last executing test programs: 5.736560782s ago: executing program 3 (id=9087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x15, 0x0, @opaque="1767c1073d4fe0f35e85ec063f"}}}}}}, 0x3b) 5.407083042s ago: executing program 3 (id=9092): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2809b40e}, 0x0) 5.301485492s ago: executing program 3 (id=9095): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r1, 0x0) 5.162767878s ago: executing program 3 (id=9099): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socketpair(0x2, 0x1, 0x100, &(0x7f0000000440)) 4.951209968s ago: executing program 3 (id=9103): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) 4.650229297s ago: executing program 3 (id=9110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.093607642s ago: executing program 4 (id=9142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 1.821160534s ago: executing program 4 (id=9144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r2, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) 1.535438198s ago: executing program 4 (id=9149): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="05031600d3fc140000004788031c09102c28dcff52b9668b1aa4b6830d22cb37", 0x20, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.417073017s ago: executing program 4 (id=9151): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) 1.163210439s ago: executing program 2 (id=9157): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 1.05211424s ago: executing program 0 (id=9158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x24000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 957.014927ms ago: executing program 2 (id=9160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000001540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "29fb87", 0x44, 0x2f, 0x1, @mcast1, @empty, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x3, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x1, {0xfffffffa}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x10, 0x3, 0x1, 0x2, 0x2, 0x1}, 0x2, {0x4, 0xfff, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 831.326808ms ago: executing program 1 (id=9161): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x99, 0x6}, &(0x7f0000000340)=0x8) 782.03653ms ago: executing program 2 (id=9162): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001000)="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", 0x1ca}], 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 781.430225ms ago: executing program 0 (id=9163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x99}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000015}, 0x4020) 690.140394ms ago: executing program 1 (id=9164): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 601.972024ms ago: executing program 0 (id=9165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) 596.05567ms ago: executing program 2 (id=9166): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000006a40)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x8, @private0, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}}}], 0x28}}], 0x1, 0x4000005) 474.411872ms ago: executing program 1 (id=9167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x12}], 0x18, 0x200440d8}, 0x0) 439.928412ms ago: executing program 2 (id=9168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f8100010000000000200000"], 0x4e) 428.394518ms ago: executing program 0 (id=9169): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) 312.128875ms ago: executing program 1 (id=9170): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0x10}, {0x0, 0xb}}}, 0x24}}, 0x20044000) 311.161355ms ago: executing program 4 (id=9171): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 246.762889ms ago: executing program 0 (id=9172): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x35, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [], "fafb17c133"}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 149.518549ms ago: executing program 1 (id=9173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x2c}, 0x9c) 140.874606ms ago: executing program 2 (id=9174): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 101.079699ms ago: executing program 0 (id=9175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x0, 0x9, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x4, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 752.11µs ago: executing program 1 (id=9176): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 0s ago: executing program 4 (id=9177): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)='\r', 0x1, 0x6d91fb6102d8d9cc, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x2406e880, 0x0, 0x0) kernel console output (not intermixed with test programs): 5][ T9644] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1811'. [ 174.441602][ T9676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.502617][ T9678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.085491][ T9710] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 175.131169][ T9710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.157431][ T9710] team0: Port device bond0 added [ 175.605726][ T9733] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 175.641583][ T9741] xt_hashlimit: overflow, try lower: 4294967295/0 [ 175.997277][ T9755] netlink: 'syz.4.1865': attribute type 3 has an invalid length. [ 176.028948][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1865'. [ 176.263301][ T9767] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 176.286845][ T9767] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1870'. [ 176.770861][ T9793] __nla_validate_parse: 1 callbacks suppressed [ 176.770882][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'. [ 177.283965][ T9820] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 177.297257][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 177.917684][ T9855] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 178.121052][ T9862] netlink: 'syz.2.1910': attribute type 4 has an invalid length. [ 178.500219][ T9883] x_tables: unsorted entry at hook 1 [ 178.530072][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 179.095742][ T9912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1930'. [ 179.205876][ T9918] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 179.384400][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1936'. [ 179.429789][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 179.472944][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 179.486348][ T9931] sctp: [Deprecated]: syz.3.1939 (pid 9931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.486348][ T9931] Use struct sctp_sack_info instead [ 180.736078][ T9991] x_tables: unsorted entry at hook 3 [ 180.880463][ T9999] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1972'. [ 180.932269][ T9999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.516647][T10070] xt_CT: No such helper "snmp" [ 182.741416][T10083] netlink: 'syz.3.2012': attribute type 3 has an invalid length. [ 182.773378][T10083] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2012'. [ 182.923202][T10066] infiniband syz!: set active [ 182.928593][T10066] infiniband syz!: added team_slave_0 [ 183.038024][T10096] netlink: 'syz.4.2017': attribute type 6 has an invalid length. [ 183.133435][T10066] RDS/IB: syz!: added [ 183.162150][T10066] smc: adding ib device syz! with port count 1 [ 183.176676][T10066] smc: ib device syz! port 1 has pnetid [ 183.255132][T10105] bond0: (slave dummy0): Releasing backup interface [ 183.303735][T10105] bridge_slave_0: left allmulticast mode [ 183.310609][T10105] bridge_slave_0: left promiscuous mode [ 183.331294][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.371996][T10105] bridge_slave_1: left allmulticast mode [ 183.378710][T10105] bridge_slave_1: left promiscuous mode [ 183.385197][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.410451][T10105] bond0: (slave bond_slave_0): Releasing backup interface [ 183.443080][T10105] bond0: (slave bond_slave_1): Releasing backup interface [ 183.479159][T10105] team0: Port device team_slave_0 removed [ 183.493366][T10105] team0: Port device team_slave_1 removed [ 183.505129][T10105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.512785][T10105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.522919][T10105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.531089][T10105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.691658][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 183.698128][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2024'. [ 183.970520][T10130] xt_hashlimit: invalid rate [ 184.325604][T10142] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2037'. [ 184.367665][T10142] netlink: zone id is out of range [ 184.372910][T10142] netlink: get zone limit has 8 unknown bytes [ 184.634373][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2043'. [ 184.883690][T10160] netlink: zone id is out of range [ 184.919198][T10160] netlink: zone id is out of range [ 184.924386][T10160] netlink: zone id is out of range [ 184.934530][T10160] netlink: zone id is out of range [ 184.966933][T10160] netlink: zone id is out of range [ 184.989344][T10160] netlink: zone id is out of range [ 184.994534][T10160] netlink: zone id is out of range [ 185.202653][T10175] netlink: 'syz.1.2053': attribute type 7 has an invalid length. [ 185.257050][T10175] netlink: 'syz.1.2053': attribute type 8 has an invalid length. [ 186.049269][T10213] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2069'. [ 186.537078][T10232] netlink: 'syz.1.2076': attribute type 2 has an invalid length. [ 186.555298][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2076'. [ 186.647905][T10237] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 186.671653][T10237] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2079'. [ 186.907212][T10249] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2085'. [ 187.030924][T10253] netlink: 'syz.1.2086': attribute type 1 has an invalid length. [ 187.486866][T10267] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 187.536633][T10271] net_ratelimit: 18 callbacks suppressed [ 187.536652][T10271] openvswitch: netlink: IP tunnel dst address not specified [ 187.926181][T10287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.046576][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2104'. [ 188.324444][T10310] unsupported nla_type 52263 [ 188.890903][T10339] netlink: 'syz.3.2127': attribute type 1 has an invalid length. [ 189.117349][T10349] netlink: 'syz.3.2132': attribute type 10 has an invalid length. [ 189.439262][T10365] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 189.743231][T10380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 189.787058][T10380] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'. [ 190.014714][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 190.105486][T10396] netlink: 'syz.2.2155': attribute type 11 has an invalid length. [ 190.906010][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2177'. [ 191.215182][T10456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2185'. [ 191.732819][T10483] ipt_rpfilter: unknown options [ 191.776701][T10486] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 191.977290][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 191.993260][T10497] xt_cgroup: path and classid specified [ 192.272602][T10511] xt_ecn: cannot match TCP bits for non-tcp packets [ 192.666192][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 192.755554][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2216'. [ 192.792719][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2216'. [ 193.129693][T10552] xt_TCPMSS: Only works on TCP SYN packets [ 193.387022][T10570] __nla_validate_parse: 1 callbacks suppressed [ 193.387043][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 193.498553][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 193.980354][T10599] netlink: 'syz.2.2249': attribute type 10 has an invalid length. [ 194.015725][T10599] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 194.032953][T10599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.069476][ T5956] lo speed is unknown, defaulting to 1000 [ 194.313619][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323236][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.411946][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 194.822442][T10642] sctp: [Deprecated]: syz.0.2271 (pid 10642) Use of int in max_burst socket option. [ 194.822442][T10642] Use struct sctp_assoc_value instead [ 196.019239][T10699] xt_TCPMSS: Only works on TCP SYN packets [ 196.026880][T10704] IPv6: NLM_F_REPLACE set, but no existing node found! [ 196.235808][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 196.252908][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 197.316199][T10770] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 197.343174][T10770] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.155993][T10812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2353'. [ 198.240238][T10815] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 198.257915][T10816] netlink: 'syz.2.2354': attribute type 33 has an invalid length. [ 198.315792][T10816] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2354'. [ 198.335500][T10821] netlink: 'syz.1.2357': attribute type 4 has an invalid length. [ 199.617058][T10886] openvswitch: netlink: IP tunnel dst address not specified [ 199.653733][T10889] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.2391'. [ 199.793998][T10894] netlink: 'syz.1.2394': attribute type 21 has an invalid length. [ 199.802646][T10894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2394'. [ 199.895009][T10901] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2397'. [ 200.001646][T10905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.369327][T10921] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 200.450222][T10921] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2406'. [ 200.454203][T10925] netlink: 'syz.1.2407': attribute type 10 has an invalid length. [ 200.499054][T10921] nbd: couldn't find device at index 1048576 [ 200.525826][T10929] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2410'. [ 200.527832][T10925] team0: Device veth1_macvtap failed to register rx_handler [ 200.960078][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2419'. [ 201.547636][T10983] SET target dimension over the limit! [ 202.012274][T11006] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 202.176143][T11012] gre1: entered promiscuous mode [ 202.201230][T11012] gre1: entered allmulticast mode [ 202.221728][T11015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2451'. [ 202.589824][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2461'. [ 202.890181][T11050] netlink: 'syz.3.2470': attribute type 8 has an invalid length. [ 202.937370][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2472'. [ 203.312350][T11074] netlink: 'syz.1.2480': attribute type 10 has an invalid length. [ 203.324409][T11075] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.385289][T11074] team0: Device ipvlan1 failed to register rx_handler [ 203.431589][T11078] xt_bpf: check failed: parse error [ 203.617588][T11087] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2489'. [ 203.653552][T11091] netlink: 'syz.2.2491': attribute type 4 has an invalid length. [ 204.108281][T11116] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 205.029535][T11165] __nla_validate_parse: 2 callbacks suppressed [ 205.029558][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 205.045118][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 205.254291][T11176] unsupported nlmsg_type 40 [ 205.536878][T11193] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 205.567482][T11193] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 205.575992][T11193] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 205.984692][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 206.013414][T11217] netlink: 'syz.2.2554': attribute type 5 has an invalid length. [ 206.043750][T11221] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.053975][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 206.075107][T11220] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 206.096894][T11220] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 206.125028][T11217] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 206.159167][T11217] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 206.182146][T11217] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 206.226376][T11217] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 206.254683][T11217] geneve2: entered promiscuous mode [ 206.263685][T11217] geneve2: entered allmulticast mode [ 206.672351][T11249] 8021q: VLANs not supported on lo [ 206.843580][T11257] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2572'. [ 207.085201][T11273] xt_TCPMSS: Only works on TCP SYN packets [ 207.098427][T11271] x_tables: unsorted entry at hook 2 [ 207.276111][T11279] Cannot find del_set index 4 as target [ 207.487280][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2591'. [ 207.542140][T11297] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 207.554796][T11297] team0: Device hsr_slave_0 failed to register rx_handler [ 207.690346][T11299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.697694][T11299] IPv6: NLM_F_CREATE should be set when creating new route [ 207.722419][T11305] geneve1: entered promiscuous mode [ 207.728310][T11305] geneve1: entered allmulticast mode [ 208.326887][T11338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.485435][T11347] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 208.629945][T11351] SET target dimension over the limit! [ 208.666409][T11352] delete_channel: no stack [ 208.880829][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 209.227007][T11384] netlink: 'syz.1.2635': attribute type 1 has an invalid length. [ 209.269192][T11384] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2635'. [ 209.490895][T11398] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2642'. [ 209.631526][T11404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.182523][T11427] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2656'. [ 210.211770][T11430] netlink: 'syz.2.2657': attribute type 6 has an invalid length. [ 210.266841][T11430] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2657'. [ 210.473442][T11439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.873713][T11458] netlink: 'syz.3.2672': attribute type 32 has an invalid length. [ 211.211600][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.223414][T11477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2683'. [ 211.527833][T11492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.612795][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 211.736938][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 211.744361][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 211.752132][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 211.760027][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 211.767824][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 212.289094][T11536] netlink: 'syz.1.2710': attribute type 25 has an invalid length. [ 212.668745][T11552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2718'. [ 212.695665][T11556] netlink: 'syz.1.2720': attribute type 10 has an invalid length. [ 212.712178][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2720'. [ 212.722412][T11556] batadv0: entered promiscuous mode [ 212.736841][T11556] batadv0: entered allmulticast mode [ 212.743153][T11556] bridge0: port 3(batadv0) entered blocking state [ 212.757103][T11556] bridge0: port 3(batadv0) entered disabled state [ 212.799763][T11556] bridge0: port 3(batadv0) entered blocking state [ 212.806372][T11556] bridge0: port 3(batadv0) entered forwarding state [ 212.838723][ T1143] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 212.848798][ T1143] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 212.911859][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'. [ 213.068097][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2727'. [ 213.106416][T11574] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2728'. [ 213.175461][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2731'. [ 213.771342][T11607] No such timeout policy "syz0" [ 213.997982][T11618] ip6t_srh: unknown srh invflags 5F00 [ 214.210067][T11632] netlink: 'syz.2.2757': attribute type 12 has an invalid length. [ 214.812085][T11664] netlink: 'syz.1.2774': attribute type 21 has an invalid length. [ 215.056927][T11679] openvswitch: netlink: EtherType 257 is less than min 600 [ 215.417556][T11696] __nla_validate_parse: 2 callbacks suppressed [ 215.417578][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 215.472195][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 215.817364][T11716] netlink: 'syz.2.2798': attribute type 21 has an invalid length. [ 215.825543][T11716] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 216.530953][T11756] netlink: 'syz.4.2818': attribute type 12 has an invalid length. [ 216.569039][T11756] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 216.994872][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2830'. [ 217.215120][T11790] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.743548][T11819] tipc: Can't bind to reserved service type 2 [ 217.850362][T11823] netlink: 'syz.1.2851': attribute type 1 has an invalid length. [ 218.104276][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'. [ 218.163493][T11841] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 218.192872][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2861'. [ 218.324736][T11848] netlink: 'syz.1.2864': attribute type 21 has an invalid length. [ 218.387576][T11848] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2864'. [ 218.430459][T11856] netlink: 'syz.4.2867': attribute type 2 has an invalid length. [ 218.457977][T11856] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2867'. [ 218.648339][T11862] netlink: 'syz.1.2871': attribute type 11 has an invalid length. [ 218.664014][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'. [ 218.688245][T11862] netlink: 'syz.1.2871': attribute type 11 has an invalid length. [ 218.696145][T11862] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2871'. [ 218.713003][T11865] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 219.478157][T11907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.565683][T11913] netlink: 'syz.1.2897': attribute type 21 has an invalid length. [ 219.583608][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 219.652082][T11918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.036154][T11933] bond1: entered promiscuous mode [ 220.042539][T11933] bond1: entered allmulticast mode [ 220.053499][T11933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.744104][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2927'. [ 221.001628][T11987] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2933'. [ 221.284127][T12005] netlink: 'syz.3.2942': attribute type 8 has an invalid length. [ 221.422618][T12009] netlink: 'syz.1.2944': attribute type 21 has an invalid length. [ 221.463457][T12009] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.477053][T12009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.484324][T12009] IPv6: NLM_F_CREATE should be set when creating new route [ 221.491795][T12009] IPv6: NLM_F_CREATE should be set when creating new route [ 221.499117][T12009] IPv6: NLM_F_CREATE should be set when creating new route [ 221.587199][T12019] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 221.794505][T12029] IPv6: sit1: Disabled Multicast RS [ 221.821507][T12029] sit1: entered allmulticast mode [ 222.289651][T12055] netlink: 'syz.1.2966': attribute type 21 has an invalid length. [ 222.307115][T12055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2966'. [ 222.347060][T12055] netlink: 'syz.1.2966': attribute type 5 has an invalid length. [ 222.382216][T12055] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2966'. [ 222.492671][T12065] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 222.513919][T12065] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 222.984417][T12085] netlink: 'syz.2.2982': attribute type 10 has an invalid length. [ 223.014765][T12087] dvmrp0: entered allmulticast mode [ 223.071440][T12085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.085646][T12085] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.191846][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 223.493509][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 223.946327][T12133] netlink: 'syz.1.3006': attribute type 4 has an invalid length. [ 223.994915][T12136] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3007'. [ 224.193111][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3015'. [ 225.157945][T12198] x_tables: unsorted underflow at hook 1 [ 225.524305][T12215] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3044'. [ 225.712674][T12225] netlink: 'syz.0.3047': attribute type 21 has an invalid length. [ 225.727765][T12225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3047'. [ 225.983238][T12241] netlink: 'syz.1.3052': attribute type 7 has an invalid length. [ 226.300315][T12258] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3060'. [ 226.533052][T12269] netlink: 'syz.0.3068': attribute type 1 has an invalid length. [ 226.555886][T12269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3068'. [ 226.935557][T12286] netlink: 'syz.0.3075': attribute type 21 has an invalid length. [ 227.293799][T12305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3084'. [ 227.379798][T12309] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 227.454733][T12311] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 227.476046][T12311] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 227.715866][T12325] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3094'. [ 227.757969][T12325] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3094'. [ 228.481956][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3114'. [ 228.720186][T12380] ipt_ECN: cannot use operation on non-tcp rule [ 228.832549][T12385] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3122'. [ 228.863264][T12385] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3122'. [ 228.941484][T12392] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 229.275945][T12408] netlink: 'syz.0.3135': attribute type 29 has an invalid length. [ 229.329899][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3135'. [ 229.815626][T12435] tipc: Trying to set illegal importance in message [ 230.048898][T12449] netlink: 'syz.1.3156': attribute type 11 has an invalid length. [ 231.448472][T12523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.577108][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 232.620723][T12585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3212'. [ 233.447302][T12625] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3231'. [ 233.653272][T12625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.670971][T12625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.684986][T12625] bond0 (unregistering): Released all slaves [ 233.710749][T12632] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 234.025956][T12651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3245'. [ 234.296139][T12667] IPVS: Unknown mcast interface: pim6reg1 [ 234.456199][T12674] netlink: 'syz.3.3255': attribute type 11 has an invalid length. [ 234.471788][T12674] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3255'. [ 234.777443][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3264'. [ 235.520119][T12730] xt_nfacct: accounting object `syz1' does not exists [ 235.734881][T12741] netlink: 'syz.0.3289': attribute type 11 has an invalid length. [ 236.547177][T12776] openvswitch: netlink: Key type 29 is not supported [ 236.688611][T12780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3308'. [ 236.935086][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'. [ 237.287200][T12812] netlink: 'syz.3.3323': attribute type 13 has an invalid length. [ 237.351767][T12817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 238.017010][T12852] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 238.186027][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 238.547750][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3357'. [ 239.121879][T12908] No such timeout policy "syz0" [ 239.387484][T12926] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 239.483462][T12930] !: renamed from dummy0 (while UP) [ 239.570847][T12935] netlink: 'syz.0.3385': attribute type 11 has an invalid length. [ 239.580072][T12935] netlink: 'syz.0.3385': attribute type 11 has an invalid length. [ 239.590737][T12935] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3385'. [ 239.623321][T12938] Cannot find del_set index 17 as target [ 239.772185][T12936] xt_CT: No such helper "pptp" [ 239.815925][T12947] netlink: 'syz.1.3390': attribute type 26 has an invalid length. [ 240.053650][T12957] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 240.089855][T12959] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3396'. [ 240.150089][T12959] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.308898][T12971] netlink: 416 bytes leftover after parsing attributes in process `syz.3.3401'. [ 240.337787][T12971] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 240.411724][T12969] bond1: entered promiscuous mode [ 240.454296][T12969] bond1: entered allmulticast mode [ 240.475147][T12969] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.874802][T13001] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 241.053825][T13006] xt_SECMARK: invalid mode: 0 [ 241.202744][T13016] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 241.671194][T13043] nft_compat: unsupported protocol 0 [ 241.887389][T13053] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 242.332293][T13080] syz.1.3456 uses old SIOCAX25GETINFO [ 242.484164][T13088] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.502213][T13088] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.513417][T13088] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.537066][T13088] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 242.577601][T13088] geneve2: entered promiscuous mode [ 242.596929][T13088] geneve2: entered allmulticast mode [ 242.721849][T13097] x_tables: duplicate entry at hook 2 [ 242.767401][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'. [ 242.868182][T13105] netlink: 'syz.2.3469': attribute type 21 has an invalid length. [ 242.876078][T13105] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.012708][T13113] netlink: 'syz.4.3473': attribute type 7 has an invalid length. [ 243.604263][T13145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.367085][T13164] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 245.484956][T13224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.919667][T13296] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3564'. [ 247.152479][T13309] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3570'. [ 247.315161][T13319] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 247.386848][T13323] netlink: 'syz.4.3577': attribute type 11 has an invalid length. [ 247.415144][T13323] netlink: 'syz.4.3577': attribute type 11 has an invalid length. [ 247.453949][T13323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3577'. [ 247.583807][T13333] netlink: 'syz.2.3582': attribute type 23 has an invalid length. [ 247.595257][T13331] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 247.614663][T13331] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 248.135404][T13357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3594'. [ 248.339872][T13368] netlink: 'syz.2.3599': attribute type 27 has an invalid length. [ 248.499737][T13374] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3602'. [ 248.996252][T13402] delete_channel: no stack [ 249.273129][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 249.324647][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 249.335238][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3623'. [ 249.505354][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3630'. [ 249.990865][T13451] netlink: 'syz.1.3641': attribute type 9 has an invalid length. [ 250.159541][T13461] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 250.288151][T13461] bond2: entered promiscuous mode [ 250.305620][T13461] bond2: entered allmulticast mode [ 250.326493][T13461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.557114][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 251.319537][T13522] netlink: 'syz.0.3673': attribute type 11 has an invalid length. [ 251.437025][T13524] netlink: 'syz.4.3676': attribute type 24 has an invalid length. [ 251.521164][T13530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 251.795925][T13542] bridge3: entered promiscuous mode [ 251.830550][T13542] bridge3: entered allmulticast mode [ 251.850629][T13549] xt_l2tp: v2 doesn't support IP mode [ 252.059699][T13559] __nla_validate_parse: 1 callbacks suppressed [ 252.059722][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 252.524539][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 253.068285][T13612] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.102717][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.122863][T13612] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.151367][T13616] netlink: 'syz.0.3720': attribute type 21 has an invalid length. [ 253.177230][T13612] netlink: 'syz.2.3718': attribute type 2 has an invalid length. [ 253.198260][T13616] netlink: 'syz.0.3720': attribute type 1 has an invalid length. [ 253.206241][T13612] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3718'. [ 253.347076][T13624] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 253.466928][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 253.497487][T13632] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3728'. [ 253.624068][T13639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3731'. [ 253.672997][T13639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3731'. [ 254.032677][T13661] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 254.057987][T13661] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 254.374957][T13678] IPv6: sit2: Disabled Multicast RS [ 255.743519][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.750952][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.604647][T13789] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.958812][T13808] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 257.191534][T13820] netlink: 'syz.4.3810': attribute type 10 has an invalid length. [ 257.311640][T13820] batman_adv: batadv0: Adding interface: team0 [ 257.373057][T13820] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.412401][T13820] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 257.961722][T13853] No such timeout policy "syz0" [ 258.418682][T13878] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 258.426580][T13878] __nla_validate_parse: 6 callbacks suppressed [ 258.426595][T13878] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3833'. [ 258.837965][T13896] netlink: 'syz.2.3842': attribute type 10 has an invalid length. [ 258.885928][T13896] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 258.944187][T13896] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 259.255773][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3851'. [ 259.420916][T13924] netlink: 'syz.4.3856': attribute type 21 has an invalid length. [ 259.464461][T13928] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 259.863105][T13949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.039266][T13957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.436332][T13980] set match dimension is over the limit! [ 261.141055][T14017] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 261.165822][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3903'. [ 261.181913][T14013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3900'. [ 261.546445][T14034] syz_tun: entered promiscuous mode [ 261.566235][T14034] syz_tun: entered allmulticast mode [ 261.965262][T14058] xt_hashlimit: max too large, truncated to 1048576 [ 262.052457][T14063] netlink: 'syz.0.3924': attribute type 1 has an invalid length. [ 262.071306][T14063] netlink: 'syz.0.3924': attribute type 2 has an invalid length. [ 262.425486][T14081] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 262.468745][T14081] lo speed is unknown, defaulting to 1000 [ 262.479555][T14085] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 262.506980][T14085] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3933'. [ 262.620744][T14092] dvmrp1: entered allmulticast mode [ 262.731143][T14096] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 262.981996][T14110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3944'. [ 263.036837][T14110] netlink: 'syz.3.3944': attribute type 1 has an invalid length. [ 263.065270][T14110] netlink: 'syz.3.3944': attribute type 1 has an invalid length. [ 263.103148][T14110] netlink: 'syz.3.3944': attribute type 2 has an invalid length. [ 263.105641][T14115] netlink: 'syz.2.3948': attribute type 11 has an invalid length. [ 263.125900][T14115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3948'. [ 263.147610][T14110] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3944'. [ 263.263218][T14121] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 263.547258][T14134] netlink: 'syz.4.3959': attribute type 39 has an invalid length. [ 263.791522][T14143] veth3: entered promiscuous mode [ 263.804859][T14143] veth3: entered allmulticast mode [ 263.829207][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 263.875623][T14148] tc_dump_action: action bad kind [ 263.906319][T14153] netlink: 'syz.2.3969': attribute type 2 has an invalid length. [ 264.116666][T14163] xt_l2tp: invalid flags combination: 4 [ 264.753911][T14197] netlink: 696 bytes leftover after parsing attributes in process `syz.2.3989'. [ 264.885979][T14205] delete_channel: no stack [ 265.008929][T14207] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 265.030479][T14211] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 265.056845][T14211] netlink: 'syz.1.3997': attribute type 2 has an invalid length. [ 265.425512][T14232] SET target dimension over the limit! [ 266.169975][T14273] netlink: 'syz.2.4024': attribute type 1 has an invalid length. [ 266.552946][T14291] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 266.621214][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4035'. [ 266.653935][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4035'. [ 266.882058][T14303] netlink: 'syz.0.4038': attribute type 4 has an invalid length. [ 267.087495][T14316] tc_dump_action: action bad kind [ 267.177005][ T5933] lo speed is unknown, defaulting to 1000 [ 267.196824][ T5933] syz2: Port: 1 Link DOWN [ 267.631926][T14343] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 267.687120][T14346] netlink: 'syz.2.4060': attribute type 12 has an invalid length. [ 267.723908][T14346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4060'. [ 267.747480][T14350] netlink: 'syz.4.4062': attribute type 10 has an invalid length. [ 267.765843][T14350] veth1_vlan: entered allmulticast mode [ 267.807584][T14350] team0: Device veth1_vlan failed to register rx_handler [ 268.102256][T14364] xt_hashlimit: size too large, truncated to 1048576 [ 268.353262][T14380] xt_recent: Unsupported userspace flags (00000061) [ 268.807380][T14404] raw_sendmsg: syz.2.4089 forgot to set AF_INET. Fix it! [ 268.960040][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 269.128038][T14419] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.798026][T14454] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 270.128534][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4123'. [ 270.238193][T14477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.519741][T14495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4133'. [ 270.862871][T14510] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4140'. [ 271.203586][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4148'. [ 271.242676][T14527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.245297][T14526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4148'. [ 271.636836][T14546] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.801941][T14553] netlink: 'syz.1.4159': attribute type 5 has an invalid length. [ 272.131893][T14566] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4163'. [ 272.181333][T14566] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4163'. [ 272.212540][T14570] netlink: 'syz.4.4165': attribute type 13 has an invalid length. [ 272.245831][T14570] lo: entered promiscuous mode [ 272.293227][T14570] lo: entered allmulticast mode [ 272.322922][T14570] tunl0: entered promiscuous mode [ 272.340580][T14570] tunl0: entered allmulticast mode [ 272.401004][T14570] gre0: entered promiscuous mode [ 272.428730][T14570] gre0: entered allmulticast mode [ 272.515525][T14570] gretap0: entered promiscuous mode [ 272.552903][T14570] gretap0: entered allmulticast mode [ 272.591121][T14570] gretap0: refused to change device tx_queue_len [ 272.665939][T14570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.135580][T14612] netlink: 'syz.4.4184': attribute type 24 has an invalid length. [ 273.332903][T14619] bond0: option ad_select: unable to set because the bond device is up [ 273.670710][T14639] netlink: 'syz.2.4196': attribute type 1 has an invalid length. [ 273.839419][T14643] erspan0: entered promiscuous mode [ 273.844714][T14643] erspan0: entered allmulticast mode [ 274.053503][T14654] syz_tun: left allmulticast mode [ 274.157802][T14661] bond0: entered allmulticast mode [ 274.243824][T14666] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.4212'. [ 274.257534][T14667] ip6t_REJECT: ECHOREPLY is not supported [ 274.282067][T14666] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.4212'. [ 274.501281][T14679] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 274.502210][ T1143] bond0: (slave bond_slave_0): interface is now down [ 274.532085][ T1143] bond0: (slave bond_slave_1): interface is now down [ 274.544794][ T1143] bond0: (slave batadv0): interface is now down [ 274.558556][ T1143] bond0: (slave netdevsim0): interface is now down [ 274.587003][ T3500] bond0: (slave bond_slave_0): interface is now down [ 274.603024][ T3500] bond0: (slave bond_slave_1): interface is now down [ 274.636814][ T3500] bond0: (slave batadv0): interface is now down [ 274.686770][ T3500] bond0: (slave netdevsim0): interface is now down [ 274.705713][ T3500] bond0: now running without any active interface! [ 274.789476][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 274.876446][T14697] netlink: 'syz.3.4226': attribute type 24 has an invalid length. [ 275.137073][T14711] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.425323][T14726] delete_channel: no stack [ 275.435082][T14727] netlink: 'syz.2.4239': attribute type 3 has an invalid length. [ 275.484778][T14727] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.4239'. [ 275.599293][T14733] sctp: [Deprecated]: syz.4.4243 (pid 14733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.599293][T14733] Use struct sctp_sack_info instead [ 275.823327][T14747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.359737][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4261'. [ 276.369061][T14770] netlink: 'syz.2.4262': attribute type 11 has an invalid length. [ 276.407678][T14770] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4262'. [ 276.671164][T14788] netlink: 'syz.1.4269': attribute type 11 has an invalid length. [ 276.722400][T14788] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4269'. [ 277.198918][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'. [ 277.462867][T14829] netlink: 'syz.0.4287': attribute type 21 has an invalid length. [ 277.497484][T14829] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4287'. [ 277.534992][T14832] openvswitch: netlink: Missing key (keys=40, expected=80) [ 277.715980][T14841] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 278.669870][T14888] netlink: 'syz.4.4311': attribute type 1 has an invalid length. [ 278.694553][T14888] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4311'. [ 279.000852][T14907] netlink: 'syz.1.4319': attribute type 7 has an invalid length. [ 279.156217][T14915] xt_bpf: check failed: parse error [ 279.612646][T14936] __nla_validate_parse: 2 callbacks suppressed [ 279.612665][T14936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4331'. [ 279.949406][T14955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.024614][T14959] netlink: 'syz.2.4342': attribute type 64 has an invalid length. [ 280.031855][T14958] netlink: zone id is out of range [ 280.037023][T14959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4342'. [ 280.087511][T14958] netlink: del zone limit has 4 unknown bytes [ 280.745891][T14971] infiniband syz0: set down [ 280.751131][T14971] infiniband syz0: added ipvlan1 [ 280.800527][T14971] RDS/IB: syz0: added [ 280.804671][T14971] smc: adding ib device syz0 with port count 1 [ 280.817994][T14971] smc: ib device syz0 port 1 has pnetid [ 280.920910][T14997] netlink: 'syz.2.4358': attribute type 13 has an invalid length. [ 281.004168][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4363'. [ 281.186822][T14997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.218003][ T5956] lo speed is unknown, defaulting to 1000 [ 281.256902][ T5956] syz2: Port: 1 Link ACTIVE [ 281.327392][T15008] SET target dimension over the limit! [ 281.581915][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 282.072422][T15039] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.455222][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4384'. [ 282.822219][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4394'. [ 283.127079][T15084] netlink: 'syz.2.4402': attribute type 1 has an invalid length. [ 283.412004][T15096] xt_policy: neither incoming nor outgoing policy selected [ 283.605837][T15106] netlink: 'syz.2.4413': attribute type 4 has an invalid length. [ 283.636042][T15106] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4413'. [ 283.746992][T15110] netlink: 'syz.1.4415': attribute type 11 has an invalid length. [ 283.785374][T15110] netlink: 'syz.1.4415': attribute type 11 has an invalid length. [ 283.823093][T15110] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4415'. [ 283.845368][T15112] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4416'. [ 283.883702][T15112] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4416'. [ 283.900371][T15112] netlink: 'syz.3.4416': attribute type 6 has an invalid length. [ 283.933802][T15112] netlink: 'syz.3.4416': attribute type 5 has an invalid length. [ 284.818308][T15149] netlink: 'syz.0.4431': attribute type 11 has an invalid length. [ 284.826310][T15149] __nla_validate_parse: 1 callbacks suppressed [ 284.826325][T15149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4431'. [ 286.490902][T15228] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4463'. [ 286.930343][T15208] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.930752][T15253] Cannot find del_set index 17 as target [ 287.811538][T15288] netlink: 'syz.2.4487': attribute type 75 has an invalid length. [ 288.147485][T15306] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 288.744946][T15336] Zero length message leads to an empty skb [ 289.011491][T15354] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 289.859031][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'. [ 289.884413][T15397] netlink: 'syz.4.4532': attribute type 3 has an invalid length. [ 290.519942][T15429] netlink: 'syz.4.4545': attribute type 29 has an invalid length. [ 290.559283][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4544'. [ 290.580064][T15429] netlink: 'syz.4.4545': attribute type 29 has an invalid length. [ 291.409892][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'. [ 291.757695][T15478] tipc: Enabling not permitted [ 291.763372][T15478] tipc: Enabling of bearer rejected, failed to enable media [ 292.054787][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 293.136938][T15552] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4595'. [ 293.195083][T15557] Bluetooth: MGMT ver 1.23 [ 293.642903][T15581] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 293.955509][T15595] netlink: 'syz.3.4613': attribute type 1 has an invalid length. [ 294.403807][T15617] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 294.418002][T15619] nbd: socks must be embedded in a SOCK_ITEM attr [ 296.200567][T15720] geneve1: left promiscuous mode [ 296.219271][T15720] geneve1: left allmulticast mode [ 296.425612][T15730] netlink: 'syz.0.4673': attribute type 29 has an invalid length. [ 296.464545][T15730] netlink: 'syz.0.4673': attribute type 29 has an invalid length. [ 296.502602][T15733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.771975][T15750] : entered promiscuous mode [ 297.329572][T15779] netlink: 'syz.4.4696': attribute type 2 has an invalid length. [ 297.348419][T15779] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4696'. [ 297.826392][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4711'. [ 298.177101][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4716'. [ 298.287360][ T55] IPVS: starting estimator thread 0... [ 298.426855][T15832] IPVS: using max 26 ests per chain, 62400 per kthread [ 298.491255][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 298.581986][T15846] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.666395][T15848] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 298.852902][T15860] netlink: 18 bytes leftover after parsing attributes in process `syz.3.4733'. [ 298.859954][T15859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4734'. [ 299.656122][T15903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4754'. [ 299.807839][T15908] netlink: 'syz.4.4757': attribute type 1 has an invalid length. [ 299.834923][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4756'. [ 299.874942][T15913] Bluetooth: MGMT ver 1.23 [ 300.866288][T15964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4783'. [ 300.886082][T15961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4783'. [ 301.255228][T15984] netlink: 'syz.4.4795': attribute type 13 has an invalid length. [ 301.710804][T16008] tipc: Started in network mode [ 301.726879][T16008] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 301.736442][T16008] tipc: Enabling of bearer rejected, failed to enable media [ 302.691131][T16060] __nla_validate_parse: 5 callbacks suppressed [ 302.691151][T16060] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4827'. [ 302.779812][T16063] smc: net device erspan0 applied user defined pnetid SYZ0 [ 303.086063][T16074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.270148][T16087] netlink: 'syz.0.4838': attribute type 27 has an invalid length. [ 304.071567][T16128] netlink: 'syz.3.4854': attribute type 2 has an invalid length. [ 304.344321][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4858'. [ 304.369993][T16141] geneve2: entered promiscuous mode [ 304.370510][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4861'. [ 304.584620][T16152] netlink: 'syz.0.4862': attribute type 1 has an invalid length. [ 304.619086][T16152] netlink: 'syz.0.4862': attribute type 3 has an invalid length. [ 304.644919][T16152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4862'. [ 304.666866][T16152] NCSI netlink: No device for ifindex 131080 [ 305.269315][ T5952] IPVS: starting estimator thread 0... [ 305.367046][T16191] IPVS: using max 25 ests per chain, 60000 per kthread [ 305.968563][T16228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4891'. [ 306.056857][T16228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4891'. [ 306.354535][T16245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.091009][T16281] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4912'. [ 308.265255][T16348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.348132][T16396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4959'. [ 309.380715][T16400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4960'. [ 309.395251][T16394] delete_channel: no stack [ 309.666634][T16415] macsec0: entered promiscuous mode [ 309.677834][T16415] macsec0: entered allmulticast mode [ 309.718844][T16415] veth1_macvtap: entered allmulticast mode [ 309.725049][T16415] macsec0: left promiscuous mode [ 309.757714][T16415] macsec0: left allmulticast mode [ 309.763510][T16415] veth1_macvtap: left allmulticast mode [ 309.834905][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'. [ 310.130947][T16439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.190650][T16439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.213597][T16439] bridge0: port 3(batadv0) entered disabled state [ 310.278367][T16439] bridge0: port 3(batadv0) entered disabled state [ 310.349885][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 310.376518][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'. [ 310.393894][T16452] netlink: 'syz.2.4984': attribute type 12 has an invalid length. [ 310.436801][T16452] netlink: 'syz.2.4984': attribute type 11 has an invalid length. [ 310.722399][T16469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4992'. [ 310.982825][T16485] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4998'. [ 311.029419][T16481] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4998'. [ 311.320301][T16503] sctp: [Deprecated]: syz.1.5008 (pid 16503) Use of int in max_burst socket option deprecated. [ 311.320301][T16503] Use struct sctp_assoc_value instead [ 311.443877][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5013'. [ 312.462429][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5036'. [ 313.382964][T16610] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 313.484665][T16615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.879751][T16797] __nla_validate_parse: 7 callbacks suppressed [ 316.879773][T16797] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5149'. [ 317.170483][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5155'. [ 317.187399][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.193815][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5155'. [ 317.194827][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.697191][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5191'. [ 318.721566][T16886] tipc: Invalid UDP bearer configuration [ 318.721630][T16886] tipc: Enabling of bearer rejected, failed to enable media [ 319.082453][T16905] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 319.254695][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5206'. [ 319.280908][T16915] netlink: 'syz.0.5206': attribute type 2 has an invalid length. [ 319.312047][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5206'. [ 320.456368][T16978] netlink: 'syz.3.5235': attribute type 2 has an invalid length. [ 320.855903][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5246'. [ 321.442940][T17034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.549669][T17041] tipc: Failed to obtain node identity [ 321.555241][T17041] tipc: Enabling of bearer rejected, failed to enable media [ 321.576008][T17043] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5266'. [ 321.724509][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5269'. [ 321.773801][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5269'. [ 322.329258][T17083] pimreg3: entered allmulticast mode [ 322.775951][T17106] netlink: 'syz.2.5296': attribute type 1 has an invalid length. [ 322.811249][T17106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.133392][T17122] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5304'. [ 323.687294][T17150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.770594][T17155] tipc: Enabling of bearer rejected, failed to enable media [ 324.002283][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5325'. [ 324.255386][T17180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5332'. [ 324.282700][T17181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5333'. [ 324.880371][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5351'. [ 325.217005][T17241] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5362'. [ 325.413943][T17249] team0: Device vti0 is of different type [ 325.509019][ T5933] IPVS: starting estimator thread 0... [ 325.617415][T17257] IPVS: using max 26 ests per chain, 62400 per kthread [ 326.374902][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 327.222920][T17334] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5406'. [ 327.593759][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5416'. [ 327.628667][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5416'. [ 327.707234][T17362] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 327.733085][T17362] bond0: (slave netdevsim0): Releasing backup interface [ 327.766230][T17362] batman_adv: batadv0: Adding interface: netdevsim0 [ 327.781882][T17362] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.814623][T17362] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 328.103351][T17385] tipc: Enabling of bearer rejected, media not registered [ 328.381294][T17400] netlink: 'syz.2.5439': attribute type 3 has an invalid length. [ 329.045266][T17442] __nla_validate_parse: 2 callbacks suppressed [ 329.045287][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5457'. [ 329.106908][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5457'. [ 329.352162][T17456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5464'. [ 329.397149][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5466'. [ 329.413593][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5466'. [ 329.718772][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5477'. [ 330.298054][T17516] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 16 [ 330.395698][T17520] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.620093][T17536] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 330.712166][T17542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5506'. [ 331.120813][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5519'. [ 331.160174][T17564] bridge_slave_0: left allmulticast mode [ 331.168316][T17564] bridge_slave_0: left promiscuous mode [ 331.174299][T17564] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.188231][T17564] bridge_slave_1: left allmulticast mode [ 331.194046][T17564] bridge_slave_1: left promiscuous mode [ 331.200569][T17564] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.249869][T17564] team0: Port device team_slave_0 removed [ 331.284211][T17564] team0: Port device team_slave_1 removed [ 331.303194][T17564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.321508][T17564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.333608][T17564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.345574][T17564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.513696][T17578] netlink: 'syz.0.5523': attribute type 23 has an invalid length. [ 332.339939][T17628] netlink: 'syz.2.5546': attribute type 1 has an invalid length. [ 333.542613][T17686] Driver unsupported XDP return value 0 on prog (id 349) dev N/A, expect packet loss! [ 333.591526][T17688] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5574'. [ 334.251115][T17721] pim6reg527: entered allmulticast mode [ 334.798084][T17743] tipc: Started in network mode [ 334.803048][T17743] tipc: Node identity 0900000000000000144f, cluster identity 11 [ 335.339952][T17767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5611'. [ 335.761589][ T30] audit: type=1800 audit(1752039531.804:2): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5622" name="memory.events" dev="tmpfs" ino=5629 res=0 errno=0 [ 335.830630][ T30] audit: type=1804 audit(1752039531.834:3): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5622" name="/newroot/1121/memory.events" dev="tmpfs" ino=5629 res=1 errno=0 [ 335.934155][T17801] openvswitch: netlink: IPv6 tunnel dst address is zero [ 336.089490][T17810] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3354 [ 336.715345][T17839] Bluetooth: MGMT ver 1.23 [ 337.055246][T17856] netlink: 'syz.4.5655': attribute type 1 has an invalid length. [ 337.084338][T17856] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5655'. [ 337.194043][T17867] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5660'. [ 337.664835][T17891] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 337.676172][T17890] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 338.084304][T17909] netlink: 'syz.3.5680': attribute type 1 has an invalid length. [ 338.181674][T17917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5684'. [ 339.179891][T17978] netlink: 'syz.1.5714': attribute type 3 has an invalid length. [ 339.804039][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5732'. [ 339.841515][T18017] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5732'. [ 339.885926][T18017] netlink: 'syz.0.5732': attribute type 5 has an invalid length. [ 340.360196][T18053] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5751'. [ 340.505503][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5753'. [ 340.533350][T18060] netlink: 'syz.3.5753': attribute type 30 has an invalid length. [ 340.570334][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5753'. [ 340.980805][T18088] IPVS: Error joining to the multicast group [ 341.131228][ T30] audit: type=1107 audit(1752039537.174:4): pid=18093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 341.281453][T18106] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.5773'. [ 343.081664][T18207] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5821'. [ 343.318860][T18220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5827'. [ 343.443381][T18228] netlink: 'syz.0.5831': attribute type 13 has an invalid length. [ 343.634173][T18235] smc: net device erspan0 erased user defined pnetid SYZ0 [ 343.955120][T18260] nbd: must specify at least one socket [ 344.209387][T18273] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5852'. [ 344.609658][T18294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5863'. [ 345.782785][T18358] tipc: Enabling of bearer rejected, failed to enable media [ 346.178657][T18377] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5903'. [ 346.341924][T18385] nbd: must specify a size in bytes for the device [ 347.122501][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5929'. [ 347.531395][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 347.557365][T18454] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 347.577832][T18454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.130229][T18488] netlink: 'syz.2.5958': attribute type 4 has an invalid length. [ 348.144388][T18488] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5958'. [ 348.257255][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5961'. [ 348.311009][T18495] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 348.326173][T18495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.361741][T18503] x_tables: ip_tables: udp match: only valid for protocol 17 [ 348.434170][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'. [ 348.444432][T18505] netlink: 'syz.0.5966': attribute type 5 has an invalid length. [ 348.455362][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5966'. [ 348.519008][T18511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.744488][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5975'. [ 348.874943][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5978'. [ 348.901523][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 348.911792][T18529] netlink: 'syz.0.5978': attribute type 5 has an invalid length. [ 349.087026][T18542] netlink: 'syz.4.5985': attribute type 29 has an invalid length. [ 349.109415][T18542] netlink: 'syz.4.5985': attribute type 29 has an invalid length. [ 349.278528][T18548] veth7: entered allmulticast mode [ 349.354870][T18554] vlan1: entered allmulticast mode [ 349.361715][T18554] veth0_vlan: entered allmulticast mode [ 349.953484][T18589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.305318][T18613] netlink: 'syz.2.6018': attribute type 18 has an invalid length. [ 351.241605][T18662] __nla_validate_parse: 3 callbacks suppressed [ 351.241625][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6042'. [ 351.245178][T18663] rdma_op ffff88805551e1f0 conn xmit_rdma 0000000000000000 [ 351.277715][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6042'. [ 352.005443][T18706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.034035][T18711] netlink: 'syz.4.6065': attribute type 1 has an invalid length. [ 352.054446][T18711] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6065'. [ 352.078854][T18711] netlink: 'syz.4.6065': attribute type 1 has an invalid length. [ 352.109036][T18711] netlink: 'syz.4.6065': attribute type 2 has an invalid length. [ 352.121323][T18711] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6065'. [ 352.343212][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'. [ 352.680984][T18746] tipc: Enabled bearer , priority 12 [ 352.697228][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 352.846211][T18758] netlink: 'syz.4.6089': attribute type 4 has an invalid length. [ 352.857711][T18758] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6089'. [ 352.967017][T18764] bridge0: port 1(veth0_to_bridge) entered blocking state [ 352.992247][T18764] bridge0: port 1(veth0_to_bridge) entered disabled state [ 353.029684][T18764] veth0_to_bridge: entered allmulticast mode [ 353.056338][T18764] veth0_to_bridge: entered promiscuous mode [ 353.084505][T18764] bridge0: port 1(veth0_to_bridge) entered blocking state [ 353.092110][T18764] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 353.158214][T18775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.688517][ T5933] tipc: Node number set to 491716608 [ 353.755756][T18812] netlink: 'syz.4.6115': attribute type 3 has an invalid length. [ 353.872601][T18819] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6119'. [ 353.882505][T18820] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 353.918619][T18819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6119'. [ 353.945662][T18819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6119'. [ 354.325106][T18846] netlink: 'syz.1.6131': attribute type 1 has an invalid length. [ 355.061151][T18892] netlink: 'syz.2.6153': attribute type 1 has an invalid length. [ 355.092348][T18892] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6153'. [ 355.113783][T18892] netlink: 'syz.2.6153': attribute type 1 has an invalid length. [ 355.303986][T18908] netlink: 'syz.4.6161': attribute type 11 has an invalid length. [ 355.452726][T18914] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 356.176228][T18947] tipc: Started in network mode [ 356.181352][T18947] tipc: Node identity , cluster identity 4711 [ 356.217845][T18947] tipc: Failed to set node id, please configure manually [ 356.236859][T18947] tipc: Enabling of bearer rejected, failed to enable media [ 356.428221][T18959] netlink: 'syz.2.6185': attribute type 13 has an invalid length. [ 356.479658][T18959] veth0_macvtap: left promiscuous mode [ 356.486209][T18959] macvtap0: entered allmulticast mode [ 356.505673][T18959] macvtap0: refused to change device tx_queue_len [ 356.914167][T18990] bridge_slave_1: default FDB implementation only supports local addresses [ 357.224194][T19010] netlink: 'syz.1.6209': attribute type 25 has an invalid length. [ 357.393103][T19018] IPVS: ip_vs_edit_dest(): server weight less than zero [ 357.947182][T19047] netlink: 'syz.1.6227': attribute type 11 has an invalid length. [ 359.030232][T19098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.227057][T19108] __nla_validate_parse: 3 callbacks suppressed [ 359.227079][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6255'. [ 359.266856][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6255'. [ 359.289934][T19108] netlink: 'syz.1.6255': attribute type 11 has an invalid length. [ 359.389043][T19118] tipc: MTU too low for tipc bearer [ 359.542256][T19125] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6262'. [ 359.639798][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6263'. [ 359.784114][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6268'. [ 360.204728][T19157] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6277'. [ 360.336041][T19162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6279'. [ 360.726001][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6288'. [ 361.314855][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6307'. [ 361.349592][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6307'. [ 361.631784][T19235] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 361.983918][T19259] netlink: 'syz.0.6328': attribute type 1 has an invalid length. [ 362.041058][T19265] netlink: 'syz.4.6330': attribute type 1 has an invalid length. [ 362.191545][T19272] netlink: 'syz.4.6334': attribute type 1 has an invalid length. [ 362.855367][T19312] tipc: Enabling of bearer rejected, failed to enable media [ 363.000876][T19323] netlink: 'syz.0.6358': attribute type 1 has an invalid length. [ 363.027381][T19323] netlink: 'syz.0.6358': attribute type 1 has an invalid length. [ 363.030127][T19325] netlink: 'syz.3.6360': attribute type 2 has an invalid length. [ 363.045368][T19323] netlink: 'syz.0.6358': attribute type 2 has an invalid length. [ 363.914305][T19378] netlink: 'syz.1.6385': attribute type 3 has an invalid length. [ 365.132503][T19440] netlink: 'syz.3.6414': attribute type 1 has an invalid length. [ 365.190408][T19440] __nla_validate_parse: 9 callbacks suppressed [ 365.190426][T19440] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6414'. [ 365.612761][T19465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6427'. [ 366.242183][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6441'. [ 366.552279][T19512] bond3: entered promiscuous mode [ 366.557584][T19512] bond3: entered allmulticast mode [ 366.563551][T19512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.819148][T19512] bond3 (unregistering): Released all slaves [ 367.698046][T19571] netem: change failed [ 368.777801][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6496'. [ 369.025709][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6505'. [ 369.172525][T19637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6510'. [ 369.301275][T19639] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6509'. [ 369.339367][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6510'. [ 369.451123][T19649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6513'. [ 369.463267][T19649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6513'. [ 369.953460][T19673] sch_fq: defrate 0 ignored. [ 370.741945][T19723] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 370.924485][T19732] __nla_validate_parse: 4 callbacks suppressed [ 370.924506][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6554'. [ 370.941457][ T5946] wlan1: Trigger new scan to find an IBSS to join [ 371.305529][T19756] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (65485) ! [ 371.383002][T19760] lo: entered allmulticast mode [ 371.646565][T19775] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6572'. [ 371.661915][T19774] netlink: 'syz.0.6574': attribute type 83 has an invalid length. [ 371.764571][T19780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6576'. [ 371.959967][T19792] blkio.reset_stats is deprecated [ 372.473330][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6596'. [ 372.638868][T19828] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6598'. [ 373.524817][T19869] netlink: 'syz.4.6620': attribute type 3 has an invalid length. [ 373.536426][T19869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.897902][ T12] wlan1: Trigger new scan to find an IBSS to join [ 374.275317][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6637'. [ 374.453846][T19919] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.6640'. [ 374.489393][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6642'. [ 374.708151][T19935] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6648'. [ 374.813513][T19941] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 374.978909][T19950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6657'. [ 375.442341][T19977] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 376.616188][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6693'. [ 376.864828][T20050] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6698'. [ 376.884182][ T12] wlan1: Trigger new scan to find an IBSS to join [ 377.133051][T20062] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 377.803363][ T1143] wlan1: Creating new IBSS network, BSSID 66:a1:2a:17:90:e6 [ 378.002939][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6722'. [ 378.034611][T20100] netlink: 'syz.3.6722': attribute type 1 has an invalid length. [ 378.205988][T20109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6726'. [ 378.446425][T20121] netlink: 'syz.0.6733': attribute type 12 has an invalid length. [ 378.468583][T20121] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6733'. [ 378.633664][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.642472][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.656542][T20127] netlink: 'syz.0.6736': attribute type 6 has an invalid length. [ 379.718133][T20193] team0: No ports can be present during mode change [ 380.139264][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6770'. [ 380.249102][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6774'. [ 380.264785][T20220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6774'. [ 380.447508][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 380.931066][T20260] netlink: 'syz.0.6793': attribute type 19 has an invalid length. [ 381.157955][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6798'. [ 381.586823][ T5851] block nbd0: Receive control failed (result -32) [ 382.395706][T20346] __nla_validate_parse: 3 callbacks suppressed [ 382.395728][T20346] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6834'. [ 382.497207][T20356] netlink: 'syz.1.6838': attribute type 1 has an invalid length. [ 382.521338][T20356] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6838'. [ 382.643723][T20363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6842'. [ 382.662360][T20364] Dead loop on virtual device ip6_vti0, fix it urgently! [ 382.764182][T20368] netlink: 'syz.2.6845': attribute type 11 has an invalid length. [ 382.796915][T20364] syz.3.6843 (20364) used greatest stack depth: 19192 bytes left [ 383.057877][T20386] bridge_slave_0: invalid flags given to default FDB implementation [ 383.328459][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6859'. [ 383.381040][T20403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6861'. [ 383.736736][T20423] sctp: [Deprecated]: syz.1.6873 (pid 20423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.736736][T20423] Use struct sctp_sack_info instead [ 383.743120][T20427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6871'. [ 383.793682][ T1143] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 383.813052][ T1143] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 383.823437][ T1143] bond0: (slave batadv0): link status definitely up, 0 Mbps full duplex [ 383.835695][ T1143] bond0: active interface up! [ 383.862734][T20430] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6874'. [ 383.999385][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6879'. [ 384.090149][T20446] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.6883'. [ 384.126038][T20444] netlink: 'syz.1.6880': attribute type 83 has an invalid length. [ 384.713269][T20483] vxcan1: entered allmulticast mode [ 384.734939][T20483] vxcan1: left allmulticast mode [ 385.811456][T20538] dvmrp0: entered allmulticast mode [ 385.847134][T20538] dvmrp0: left allmulticast mode [ 385.863296][T20538] dvmrp1: left allmulticast mode [ 386.247065][T20563] netlink: 'syz.4.6937': attribute type 1 has an invalid length. [ 386.290198][T20563] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6937'. [ 386.299841][T20563] netlink: 'syz.4.6937': attribute type 1 has an invalid length. [ 386.335886][T20569] team_slave_0: mtu greater than device maximum [ 386.492896][T20577] openvswitch: netlink: Multiple metadata blocks provided [ 386.673213][T20590] netlink: 'syz.0.6947': attribute type 1 has an invalid length. [ 386.704413][T20590] netlink: 'syz.0.6947': attribute type 2 has an invalid length. [ 386.729187][T20590] netlink: 'syz.0.6947': attribute type 1 has an invalid length. [ 387.361249][T20624] veth0: entered promiscuous mode [ 387.371242][T20621] veth0: left promiscuous mode [ 387.694081][T20652] __nla_validate_parse: 1 callbacks suppressed [ 387.694101][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6974'. [ 388.056391][T20672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6980'. [ 389.797811][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7009'. [ 389.972169][T20762] openvswitch: netlink: IPv4 tun info is not correct [ 390.011974][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7012'. [ 390.058296][T20767] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 390.220457][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7015'. [ 390.254116][T20775] nbd: nbd0 already in use [ 391.065965][T20815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.333723][T20831] tipc: Enabled bearer , priority 10 [ 392.337159][ T5933] tipc: Node number set to 4269801514 [ 392.508559][T20897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7062'. [ 392.566728][T20897] macsec0: entered promiscuous mode [ 392.628719][T20899] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.659321][T20899] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.666726][T20899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.251580][T20981] tun0: tun_chr_ioctl cmd 1074025675 [ 394.289926][T20984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7096'. [ 394.299330][T20981] tun0: persist disabled [ 395.132699][T21020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7114'. [ 395.836137][T21058] netlink: 'syz.4.7132': attribute type 1 has an invalid length. [ 396.358212][T21093] netlink: 'syz.3.7150': attribute type 83 has an invalid length. [ 396.776281][T21118] siw: device registration error -23 [ 397.014945][T21132] unknown channel width for channel at 909000KHz? [ 397.292022][T21148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7174'. [ 397.682194][T21174] vxcan1: tx address claim with dest, not broadcast [ 398.034753][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7194'. [ 398.107461][T21194] lo: entered allmulticast mode [ 398.116093][ T5952] lo speed is unknown, defaulting to 1000 [ 398.127966][ T5952] syz2: Port: 1 Link DOWN [ 398.357027][T21202] block nbd1: server does not support multiple connections per device. [ 398.370141][T21202] block nbd1: shutting down sockets [ 398.465564][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 398.535343][T21214] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 398.636485][T21218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7207'. [ 398.707713][T21225] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7211'. [ 398.832416][T21229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7212'. [ 398.858497][T21233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7215'. [ 398.861665][T21229] xfrm1: entered promiscuous mode [ 398.885302][T21229] xfrm1: entered allmulticast mode [ 398.912053][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7212'. [ 399.082451][T21244] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.7218'. [ 399.110081][T21244] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 399.617994][T21277] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7235'. [ 399.630364][T21279] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7236'. [ 400.295209][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7252'. [ 400.431144][T21323] netlink: 'syz.1.7255': attribute type 1 has an invalid length. [ 400.442399][T21325] netem: change failed [ 400.614725][T21336] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.7260'. [ 400.932822][T21356] netlink: 'syz.2.7267': attribute type 1 has an invalid length. [ 400.950865][T21356] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7267'. [ 400.979913][T21356] netlink: 'syz.2.7267': attribute type 1 has an invalid length. [ 401.835689][T21396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7283'. [ 401.933017][T21396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7283'. [ 402.678826][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7299'. [ 402.710510][T21442] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7301'. [ 403.015194][T21460] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.057030][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7308'. [ 404.883175][T21562] gtp1: entered promiscuous mode [ 404.892542][T21562] gtp1: entered allmulticast mode [ 405.248298][T21586] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 405.919884][T21621] openvswitch: netlink: IPv4 tunnel dst address is zero [ 406.411635][T21642] openvswitch: netlink: IP tunnel TTL not specified. [ 406.895546][T21672] __nla_validate_parse: 5 callbacks suppressed [ 406.895568][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7401'. [ 407.065292][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7406'. [ 407.849278][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7417'. [ 407.862391][T12515] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.958671][T21715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7421'. [ 408.033218][T21717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7422'. [ 408.322120][T21731] vlan3: entered promiscuous mode [ 408.331652][T21731] bridge0: entered promiscuous mode [ 408.577481][T21740] nbd1: detected capacity change from 0 to 127 [ 408.591480][ T5851] block nbd1: Receive control failed (result -32) [ 408.601871][T21743] block nbd1: Dead connection, failed to find a fallback [ 408.618319][T21743] block nbd1: shutting down sockets [ 408.642960][T21743] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.653338][T21743] Buffer I/O error on dev nbd1, logical block 0, async page read [ 408.664843][T21743] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.675071][T21743] Buffer I/O error on dev nbd1, logical block 1, async page read [ 408.690670][T21743] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.700403][T21743] Buffer I/O error on dev nbd1, logical block 2, async page read [ 408.708865][T21743] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.739789][T21743] Buffer I/O error on dev nbd1, logical block 3, async page read [ 408.753979][T21743] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.788635][T21743] Buffer I/O error on dev nbd1, logical block 0, async page read [ 408.816115][T21743] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.842174][T21743] Buffer I/O error on dev nbd1, logical block 1, async page read [ 408.868430][T21743] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.906758][T21743] Buffer I/O error on dev nbd1, logical block 2, async page read [ 408.914756][T21743] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 408.962961][T21743] Buffer I/O error on dev nbd1, logical block 3, async page read [ 408.990657][T21743] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.022690][T21743] Buffer I/O error on dev nbd1, logical block 0, async page read [ 409.052683][T21743] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 409.109229][T21743] Buffer I/O error on dev nbd1, logical block 1, async page read [ 409.125419][T21743] ldm_validate_partition_table(): Disk read failed. [ 409.153557][T21743] Dev nbd1: unable to read RDB block 0 [ 409.179420][T21743] nbd1: unable to read partition table [ 409.232074][T21743] ldm_validate_partition_table(): Disk read failed. [ 409.249975][T21743] Dev nbd1: unable to read RDB block 0 [ 409.272247][T21743] nbd1: unable to read partition table [ 409.307236][T21771] tap0: tun_chr_ioctl cmd 2148553947 [ 409.779346][T21799] netlink: 'syz.4.7461': attribute type 1 has an invalid length. [ 411.438746][T21898] IPVS: persistence engine module ip_vs_pe_ not found [ 411.995469][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7525'. [ 412.679144][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7545'. [ 412.888992][T21983] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7548'. [ 413.295466][T22009] netem: incorrect gi model size [ 413.304244][T22009] netem: change failed [ 413.437955][T22016] netlink: 'syz.2.7565': attribute type 1 has an invalid length. [ 413.450181][T22015] sch_fq: defrate 0 ignored. [ 413.457115][T22016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7565'. [ 414.060505][T22052] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.7578'. [ 414.107804][T22055] netlink: 81 bytes leftover after parsing attributes in process `syz.1.7579'. [ 414.140627][T22059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7582'. [ 414.344707][T22067] netlink: 'syz.3.7586': attribute type 1 has an invalid length. [ 414.379487][T22067] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7586'. [ 414.409516][T22067] netlink: 'syz.3.7586': attribute type 1 has an invalid length. [ 414.432277][T22069] netlink: 'syz.2.7587': attribute type 4 has an invalid length. [ 414.771764][T22091] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7596'. [ 415.497575][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7611'. [ 415.552955][T22134] bridge0: port 3(vlan2) entered blocking state [ 415.585681][T22134] bridge0: port 3(vlan2) entered disabled state [ 415.620537][T22134] vlan2: entered allmulticast mode [ 415.635688][T22134] bridge0: entered allmulticast mode [ 415.646190][T22143] netlink: 'syz.4.7615': attribute type 9 has an invalid length. [ 415.678237][T22134] vlan2: left allmulticast mode [ 415.686089][T22134] bridge0: left allmulticast mode [ 416.495025][T22192] syz.1.7632: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.532653][T22192] CPU: 0 UID: 0 PID: 22192 Comm: syz.1.7632 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 416.532705][T22192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.532737][T22192] Call Trace: [ 416.532746][T22192] [ 416.532755][T22192] dump_stack_lvl+0x189/0x250 [ 416.532794][T22192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.532820][T22192] ? __pfx__printk+0x10/0x10 [ 416.532849][T22192] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.532880][T22192] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.532911][T22192] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 416.532943][T22192] warn_alloc+0x214/0x310 [ 416.532974][T22192] ? stack_depot_save_flags+0x429/0x900 [ 416.533024][T22192] ? __pfx_warn_alloc+0x10/0x10 [ 416.533057][T22192] ? kasan_save_track+0x4f/0x80 [ 416.533081][T22192] ? xskq_create+0x56/0x170 [ 416.533110][T22192] ? xsk_init_queue+0xb0/0x110 [ 416.533138][T22192] ? xsk_setsockopt+0x43f/0x710 [ 416.533166][T22192] ? do_sock_setsockopt+0x25a/0x3e0 [ 416.533190][T22192] ? __x64_sys_setsockopt+0x18b/0x220 [ 416.533214][T22192] ? do_syscall_64+0xfa/0x3b0 [ 416.533233][T22192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.533262][T22192] __vmalloc_node_range_noprof+0x125/0x12f0 [ 416.533326][T22192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.533362][T22192] ? __kasan_kmalloc+0x93/0xb0 [ 416.533392][T22192] vmalloc_user_noprof+0xad/0xf0 [ 416.533420][T22192] ? xskq_create+0xbf/0x170 [ 416.533452][T22192] xskq_create+0xbf/0x170 [ 416.533487][T22192] xsk_init_queue+0xb0/0x110 [ 416.533521][T22192] xsk_setsockopt+0x43f/0x710 [ 416.533554][T22192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.533581][T22192] ? __lock_acquire+0xab9/0xd20 [ 416.533614][T22192] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.533632][T22192] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.533663][T22192] do_sock_setsockopt+0x25a/0x3e0 [ 416.533693][T22192] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 416.533724][T22192] ? __fget_files+0x2a/0x420 [ 416.533764][T22192] __x64_sys_setsockopt+0x18b/0x220 [ 416.533798][T22192] do_syscall_64+0xfa/0x3b0 [ 416.533817][T22192] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.533836][T22192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.533856][T22192] ? clear_bhb_loop+0x60/0xb0 [ 416.533881][T22192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.533908][T22192] RIP: 0033:0x7fd19078e929 [ 416.533931][T22192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.533949][T22192] RSP: 002b:00007fd18e5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.533971][T22192] RAX: ffffffffffffffda RBX: 00007fd1909b5fa0 RCX: 00007fd19078e929 [ 416.533987][T22192] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 416.534000][T22192] RBP: 00007fd190810b39 R08: 0000000000000004 R09: 0000000000000000 [ 416.534020][T22192] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.534033][T22192] R13: 0000000000000000 R14: 00007fd1909b5fa0 R15: 00007ffd365bfc18 [ 416.534066][T22192] [ 416.534166][T22192] Mem-Info: [ 416.860330][T22192] active_anon:6760 inactive_anon:0 isolated_anon:0 [ 416.860330][T22192] active_file:1139 inactive_file:39952 isolated_file:0 [ 416.860330][T22192] unevictable:768 dirty:275 writeback:0 [ 416.860330][T22192] slab_reclaimable:11035 slab_unreclaimable:115053 [ 416.860330][T22192] mapped:29085 shmem:1378 pagetables:1254 [ 416.860330][T22192] sec_pagetables:0 bounce:0 [ 416.860330][T22192] kernel_misc_reclaimable:0 [ 416.860330][T22192] free:1311198 free_pcp:13407 free_cma:0 [ 416.937249][T22192] Node 0 active_anon:27940kB inactive_anon:0kB active_file:4556kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116340kB dirty:1096kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12536kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 416.988526][T22192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.054114][T22192] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.118974][T22192] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 417.124854][T22192] Node 0 DMA32 free:1321228kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30296kB inactive_anon:0kB active_file:4556kB inactive_file:158032kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2558400kB mlocked:0kB bounce:0kB free_pcp:38672kB local_pcp:22496kB free_cma:0kB [ 417.176503][T22192] lowmem_reserve[]: 0 0 1 1 1 [ 417.188955][T22192] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 417.226006][T22192] lowmem_reserve[]: 0 0 0 0 0 [ 417.315861][T22192] Node 1 Normal free:3904272kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14980kB local_pcp:6468kB free_cma:0kB [ 417.392812][T22212] netem: unknown loss type 0 [ 417.400787][T22212] netem: change failed [ 417.406707][T22192] lowmem_reserve[]: 0 0 0 0 0 [ 417.411518][T22192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.497743][T22192] Node 0 DMA32: 4*4kB (UME) 220*8kB (UME) 37*16kB (UME) 86*32kB (UME) 193*64kB (UME) 58*128kB (UME) 44*256kB (UME) 37*512kB (UM) 19*1024kB (UME) 12*2048kB (UME) 298*4096kB (UM) = 1319744kB [ 417.573364][T22192] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 417.594356][T22192] Node 1 Normal: 180*4kB (UE) 42*8kB (UME) 33*16kB (UME) 171*32kB (UME) 52*64kB (UME) 11*128kB (UME) 5*256kB (UME) 6*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3904272kB [ 417.629570][T22192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.688085][T22192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.699041][T22192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.716500][T22192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.726279][T22192] 42465 total pagecache pages [ 417.733657][T22192] 0 pages in swap cache [ 417.778672][T22192] Free swap = 124996kB [ 417.783039][T22192] Total swap = 124996kB [ 417.789601][T22192] 2097051 pages RAM [ 417.796109][T22192] 0 pages HighMem/MovableOnly [ 417.803411][T22192] 425409 pages reserved [ 417.807782][T22192] 0 pages cma reserved [ 418.327660][T22253] __nla_validate_parse: 2 callbacks suppressed [ 418.327679][T22253] netlink: 284 bytes leftover after parsing attributes in process `syz.1.7658'. [ 418.540271][T22268] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7665'. [ 418.736349][T22281] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7670'. [ 418.944565][T22290] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7674'. [ 418.994186][T22290] netem: invalid attributes len -24 [ 419.030562][T22290] netem: change failed [ 419.368433][T22317] netlink: 'syz.2.7684': attribute type 64 has an invalid length. [ 419.389293][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7684'. [ 419.550386][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7689'. [ 419.590968][T22330] netlink: 'syz.2.7691': attribute type 4 has an invalid length. [ 419.844865][T22340] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7697'. [ 420.111106][T22350] netlink: 'syz.2.7701': attribute type 1 has an invalid length. [ 420.239175][T22357] sctp: [Deprecated]: syz.3.7705 (pid 22357) Use of int in maxseg socket option. [ 420.239175][T22357] Use struct sctp_assoc_value instead [ 420.312341][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7708'. [ 420.391810][T22363] vlan2: entered allmulticast mode [ 420.411887][T22363] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 420.503246][T22373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7712'. [ 420.899112][T22395] team0: Cannot enslave team device to itself [ 421.191228][T22414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7729'. [ 421.631691][T22440] netlink: 'syz.3.7740': attribute type 1 has an invalid length. [ 422.317803][T22480] netem: incorrect ge model size [ 422.322874][T22480] netem: change failed [ 422.397972][T22484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.071605][T22522] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.079141][T22522] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.129377][T22522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 423.379356][T22535] __nla_validate_parse: 5 callbacks suppressed [ 423.379378][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7785'. [ 424.031461][T22565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7798'. [ 424.943115][T22617] vxcan1: tx address claim with dlc 0 [ 424.988405][T22618] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7821'. [ 425.449413][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7835'. [ 426.209238][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7855'. [ 426.231804][T22696] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.551027][T22714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7865'. [ 426.586443][ T30] audit: type=1804 audit(1752039622.624:5): pid=22716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7866" name="/newroot/1591/cgroup.controllers" dev="tmpfs" ino=7999 res=1 errno=0 [ 426.636421][ T30] audit: type=1800 audit(1752039622.654:6): pid=22716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7866" name="cgroup.controllers" dev="tmpfs" ino=7999 res=0 errno=0 [ 426.798983][T22718] syz.4.7867 (22718) used greatest stack depth: 17992 bytes left [ 427.481449][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7887'. [ 427.505451][T22762] netlink: 'syz.1.7889': attribute type 2 has an invalid length. [ 427.507335][T22766] xt_bpf: check failed: parse error [ 427.530068][T22762] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7889'. [ 427.599657][T22768] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 428.169554][T22805] netlink: 'syz.4.7908': attribute type 1 has an invalid length. [ 428.186982][T22805] netlink: 'syz.4.7908': attribute type 4 has an invalid length. [ 428.204657][T22805] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7908'. [ 428.335250][T22815] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7913'. [ 428.688246][T22835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7923'. [ 428.723415][T22835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7923'. [ 429.605025][T22889] sctp: [Deprecated]: syz.0.7949 (pid 22889) Use of int in max_burst socket option deprecated. [ 429.605025][T22889] Use struct sctp_assoc_value instead [ 429.878186][T22902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7955'. [ 430.357407][T22934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7972'. [ 430.864509][ T49] wlan1: Trigger new scan to find an IBSS to join [ 431.326978][T22993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7998'. [ 431.397695][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8001'. [ 431.418188][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8002'. [ 432.033960][T23036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8018'. [ 432.343872][T23056] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8027'. [ 432.777790][T23073] xt_CT: No such helper "snmp" [ 432.787758][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 433.165176][T23101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8048'. [ 433.898684][ T49] wlan1: Trigger new scan to find an IBSS to join [ 434.060157][T23159] netlink: 'syz.4.8072': attribute type 2 has an invalid length. [ 434.076786][T23159] netlink: 'syz.4.8072': attribute type 8 has an invalid length. [ 434.095211][T23159] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.8072'. [ 434.211122][T23164] netlink: 'syz.0.8077': attribute type 2 has an invalid length. [ 434.236768][T23164] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8077'. [ 434.706968][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8084'. [ 434.923526][T23194] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8088'. [ 435.540504][T23232] tipc: Started in network mode [ 435.553992][T23232] tipc: Node identity ac14140f, cluster identity 4711 [ 435.586012][T23232] tipc: New replicast peer: 255.255.255.255 [ 435.608538][T23232] tipc: Enabled bearer , priority 10 [ 435.676246][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8111'. [ 435.685533][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8111'. [ 436.703416][T23289] veth0: entered promiscuous mode [ 436.715939][T23287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8132'. [ 436.722742][T23288] veth0: left promiscuous mode [ 436.726798][ T5952] tipc: Node number set to 2886997007 [ 436.862200][ T5946] wlan1: Creating new IBSS network, BSSID aa:a2:38:40:1e:83 [ 436.905285][T23295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8135'. [ 437.015764][T23297] netlink: 'syz.2.8136': attribute type 3 has an invalid length. [ 437.049187][T23300] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8137'. [ 437.338638][T23310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8142'. [ 437.375704][T23310] netlink: 'syz.0.8142': attribute type 1 has an invalid length. [ 437.400552][T23310] netlink: 'syz.0.8142': attribute type 2 has an invalid length. [ 438.734449][T23381] macvtap0: entered promiscuous mode [ 438.746907][T23381] vlan0: entered promiscuous mode [ 438.753062][T23381] macvtap0: entered allmulticast mode [ 438.765045][T23381] vlan0: entered allmulticast mode [ 438.888725][ T1143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.221607][T23411] __nla_validate_parse: 2 callbacks suppressed [ 439.221630][T23411] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8186'. [ 439.835881][T23444] macvtap1: entered promiscuous mode [ 439.850254][T23444] vlan0: entered promiscuous mode [ 439.855975][T23444] macvtap1: entered allmulticast mode [ 439.873715][T23444] vlan0: entered allmulticast mode [ 439.880097][T23444] veth0_vlan: entered allmulticast mode [ 440.063691][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.076823][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.083819][T23457] netlink: 'syz.0.8208': attribute type 39 has an invalid length. [ 441.163874][T23513] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.187789][T23520] netlink: 'syz.2.8232': attribute type 16 has an invalid length. [ 441.208929][T23513] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.216492][T23520] netlink: 'syz.2.8232': attribute type 17 has an invalid length. [ 441.344959][T23520] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.352284][T23520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.365218][T23520] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.372524][T23520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.473610][T23529] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 441.677375][T23537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8243'. [ 441.703845][T23537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8243'. [ 441.985707][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8252'. [ 442.643640][T23590] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 442.866593][T23602] netlink: 576 bytes leftover after parsing attributes in process `syz.0.8273'. [ 443.899088][T12515] wlan1: Trigger new scan to find an IBSS to join [ 444.409222][T23680] xt_CT: No such helper "snmp" [ 444.578427][T23698] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8316'. [ 444.998776][T23719] netlink: 'syz.1.8327': attribute type 5 has an invalid length. [ 445.754716][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8346'. [ 445.789156][T23764] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.005542][T23779] netlink: 'syz.4.8351': attribute type 9 has an invalid length. [ 446.015908][T23779] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.8351'. [ 446.778231][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8371'. [ 446.822845][T23821] netlink: 'syz.1.8371': attribute type 3 has an invalid length. [ 446.937880][ T5946] wlan1: Trigger new scan to find an IBSS to join [ 447.710967][T23866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8388'. [ 448.246491][T23892] netlink: 'syz.4.8404': attribute type 8 has an invalid length. [ 448.637653][T23916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8413'. [ 448.790565][T23921] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8417'. [ 449.097540][T23939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8426'. [ 449.155626][T23943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8428'. [ 449.187464][T23943] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8428'. [ 449.900620][T12515] wlan1: Trigger new scan to find an IBSS to join [ 450.336413][T24011] netlink: 'syz.1.8455': attribute type 5 has an invalid length. [ 450.497543][T24023] netlink: 'syz.2.8460': attribute type 58 has an invalid length. [ 450.523085][T24023] __nla_validate_parse: 1 callbacks suppressed [ 450.523105][T24023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8460'. [ 450.819183][T12515] wlan1: Creating new IBSS network, BSSID 6a:dc:c1:77:83:7c [ 450.895900][T24042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8469'. [ 451.031082][T24049] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 451.039019][T24049] macsec3: entered allmulticast mode [ 451.044561][T24049] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 451.072292][T24049] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 451.083846][T24049] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 451.264279][T24061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8477'. [ 451.292312][T24061] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8477'. [ 452.040020][T24108] sch_fq: defrate 0 ignored. [ 452.105505][T24113] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8504'. [ 452.315391][T24126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8508'. [ 452.938402][T24156] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.172008][T24168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8527'. [ 453.518991][T24191] netlink: 'syz.1.8536': attribute type 83 has an invalid length. [ 453.997190][T24219] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8549'. [ 455.994464][T24324] netlink: 'syz.1.8597': attribute type 1 has an invalid length. [ 456.037234][T24324] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8597'. [ 456.492195][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8608'. [ 456.785897][T24369] veth0: entered promiscuous mode [ 456.796076][T24368] veth0: left promiscuous mode [ 456.840373][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8619'. [ 456.855421][T24372] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 456.878775][T24372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.054785][T24382] netlink: 'syz.3.8622': attribute type 1 has an invalid length. [ 457.086810][T24382] netlink: 'syz.3.8622': attribute type 10 has an invalid length. [ 457.106006][T24382] netlink: 236 bytes leftover after parsing attributes in process `syz.3.8622'. [ 457.140162][T24386] veth0: entered promiscuous mode [ 457.146355][T24385] veth0: left promiscuous mode [ 457.233269][T24389] vlan2: entered promiscuous mode [ 457.242336][T24389] bridge0: entered promiscuous mode [ 457.249754][T24389] vlan2: entered allmulticast mode [ 457.255115][T24389] bridge0: entered allmulticast mode [ 457.471664][T24402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8629'. [ 458.142296][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8647'. [ 458.613830][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8660'. [ 458.638983][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8660'. [ 458.786053][T24478] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 458.875724][T24480] netlink: 'syz.0.8666': attribute type 5 has an invalid length. [ 459.614934][T24522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8679'. [ 459.624582][T24526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8681'. [ 460.445359][T24570] netlink: 'syz.0.8702': attribute type 4 has an invalid length. [ 460.532757][T24576] netlink: 'syz.1.8705': attribute type 29 has an invalid length. [ 461.162069][T24612] __nla_validate_parse: 1 callbacks suppressed [ 461.162090][T24612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8721'. [ 461.217545][T24612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8721'. [ 463.824889][T24752] netlink: 'syz.4.8783': attribute type 1 has an invalid length. [ 463.992704][T24758] netlink: 'syz.3.8787': attribute type 4 has an invalid length. [ 464.038998][T24762] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8788'. [ 464.406215][T24781] openvswitch: netlink: IPv4 tun info is not correct [ 464.588881][T24793] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8802'. [ 464.601404][T24795] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.8803'. [ 464.641443][T24796] netlink: 'syz.1.8804': attribute type 17 has an invalid length. [ 465.571814][T24834] syzkaller1: entered promiscuous mode [ 465.579989][T24834] syzkaller1: entered allmulticast mode [ 465.661646][T24838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8823'. [ 466.091490][T24861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8834'. [ 466.242877][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 466.271031][T24871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8839'. [ 466.999885][T24913] tipc: Started in network mode [ 467.006802][T24913] tipc: Node identity ac14142f, cluster identity 4711 [ 467.017053][T24913] tipc: New replicast peer: 0.0.0.0 [ 467.040885][T24913] tipc: Enabled bearer , priority 10 [ 467.059736][T24914] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 468.062815][T24970] netlink: 'syz.0.8885': attribute type 4 has an invalid length. [ 468.074816][T24972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8886'. [ 468.157028][ T978] tipc: Node number set to 2886997039 [ 468.500030][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8896'. [ 468.612074][T24999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8898'. [ 468.652336][T24999] bridge0: port 1(veth0_to_bridge) entered disabled state [ 468.992795][T25022] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 469.567314][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8927'. [ 469.588834][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8927'. [ 469.638409][T25061] sctp: [Deprecated]: syz.0.8929 (pid 25061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.638409][T25061] Use struct sctp_sack_info instead [ 469.640186][T25060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8928'. [ 469.680582][T25060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8928'. [ 469.884698][T25071] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8934'. [ 469.915809][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.969833][T25075] netlink: 'syz.1.8936': attribute type 1 has an invalid length. [ 469.981302][T25075] netlink: 'syz.1.8936': attribute type 2 has an invalid length. [ 469.989850][T25075] netlink: 'syz.1.8936': attribute type 1 has an invalid length. [ 470.376210][T25099] tipc: Started in network mode [ 470.399229][T25099] tipc: Node identity ac14142f, cluster identity 4711 [ 470.406332][T25099] tipc: New replicast peer: 0.0.0.0 [ 470.430699][T25099] tipc: Enabled bearer , priority 10 [ 470.458382][T25099] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 470.475457][T25100] siw: device registration error -23 [ 471.428030][ T5933] tipc: Node number set to 2886997039 [ 471.855600][T25148] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 472.243468][T25172] __nla_validate_parse: 2 callbacks suppressed [ 472.243483][T25172] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8974'. [ 472.262937][T25172] gretap0: left allmulticast mode [ 472.272122][T25172] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8974'. [ 472.281417][T25172] 0XD: renamed from gretap0 [ 472.302108][T25172] 0XD: left promiscuous mode [ 472.307353][T25172] 0XD: entered allmulticast mode [ 472.329423][T25172] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 472.902252][T25198] syzkaller1: entered promiscuous mode [ 472.935141][T25198] syzkaller1: entered allmulticast mode [ 473.370523][ T55] IPVS: starting estimator thread 0... [ 473.459931][T25230] netlink: 'syz.1.8999': attribute type 2 has an invalid length. [ 473.477036][T25229] IPVS: using max 28 ests per chain, 67200 per kthread [ 473.492152][T25235] sctp: [Deprecated]: syz.2.9000 (pid 25235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.492152][T25235] Use struct sctp_sack_info instead [ 473.559066][T25238] veth0: entered promiscuous mode [ 473.574491][T25237] veth0: left promiscuous mode [ 474.146046][T25275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9020'. [ 474.270695][T25279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9022'. [ 474.372280][T25281] xt_CT: No such helper "snmp" [ 475.492240][T25344] pim6reg1: entered promiscuous mode [ 475.508787][T25344] pim6reg1: entered allmulticast mode [ 475.532887][T25348] netlink: 'syz.1.9051': attribute type 39 has an invalid length. [ 475.940944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.968825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.595413][T25407] netlink: 'syz.0.9078': attribute type 1 has an invalid length. [ 477.718351][T25457] netlink: 348 bytes leftover after parsing attributes in process `syz.4.9096'. [ 478.761419][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.772340][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.782161][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.793497][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.803078][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.052257][T25495] lo speed is unknown, defaulting to 1000 [ 479.370590][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9119'. [ 480.342432][T25495] chnl_net:caif_netlink_parms(): no params data found [ 480.531679][T25495] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.544321][T25495] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.558287][T25495] bridge_slave_0: entered allmulticast mode [ 480.575032][T25495] bridge_slave_0: entered promiscuous mode [ 480.584463][T25495] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.595816][T25495] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.604661][T25495] bridge_slave_1: entered allmulticast mode [ 480.617024][T25495] bridge_slave_1: entered promiscuous mode [ 480.679951][T25495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.693693][T25495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.807723][T25495] team0: Port device team_slave_0 added [ 480.831938][T25495] team0: Port device team_slave_1 added [ 480.858022][ T5852] Bluetooth: hci4: command tx timeout [ 480.872810][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 480.941738][T25495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.961467][T25495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.998547][T25495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.028784][T25495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.036439][T25495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.064129][T25495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.156496][T25594] netlink: 'syz.1.9148': attribute type 4 has an invalid length. [ 481.248577][T25495] hsr_slave_0: entered promiscuous mode [ 481.255367][T25495] hsr_slave_1: entered promiscuous mode [ 481.293278][T25495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.311392][T25495] Cannot create hsr debugfs directory [ 481.919633][T25495] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.099103][T25495] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.269286][T25495] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.448263][T25649] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9172'. [ 482.622977][T25495] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.673324][T25658] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 482.685286][T25658] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 482.693726][T25658] CPU: 1 UID: 0 PID: 25658 Comm: syz.2.9174 Not tainted 6.16.0-rc4-syzkaller-00136-g3c78f91e82d6 #0 PREEMPT(full) [ 482.705810][T25658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.715883][T25658] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 482.721281][T25658] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 5e 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 62 3e f8 85 [ 482.740909][T25658] RSP: 0018:ffffc9000b81f090 EFLAGS: 00010206 [ 482.746997][T25658] RAX: ffffffff89820013 RBX: 00000000000001a8 RCX: 0000000000080000 [ 482.754986][T25658] RDX: ffffc9000d9b8000 RSI: 0000000000000371 RDI: 0000000000000372 [ 482.762968][T25658] RBP: dffffc0000000000 R08: ffff8880271fda00 R09: 0000000000000002 [ 482.770949][T25658] R10: 00000000ffffffff R11: ffffffff8981fff0 R12: dffffc0000000000 [ 482.778934][T25658] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88802f6e2000 [ 482.786916][T25658] FS: 00007feb40fab6c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 482.795853][T25658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.802443][T25658] CR2: 00007feb40faaf98 CR3: 00000000321c4000 CR4: 00000000003526f0 [ 482.810428][T25658] Call Trace: [ 482.813731][T25658] [ 482.816684][T25658] qdisc_tree_reduce_backlog+0x299/0x480 [ 482.822339][T25658] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 482.828083][T25658] pie_change+0x96d/0xca0 [ 482.832436][T25658] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 482.838356][T25658] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.843566][T25658] ? __pfx_pie_change+0x10/0x10 [ 482.848444][T25658] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 482.854361][T25658] ? timer_init_key+0x171/0x2d0 [ 482.859237][T25658] ? __pfx_pie_init+0x10/0x10 [ 482.863926][T25658] pie_init+0x2a3/0x3f0 [ 482.868098][T25658] qdisc_create+0x7a9/0xea0 [ 482.872618][T25658] tc_modify_qdisc+0x1426/0x2010 [ 482.877573][T25658] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 482.882881][T25658] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 482.888174][T25658] rtnetlink_rcv_msg+0x77c/0xb70 [ 482.893122][T25658] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 482.898243][T25658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.903712][T25658] ? ref_tracker_free+0x63a/0x7d0 [ 482.908752][T25658] ? __copy_skb_header+0xa7/0x550 [ 482.913825][T25658] ? __pfx_ref_tracker_free+0x10/0x10 [ 482.919207][T25658] ? __skb_clone+0x63/0x7a0 [ 482.923731][T25658] netlink_rcv_skb+0x205/0x470 [ 482.928516][T25658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.934005][T25658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 482.939313][T25658] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.944528][T25658] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.949744][T25658] netlink_unicast+0x759/0x8e0 [ 482.954525][T25658] netlink_sendmsg+0x805/0xb30 [ 482.959308][T25658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.964613][T25658] ? aa_sock_msg_perm+0x94/0x160 [ 482.969580][T25658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.974875][T25658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.980173][T25658] __sock_sendmsg+0x219/0x270 [ 482.984859][T25658] ____sys_sendmsg+0x505/0x830 [ 482.989636][T25658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.994938][T25658] ? import_iovec+0x74/0xa0 [ 482.999459][T25658] ___sys_sendmsg+0x21f/0x2a0 [ 483.004152][T25658] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.009383][T25658] ? __fget_files+0x2a/0x420 [ 483.013988][T25658] ? __fget_files+0x3a0/0x420 [ 483.018690][T25658] __x64_sys_sendmsg+0x19b/0x260 [ 483.023650][T25658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.029139][T25658] ? do_user_addr_fault+0xc8a/0x1390 [ 483.034438][T25658] ? do_syscall_64+0xbe/0x3b0 [ 483.039131][T25658] do_syscall_64+0xfa/0x3b0 [ 483.043645][T25658] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.048851][T25658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.054931][T25658] ? clear_bhb_loop+0x60/0xb0 [ 483.059624][T25658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.065528][T25658] RIP: 0033:0x7feb4018e929 [ 483.069956][T25658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.089578][T25658] RSP: 002b:00007feb40fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.098016][T25658] RAX: ffffffffffffffda RBX: 00007feb403b6080 RCX: 00007feb4018e929 [ 483.106027][T25658] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 483.114009][T25658] RBP: 00007feb40210b39 R08: 0000000000000000 R09: 0000000000000000 [ 483.122007][T25658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.130001][T25658] R13: 0000000000000001 R14: 00007feb403b6080 R15: 00007ffd83095e78 [ 483.137994][T25658] [ 483.141032][T25658] Modules linked in: [ 483.145048][T25658] ---[ end trace 0000000000000000 ]--- [ 483.150562][T25658] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 483.155973][T25658] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 5e 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 62 3e f8 85 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 483.175647][T25658] RSP: 0018:ffffc9000b81f090 EFLAGS: 00010206 [ 483.181783][T25658] RAX: ffffffff89820013 RBX: 00000000000001a8 RCX: 0000000000080000 [ 483.189831][T25658] RDX: ffffc9000d9b8000 RSI: 0000000000000371 RDI: 0000000000000372 [ 483.197879][T25658] RBP: dffffc0000000000 R08: ffff8880271fda00 R09: 0000000000000002 [ 483.205887][T25658] R10: 00000000ffffffff R11: ffffffff8981fff0 R12: dffffc0000000000 [ 483.213929][T25658] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88802f6e2000 [ 483.221967][T25658] FS: 00007feb40fab6c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 483.230967][T25658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.237620][T25658] CR2: 00007feb40faaf98 CR3: 00000000321c4000 CR4: 00000000003526f0 [ 483.245653][T25658] Kernel panic - not syncing: Fatal exception in interrupt [ 483.253216][T25658] Kernel Offset: disabled [ 483.257550][T25658] Rebooting in 86400 seconds..