 dirty:307 writeback:0 [ 382.069519][T20234] slab_reclaimable:11476 slab_unreclaimable:105729 [ 382.069519][T20234] mapped:28366 shmem:1452 pagetables:839 [ 382.069519][T20234] sec_pagetables:0 bounce:0 [ 382.069519][T20234] kernel_misc_reclaimable:0 [ 382.069519][T20234] free:1338406 free_pcp:514 free_cma:0 [ 382.257970][T20234] Node 0 active_anon:18668kB inactive_anon:0kB active_file:4584kB inactive_file:153580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113412kB dirty:1236kB writeback:0kB shmem:4280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11284kB pagetables:3404kB sec_pagetables:0kB all_unreclaimable? no [ 382.440593][T20234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 382.516772][T20234] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.575046][T20234] lowmem_reserve[]: 0 2489 2490 0 0 [ 382.595330][T20234] Node 0 DMA32 free:1432836kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:18732kB inactive_anon:0kB active_file:4584kB inactive_file:153264kB unevictable:1536kB writepending:1236kB present:3129332kB managed:2549736kB mlocked:0kB bounce:0kB free_pcp:1820kB local_pcp:1324kB free_cma:0kB [ 382.697224][T20234] lowmem_reserve[]: 0 0 0 0 0 [ 382.703248][T20234] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 382.761785][T20234] lowmem_reserve[]: 0 0 0 0 0 [ 382.774547][T20234] Node 1 Normal free:3905540kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.811731][T20234] lowmem_reserve[]: 0 0 0 0 0 [ 382.834957][T20234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.862103][T20234] Node 0 DMA32: 333*4kB (UE) 368*8kB (UME) 114*16kB (UME) 36*32kB (UME) 515*64kB (UME) 318*128kB (UME) 126*256kB (UME) 72*512kB (UM) 52*1024kB (UM) 8*2048kB (UME) 296*4096kB (UM) = 1432084kB [ 382.905311][T20234] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 382.923809][T20234] Node 1 Normal: 265*4kB (UE) 70*8kB (UME) 41*16kB (UME) 225*32kB (UME) 104*64kB (UME) 34*128kB (UME) 16*256kB (UM) 10*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3905540kB [ 382.961657][T20234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.983924][T20234] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 383.025254][T20270] openvswitch: netlink: Actions may not be safe on all matching packets [ 383.040628][T20234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 383.065085][T20234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 383.082616][T20234] 41014 total pagecache pages [ 383.091869][T20234] 0 pages in swap cache [ 383.101158][T20234] Free swap = 124996kB [ 383.107817][T20234] Total swap = 124996kB [ 383.112124][T20234] 2097051 pages RAM [ 383.124429][T20234] 0 pages HighMem/MovableOnly [ 383.130985][T20234] 427895 pages reserved [ 383.141029][T20234] 0 pages cma reserved [ 383.373727][T20286] netlink: 'syz.3.6695': attribute type 3 has an invalid length. [ 383.409828][T20286] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6695'. [ 383.792462][T20310] netlink: 'syz.1.6706': attribute type 3 has an invalid length. [ 385.193701][T20393] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 385.214717][T20393] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 385.660128][T20417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6760'. [ 386.336739][T20458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6780'. [ 386.346018][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6781'. [ 386.473442][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6784'. [ 386.563827][T20469] netlink: 'syz.1.6787': attribute type 2 has an invalid length. [ 386.664256][T20474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6790'. [ 386.843216][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6794'. [ 386.859146][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6794'. [ 387.665614][T20531] netlink: 'syz.4.6817': attribute type 21 has an invalid length. [ 387.673617][T20531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6817'. [ 388.360294][T20569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6836'. [ 388.400839][T20572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6837'. [ 388.572456][T20580] dvmrp0: entered allmulticast mode [ 388.609352][T20585] netlink: 'syz.1.6843': attribute type 1 has an invalid length. [ 389.206952][T20614] sit0: entered promiscuous mode [ 389.212123][T20614] netlink: 'syz.4.6859': attribute type 1 has an invalid length. [ 389.425696][T20626] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 389.697714][T20642] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 390.376519][T20682] netlink: 'syz.3.6891': attribute type 6 has an invalid length. [ 390.830181][T20700] __nla_validate_parse: 7 callbacks suppressed [ 390.830205][T20700] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6900'. [ 391.396615][T20734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.499164][T20738] netlink: 'syz.3.6919': attribute type 13 has an invalid length. [ 391.515004][T20738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6919'. [ 391.555231][T20738] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 391.731050][T20750] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 391.798217][T20755] netlink: 'syz.3.6927': attribute type 8 has an invalid length. [ 391.825666][T20755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.317824][T20785] netlink: 'syz.1.6942': attribute type 1 has an invalid length. [ 392.359600][T20787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6943'. [ 392.947148][T20818] Timeout policy `syz0' can only be used by L3 protocol number 16559 [ 393.027746][T20827] netlink: 'syz.3.6962': attribute type 10 has an invalid length. [ 393.042197][T20826] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.6963'. [ 393.055065][T20827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6962'. [ 393.083222][T20827] veth0_vlan: entered allmulticast mode [ 393.159272][T20827] bridge0: port 3(veth0_vlan) entered blocking state [ 393.185901][T20827] bridge0: port 3(veth0_vlan) entered disabled state [ 393.194838][T20827] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 393.324556][T20837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6968'. [ 393.360896][T20837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6968'. [ 393.376476][T20837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6968'. [ 393.735738][T20862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6980'. [ 393.948905][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6987'. [ 396.403265][T20999] netlink: 'syz.0.7048': attribute type 1 has an invalid length. [ 396.429965][T20999] __nla_validate_parse: 5 callbacks suppressed [ 396.429988][T20999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7048'. [ 397.214037][T21041] : renamed from bond0 (while UP) [ 397.229674][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7070'. [ 397.243253][T21046] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 397.845064][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7085'. [ 398.600796][T21094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7096'. [ 398.792679][T21105] netlink: 'syz.1.7102': attribute type 1 has an invalid length. [ 398.812471][T21105] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7102'. [ 399.215468][T21128] netlink: 'syz.1.7112': attribute type 2 has an invalid length. [ 399.261144][T21128] fþ: entered promiscuous mode [ 399.635464][T21149] openvswitch: netlink: Actions may not be safe on all matching packets [ 399.660378][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7125'. [ 399.795477][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 400.015406][T21169] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7135'. [ 400.199523][T21179] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 401.349697][T21242] xt_l2tp: unknown flags: 10 [ 401.517053][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7173'. [ 401.570404][T21254] netlink: 'syz.1.7174': attribute type 2 has an invalid length. [ 401.582128][T21256] netlink: 'syz.4.7175': attribute type 6 has an invalid length. [ 401.754419][T21264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7178'. [ 401.960353][T21278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.226057][T21290] openvswitch: netlink: EtherType 0 is less than min 600 [ 403.148108][T21343] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 403.201479][T21347] tipc: Trying to set illegal importance in message [ 403.336734][T21354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.704559][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7235'. [ 404.101867][T21396] netlink: 'syz.3.7244': attribute type 9 has an invalid length. [ 404.363674][T21411] netlink: 'syz.4.7252': attribute type 5 has an invalid length. [ 404.513429][T21419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7255'. [ 404.819075][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7262'. [ 405.046610][T21445] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7269'. [ 405.082404][T21445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.485547][T21469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7281'. [ 405.797881][T21485] netlink: 'syz.0.7289': attribute type 75 has an invalid length. [ 405.983227][T21495] delete_channel: no stack [ 406.147715][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7299'. [ 406.398025][T21519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7306'. [ 406.416431][T21519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7306'. [ 406.490670][T21523] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 406.506096][T21521] ip6tnl3: entered promiscuous mode [ 406.521695][T21521] ip6tnl3: entered allmulticast mode [ 407.595519][T21587] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 407.617657][T21589] netlink: 'syz.4.7340': attribute type 1 has an invalid length. [ 407.635350][T21589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7340'. [ 407.805174][T21598] netlink: 'syz.3.7343': attribute type 21 has an invalid length. [ 407.987897][T21607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7349'. [ 408.032828][T21607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7349'. [ 408.052990][T21612] netlink: 'syz.0.7352': attribute type 1 has an invalid length. [ 408.085190][T21607] netlink: 'syz.3.7349': attribute type 6 has an invalid length. [ 408.200482][T21620] netlink: 'syz.1.7355': attribute type 1 has an invalid length. [ 408.323440][T21625] netlink: 'syz.2.7358': attribute type 8 has an invalid length. [ 408.403048][T21631] lo: entered allmulticast mode [ 408.415300][T21631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.642702][T21641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.673994][T21643] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 408.723803][T21646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7369'. [ 409.092225][T21665] netlink: 'syz.0.7378': attribute type 11 has an invalid length. [ 409.142544][T21668] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7380'. [ 409.345025][T21681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7386'. [ 409.515639][T21690] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 410.124575][T21723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7407'. [ 410.166635][T21723] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7407'. [ 410.191430][T21723] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7407'. [ 410.219172][T21723] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 410.510259][T21745] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7418'. [ 411.317978][T21788] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 411.543928][T21793] tc_dump_action: action bad kind [ 412.857838][T21845] netlink: 'syz.4.7467': attribute type 3 has an invalid length. [ 412.885251][T21845] __nla_validate_parse: 3 callbacks suppressed [ 412.885272][T21845] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7467'. [ 413.198536][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7477'. [ 413.233037][T21865] openvswitch: netlink: Multiple metadata blocks provided [ 413.445816][T21877] netlink: 'syz.4.7482': attribute type 21 has an invalid length. [ 413.477030][T21877] netlink: 'syz.4.7482': attribute type 6 has an invalid length. [ 413.484855][T21877] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7482'. [ 413.615284][T21885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.848797][T21899] netlink: 'syz.2.7494': attribute type 3 has an invalid length. [ 413.885487][T21899] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7494'. [ 414.013069][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7499'. [ 414.033790][T21906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7499'. [ 414.420197][T21929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7508'. [ 414.648070][T21941] netlink: 'syz.0.7512': attribute type 11 has an invalid length. [ 414.698622][T21941] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7512'. [ 414.965405][T21959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7521'. [ 415.487881][T21993] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 415.726499][T22005] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 416.042529][T22026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.608255][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7561'. [ 416.708926][T22063] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 417.363082][T22100] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 417.521593][T22110] netlink: 'syz.3.7587': attribute type 1 has an invalid length. [ 417.539709][T22110] nbd: couldn't find a device at index 20 [ 418.195195][T22140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7603'. [ 418.225242][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7603'. [ 418.225985][T22144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7606'. [ 418.775317][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7620'. [ 418.862069][T22178] ipt_rpfilter: unknown options [ 419.383497][T22207] netlink: 'syz.1.7638': attribute type 21 has an invalid length. [ 419.401605][T22207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7638'. [ 419.585175][T22216] netlink: 'syz.3.7641': attribute type 11 has an invalid length. [ 419.620059][T22216] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7641'. [ 419.625476][T22221] netlink: 'syz.1.7642': attribute type 5 has an invalid length. [ 420.165087][T22252] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7658'. [ 420.268630][T22257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.429832][T22257] syz.2.7661 (22257) used greatest stack depth: 18768 bytes left [ 420.709774][T22277] SET target dimension over the limit! [ 421.909816][T22344] netlink: 'syz.4.7695': attribute type 21 has an invalid length. [ 421.975271][T22344] netlink: 'syz.4.7695': attribute type 6 has an invalid length. [ 421.984352][T22344] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7695'. [ 422.194433][T22359] netlink: 'syz.4.7701': attribute type 1 has an invalid length. [ 422.501608][T22373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7705'. [ 422.511482][T22372] xt_bpf: check failed: parse error [ 422.689198][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7708'. [ 423.063361][T22399] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 423.310554][T22417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 424.575287][T22470] __nla_validate_parse: 1 callbacks suppressed [ 424.575308][T22470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7746'. [ 424.625960][T22472] netlink: del zone limit has 4 unknown bytes [ 424.635857][T22470] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 424.665298][T22470] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 424.783443][T22476] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 425.048469][T22486] netlink: 'syz.1.7755': attribute type 2 has an invalid length. [ 425.183753][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7758'. [ 425.232119][T22492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7758'. [ 425.761190][T22525] netlink: 'syz.0.7774': attribute type 29 has an invalid length. [ 425.884471][T22529] netlink: 'syz.2.7776': attribute type 1 has an invalid length. [ 426.378426][T22559] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 426.413195][T22559] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 426.731897][T22576] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 427.221449][T22606] netlink: 'syz.0.7813': attribute type 26 has an invalid length. [ 427.322391][T22610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7816'. [ 427.348286][T22614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7817'. [ 427.438707][T22616] netlink: 'syz.0.7819': attribute type 1 has an invalid length. [ 427.470523][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 427.479919][T22616] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7819'. [ 427.486282][T22621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7820'. [ 428.295213][T22664] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 428.680902][T22686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7853'. [ 428.929170][T22696] pimreg: entered allmulticast mode [ 428.997672][T22704] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 429.937533][T22751] netlink: 276 bytes leftover after parsing attributes in process `syz.4.7885'. [ 429.991442][T22753] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 430.485111][T22779] netlink: 1672 bytes leftover after parsing attributes in process `syz.0.7899'. [ 430.494317][T22779] netlink: 1672 bytes leftover after parsing attributes in process `syz.0.7899'. [ 430.667993][T22789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7904'. [ 431.054799][T22807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7913'. [ 431.344692][T22826] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 431.406836][T22830] netlink: 'syz.2.7924': attribute type 2 has an invalid length. [ 431.414766][T22830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7924'. [ 431.704729][T22848] netlink: zone id is out of range [ 431.809819][T22852] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 431.867238][T22848] netlink: set zone limit has 4 unknown bytes [ 432.035354][T22860] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7939'. [ 432.062382][T22862] netlink: 'syz.1.7940': attribute type 39 has an invalid length. [ 432.288689][T22875] netlink: 'syz.2.7946': attribute type 3 has an invalid length. [ 432.297292][T22876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7947'. [ 432.315306][T22875] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7946'. [ 432.375717][T22878] netlink: 'syz.3.7948': attribute type 2 has an invalid length. [ 432.632852][T22894] netlink: 'syz.4.7956': attribute type 10 has an invalid length. [ 432.664741][T22894] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 432.732689][T22898] netlink: 'syz.3.7958': attribute type 6 has an invalid length. [ 432.994651][T22912] netlink: 'syz.1.7965': attribute type 7 has an invalid length. [ 433.025347][T22916] netlink: 'syz.0.7967': attribute type 30 has an invalid length. [ 433.032213][T22915] netlink: 'syz.4.7966': attribute type 1 has an invalid length. [ 433.052873][T22915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 433.215613][T22923] ip6t_srh: unknown srh match flags 4000 [ 433.272336][T22927] netlink: 'syz.4.7972': attribute type 1 has an invalid length. [ 434.502837][T22997] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 434.984588][T23021] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 435.802212][T23069] __nla_validate_parse: 6 callbacks suppressed [ 435.802236][T23069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8043'. [ 436.330843][T23098] netlink: 'syz.1.8057': attribute type 11 has an invalid length. [ 436.350896][T23098] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8057'. [ 436.390890][T23104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8058'. [ 436.627613][T23115] validate_nla: 3 callbacks suppressed [ 436.627637][T23115] netlink: 'syz.0.8062': attribute type 1 has an invalid length. [ 436.674060][T23115] netlink: 'syz.0.8062': attribute type 1 has an invalid length. [ 436.737953][T23122] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 437.026063][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8075'. [ 437.379896][T23156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.584603][T23167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8089'. [ 437.815241][T23180] netlink: 'syz.3.8096': attribute type 1 has an invalid length. [ 438.017792][T23188] IPv6: Can't replace route, no match found [ 438.229138][T23200] netlink: 'syz.3.8106': attribute type 12 has an invalid length. [ 438.535110][T23218] netlink: 'syz.3.8115': attribute type 3 has an invalid length. [ 438.575885][T23220] netlink: 'syz.1.8116': attribute type 2 has an invalid length. [ 438.583679][T23220] netlink: 'syz.1.8116': attribute type 1 has an invalid length. [ 438.652943][T23222] netlink: 'syz.0.8117': attribute type 2 has an invalid length. [ 439.509846][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8141'. [ 440.607669][T23335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.842384][T23347] xt_l2tp: invalid flags combination: 4 [ 440.932396][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8181'. [ 440.945250][T23353] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 441.283120][T23369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8189'. [ 442.140464][T23396] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 442.350910][T23407] --map-set only usable from mangle table [ 442.979135][T23442] nbd: couldn't find device at index 1255035857 [ 443.155105][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8229'. [ 443.325410][T23459] netlink: 244 bytes leftover after parsing attributes in process `syz.4.8232'. [ 443.472059][T23468] openvswitch: netlink: EtherType 50a is less than min 600 [ 443.665608][T23478] xt_cgroup: path and classid specified [ 443.749617][T23482] netlink: 'syz.4.8245': attribute type 10 has an invalid length. [ 443.775584][T23482] veth0_vlan: left promiscuous mode [ 443.782055][T23482] veth0_vlan: entered promiscuous mode [ 443.807587][T23482] team0: Device veth0_vlan failed to register rx_handler [ 444.089974][T23500] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.8253'. [ 444.102515][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8254'. [ 444.112486][T23500] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.8253'. [ 444.133662][T23501] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.336331][T23511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8258'. [ 444.889922][T23542] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8273'. [ 445.520225][T23572] netlink: 'syz.4.8286': attribute type 11 has an invalid length. [ 445.908202][T23596] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8300'. [ 446.638085][T23635] xt_CT: No such helper "snmp" [ 446.653905][T23640] netlink: 'syz.2.8321': attribute type 30 has an invalid length. [ 446.819987][T23649] wg1 speed is unknown, defaulting to 1000 [ 446.904813][T23653] netlink: 'syz.4.8327': attribute type 3 has an invalid length. [ 447.013419][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8329'. [ 447.202600][T23667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8333'. [ 447.665814][T23681] netlink: 'syz.0.8340': attribute type 10 has an invalid length. [ 447.673694][T23681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8340'. [ 447.693432][T23682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8341'. [ 447.718198][T23681] team0: Port device geneve0 added [ 448.712408][T23730] sctp: [Deprecated]: syz.3.8363 (pid 23730) Use of int in maxseg socket option. [ 448.712408][T23730] Use struct sctp_assoc_value instead [ 448.970625][T23748] xt_CONNSECMARK: invalid mode: 0 [ 449.113821][T23753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8374'. [ 449.311866][T23761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.706261][T23786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8390'. [ 449.719315][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.735256][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.883636][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8395'. [ 449.900328][T23796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8395'. [ 450.414251][T23824] netlink: 'syz.4.8409': attribute type 1 has an invalid length. [ 450.452409][T23824] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8409'. [ 451.740177][T23899] netlink: 'syz.2.8445': attribute type 1 has an invalid length. [ 451.760642][T23899] netlink: 'syz.2.8445': attribute type 1 has an invalid length. [ 452.317750][T23882] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 452.399198][T23931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8460'. [ 452.495099][T23935] netlink: 'syz.1.8463': attribute type 10 has an invalid length. [ 452.513414][T23935] veth0_vlan: left promiscuous mode [ 452.536072][T23935] veth0_vlan: entered promiscuous mode [ 452.556160][T23935] team0: Device veth0_vlan failed to register rx_handler [ 452.667496][T23941] netlink: 'syz.3.8465': attribute type 10 has an invalid length. [ 452.859847][T23950] x_tables: duplicate underflow at hook 4 [ 453.045346][T23961] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 453.227482][T23970] delete_channel: no stack [ 453.234764][T23972] xt_TCPMSS: Only works on TCP SYN packets [ 453.552867][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8489'. [ 453.585004][T23989] netlink: 15 bytes leftover after parsing attributes in process `syz.0.8489'. [ 453.594143][T23989] netlink: 15 bytes leftover after parsing attributes in process `syz.0.8489'. [ 453.726662][T23998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8494'. [ 453.760478][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8495'. [ 453.794335][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8495'. [ 453.851345][T24004] netlink: 'syz.0.8496': attribute type 75 has an invalid length. [ 454.185179][T24023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8506'. [ 454.580299][T24045] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8518'. [ 454.724334][T24053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8519'. [ 454.797235][T24055] SET target dimension over the limit! [ 454.999712][T24067] !€ÿ: renamed from bond_slave_0 [ 455.357830][T24087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.294838][T24134] SET target dimension over the limit! [ 457.301038][T24180] netlink: 'syz.4.8584': attribute type 6 has an invalid length. [ 457.512874][T24192] __nla_validate_parse: 5 callbacks suppressed [ 457.512897][T24192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8590'. [ 458.351504][T24232] netlink: 'syz.4.8609': attribute type 32 has an invalid length. [ 458.385069][T24232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8609'. [ 458.394177][T24232] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 459.332648][T24284] ipvlan0: entered promiscuous mode [ 459.717159][T24307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8643'. [ 459.843590][T24307] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8643'. [ 459.864621][T24307] netlink: 'syz.1.8643': attribute type 5 has an invalid length. [ 459.891980][T24307] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8643'. [ 460.063685][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8647'. [ 461.155731][T24360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8668'. [ 461.265302][T24363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.271002][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8671'. [ 461.568419][T24377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8676'. [ 462.180268][T24407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8685'. [ 462.361962][T24415] vlan1: entered allmulticast mode [ 462.390125][T24415] gretap0: entered allmulticast mode [ 462.404208][T24415] gretap0: left allmulticast mode [ 463.106414][T24453] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (12) [ 463.453886][T24474] __nla_validate_parse: 1 callbacks suppressed [ 463.453909][T24474] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8710'. [ 463.962994][T24500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8725'. [ 464.132630][T24510] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8730'. [ 464.601220][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8738'. [ 465.375220][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8754'. [ 465.577793][T24583] netlink: 'syz.3.8761': attribute type 2 has an invalid length. [ 465.774778][T24592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8766'. [ 465.796299][T24596] netlink: 'syz.0.8769': attribute type 1 has an invalid length. [ 465.804100][T24596] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8769'. [ 465.855465][T24596] netlink: 11 bytes leftover after parsing attributes in process `syz.0.8769'. [ 466.446191][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8786'. [ 466.670569][T24644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8792'. [ 468.533027][T24743] veth1_macvtap: left promiscuous mode [ 468.559454][T24743] macsec0: entered promiscuous mode [ 468.612036][T24745] veth1_macvtap: entered promiscuous mode [ 468.618629][T24745] macsec0: left promiscuous mode [ 468.650121][T24746] __nla_validate_parse: 2 callbacks suppressed [ 468.650144][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8841'. [ 468.690576][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 468.705138][T24746] Zero length message leads to an empty skb [ 469.481859][T24794] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8863'. [ 469.549705][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.560270][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.569162][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.577765][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.616828][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.683539][T24802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8867'. [ 469.705055][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.713332][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.735913][T24796] netlink: 'syz.4.8865': attribute type 29 has an invalid length. [ 469.894015][T24814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8872'. [ 469.926556][T24814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8872'. [ 470.307554][T24833] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 470.575859][T24847] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 470.596744][T24847] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 470.623747][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8889'. [ 470.642699][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8889'. [ 470.662216][T24847] validate_nla: 30 callbacks suppressed [ 470.662236][T24847] netlink: 'syz.2.8889': attribute type 19 has an invalid length. [ 471.171990][T24870] netlink: 'syz.3.8899': attribute type 7 has an invalid length. [ 471.189216][T24871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8900'. [ 471.282107][T24877] wg1 speed is unknown, defaulting to 1000 [ 471.306654][T24877] batadv0 speed is unknown, defaulting to 1000 [ 471.326553][T24877] vxcan1 speed is unknown, defaulting to 1000 [ 471.466271][T24883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8906'. [ 472.008192][T24901] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 472.018211][T24901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.865307][T24935] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 472.889945][T24935] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 473.701203][T24976] vlan1: entered promiscuous mode [ 474.474047][T25011] netlink: 'syz.2.8967': attribute type 11 has an invalid length. [ 475.306461][T25054] __nla_validate_parse: 5 callbacks suppressed [ 475.306483][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8991'. [ 475.948681][T25088] Bluetooth: MGMT ver 1.23 [ 476.068336][T25095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.913307][T25192] netlink: 'syz.4.9055': attribute type 1 has an invalid length. [ 477.957432][T25192] netlink: 'syz.4.9055': attribute type 2 has an invalid length. [ 478.210309][T25204] geneve1: entered promiscuous mode [ 478.916418][T25238] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 478.928262][T25238] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 479.726016][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 480.035531][T25288] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 480.275995][T25301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9106'. [ 480.877737][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9118'. [ 481.012558][T25335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9123'. [ 481.103810][T25339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9122'. [ 481.374491][T25351] netlink: 'syz.0.9130': attribute type 1 has an invalid length. [ 481.424987][T25351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9130'. [ 482.315355][T25407] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9157'. [ 482.345099][T25407] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9157'. [ 482.739655][T25430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9168'. [ 482.933382][T25438] netlink: 'syz.0.9172': attribute type 1 has an invalid length. [ 483.347664][T25458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9182'. [ 484.847154][T25540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9221'. [ 486.143620][T25599] netlink: 'syz.2.9250': attribute type 4 has an invalid length. [ 486.161638][T25599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9250'. [ 486.343762][T25609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9254'. [ 486.738991][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9263'. [ 486.766376][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9263'. [ 486.779407][T25632] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9265'. [ 486.795901][T25631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9264'. [ 487.003316][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9268'. [ 487.036159][T25640] nbd: illegal input index -381222912 [ 487.172957][T25652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9275'. [ 488.500256][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.523685][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.581386][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.610634][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.642920][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.672782][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.695217][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.715959][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.742861][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 488.749651][T25713] atomic_op ffff88805b66d198 conn xmit_atomic 0000000000000000 [ 488.761240][T25707] netlink: 'syz.2.9302': attribute type 29 has an invalid length. [ 489.059231][T25726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9310'. [ 489.091462][T25726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9310'. [ 490.170448][T25781] tipc: Started in network mode [ 490.188044][T25781] tipc: Node identity ac14140f, cluster identity 4711 [ 490.203780][T25781] tipc: New replicast peer: 255.255.255.255 [ 490.247450][T25781] tipc: Enabled bearer , priority 10 [ 490.254531][T25785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 490.902251][T25817] wg1 speed is unknown, defaulting to 1000 [ 490.931991][T25817] batadv0 speed is unknown, defaulting to 1000 [ 490.949422][T25817] vxcan1 speed is unknown, defaulting to 1000 [ 491.088300][T25825] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 491.110275][T25827] batman_adv: batadv0: Adding interface: macvtap0 [ 491.129607][T25827] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.165655][T25827] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 491.246505][ T25] tipc: Node number set to 2886997007 [ 491.420734][T25839] __nla_validate_parse: 5 callbacks suppressed [ 491.420755][T25839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9364'. [ 492.095067][T25868] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 492.103337][T25868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.603158][T25945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9415'. [ 493.928288][T25963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9423'. [ 494.115918][T25972] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9429'. [ 495.313175][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9452'. [ 496.989245][T26114] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 498.125353][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 498.886866][T26202] validate_nla: 33 callbacks suppressed [ 498.886889][T26202] netlink: 'syz.0.9537': attribute type 3 has an invalid length. [ 499.014506][T26208] netlink: 'syz.3.9540': attribute type 58 has an invalid length. [ 499.043845][T26208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9540'. [ 499.465352][T26226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9548'. [ 500.074420][T26255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.369882][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9570'. [ 500.408697][T26266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9570'. [ 500.436588][T26266] netlink: 'syz.0.9570': attribute type 29 has an invalid length. [ 501.285730][T26309] netlink: 'syz.4.9589': attribute type 8 has an invalid length. [ 501.790008][T26333] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9599'. [ 501.809508][T26333] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9599'. [ 502.147740][T26352] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.9611'. [ 502.157266][T26352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.497841][T26369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.713151][T26380] pim6reg: entered allmulticast mode [ 502.763353][T26380] pim6reg: left allmulticast mode [ 502.798940][T26385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9626'. [ 502.804553][T26387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9627'. [ 502.809063][T26386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9625'. [ 503.483981][T26417] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 504.222932][T26455] __nla_validate_parse: 3 callbacks suppressed [ 504.222954][T26455] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9661'. [ 504.353172][T26462] Bluetooth: MGMT ver 1.23 [ 504.725839][T26478] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9672'. [ 505.347610][T26506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9686'. [ 505.739485][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9694'. [ 505.749373][T26525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9694'. [ 506.278791][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9705'. [ 506.361852][T26552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9707'. [ 506.729525][T26570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9716'. [ 506.789161][T26570] gretap0: entered promiscuous mode [ 506.797400][T26570] gretap0: left promiscuous mode [ 507.431821][T26608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9732'. [ 507.443942][T26609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9733'. [ 510.079968][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9785'. [ 510.092539][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9785'. [ 510.295414][T26759] netlink: 'syz.1.9791': attribute type 6 has an invalid length. [ 510.317352][T26762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9793'. [ 510.327182][T26759] netlink: 'syz.1.9791': attribute type 7 has an invalid length. [ 510.344650][T26759] netlink: 'syz.1.9791': attribute type 8 has an invalid length. [ 510.532239][T26774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9798'. [ 510.846735][T26789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9807'. [ 511.440093][T26819] netlink: 'syz.3.9819': attribute type 4 has an invalid length. [ 511.460227][T26819] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9819'. [ 511.659224][T26825] pimreg3: entered allmulticast mode [ 511.683151][T26831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9825'. [ 511.706001][T26826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9825'. [ 511.814681][T26734] Bluetooth: hci4: command 0x0406 tx timeout [ 511.910848][T26840] netlink: 'syz.0.9830': attribute type 10 has an invalid length. [ 511.960035][T26840] team0: Port device netdevsim0 added [ 511.992206][T26845] netlink: 'syz.0.9830': attribute type 10 has an invalid length. [ 512.122347][T26845] team0: Port device netdevsim0 removed [ 512.138640][T26845] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 512.363399][T26863] netlink: 'syz.0.9839': attribute type 1 has an invalid length. [ 512.400872][T26863] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.9839'. [ 513.125743][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9857'. [ 513.201179][T26899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 513.242865][T26899] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 513.866669][T26930] lo: left allmulticast mode [ 513.872704][T26930] sit0: left promiscuous mode [ 513.892494][T26930] bond0: left promiscuous mode [ 513.902632][T26930] bond_slave_0: left promiscuous mode [ 513.911939][T26930] bond_slave_1: left promiscuous mode [ 513.924362][T26930] bridge0: left promiscuous mode [ 513.951670][T26930] vlan0: left promiscuous mode [ 513.957977][T26935] openvswitch: netlink: Actions may not be safe on all matching packets [ 513.966061][T26930] geneve1: left promiscuous mode [ 513.971710][T26930] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 514.035567][T26930] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.044728][T26930] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.062065][T26930] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.072998][T26930] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.100377][T26930] ip6erspan0: left promiscuous mode [ 514.119958][T26930] bridge4: left promiscuous mode [ 514.132204][T26930] bridge4: left allmulticast mode [ 514.262642][T26930] syz.4.9872 (26930) used greatest stack depth: 18608 bytes left [ 514.418309][T26949] netlink: 'syz.1.9880': attribute type 1 has an invalid length. [ 515.201430][T26994] __nla_validate_parse: 5 callbacks suppressed [ 515.201452][T26994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9901'. [ 515.486467][T27009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9909'. [ 515.683103][T27020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9914'. [ 515.701052][T27020] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9914'. [ 515.718374][T27020] netlink: 'syz.0.9914': attribute type 5 has an invalid length. [ 515.724979][T27021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9915'. [ 515.740148][T27020] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9914'. [ 516.089322][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9925'. [ 516.618154][T27063] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9935'. [ 517.303490][T27093] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.313170][T27093] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.322151][T27093] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.331290][T27093] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.801871][T27110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.933223][T27110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.066272][T27110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.206014][T27110] bond0: (slave netdevsim0): Releasing backup interface [ 518.219912][T27110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.383600][T27110] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.437351][T27110] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.478466][T27110] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.570808][T27110] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.065819][T27159] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9982'. [ 519.122858][T27163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.305774][T27169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9987'. [ 519.347692][T27174] tipc: Started in network mode [ 519.352902][T27174] tipc: Node identity ac14140f, cluster identity 4711 [ 519.372399][T27174] tipc: Enabled bearer , priority 10 [ 519.745744][T27197] Bluetooth: MGMT ver 1.23 [ 519.903611][T27202] netlink: 'syz.4.10003': attribute type 18 has an invalid length. [ 520.177254][T27219] netlink: 'syz.2.10011': attribute type 29 has an invalid length. [ 520.216749][T27219] netlink: 'syz.2.10011': attribute type 29 has an invalid length. [ 520.423271][T27233] tc_dump_action: action bad kind [ 520.428967][T27235] netlink: 'syz.2.10019': attribute type 35 has an invalid length. [ 520.487049][ T9] tipc: Node number set to 2886997007 [ 520.950315][T27253] __nla_validate_parse: 2 callbacks suppressed [ 520.950339][T27253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10027'. [ 521.015774][T27254] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 523.201393][T27324] gretap0: entered promiscuous mode [ 523.235985][T27324] macsec1: entered promiscuous mode [ 523.262077][T27324] gretap0: left promiscuous mode [ 523.336183][T27330] IPVS: Error connecting to the multicast addr [ 524.045723][T27361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10078'. [ 524.075612][T27361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10078'. [ 524.134196][T27361] netlink: 'syz.4.10078': attribute type 6 has an invalid length. [ 524.356448][T27370] tipc: Enabling of bearer rejected, already enabled [ 524.501461][T27378] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10087'. [ 524.666530][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10089'. [ 524.914656][T27398] tipc: Started in network mode [ 524.923757][T27398] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 524.940272][T27398] tipc: Enabling of bearer rejected, failed to enable media [ 525.285719][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10106'. [ 525.320373][T27418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10106'. [ 525.345000][T27418] netlink: 'syz.2.10106': attribute type 11 has an invalid length. [ 525.352971][T27418] netlink: 'syz.2.10106': attribute type 13 has an invalid length. [ 525.364756][T27421] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10107'. [ 525.376512][T27421] netlink: 'syz.4.10107': attribute type 9 has an invalid length. [ 525.466395][T27426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.538704][T27428] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10112'. [ 526.013901][T27452] openvswitch: netlink: Actions may not be safe on all matching packets [ 526.208035][T27462] netlink: 'syz.4.10126': attribute type 3 has an invalid length. [ 526.727096][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10139'. [ 526.736959][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10139'. [ 526.773977][T27484] netlink: 'syz.2.10139': attribute type 18 has an invalid length. [ 526.790316][T27487] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.10140'. [ 527.862236][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10166'. [ 528.502552][T27562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10174'. [ 528.795338][T27572] netlink: 'syz.3.10177': attribute type 142 has an invalid length. [ 528.812187][T27575] openvswitch: netlink: Actions may not be safe on all matching packets [ 528.915038][T27578] macsec0: entered allmulticast mode [ 528.924796][T27578] veth1_macvtap: entered allmulticast mode [ 528.940902][T27578] macsec0: left allmulticast mode [ 528.967459][T27578] veth1_macvtap: left allmulticast mode [ 529.215891][T27588] netlink: 252 bytes leftover after parsing attributes in process `syz.1.10184'. [ 529.745383][T27611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10195'. [ 531.634594][T27700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.836628][T27713] tipc: Enabling of bearer rejected, failed to enable media [ 532.588596][T27746] netlink: 'syz.2.10256': attribute type 6 has an invalid length. [ 532.762336][T27753] netlink: 277 bytes leftover after parsing attributes in process `syz.4.10259'. [ 533.012202][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10267'. [ 533.033990][T27769] tipc: Enabling of bearer rejected, media not registered [ 533.610530][T27796] netlink: 'syz.1.10279': attribute type 27 has an invalid length. [ 533.838077][T27806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10285'. [ 533.853170][T27804] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10284'. [ 534.744191][T27854] netlink: 'syz.2.10307': attribute type 11 has an invalid length. [ 534.801495][T27855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10308'. [ 535.110306][T27868] ip_vti0: left promiscuous mode [ 535.149866][T27874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10317'. [ 535.236185][T27868] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.243650][T27868] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.386800][T27882] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 535.443651][T27884] netlink: 64134 bytes leftover after parsing attributes in process `syz.2.10322'. [ 535.626733][T27868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.643829][T27868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.722612][T27868] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 535.751382][T27868] veth0_vlan: left allmulticast mode [ 535.822991][T27868] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 535.881978][T27868] gretap1: left promiscuous mode [ 535.888125][T27868] gretap1: left allmulticast mode [ 535.898017][T27868] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.915184][T27868] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.932669][T27868] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.954945][T27868] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.973080][T27868] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 57575 - 0 [ 535.976022][T27892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.985782][T27868] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 57575 - 0 [ 536.001115][T27868] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 57575 - 0 [ 536.010641][T27868] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 57575 - 0 [ 536.024789][T27868] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 36380 - 0 [ 536.038134][T27868] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 36380 - 0 [ 536.048373][T27868] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 36380 - 0 [ 536.058601][T27868] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 36380 - 0 [ 536.068932][T27868] geneve3: left promiscuous mode [ 536.074073][T27868] geneve3: left allmulticast mode [ 536.090808][T27868] ip6erspan0: left promiscuous mode [ 536.122402][T27868] bond4: left promiscuous mode [ 536.131118][T27868] bond4: left allmulticast mode [ 536.211334][T27869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.231567][T27869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.263275][ T8] wg1 speed is unknown, defaulting to 1000 [ 536.399857][T27869] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 536.425293][T27869] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 536.437977][T27869] bridge0: port 1(netdevsim2) entered disabled state [ 536.488675][T27869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.508940][T27869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.637652][T27869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.658170][T27869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.836609][T27869] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.864591][T27869] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.996764][T27926] netlink: 'syz.2.10342': attribute type 9 has an invalid length. [ 537.077842][T27869] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.100176][T27869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.179190][T27869] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.205587][T27869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.232313][T27869] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.272671][T27869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.327424][T27869] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.355339][T27869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.965673][T27976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10365'. [ 537.983734][T27976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10365'. [ 538.350383][T27994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10375'. [ 538.545724][T27998] netlink: 'syz.1.10376': attribute type 8 has an invalid length. [ 538.645417][T28002] netlink: 798 bytes leftover after parsing attributes in process `syz.4.10378'. [ 538.705742][T28008] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10380'. [ 538.768193][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 539.051158][T28026] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10386'. [ 539.067251][T28021] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10386'. [ 539.781918][T28054] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.789308][T28054] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.061309][T28054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.103377][T28054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.240601][T28054] geneve0: left promiscuous mode [ 540.250789][T28054] geneve0: left allmulticast mode [ 540.262984][T28054] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.272665][T28054] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.283362][T28054] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.292729][T28054] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.367295][T28054] bond1: left promiscuous mode [ 540.378341][T28054] bond1: left allmulticast mode [ 540.385717][T28054] ip6tnl1: left promiscuous mode [ 540.390732][T28054] ip6tnl1: left allmulticast mode [ 540.415608][T28054] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.424727][T28054] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.442184][T28054] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.452752][T28054] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.485818][T28054] ip6tnl3: left promiscuous mode [ 540.491501][T28054] ip6tnl3: left allmulticast mode [ 540.505873][T28067] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10409'. [ 540.536807][ T5973] vxcan1 speed is unknown, defaulting to 1000 [ 540.608384][T28074] [ 540.610792][T28074] ====================================================== [ 540.617827][T28074] WARNING: possible circular locking dependency detected [ 540.624947][T28074] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 540.632070][T28074] ------------------------------------------------------ [ 540.639115][T28074] syz.1.10412/28074 is trying to acquire lock: [ 540.645318][T28074] ffff88806fdf0d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 540.655062][T28074] [ 540.655062][T28074] but task is already holding lock: [ 540.662443][T28074] ffff88805d864e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 540.672230][T28074] [ 540.672230][T28074] which lock already depends on the new lock. [ 540.672230][T28074] [ 540.682649][T28074] [ 540.682649][T28074] the existing dependency chain (in reverse order) is: [ 540.691699][T28074] [ 540.691699][T28074] -> #2 (team->team_lock_key#3){+.+.}-{4:4}: [ 540.700000][T28074] lock_acquire+0x1ed/0x550 [ 540.705060][T28074] __mutex_lock+0x19c/0x1010 [ 540.710191][T28074] team_set_mac_address+0x122/0x280 [ 540.716096][T28074] netif_set_mac_address+0x327/0x510 [ 540.721907][T28074] do_setlink+0xaa6/0x40f0 [ 540.726850][T28074] rtnl_newlink+0x15a6/0x1d90 [ 540.732059][T28074] rtnetlink_rcv_msg+0x791/0xcf0 [ 540.737704][T28074] netlink_rcv_skb+0x206/0x480 [ 540.742999][T28074] netlink_unicast+0x7f6/0x990 [ 540.748289][T28074] netlink_sendmsg+0x8de/0xcb0 [ 540.753587][T28074] __sock_sendmsg+0x221/0x270 [ 540.758798][T28074] __sys_sendto+0x363/0x4c0 [ 540.763887][T28074] __x64_sys_sendto+0xde/0x100 [ 540.769188][T28074] do_syscall_64+0xf3/0x230 [ 540.774344][T28074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.780778][T28074] [ 540.780778][T28074] -> #1 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 540.789317][T28074] lock_acquire+0x1ed/0x550 [ 540.794357][T28074] __mutex_lock+0x19c/0x1010 [ 540.799483][T28074] dev_set_mac_address+0x2a/0x50 [ 540.804950][T28074] bond_set_mac_address+0x28e/0x830 [ 540.810708][T28074] netif_set_mac_address+0x327/0x510 [ 540.816521][T28074] do_setlink+0xaa6/0x40f0 [ 540.821458][T28074] rtnl_newlink+0x15a6/0x1d90 [ 540.826692][T28074] rtnetlink_rcv_msg+0x791/0xcf0 [ 540.832164][T28074] netlink_rcv_skb+0x206/0x480 [ 540.837458][T28074] netlink_unicast+0x7f6/0x990 [ 540.842749][T28074] netlink_sendmsg+0x8de/0xcb0 [ 540.848042][T28074] __sock_sendmsg+0x221/0x270 [ 540.853247][T28074] ____sys_sendmsg+0x53a/0x860 [ 540.858536][T28074] __sys_sendmsg+0x269/0x350 [ 540.863657][T28074] do_syscall_64+0xf3/0x230 [ 540.868689][T28074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.875382][T28074] [ 540.875382][T28074] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 540.883847][T28074] validate_chain+0x18ef/0x5920 [ 540.889233][T28074] __lock_acquire+0x1397/0x2100 [ 540.894617][T28074] lock_acquire+0x1ed/0x550 [ 540.899656][T28074] __mutex_lock+0x19c/0x1010 [ 540.904772][T28074] __dev_open+0x5cb/0x8a0 [ 540.909644][T28074] netif_open+0xae/0x1b0 [ 540.914416][T28074] dev_open+0x13e/0x260 [ 540.919102][T28074] team_add_slave+0xabe/0x28a0 [ 540.924400][T28074] do_set_master+0x579/0x730 [ 540.929536][T28074] rtnl_newlink_create+0x6e6/0xbd0 [ 540.935281][T28074] rtnl_newlink+0x167a/0x1d90 [ 540.940758][T28074] rtnetlink_rcv_msg+0x791/0xcf0 [ 540.946224][T28074] netlink_rcv_skb+0x206/0x480 [ 540.951516][T28074] netlink_unicast+0x7f6/0x990 [ 540.956804][T28074] netlink_sendmsg+0x8de/0xcb0 [ 540.962097][T28074] __sock_sendmsg+0x221/0x270 [ 540.967299][T28074] ____sys_sendmsg+0x53a/0x860 [ 540.972582][T28074] __sys_sendmsg+0x269/0x350 [ 540.977700][T28074] do_syscall_64+0xf3/0x230 [ 540.982729][T28074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.989154][T28074] [ 540.989154][T28074] other info that might help us debug this: [ 540.989154][T28074] [ 540.999378][T28074] Chain exists of: [ 540.999378][T28074] &dev_instance_lock_key#2 --> &dev_instance_lock_key#12 --> team->team_lock_key#3 [ 540.999378][T28074] [ 541.014635][T28074] Possible unsafe locking scenario: [ 541.014635][T28074] [ 541.022085][T28074] CPU0 CPU1 [ 541.027447][T28074] ---- ---- [ 541.032807][T28074] lock(team->team_lock_key#3); [ 541.037762][T28074] lock(&dev_instance_lock_key#12); [ 541.045581][T28074] lock(team->team_lock_key#3); [ 541.053051][T28074] lock(&dev_instance_lock_key#2); [ 541.058260][T28074] [ 541.058260][T28074] *** DEADLOCK *** [ 541.058260][T28074] [ 541.066417][T28074] 3 locks held by syz.1.10412/28074: [ 541.071725][T28074] #0: ffffffff903d43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 541.081253][T28074] #1: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 541.090332][T28074] #2: ffff88805d864e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 541.100481][T28074] [ 541.100481][T28074] stack backtrace: [ 541.106464][T28074] CPU: 1 UID: 0 PID: 28074 Comm: syz.1.10412 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 541.106485][T28074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 541.106496][T28074] Call Trace: [ 541.106505][T28074] [ 541.106513][T28074] dump_stack_lvl+0x241/0x360 [ 541.106537][T28074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.106555][T28074] ? __pfx__printk+0x10/0x10 [ 541.106576][T28074] print_circular_bug+0x13a/0x1b0 [ 541.106599][T28074] check_noncircular+0x36a/0x4a0 [ 541.106626][T28074] ? __pfx_check_noncircular+0x10/0x10 [ 541.106646][T28074] ? lockdep_lock+0x123/0x2b0 [ 541.106674][T28074] validate_chain+0x18ef/0x5920 [ 541.106700][T28074] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 541.106720][T28074] ? __pfx_validate_chain+0x10/0x10 [ 541.106742][T28074] ? stack_depot_save_flags+0x7b4/0x940 [ 541.106772][T28074] ? kasan_save_track+0x51/0x80 [ 541.106790][T28074] ? kasan_save_track+0x3f/0x80 [ 541.106807][T28074] ? __kasan_kmalloc+0x98/0xb0 [ 541.106826][T28074] ? __kmalloc_noprof+0x285/0x4c0 [ 541.106849][T28074] ? bond_update_slave_arr+0x150/0xd50 [ 541.106868][T28074] ? bond_open+0xe36/0xfa0 [ 541.106886][T28074] ? __dev_open+0x45a/0x8a0 [ 541.106909][T28074] ? netif_open+0xae/0x1b0 [ 541.106931][T28074] ? dev_open+0x13e/0x260 [ 541.106956][T28074] ? team_add_slave+0xabe/0x28a0 [ 541.106976][T28074] ? do_set_master+0x579/0x730 [ 541.106991][T28074] ? rtnl_newlink_create+0x6e6/0xbd0 [ 541.107017][T28074] ? rtnl_newlink+0x167a/0x1d90 [ 541.107041][T28074] ? rtnetlink_rcv_msg+0x791/0xcf0 [ 541.107064][T28074] ? netlink_rcv_skb+0x206/0x480 [ 541.107087][T28074] ? netlink_unicast+0x7f6/0x990 [ 541.107106][T28074] ? netlink_sendmsg+0x8de/0xcb0 [ 541.107131][T28074] ? ____sys_sendmsg+0x53a/0x860 [ 541.107148][T28074] ? __sys_sendmsg+0x269/0x350 [ 541.107166][T28074] ? mark_lock+0x9a/0x360 [ 541.107184][T28074] __lock_acquire+0x1397/0x2100 [ 541.107215][T28074] lock_acquire+0x1ed/0x550 [ 541.107240][T28074] ? __dev_open+0x5cb/0x8a0 [ 541.107266][T28074] ? __pfx_lock_acquire+0x10/0x10 [ 541.107291][T28074] ? lockdep_rtnl_is_held+0x26/0x40 [ 541.107310][T28074] ? __pfx___might_resched+0x10/0x10 [ 541.107333][T28074] ? bond_update_slave_arr+0x844/0xd50 [ 541.107355][T28074] __mutex_lock+0x19c/0x1010 [ 541.107375][T28074] ? __dev_open+0x5cb/0x8a0 [ 541.107399][T28074] ? bond_alb_initialize+0x4c3/0x5f0 [ 541.107428][T28074] ? __dev_open+0x5cb/0x8a0 [ 541.107451][T28074] ? __pfx___mutex_lock+0x10/0x10 [ 541.107478][T28074] __dev_open+0x5cb/0x8a0 [ 541.107504][T28074] ? __pfx___dev_open+0x10/0x10 [ 541.107529][T28074] ? ref_tracker_alloc+0x332/0x490 [ 541.107557][T28074] netif_open+0xae/0x1b0 [ 541.107579][T28074] ? __pfx_netif_open+0x10/0x10 [ 541.107607][T28074] dev_open+0x13e/0x260 [ 541.107640][T28074] team_add_slave+0xabe/0x28a0 [ 541.107669][T28074] ? __pfx_team_add_slave+0x10/0x10 [ 541.107690][T28074] ? nlmsg_notify+0x14c/0x1c0 [ 541.107714][T28074] ? __dev_notify_flags+0x316/0x400 [ 541.107731][T28074] ? dev_set_rx_mode+0xb8/0x2e0 [ 541.107747][T28074] ? __pfx___dev_notify_flags+0x10/0x10 [ 541.107763][T28074] ? __dev_change_flags+0x515/0x6f0 [ 541.107781][T28074] ? mutex_is_locked+0x17/0x50 [ 541.107799][T28074] do_set_master+0x579/0x730 [ 541.107818][T28074] rtnl_newlink_create+0x6e6/0xbd0 [ 541.107850][T28074] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 541.107880][T28074] ? __pfx___mutex_lock+0x10/0x10 [ 541.107903][T28074] ? ns_capable+0x8a/0xf0 [ 541.107924][T28074] rtnl_newlink+0x167a/0x1d90 [ 541.107950][T28074] ? stack_depot_save_flags+0x37/0x940 [ 541.107981][T28074] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.108005][T28074] ? __netlink_deliver_tap+0x561/0x7f0 [ 541.108029][T28074] ? __pfx_validate_chain+0x10/0x10 [ 541.108046][T28074] ? __sock_sendmsg+0x221/0x270 [ 541.108068][T28074] ? ____sys_sendmsg+0x53a/0x860 [ 541.108085][T28074] ? __sys_sendmsg+0x269/0x350 [ 541.108101][T28074] ? do_syscall_64+0xf3/0x230 [ 541.108121][T28074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.108153][T28074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 541.108180][T28074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.108209][T28074] ? mark_lock+0x9a/0x360 [ 541.108227][T28074] ? __lock_acquire+0x1397/0x2100 [ 541.108264][T28074] ? __pfx_lock_release+0x10/0x10 [ 541.108295][T28074] ? __pfx_rtnl_newlink+0x10/0x10 [ 541.108320][T28074] rtnetlink_rcv_msg+0x791/0xcf0 [ 541.108344][T28074] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 541.108370][T28074] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.108408][T28074] ? ref_tracker_free+0x643/0x7e0 [ 541.108426][T28074] netlink_rcv_skb+0x206/0x480 [ 541.108451][T28074] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.108475][T28074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.108507][T28074] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.108532][T28074] netlink_unicast+0x7f6/0x990 [ 541.108556][T28074] ? __pfx_netlink_unicast+0x10/0x10 [ 541.108576][T28074] ? __virt_addr_valid+0x45f/0x530 [ 541.108594][T28074] ? __phys_addr_symbol+0x2f/0x70 [ 541.108615][T28074] ? __check_object_size+0x47a/0x730 [ 541.108640][T28074] netlink_sendmsg+0x8de/0xcb0 [ 541.108669][T28074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.108695][T28074] ? aa_sock_msg_perm+0x91/0x160 [ 541.108724][T28074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.108748][T28074] __sock_sendmsg+0x221/0x270 [ 541.108772][T28074] ____sys_sendmsg+0x53a/0x860 [ 541.108793][T28074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.108811][T28074] ? __fget_files+0x2a/0x410 [ 541.108836][T28074] ? __fget_files+0x2a/0x410 [ 541.108864][T28074] __sys_sendmsg+0x269/0x350 [ 541.108884][T28074] ? __pfx___sys_sendmsg+0x10/0x10 [ 541.108918][T28074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 541.108945][T28074] ? do_syscall_64+0x100/0x230 [ 541.108967][T28074] ? do_syscall_64+0xb6/0x230 [ 541.108989][T28074] do_syscall_64+0xf3/0x230 [ 541.109009][T28074] ? clear_bhb_loop+0x35/0x90 [ 541.109035][T28074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.109060][T28074] RIP: 0033:0x7f78d038d169 [ 541.109076][T28074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.109092][T28074] RSP: 002b:00007f78d1160038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.109110][T28074] RAX: ffffffffffffffda RBX: 00007f78d05a5fa0 RCX: 00007f78d038d169 [ 541.109123][T28074] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 541.109134][T28074] RBP: 00007f78d040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 541.109145][T28074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.109155][T28074] R13: 0000000000000000 R14: 00007f78d05a5fa0 R15: 00007ffd165aa478 [ 541.109174][T28074] [ 541.761440][T28074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.807175][T28074] team0: Port device bond5 added [ 541.825697][T28086] netlink: 'syz.0.10418': attribute type 10 has an invalid length. [ 541.840186][ T5973] vxcan1 speed is unknown, defaulting to 1000