last executing test programs: 2.017559036s ago: executing program 3 (id=9107): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.962515217s ago: executing program 1 (id=9109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x424, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3fc, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x268, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @empty, 0x5b}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9f4b4ae73c2437a67a4e92214f48aa48cb055e3fbb9944b0f77e0bc1083e94f6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}]}]}]}, 0x424}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.832196413s ago: executing program 3 (id=9112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 1.715720815s ago: executing program 1 (id=9114): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.691591871s ago: executing program 3 (id=9115): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000180)=""/4096, 0x1000) 1.559557864s ago: executing program 1 (id=9117): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x3c}, {0x6}]}, 0x10) 1.297238017s ago: executing program 1 (id=9123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 1.255001571s ago: executing program 0 (id=9124): unshare(0x20400) pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0x3, 0x3) 1.205616187s ago: executing program 2 (id=9125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESOCT], 0xffc9) 1.161823402s ago: executing program 1 (id=9126): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) 1.062887829s ago: executing program 0 (id=9128): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x10}, {r0, 0x400}], 0x2, 0x7) 1.001265089s ago: executing program 2 (id=9129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x4000000) 960.86397ms ago: executing program 4 (id=9130): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PRATE64={0xc, 0x5, 0x28c19c4be41a64e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x7, 0x2, 0x5, 0x153}, {0x0, 0x1, 0x1, 0x2, 0x3af4, 0xfffffffe}, 0xc76, 0xff, 0x13cb}}]}}]}, 0x6c}}, 0x0) 960.417725ms ago: executing program 1 (id=9131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) 877.826927ms ago: executing program 0 (id=9132): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a00000000000000000a000000040000000c0008"], 0x24}}, 0x0) 804.98489ms ago: executing program 4 (id=9133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 766.455976ms ago: executing program 2 (id=9134): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 717.084245ms ago: executing program 0 (id=9135): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 647.558958ms ago: executing program 3 (id=9136): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2040400) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 583.082823ms ago: executing program 4 (id=9137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000300)="0d99", &(0x7f00000004c0)=""/4096}, 0x20) 537.277003ms ago: executing program 2 (id=9138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000080000480130001"], 0x94}}, 0x0) 376.542581ms ago: executing program 3 (id=9139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) close(0x3) 376.368288ms ago: executing program 4 (id=9140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x3c, r1, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 375.902071ms ago: executing program 0 (id=9141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f0000000000050036000000000008000200", @ANYRES32=r0], 0x2c}, 0x4, 0x700000000000000, 0x0, 0x4000050}, 0x0) 312.132634ms ago: executing program 2 (id=9142): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000009080004000000000008000500e00000020f000700266e"], 0x34}, 0x2, 0x34005}, 0x4040004) 190.613096ms ago: executing program 3 (id=9143): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) 149.224709ms ago: executing program 4 (id=9153): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000001980)=[{}, {}]}) 145.726701ms ago: executing program 2 (id=9144): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 126.66219ms ago: executing program 0 (id=9145): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 4 (id=9146): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) kernel console output (not intermixed with test programs): 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.863604][T11660] RSP: 002b:00007f222b05f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.863621][T11660] RAX: ffffffffffffffda RBX: 00007f222a3a5fa0 RCX: 00007f222a18d169 [ 236.863634][T11660] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 236.863644][T11660] RBP: 00007f222a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 236.863655][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.863664][T11660] R13: 0000000000000000 R14: 00007f222a3a5fa0 R15: 00007fff110c0498 [ 236.863689][T11660] </TASK> [ 236.863696][T11660] Mem-Info: [ 237.381066][T11660] active_anon:4844 inactive_anon:0 isolated_anon:0 [ 237.381066][T11660] active_file:1102 inactive_file:38356 isolated_file:0 [ 237.381066][T11660] unevictable:768 dirty:247 writeback:0 [ 237.381066][T11660] slab_reclaimable:9747 slab_unreclaimable:101311 [ 237.381066][T11660] mapped:28551 shmem:1443 pagetables:880 [ 237.381066][T11660] sec_pagetables:0 bounce:0 [ 237.381066][T11660] kernel_misc_reclaimable:0 [ 237.381066][T11660] free:1339573 free_pcp:364 free_cma:0 [ 237.430291][T11660] Node 0 active_anon:19416kB inactive_anon:0kB active_file:4408kB inactive_file:153352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114252kB dirty:968kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10928kB pagetables:3564kB sec_pagetables:0kB all_unreclaimable? no [ 237.463566][T11660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 237.494194][T11660] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.522449][T11660] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 237.528699][T11660] Node 0 DMA32 free:1442228kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19376kB inactive_anon:0kB active_file:4408kB inactive_file:153032kB unevictable:1536kB writepending:968kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:168kB free_cma:0kB [ 237.562277][T11660] lowmem_reserve[]: 0 0 0 0 0 [ 237.567448][T11660] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 237.595194][T11660] lowmem_reserve[]: 0 0 0 0 0 [ 237.600334][T11660] Node 1 Normal free:3902152kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 237.629908][T11660] lowmem_reserve[]: 0 0 0 0 0 [ 237.634768][T11660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 237.648324][T11660] Node 0 DMA32: 122*4kB (UE) 100*8kB (UME) 194*16kB (UME) 70*32kB (UME) 498*64kB (UE) 266*128kB (UME) 57*256kB (UM) 10*512kB (UM) 8*1024kB (UME) 3*2048kB (UM) 326*4096kB (M) = 1441896kB [ 237.669442][T11660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 237.681932][T11660] Node 1 Normal: 196*4kB (UME) 73*8kB (UME) 61*16kB (UME) 225*32kB (UME) 94*64kB (UME) 26*128kB (UME) 13*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (UM) = 3902152kB [ 237.701002][T11660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.711299][T11660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.720927][T11660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.730911][T11660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.743208][T11660] 40901 total pagecache pages [ 237.748052][T11660] 0 pages in swap cache [ 237.753044][T11660] Free swap = 124996kB [ 237.757804][T11660] Total swap = 124996kB [ 237.762030][T11660] 2097051 pages RAM [ 237.766685][T11660] 0 pages HighMem/MovableOnly [ 237.771442][T11660] 427902 pages reserved [ 237.776652][T11660] 0 pages cma reserved [ 238.712699][T11669] warning: `syz.3.2802' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 238.728058][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.735635][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.761063][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.768317][T11675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.776626][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.783781][T11675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.818191][T11675] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 239.083653][T11690] netlink: 'syz.3.2811': attribute type 3 has an invalid length. [ 239.612556][T11712] pim6reg: entered allmulticast mode [ 239.983942][T11721] netlink: 'syz.2.2824': attribute type 11 has an invalid length. [ 240.313282][T11731] openvswitch: netlink: IPv4 tunnel dst address is zero [ 240.345841][T11734] xt_hashlimit: overflow, try lower: 0/0 [ 241.303128][T11768] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 241.355189][T11771] openvswitch: netlink: VXLAN extension 26 out of range max 1 [ 242.072540][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2860'. [ 242.216453][T11800] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 242.256277][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2862'. [ 242.353034][T11805] ip6gre1: entered promiscuous mode [ 243.182597][T11844] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2884'. [ 243.195487][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2884'. [ 243.228400][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2884'. [ 243.684608][T11859] veth2: entered allmulticast mode [ 243.728516][T11863] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2892'. [ 245.305698][T11912] netlink: 'syz.3.2911': attribute type 10 has an invalid length. [ 245.656929][T11920] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.861746][T11924] openvswitch: netlink: IP tunnel dst address not specified [ 247.367378][T11912] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.374866][T11912] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.417248][T11912] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.424636][T11912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.432246][T11912] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.439457][T11912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.493303][T11912] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 247.800776][T11947] xt_NFQUEUE: number of total queues is 0 [ 248.185657][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2933'. [ 248.195479][T11959] xt_time: unknown flags 0x4 [ 248.215578][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2933'. [ 248.255610][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2933'. [ 248.568435][T11979] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2938'. [ 248.699320][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2941'. [ 249.311649][T12008] netlink: 'syz.0.2951': attribute type 1 has an invalid length. [ 249.362288][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'. [ 249.445809][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 250.330332][T12056] netlink: 'syz.1.2968': attribute type 5 has an invalid length. [ 250.409831][T12056] : entered promiscuous mode [ 250.488974][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2972'. [ 250.546844][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 250.657174][T12070] netlink: 'syz.2.2974': attribute type 2 has an invalid length. [ 253.046410][T12168] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.145496][T12174] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3018'. [ 253.650769][T12198] __nla_validate_parse: 1 callbacks suppressed [ 253.650791][T12198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3029'. [ 254.476326][T12226] SET target dimension over the limit! [ 254.501606][T12228] netlink: 'syz.0.3044': attribute type 9 has an invalid length. [ 254.535175][T12231] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 254.983335][T12251] geneve2: entered promiscuous mode [ 255.014449][T12251] geneve2: entered allmulticast mode [ 255.069329][T12254] No such timeout policy "syz0" [ 255.731266][T12282] netlink: 'syz.4.3070': attribute type 7 has an invalid length. [ 255.948677][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967145][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.115785][T12297] netlink: 'syz.1.3077': attribute type 21 has an invalid length. [ 256.661036][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 256.705934][T12318] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3089'. [ 256.738059][T12318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.795725][T12320] !��: renamed from bond_slave_0 (while UP) [ 256.907690][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'. [ 257.345517][T12343] netlink: 'syz.3.3100': attribute type 1 has an invalid length. [ 257.984819][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3113'. [ 258.258276][T12385] ip6t_srh: unknown srh invflags 4449 [ 258.513477][T12393] syz.4.3122 uses obsolete (PF_INET,SOCK_PACKET) [ 258.554986][T12358] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.562337][T12358] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.731515][T12397] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3124'. [ 259.164182][T12358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.233478][T12358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.669231][T12358] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.678739][T12358] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.688057][T12358] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.697843][T12358] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.145776][T12407] bridge3: entered promiscuous mode [ 260.153758][T12407] bridge3: entered allmulticast mode [ 260.153802][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3128'. [ 260.206221][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 260.581201][T12423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3137'. [ 261.006438][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3147'. [ 261.373307][T12458] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.535407][T12454] warn_alloc: 3 callbacks suppressed [ 262.535427][T12454] syz.1.3149: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.561755][T12454] CPU: 1 UID: 0 PID: 12454 Comm: syz.1.3149 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 262.561783][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.561796][T12454] Call Trace: [ 262.561804][T12454] <TASK> [ 262.561812][T12454] dump_stack_lvl+0x241/0x360 [ 262.561845][T12454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.561868][T12454] ? __pfx__printk+0x10/0x10 [ 262.561893][T12454] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 262.561922][T12454] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 262.561953][T12454] warn_alloc+0x278/0x410 [ 262.561979][T12454] ? __pfx_warn_alloc+0x10/0x10 [ 262.562007][T12454] ? veth_dev_init+0x35f/0x550 [ 262.562039][T12454] ? __get_vm_area_node+0x1c8/0x2d0 [ 262.562087][T12454] ? __get_vm_area_node+0x25c/0x2d0 [ 262.562139][T12454] __vmalloc_node_range_noprof+0x62f/0x1380 [ 262.562170][T12454] ? look_up_lock_class+0x77/0x170 [ 262.562231][T12454] ? rcu_is_watching+0x15/0xb0 [ 262.562257][T12454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.562281][T12454] ? rcu_is_watching+0x15/0xb0 [ 262.562305][T12454] ? trace_kmalloc+0x1f/0xd0 [ 262.562333][T12454] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 262.562365][T12454] ? __kvmalloc_node_noprof+0x72/0x190 [ 262.562390][T12454] __kvmalloc_node_noprof+0x142/0x190 [ 262.562413][T12454] ? veth_dev_init+0x35f/0x550 [ 262.562438][T12454] veth_dev_init+0x35f/0x550 [ 262.562469][T12454] register_netdevice+0x6d7/0x1b70 [ 262.562500][T12454] ? _get_random_bytes+0x25d/0x2c0 [ 262.562538][T12454] ? snprintf+0xda/0x120 [ 262.562577][T12454] ? __pfx_register_netdevice+0x10/0x10 [ 262.562607][T12454] ? __pfx_snprintf+0x10/0x10 [ 262.562630][T12454] ? __asan_memset+0x23/0x50 [ 262.562663][T12454] veth_newlink+0x66a/0xb70 [ 262.562693][T12454] ? __pfx_veth_newlink+0x10/0x10 [ 262.562784][T12454] ? alloc_netdev_mqs+0xe01/0x1210 [ 262.562824][T12454] ? rtnl_create_link+0x95b/0xc90 [ 262.562854][T12454] ? __pfx_veth_newlink+0x10/0x10 [ 262.562877][T12454] rtnl_newlink_create+0x37b/0xbd0 [ 262.562906][T12454] ? __pfx_aa_get_newest_label+0x10/0x10 [ 262.562943][T12454] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 262.562969][T12454] ? __pfx___mutex_lock+0x10/0x10 [ 262.563008][T12454] ? ns_capable+0x8a/0xf0 [ 262.563036][T12454] rtnl_newlink+0x167a/0x1d90 [ 262.563071][T12454] ? stack_depot_save_flags+0x37/0x940 [ 262.563118][T12454] ? __pfx_rtnl_newlink+0x10/0x10 [ 262.563148][T12454] ? __netlink_deliver_tap+0x561/0x7f0 [ 262.563183][T12454] ? __pfx_validate_chain+0x10/0x10 [ 262.563205][T12454] ? __sock_sendmsg+0x221/0x270 [ 262.563235][T12454] ? ____sys_sendmsg+0x53a/0x860 [ 262.563259][T12454] ? __sys_sendmsg+0x269/0x350 [ 262.563282][T12454] ? do_syscall_64+0xf3/0x230 [ 262.563308][T12454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.563419][T12454] ? __pfx_lock_release+0x10/0x10 [ 262.563467][T12454] ? __pfx_rtnl_newlink+0x10/0x10 [ 262.563502][T12454] rtnetlink_rcv_msg+0x791/0xcf0 [ 262.563532][T12454] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 262.563579][T12454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.563621][T12454] ? ref_tracker_free+0x643/0x7e0 [ 262.563650][T12454] netlink_rcv_skb+0x206/0x480 [ 262.563686][T12454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.563719][T12454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.563776][T12454] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.563812][T12454] netlink_unicast+0x7f6/0x990 [ 262.563845][T12454] ? __pfx_netlink_unicast+0x10/0x10 [ 262.563867][T12454] ? __virt_addr_valid+0x45f/0x530 [ 262.563885][T12454] ? __phys_addr_symbol+0x2f/0x70 [ 262.563901][T12454] ? __check_object_size+0x47a/0x730 [ 262.563930][T12454] netlink_sendmsg+0x8de/0xcb0 [ 262.563967][T12454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.563997][T12454] ? aa_sock_msg_perm+0x91/0x160 [ 262.564029][T12454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.564054][T12454] __sock_sendmsg+0x221/0x270 [ 262.564082][T12454] ____sys_sendmsg+0x53a/0x860 [ 262.564110][T12454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.564129][T12454] ? __fget_files+0x2a/0x410 [ 262.564158][T12454] ? __fget_files+0x2a/0x410 [ 262.564190][T12454] __sys_sendmsg+0x269/0x350 [ 262.564215][T12454] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.564271][T12454] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.564298][T12454] ? do_syscall_64+0x100/0x230 [ 262.564326][T12454] ? do_syscall_64+0xb6/0x230 [ 262.564351][T12454] do_syscall_64+0xf3/0x230 [ 262.564374][T12454] ? clear_bhb_loop+0x35/0x90 [ 262.564401][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.564424][T12454] RIP: 0033:0x7f4b5358d169 [ 262.564441][T12454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.564455][T12454] RSP: 002b:00007f4b54385038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.564476][T12454] RAX: ffffffffffffffda RBX: 00007f4b537a5fa0 RCX: 00007f4b5358d169 [ 262.564489][T12454] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 262.564500][T12454] RBP: 00007f4b5360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 262.564510][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.564520][T12454] R13: 0000000000000000 R14: 00007f4b537a5fa0 R15: 00007ffe3fdc37a8 [ 262.564544][T12454] </TASK> [ 262.564568][T12454] Mem-Info: [ 263.084069][T12454] active_anon:4830 inactive_anon:0 isolated_anon:0 [ 263.084069][T12454] active_file:1102 inactive_file:38366 isolated_file:0 [ 263.084069][T12454] unevictable:768 dirty:281 writeback:0 [ 263.084069][T12454] slab_reclaimable:9846 slab_unreclaimable:102365 [ 263.084069][T12454] mapped:28562 shmem:1401 pagetables:892 [ 263.084069][T12454] sec_pagetables:0 bounce:0 [ 263.084069][T12454] kernel_misc_reclaimable:0 [ 263.084069][T12454] free:1338553 free_pcp:168 free_cma:0 [ 263.131337][T12454] Node 0 active_anon:19320kB inactive_anon:0kB active_file:4408kB inactive_file:153392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114248kB dirty:1120kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11108kB pagetables:3568kB sec_pagetables:0kB all_unreclaimable? no [ 263.165333][T12454] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 263.195776][T12454] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.223169][T12454] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 263.229450][T12454] Node 0 DMA32 free:1436696kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19280kB inactive_anon:0kB active_file:4408kB inactive_file:153072kB unevictable:1536kB writepending:1148kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:1044kB local_pcp:780kB free_cma:0kB [ 263.260994][T12454] lowmem_reserve[]: 0 0 0 0 0 [ 263.266260][T12454] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 263.293176][T12454] lowmem_reserve[]: 0 0 0 0 0 [ 263.298944][T12454] Node 1 Normal free:3902152kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.327921][T12454] lowmem_reserve[]: 0 0 0 0 0 [ 263.332755][T12454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 263.345682][T12454] Node 0 DMA32: 5*4kB (UE) 289*8kB (UME) 93*16kB (UM) 17*32kB (UME) 485*64kB (UME) 310*128kB (UME) 84*256kB (UM) 25*512kB (UM) 24*1024kB (UME) 4*2048kB (UM) 316*4096kB (UM) = 1436492kB [ 263.365443][T12454] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 263.377440][T12454] Node 1 Normal: 196*4kB (UME) 73*8kB (UME) 61*16kB (UME) 225*32kB (UME) 94*64kB (UME) 26*128kB (UME) 13*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (UM) = 3902152kB [ 263.397699][T12454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.407481][T12454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.416901][T12454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.426672][T12454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.436141][T12454] 40872 total pagecache pages [ 263.441021][T12454] 0 pages in swap cache [ 263.445200][T12454] Free swap = 124996kB [ 263.449589][T12454] Total swap = 124996kB [ 263.454490][T12454] 2097051 pages RAM [ 263.467106][T12454] 0 pages HighMem/MovableOnly [ 263.471885][T12454] 427902 pages reserved [ 263.476715][T12454] 0 pages cma reserved [ 265.432310][T12522] xt_hashlimit: max too large, truncated to 1048576 [ 265.700557][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3185'. [ 266.347754][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 266.510487][T12569] lo speed is unknown, defaulting to 1000 [ 266.551431][T12569] lo speed is unknown, defaulting to 1000 [ 266.580922][T12569] lo speed is unknown, defaulting to 1000 [ 266.602353][T12573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.609925][T12573] IPv6: NLM_F_CREATE should be set when creating new route [ 266.617320][T12573] IPv6: NLM_F_CREATE should be set when creating new route [ 266.622382][T12569] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 266.624555][T12573] IPv6: NLM_F_CREATE should be set when creating new route [ 266.723808][T12569] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 266.813837][T12569] lo speed is unknown, defaulting to 1000 [ 266.854250][T12569] lo speed is unknown, defaulting to 1000 [ 266.871246][T12569] lo speed is unknown, defaulting to 1000 [ 266.895018][T12569] lo speed is unknown, defaulting to 1000 [ 266.909595][T12569] lo speed is unknown, defaulting to 1000 [ 267.116473][T12591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3212'. [ 267.545178][T12611] openvswitch: netlink: EtherType 50a is less than min 600 [ 268.227349][T12638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3236'. [ 268.246093][T12638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3236'. [ 268.446481][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3241'. [ 268.489878][T12648] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3241'. [ 268.554674][T12648] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3241'. [ 268.678001][T12658] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 269.229141][T12681] netlink: 'syz.0.3257': attribute type 21 has an invalid length. [ 269.264469][T12681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3257'. [ 269.397222][T12688] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 269.565008][T12696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3264'. [ 270.175575][T12723] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 270.764568][T12750] __nla_validate_parse: 2 callbacks suppressed [ 270.764591][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3285'. [ 270.822825][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3285'. [ 270.878612][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.026345][T12758] sctp: [Deprecated]: syz.4.3290 (pid 12758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.026345][T12758] Use struct sctp_sack_info instead [ 271.339706][T12772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3297'. [ 271.543723][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 272.173737][T12792] netlink: 'syz.2.3306': attribute type 32 has an invalid length. [ 272.182265][T12790] xt_policy: too many policy elements [ 273.045498][T12822] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 273.095489][T12822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3318'. [ 273.322172][T12833] xt_TCPMSS: Only works on TCP SYN packets [ 274.407301][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3346'. [ 274.472409][T12878] gre1: entered promiscuous mode [ 274.681146][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 274.718603][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 274.739617][T12890] Cannot find del_set index 2 as target [ 274.892659][T12894] netlink: 'syz.4.3355': attribute type 10 has an invalid length. [ 274.955831][T12894] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3355'. [ 274.964986][T12894] team0: entered promiscuous mode [ 275.020707][T12894] team_slave_0: entered promiscuous mode [ 275.052562][T12894] team_slave_1: entered promiscuous mode [ 275.062755][T12894] bridge0: entered promiscuous mode [ 275.072182][T12894] bridge0: port 3(team0) entered blocking state [ 275.079942][T12894] bridge0: port 3(team0) entered disabled state [ 275.086805][T12894] team0: entered allmulticast mode [ 275.092061][T12894] team_slave_0: entered allmulticast mode [ 275.098390][T12894] team_slave_1: entered allmulticast mode [ 275.104245][T12894] bridge0: entered allmulticast mode [ 275.181585][T12894] team0: left allmulticast mode [ 275.199291][T12894] team_slave_0: left allmulticast mode [ 275.204981][T12894] team_slave_1: left allmulticast mode [ 275.236368][T12894] bridge0: left allmulticast mode [ 275.478175][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 275.513209][T12913] tc_dump_action: action bad kind [ 275.698631][T12926] bond_slave_0: entered promiscuous mode [ 275.704837][T12926] bond_slave_1: entered promiscuous mode [ 276.406647][T12957] __nla_validate_parse: 2 callbacks suppressed [ 276.406672][T12957] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3384'. [ 277.857459][T13004] dvmrp0: entered allmulticast mode [ 278.239186][T13019] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 278.267761][T13019] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 278.938298][T13053] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3427'. [ 279.000848][T13057] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 279.205694][T13063] netlink: 'syz.3.3430': attribute type 11 has an invalid length. [ 279.281691][T13065] netlink: 'syz.2.3431': attribute type 58 has an invalid length. [ 279.314707][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3431'. [ 280.400223][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3449'. [ 280.412642][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3446'. [ 280.448346][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3449'. [ 280.482617][T13112] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3446'. [ 280.873960][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'. [ 281.133422][T13138] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3459'. [ 281.170102][T13138] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3459'. [ 281.828236][T13173] __nla_validate_parse: 1 callbacks suppressed [ 281.828267][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'. [ 281.949759][T13177] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 282.019021][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3476'. [ 282.318781][T13193] netlink: 'syz.3.3480': attribute type 3 has an invalid length. [ 282.391927][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3480'. [ 282.520576][T13201] openvswitch: netlink: Tunnel attr 52 out of range max 16 [ 283.253725][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 283.316330][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3500'. [ 283.325512][T13239] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 283.329913][T13239] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.367665][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3500'. [ 283.570430][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 283.729978][T13254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3505'. [ 284.043767][T13270] netlink: 'syz.4.3512': attribute type 11 has an invalid length. [ 284.937435][T13307] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3527'. [ 285.371654][T13327] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3534'. [ 285.846203][T13347] ax25_connect(): syz.0.3543 uses autobind, please contact jreuter@yaina.de [ 285.853061][T13341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.916435][T13341] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.965008][T13341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.000530][T12365] lo speed is unknown, defaulting to 1000 [ 286.075779][T13357] netlink: 'syz.0.3547': attribute type 1 has an invalid length. [ 286.135592][T13341] syz.3.3541 (13341) used greatest stack depth: 18288 bytes left [ 286.263462][T13362] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 286.699726][T13381] vti0: entered promiscuous mode [ 287.586578][T13417] __nla_validate_parse: 2 callbacks suppressed [ 287.586599][T13417] netlink: 412 bytes leftover after parsing attributes in process `syz.4.3569'. [ 288.027218][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 288.032787][T13436] ip6gre1: entered promiscuous mode [ 288.750022][T13473] netlink: 'syz.1.3590': attribute type 10 has an invalid length. [ 288.814039][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.857572][T13473] bond0: (slave team0): Enslaving as an active interface with an up link [ 288.966566][T13480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3594'. [ 289.132058][T13486] netlink: 'syz.3.3597': attribute type 5 has an invalid length. [ 289.278299][T13490] netlink: 'syz.4.3599': attribute type 10 has an invalid length. [ 289.294616][T13492] netlink: 'syz.2.3600': attribute type 10 has an invalid length. [ 289.346102][T13490] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 289.377778][T13490] team0: Port device wlan1 added [ 289.396635][T13492] macvlan0: entered allmulticast mode [ 289.429107][T13492] veth1_vlan: entered allmulticast mode [ 289.434931][T13498] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 289.476820][T13492] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 289.968491][T13519] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3613'. [ 290.005513][T13519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3613'. [ 290.037763][T13519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3613'. [ 290.077118][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3613'. [ 290.447197][T13541] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 290.913467][T13559] netlink: 'syz.1.3632': attribute type 16 has an invalid length. [ 290.945406][T13559] netlink: 'syz.1.3632': attribute type 17 has an invalid length. [ 293.371321][T13656] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3676'. [ 293.381222][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 293.398193][T13654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3675'. [ 293.588900][T13664] xt_CONNSECMARK: invalid mode: 0 [ 293.875833][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'. [ 294.129453][T13684] netlink: 'syz.2.3691': attribute type 3 has an invalid length. [ 294.145158][T13687] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 294.165660][T13684] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3691'. [ 294.399724][T13696] netlink: 'syz.2.3696': attribute type 1 has an invalid length. [ 294.419682][T13696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3696'. [ 294.441101][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 295.173458][T13728] netlink: 'syz.1.3712': attribute type 10 has an invalid length. [ 295.328399][T13728] team0: Port device wlan1 added [ 295.518185][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'. [ 295.626090][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3720'. [ 295.797422][T13755] netlink: 'syz.4.3726': attribute type 6 has an invalid length. [ 296.836963][T13795] netlink: 'syz.1.3745': attribute type 1 has an invalid length. [ 296.844783][T13795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3745'. [ 297.031349][T13805] netlink: 'syz.3.3749': attribute type 10 has an invalid length. [ 297.047913][T13805] team0: Port device wlan1 added [ 297.809969][T13838] syz.1.3767 uses old SIOCAX25GETINFO [ 298.624925][T13873] __nla_validate_parse: 1 callbacks suppressed [ 298.624946][T13873] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3786'. [ 298.657922][T13877] openvswitch: netlink: IP tunnel dst address not specified [ 298.678650][T13876] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 298.698441][T13876] netlink: 'syz.3.3785': attribute type 3 has an invalid length. [ 298.750587][T13876] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3785'. [ 299.109998][T13895] netlink: 'syz.0.3795': attribute type 32 has an invalid length. [ 299.190907][T12367] IPVS: starting estimator thread 0... [ 299.224969][T13900] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3796'. [ 299.285719][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.309845][T13899] IPVS: using max 17 ests per chain, 40800 per kthread [ 299.355454][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.398119][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.415438][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.456503][T13900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.512766][T13900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.542032][T13900] batadv_slave_1: entered promiscuous mode [ 299.786255][T13924] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 299.937051][T13928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3811'. [ 299.961443][T13928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3811'. [ 300.198882][T13938] netlink: 'syz.3.3816': attribute type 2 has an invalid length. [ 300.298364][T13945] nbd: couldn't find a device at index 1255035857 [ 300.520060][T13953] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 300.897765][T13974] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3831'. [ 301.811951][T14009] netlink: 'syz.2.3844': attribute type 1 has an invalid length. [ 301.827722][T14009] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3844'. [ 302.071494][T14019] netlink: 'syz.0.3849': attribute type 5 has an invalid length. [ 302.515499][T14034] ksmbd: Unknown IPC event: 4, ignore. [ 302.689264][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3861'. [ 303.172896][T14063] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 303.586387][T14078] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 303.594845][T14078] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3878'. [ 303.662313][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 303.707317][T14083] openvswitch: netlink: Duplicate or invalid key (type 0). [ 303.735713][T14083] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.754632][T14085] netlink: 'syz.1.3882': attribute type 13 has an invalid length. [ 303.785781][T14085] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3882'. [ 303.817128][T14085] syz_tun: refused to change device tx_queue_len [ 303.835858][T14085] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 304.789105][T14127] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 304.886655][T14133] netlink: 'syz.3.3906': attribute type 11 has an invalid length. [ 304.916459][T14133] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3906'. [ 305.349897][T14153] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 305.613466][T14162] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.081927][T14181] netlink: 'syz.1.3929': attribute type 11 has an invalid length. [ 306.755657][T14208] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 306.857130][T14212] netlink: 'syz.2.3944': attribute type 3 has an invalid length. [ 307.114598][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 307.133930][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3951'. [ 307.592864][T14243] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 307.841361][T14250] gre1: entered allmulticast mode [ 308.031466][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3969'. [ 308.305622][T14272] openvswitch: netlink: IPv6 tunnel dst address is zero [ 308.429703][T14277] netlink: 'syz.1.3978': attribute type 11 has an invalid length. [ 308.473417][T14281] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3980'. [ 308.746252][T14292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.841614][T14295] netlink: 'syz.4.3987': attribute type 3 has an invalid length. [ 309.056888][T14304] netlink: 'syz.0.3991': attribute type 2 has an invalid length. [ 309.145373][T14304] netlink: 'syz.0.3991': attribute type 8 has an invalid length. [ 309.170320][T14304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3991'. [ 309.744855][T14335] netlink: 'syz.0.4004': attribute type 21 has an invalid length. [ 309.799728][T14335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4004'. [ 309.815541][T14335] netlink: 'syz.0.4004': attribute type 1 has an invalid length. [ 309.823809][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4004'. [ 310.136256][T14358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4013'. [ 310.289420][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4014'. [ 310.566032][T14375] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 311.405417][T14415] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 312.135513][T14447] xt_TCPMSS: Only works on TCP SYN packets [ 312.184072][T14448] xt_connbytes: Forcing CT accounting to be enabled [ 312.212436][T14448] SET target dimension over the limit! [ 312.393406][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4052'. [ 312.456705][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'. [ 312.851525][T14485] netlink: 'syz.1.4062': attribute type 21 has an invalid length. [ 313.129551][T14494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.371983][T14505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4071'. [ 313.406514][T14510] SET target dimension over the limit! [ 313.668428][T14519] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 315.385574][T14592] netlink: 'syz.2.4114': attribute type 1 has an invalid length. [ 315.423705][T14592] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4114'. [ 316.242001][T14632] openvswitch: netlink: Missing valid actions attribute. [ 316.262015][T14632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.453285][T14642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4138'. [ 316.774797][T14655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.018978][T14665] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 317.073436][T14668] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4150'. [ 317.252672][T14675] netlink: 'syz.2.4154': attribute type 2 has an invalid length. [ 317.283313][T14675] netlink: 'syz.2.4154': attribute type 2 has an invalid length. [ 317.342410][T14679] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 317.381210][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388080][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.564556][T14685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4159'. [ 317.655781][T14691] ip6t_srh: unknown srh match flags 4000 [ 318.568032][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 318.611100][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 319.005504][T14751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4185'. [ 319.064355][T14751] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4185'. [ 319.253051][T14755] pimreg: entered allmulticast mode [ 319.465822][T14765] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.805630][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4197'. [ 320.004813][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4200'. [ 321.775507][T14868] __nla_validate_parse: 1 callbacks suppressed [ 321.775528][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 321.852118][T14868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4230'. [ 322.082100][T14883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4237'. [ 323.655626][T14957] netlink: 'syz.3.4264': attribute type 1 has an invalid length. [ 323.663568][T14957] netlink: 'syz.3.4264': attribute type 1 has an invalid length. [ 323.778841][T14961] netlink: 'syz.1.4266': attribute type 6 has an invalid length. [ 324.442086][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 324.531568][T15000] netlink: 'syz.4.4280': attribute type 11 has an invalid length. [ 325.111341][T15023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4291'. [ 325.475678][T15043] netlink: 'syz.2.4298': attribute type 2 has an invalid length. [ 325.523680][T15043] Tq�: entered promiscuous mode [ 326.564339][T15087] netlink: 'syz.1.4316': attribute type 9 has an invalid length. [ 326.629094][T15092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4318'. [ 327.893833][T15152] lo: left promiscuous mode [ 327.908126][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 327.959587][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.030708][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.051888][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4343'. [ 328.228387][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.300636][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.372765][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 328.382292][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.428487][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.461340][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 328.623103][T15152] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.631133][T15152] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.689809][T15177] netlink: 'syz.4.4352': attribute type 2 has an invalid length. [ 329.285971][T15152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.347278][T15152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.366130][T15152] batadv_slave_1: left promiscuous mode [ 329.811339][T15152] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.831253][T15152] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.841391][T15152] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.850845][T15152] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.926761][T15152] batadv1: left promiscuous mode [ 329.932133][T15152] batadv1: left allmulticast mode [ 329.946878][T15152] vti0: left promiscuous mode [ 330.708880][T15209] netlink: 'syz.1.4364': attribute type 3 has an invalid length. [ 332.185733][T15279] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 332.628715][T15301] xt_hashlimit: max too large, truncated to 1048576 [ 332.646037][T15301] Timeout policy `syz1' can only be used by L3 protocol number 0 [ 333.248765][T15325] openvswitch: netlink: Key type 29 is not supported [ 333.315711][T15331] netlink: 'syz.0.4410': attribute type 2 has an invalid length. [ 334.879341][T15394] __nla_validate_parse: 78 callbacks suppressed [ 334.879364][T15394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4436'. [ 334.950126][T15398] xt_l2tp: missing protocol rule (udp|l2tpip) [ 335.930760][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'. [ 335.946175][T15447] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 335.954972][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4457'. [ 336.005376][T15447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4458'. [ 336.840742][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'. [ 336.867707][T15489] netlink: 'syz.2.4474': attribute type 2 has an invalid length. [ 338.106151][T15547] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4497'. [ 338.159459][T15547] caif0: entered allmulticast mode [ 338.395102][T15561] netlink: 'syz.2.4502': attribute type 1 has an invalid length. [ 338.421179][T15561] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4502'. [ 339.767510][T15627] IPv6: Can't replace route, no match found [ 340.232615][T15648] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4536'. [ 340.466967][T15659] netlink: 'syz.3.4540': attribute type 1 has an invalid length. [ 340.516558][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4542'. [ 340.758015][T15672] netlink: 'syz.3.4545': attribute type 2 has an invalid length. [ 340.800706][T15676] netlink: 'syz.1.4547': attribute type 2 has an invalid length. [ 340.836579][T15676] netlink: 'syz.1.4547': attribute type 9 has an invalid length. [ 340.854509][T15676] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4547'. [ 341.561827][T15706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4562'. [ 341.996368][T15727] netlink: 'syz.1.4571': attribute type 2 has an invalid length. [ 342.025397][T15727] netlink: 'syz.1.4571': attribute type 1 has an invalid length. [ 342.466062][T15747] netlink: 'syz.2.4583': attribute type 1 has an invalid length. [ 342.474152][T15749] xt_connbytes: Forcing CT accounting to be enabled [ 342.488019][T15747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4583'. [ 342.503024][T15749] xt_bpf: check failed: parse error [ 343.317896][T15785] xt_connbytes: Forcing CT accounting to be enabled [ 343.484202][T15792] netlink: 'syz.0.4604': attribute type 4 has an invalid length. [ 343.516974][T15792] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4604'. [ 343.759545][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4610'. [ 344.355511][T15830] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4623'. [ 344.434692][T15836] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 344.442708][T15837] xt_l2tp: v2 doesn't support IP mode [ 344.622764][T15844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4630'. [ 344.897691][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4634'. [ 345.175839][T15867] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 345.576583][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 345.606317][T15884] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 345.625462][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'. [ 345.661217][T15890] netlink: 'syz.4.4652': attribute type 1 has an invalid length. [ 346.089110][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4661'. [ 346.575721][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4671'. [ 346.584814][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4671'. [ 346.671584][T15929] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4671'. [ 346.707661][T15934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4674'. [ 346.832806][T15940] netlink: 'syz.2.4676': attribute type 4 has an invalid length. [ 347.268929][T15960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4686'. [ 347.275733][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'. [ 347.629062][T15976] netlink: 'syz.4.4693': attribute type 16 has an invalid length. [ 347.657342][T15976] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4693'. [ 347.818317][T15984] bridge_slave_1: left allmulticast mode [ 347.824113][T15984] bridge_slave_1: left promiscuous mode [ 347.891603][T15984] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.929609][T15991] netlink: 'syz.2.4701': attribute type 10 has an invalid length. [ 347.946085][T15984] bridge_slave_0: left allmulticast mode [ 347.956576][T15984] bridge_slave_0: left promiscuous mode [ 347.970227][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.013196][T15984] bond0: (slave bridge0): Releasing backup interface [ 348.511111][T15991] team0 (unregistering): Port device C� removed [ 348.529896][T15991] team0 (unregistering): Port device team_slave_1 removed [ 348.623840][T16008] bond2: entered promiscuous mode [ 348.644883][T16008] bond2: entered allmulticast mode [ 348.677042][T16008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.532495][T16048] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 350.226930][T16085] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 350.295448][T16085] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 350.324019][T16085] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 351.516316][T16147] netlink: 'syz.1.4759': attribute type 1 has an invalid length. [ 351.549536][T16147] __nla_validate_parse: 8 callbacks suppressed [ 351.549563][T16147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4759'. [ 351.652235][T16149] netlink: 'syz.2.4761': attribute type 1 has an invalid length. [ 352.396458][T16179] netlink: 'syz.4.4773': attribute type 21 has an invalid length. [ 352.406518][T16183] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 352.497208][T16189] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 352.615994][T16192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4778'. [ 352.638880][T16192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4778'. [ 353.159998][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4788'. [ 353.205413][T16219] netlink: 'syz.1.4788': attribute type 3 has an invalid length. [ 353.393668][T16228] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4793'. [ 353.445893][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4793'. [ 354.291933][T16272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4806'. [ 354.314794][T16270] netdevsim netdevsim2 ������: renamed from netdevsim0 [ 354.325643][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 354.775509][T16291] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 354.808302][T16293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4814'. [ 354.826627][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4813'. [ 355.327361][T16316] ip6t_REJECT: ECHOREPLY is not supported [ 355.395953][T16320] xt_ecn: cannot match TCP bits for non-tcp packets [ 356.042297][T16355] netlink: 'syz.4.4840': attribute type 1 has an invalid length. [ 356.737817][T16386] IPVS: length: 231 != 24 [ 357.388467][T16416] __nla_validate_parse: 2 callbacks suppressed [ 357.388489][T16416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4863'. [ 357.444671][T16416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4863'. [ 357.475482][T16416] netlink: 'syz.0.4863': attribute type 6 has an invalid length. [ 357.716823][T16433] netlink: 'syz.4.4870': attribute type 16 has an invalid length. [ 357.745813][T16433] netlink: 'syz.4.4870': attribute type 17 has an invalid length. [ 357.827224][T16433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.007338][T16442] xt_hashlimit: size too large, truncated to 1048576 [ 358.095547][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4876'. [ 358.104574][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4876'. [ 358.135305][T16447] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4876'. [ 358.766908][T16476] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4887'. [ 359.391877][T16502] xt_CT: No such helper "snmp" [ 359.923361][T16528] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4909'. [ 360.229905][T16538] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.266602][T16547] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4917'. [ 360.276008][T16547] tc_dump_action: action bad kind [ 360.870811][T16574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4932'. [ 361.704833][T16614] netlink: 'syz.0.4952': attribute type 1 has an invalid length. [ 361.756044][T16614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4952'. [ 361.849872][T16619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 361.872828][T16619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 361.911491][T16619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 361.941197][T16619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.728137][T16654] bond0: (slave team0): Releasing backup interface [ 362.757095][T16654] bond0: (slave bond_slave_0): Releasing backup interface [ 362.773694][T16654] bond0: (slave bond_slave_1): Releasing backup interface [ 362.801537][T16654] team0: Port device team_slave_0 removed [ 362.814428][T16654] team0: Port device team_slave_1 removed [ 362.846028][T16654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.874047][T16654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.940099][T16654] team0: Port device wlan1 removed [ 363.351688][T16680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.665722][T16694] __nla_validate_parse: 1 callbacks suppressed [ 363.665749][T16694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4992'. [ 363.973720][T16670] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 364.091928][T16709] netlink: zone id is out of range [ 364.135378][T16709] netlink: zone id is out of range [ 364.746796][T16738] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5014'. [ 364.808443][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5017'. [ 365.225717][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 365.449780][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5031'. [ 365.662624][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5036'. [ 365.690815][T16785] netlink: 'syz.2.5037': attribute type 30 has an invalid length. [ 366.054659][T16802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.969287][T16845] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 367.715164][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 367.747838][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 367.772966][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 367.938392][T16866] infiniband syz2: set down [ 367.943340][T16866] infiniband syz2: added vxcan1 [ 367.956752][T12367] vxcan1 speed is unknown, defaulting to 1000 [ 368.080441][T16866] RDS/IB: syz2: added [ 368.114601][T16866] smc: adding ib device syz2 with port count 1 [ 368.141934][T16866] smc: ib device syz2 port 1 has pnetid [ 368.177230][ T26] vxcan1 speed is unknown, defaulting to 1000 [ 368.199070][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 368.756752][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 368.774677][T16904] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 368.843867][T16906] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5090'. [ 368.868097][T16906] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5090'. [ 369.046250][T16914] netlink: 'syz.1.5093': attribute type 2 has an invalid length. [ 369.074853][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5093'. [ 369.102411][T16918] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 369.214587][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 369.527429][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5101'. [ 369.576868][T16934] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5103'. [ 369.675121][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 369.743394][T16938] netlink: 'syz.2.5105': attribute type 11 has an invalid length. [ 370.093128][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 370.515476][T16972] lo: left allmulticast mode [ 370.550288][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 370.614711][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 370.690733][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 370.939439][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 371.019142][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 371.338268][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.345859][T16972] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.531059][T16972] bond_slave_0: left promiscuous mode [ 371.537244][T16972] bond_slave_1: left promiscuous mode [ 372.055188][T16972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.117481][T16972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.340931][T16972] vlan0: left promiscuous mode [ 372.504588][T16972] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.514276][T16972] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.523943][T16972] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.535024][T16972] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.564962][T16972] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 372.644070][T16972] gretap1: left promiscuous mode [ 372.652321][T16972] gretap1: left allmulticast mode [ 372.664433][T16972] ip6gre1: left promiscuous mode [ 372.680866][T16972] gre1: left allmulticast mode [ 372.695845][T16974] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 373.178488][T17026] x_tables: duplicate underflow at hook 4 [ 373.867177][T17035] __nla_validate_parse: 89 callbacks suppressed [ 373.867201][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 373.919864][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.051599][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.107977][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.120931][T17057] netlink: 'syz.0.5153': attribute type 1 has an invalid length. [ 374.166464][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.208640][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.239117][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.246601][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.294206][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.353224][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.394927][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 374.433903][T17035] team0: left promiscuous mode [ 374.440078][T17035] team_slave_0: left promiscuous mode [ 374.461400][T17035] team_slave_1: left promiscuous mode [ 374.474134][T17035] bridge0: left promiscuous mode [ 374.488965][T17035] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 374.551960][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5143'. [ 375.083454][T17035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.147260][T17035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.707532][T17035] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.723436][T17035] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.735448][T17035] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.744765][T17035] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.766787][T17035] batadv1: left promiscuous mode [ 375.772698][T17035] batadv1: left allmulticast mode [ 375.797019][T17035] ip6gre1: left promiscuous mode [ 377.216408][T17096] bond2: left promiscuous mode [ 377.225449][T17096] bond2: left allmulticast mode [ 377.246294][T12367] lo speed is unknown, defaulting to 1000 [ 377.760196][T17135] sctp: [Deprecated]: syz.2.5191 (pid 17135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.760196][T17135] Use struct sctp_sack_info instead [ 377.895744][T17140] netlink: 'syz.0.5193': attribute type 48 has an invalid length. [ 378.033642][T17148] netlink: 'syz.3.5198': attribute type 1 has an invalid length. [ 378.494690][T17166] netlink: 'syz.3.5207': attribute type 12 has an invalid length. [ 378.819285][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.016011][T17188] netlink: 'syz.3.5219': attribute type 1 has an invalid length. [ 379.021440][T17191] netlink: 'syz.4.5220': attribute type 10 has an invalid length. [ 379.036151][T17191] __nla_validate_parse: 167 callbacks suppressed [ 379.036172][T17191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5220'. [ 379.048968][T17188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.076723][T17191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.096233][T17191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.126362][T17191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.146006][T17191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.185338][T17191] team0: Port device geneve0 added [ 379.456394][T17208] netlink: 'syz.1.5227': attribute type 1 has an invalid length. [ 379.495378][T17208] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5227'. [ 379.674714][T17214] netlink: 'syz.3.5230': attribute type 2 has an invalid length. [ 379.696289][T17217] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5231'. [ 379.911003][T17228] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5237'. [ 379.948854][T17230] netlink: 'syz.0.5238': attribute type 41 has an invalid length. [ 379.957544][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5239'. [ 380.164956][T17240] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 380.895872][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5258'. [ 380.896194][T17273] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 381.213676][T17289] openvswitch: netlink: IP tunnel dst address not specified [ 381.506116][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5271'. [ 381.809148][T17313] @�: renamed from bond_slave_0 [ 382.623207][T17354] ipvlan1: entered promiscuous mode [ 384.051391][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5329'. [ 384.621228][T17442] netlink: 'syz.0.5341': attribute type 2 has an invalid length. [ 384.641487][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5341'. [ 384.677966][T17445] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 384.843318][T17452] netlink: 'syz.1.5345': attribute type 8 has an invalid length. [ 385.040005][T17458] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5349'. [ 385.064027][T17463] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 385.104340][T17463] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 385.396308][T17474] No such timeout policy "syz0" [ 385.591243][T17484] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 385.954785][T17501] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 385.970619][T17502] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 386.269342][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5377'. [ 386.295578][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5377'. [ 387.155859][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5397'. [ 387.409304][T17568] netlink: 'syz.1.5403': attribute type 7 has an invalid length. [ 387.826107][T17584] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5412'. [ 387.893629][T17588] netlink: 'syz.4.5414': attribute type 5 has an invalid length. [ 388.505559][T17614] netlink: 'syz.2.5426': attribute type 11 has an invalid length. [ 388.985490][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5437'. [ 389.102643][T17639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5440'. [ 389.218011][T17641] netlink: 'syz.3.5438': attribute type 13 has an invalid length. [ 389.255024][T17641] gretap0: refused to change device tx_queue_len [ 389.275483][T17641] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 389.725173][T17661] xt_CT: No such helper "pptp" [ 390.296205][T17694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.352410][T17698] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 391.243567][T17736] openvswitch: netlink: Actions may not be safe on all matching packets [ 391.559266][T17748] netlink: 'syz.2.5492': attribute type 10 has an invalid length. [ 391.589121][T17748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5492'. [ 391.683520][T17748] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 391.942654][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5498'. [ 392.194952][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.233782][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.253329][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.306434][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.343676][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.362455][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.400024][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5502'. [ 392.467805][T17768] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.476313][T17768] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.669744][T17768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.694952][T17768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.788529][T17768] veth1_vlan: left allmulticast mode [ 392.799734][T17768] macvlan0: left allmulticast mode [ 392.828844][T17768] ipvlan1: left promiscuous mode [ 392.870761][T17768] netdevsim netdevsim2 ������: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.887759][T17768] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.907456][T17768] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.921972][T17768] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.936382][T17768] netdevsim netdevsim2 ������: left promiscuous mode [ 393.012664][T17768] veth2: left promiscuous mode [ 393.025008][T17768] veth2: left allmulticast mode [ 393.034682][T17768] bridge1: left promiscuous mode [ 393.049336][T17768] bridge1: left allmulticast mode [ 393.064958][T17768] bridge3: left promiscuous mode [ 393.073406][T17768] bridge3: left allmulticast mode [ 394.206499][T17840] ipt_ECN: cannot use operation on non-tcp rule [ 394.297877][T17843] netlink: ct family unspecified [ 394.333166][T17843] openvswitch: netlink: Actions may not be safe on all matching packets [ 394.408053][T17849] __nla_validate_parse: 89 callbacks suppressed [ 394.408086][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5539'. [ 395.198764][T17880] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 395.243235][T17880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.520197][T17895] ieee802154 phy1 wpan1: encryption failed: -90 [ 395.804500][T17902] bond6: entered promiscuous mode [ 395.815574][T17902] bond6: entered allmulticast mode [ 395.856812][T17902] 8021q: adding VLAN 0 to HW filter on device bond6 [ 396.675593][T17940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5585'. [ 397.365490][T17971] netlink: 'syz.1.5599': attribute type 1 has an invalid length. [ 397.696459][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'. [ 398.116541][T18008] netlink: 'syz.4.5619': attribute type 5 has an invalid length. [ 398.141521][T18009] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5618'. [ 398.200722][T18009] netlink: zone id is out of range [ 398.215847][T18009] netlink: get zone limit has 8 unknown bytes [ 398.985433][T18046] xt_ecn: cannot match TCP bits for non-tcp packets [ 400.029608][T18096] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5662'. [ 400.033203][T18098] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 400.086328][T18102] netlink: 'syz.0.5663': attribute type 4 has an invalid length. [ 400.268679][T18107] bridge_slave_1: left allmulticast mode [ 400.274723][T18107] bridge_slave_1: left promiscuous mode [ 400.318692][T18107] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.337792][T18110] netlink: 'syz.3.5668': attribute type 32 has an invalid length. [ 400.371896][T18107] bridge_slave_0: left allmulticast mode [ 400.380572][T18107] bridge_slave_0: left promiscuous mode [ 400.390926][T18107] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.491237][T18107] team0: Port device bridge0 removed [ 400.760046][T18127] openvswitch: netlink: Actions may not be safe on all matching packets [ 401.103204][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5683'. [ 401.785344][T18174] netlink: 'syz.2.5699': attribute type 1 has an invalid length. [ 401.817214][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5699'. [ 401.860749][T18179] openvswitch: netlink: Multiple metadata blocks provided [ 402.144878][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5709'. [ 402.182449][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5709'. [ 402.513313][T18212] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 402.656769][T18220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.666716][T18218] mac80211_hwsim hwsim7 : renamed from wlan1 [ 403.113454][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5732'. [ 403.263750][T18247] : renamed from bond_slave_0 [ 403.587746][T18263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5743'. [ 403.886376][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'. [ 404.387485][T18303] netlink: 'syz.4.5763': attribute type 8 has an invalid length. [ 405.522995][T18355] xt_CT: No such helper "pptp" [ 406.077059][T18384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5802'. [ 406.117602][T18386] bridge_slave_1: left allmulticast mode [ 406.123354][T18386] bridge_slave_1: left promiscuous mode [ 406.155537][T18386] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.171854][T18386] bridge_slave_0: left allmulticast mode [ 406.179107][T18386] bridge_slave_0: left promiscuous mode [ 406.186918][T18386] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.232245][T18386] bond0: (slave bridge0): Releasing backup interface [ 406.487880][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5812'. [ 406.495742][T18404] netlink: 'syz.1.5810': attribute type 12 has an invalid length. [ 406.504781][T18404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5810'. [ 406.974834][T18426] bridge0: entered promiscuous mode [ 407.005890][T18426] bridge0: entered allmulticast mode [ 407.086035][T18434] xt_TPROXY: Can be used only with -p tcp or -p udp [ 407.469763][T18449] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5834'. [ 407.508166][T18449] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5834'. [ 407.633804][T18456] xt_HMARK: proto mask must be zero with L3 mode [ 408.062884][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 408.189028][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5851'. [ 408.237998][T18488] netlink: 7084 bytes leftover after parsing attributes in process `syz.4.5854'. [ 408.300727][T18490] SET target dimension over the limit! [ 408.393609][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 408.626850][T18502] set match dimension is over the limit! [ 408.658211][T18506] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5863'. [ 409.858387][T18561] netlink: 'syz.2.5892': attribute type 21 has an invalid length. [ 409.875592][T18561] IPv6: NLM_F_CREATE should be specified when creating new route [ 409.893774][T18561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.901133][T18561] IPv6: NLM_F_CREATE should be set when creating new route [ 409.908507][T18561] IPv6: NLM_F_CREATE should be set when creating new route [ 409.915845][T18561] IPv6: NLM_F_CREATE should be set when creating new route [ 410.736825][T18600] netlink: del zone limit has 4 unknown bytes [ 411.394660][T18631] __nla_validate_parse: 1 callbacks suppressed [ 411.394703][T18631] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5924'. [ 411.434027][T18632] xt_recent: Unsupported userspace flags (00000042) [ 411.459264][T18631] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5924'. [ 411.488478][T18631] vlan0: entered promiscuous mode [ 411.519160][T18637] netlink: 'syz.3.5928': attribute type 2 has an invalid length. [ 411.557496][T18637] netlink: 'syz.3.5928': attribute type 1 has an invalid length. [ 412.115946][T18656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5938'. [ 412.504974][T18677] netlink: 30 bytes leftover after parsing attributes in process `syz.1.5948'. [ 414.405773][T18757] netlink: 'syz.3.5986': attribute type 15 has an invalid length. [ 414.414204][T18757] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5986'. [ 414.595601][T18766] netlink: 'syz.4.5991': attribute type 10 has an invalid length. [ 414.619620][T18766] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 414.847381][T18780] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 414.873329][T18783] netlink: 'syz.4.5998': attribute type 2 has an invalid length. [ 414.897807][T18783] netlink: 'syz.4.5998': attribute type 9 has an invalid length. [ 414.931289][T18783] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5998'. [ 415.047333][T18788] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 415.105515][T18788] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 415.398088][T18803] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 415.698551][T18817] openvswitch: netlink: IP tunnel TTL not specified. [ 415.887358][T18823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6019'. [ 416.383316][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6030'. [ 416.415515][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6030'. [ 416.595772][T18854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.365605][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6053'. [ 417.415277][T18892] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 418.096785][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6072'. [ 418.310701][T18938] x_tables: duplicate entry at hook 2 [ 418.673792][T18954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6084'. [ 418.701110][T18957] netlink: 'syz.3.6085': attribute type 30 has an invalid length. [ 418.742784][T18957] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 418.765419][T18957] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 418.835637][T18962] xt_TCPMSS: Only works on TCP SYN packets [ 419.125874][T18975] netlink: 'syz.4.6095': attribute type 21 has an invalid length. [ 419.175369][T18975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6095'. [ 419.586865][T18997] netlink: 'syz.3.6104': attribute type 1 has an invalid length. [ 419.594672][T18997] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6104'. [ 419.721475][T19005] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6108'. [ 420.020967][T19020] nft_compat: unsupported protocol 0 [ 420.042692][T19023] netlink: 18128 bytes leftover after parsing attributes in process `syz.3.6116'. [ 420.401102][T19040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6124'. [ 420.663492][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6130'. [ 420.826891][T19060] netlink: 'syz.4.6132': attribute type 4 has an invalid length. [ 420.840795][T19060] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 420.895688][T19064] netlink: 'syz.0.6136': attribute type 5 has an invalid length. [ 422.785531][T19152] __nla_validate_parse: 4 callbacks suppressed [ 422.785556][T19152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6179'. [ 422.855461][T19152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6179'. [ 422.880134][T19160] sctp: [Deprecated]: syz.4.6183 (pid 19160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.880134][T19160] Use struct sctp_sack_info instead [ 423.356467][T19182] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 424.081505][T19213] @�: renamed from veth0_vlan [ 424.338901][T19228] netlink: 'syz.3.6213': attribute type 2 has an invalid length. [ 424.478008][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6216'. [ 424.490703][T19233] sctp: [Deprecated]: syz.0.6218 (pid 19233) Use of int in maxseg socket option. [ 424.490703][T19233] Use struct sctp_assoc_value instead [ 424.828472][T19249] SET target dimension over the limit! [ 424.938057][T19251] netlink: 'syz.0.6227': attribute type 4 has an invalid length. [ 424.968817][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6227'. [ 425.705647][T19283] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6242'. [ 425.726002][T19283] unsupported nla_type 65024 [ 425.781231][T19288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.964032][T19292] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 426.155631][T19298] netlink: 'syz.0.6249': attribute type 2 has an invalid length. [ 426.215600][T19302] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6251'. [ 427.125576][T19346] xt_ecn: cannot match TCP bits for non-tcp packets [ 427.373128][T19354] IPv6: sit1: Disabled Multicast RS [ 427.571692][T19358] Cannot find add_set index 3 as target [ 427.856903][T19370] netlink: 'syz.3.6284': attribute type 21 has an invalid length. [ 427.985620][T19374] netlink: 'syz.4.6286': attribute type 1 has an invalid length. [ 428.125494][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6288'. [ 428.235961][T19384] openvswitch: netlink: Actions may not be safe on all matching packets [ 429.185722][T19414] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6306'. [ 429.243645][T19418] netlink: 'syz.2.6308': attribute type 1 has an invalid length. [ 429.258609][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6308'. [ 429.475485][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6312'. [ 429.720329][T19436] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6317'. [ 430.213206][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6325'. [ 430.648724][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6334'. [ 430.663538][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6333'. [ 431.309971][T19491] netdevsim netdevsim1: Direct firmware load for / [ 431.309971][T19491] failed with error -2 [ 431.335737][T19491] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 431.335737][T19491] [ 431.628642][T19503] vxcan1 speed is unknown, defaulting to 1000 [ 433.086279][T19547] bond2: entered promiscuous mode [ 433.135706][T19547] bond2: entered allmulticast mode [ 433.146906][T19547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.205898][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6371'. [ 433.432342][T19566] netlink: 'syz.2.6378': attribute type 2 has an invalid length. [ 433.465562][T19566] netlink: 'syz.2.6378': attribute type 1 has an invalid length. [ 433.495538][T19566] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6378'. [ 433.845713][T19579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.135534][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6390'. [ 434.827978][T19623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6407'. [ 434.982793][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6408'. [ 435.798692][T19659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6423'. [ 435.977213][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6426'. [ 436.742876][T19705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6446'. [ 437.291017][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6458'. [ 437.316199][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6458'. [ 437.353874][T19732] xt_hashlimit: max too large, truncated to 1048576 [ 438.389989][T19769] netlink: 'syz.0.6476': attribute type 10 has an invalid length. [ 438.420933][T19769] veth0_vlan: left promiscuous mode [ 438.456127][T19769] veth0_vlan: entered promiscuous mode [ 438.480826][T19769] team0: Device veth0_vlan failed to register rx_handler [ 438.587530][T19771] x_tables: unsorted entry at hook 1 [ 438.661179][T19774] __nla_validate_parse: 1 callbacks suppressed [ 438.661203][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6480'. [ 438.779740][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6481'. [ 438.995964][T19781] netlink: 'syz.3.6483': attribute type 1 has an invalid length. [ 439.403527][T19801] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6493'. [ 439.688069][T19818] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6501'. [ 439.856472][T19825] netlink: 'syz.2.6505': attribute type 21 has an invalid length. [ 440.026097][T19833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6509'. [ 440.258510][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.664801][T19860] SET target dimension over the limit! [ 441.666110][T19894] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 441.736185][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6541'. [ 441.987122][T19910] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 442.053778][T19912] netlink: 'syz.1.6547': attribute type 10 has an invalid length. [ 442.090908][T19912] veth0_vlan: left promiscuous mode [ 442.102944][T19912] veth0_vlan: entered promiscuous mode [ 442.122486][T19912] team0: Device veth0_vlan failed to register rx_handler [ 442.686965][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6564'. [ 442.705399][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6564'. [ 443.384617][T19974] netlink: 'syz.4.6579': attribute type 3 has an invalid length. [ 443.702121][T19992] SET target dimension over the limit! [ 444.229269][T20014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6598'. [ 444.322668][T20018] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 444.560612][T20030] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6603'. [ 445.609409][T20078] team0: entered allmulticast mode [ 446.108586][T20100] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6635'. [ 446.140394][T20100] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6635'. [ 446.155626][T20100] netlink: 19 bytes leftover after parsing attributes in process `syz.3.6635'. [ 447.093467][T20143] netlink: 'syz.2.6656': attribute type 11 has an invalid length. [ 447.511271][T20162] netlink: 'syz.3.6664': attribute type 1 has an invalid length. [ 447.551100][T20162] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6664'. [ 447.830244][T20174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.076239][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6679'. [ 448.165726][T20191] netlink: 'syz.0.6678': attribute type 1 has an invalid length. [ 449.561613][T20265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.185696][T20293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.597613][T20310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6730'. [ 450.824291][T20318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6734'. [ 451.028464][T20329] netlink: 'syz.3.6739': attribute type 15 has an invalid length. [ 451.514944][T20354] netlink: 'syz.0.6752': attribute type 1 has an invalid length. [ 451.764499][T20366] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6758'. [ 451.794163][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6758'. [ 451.814553][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6758'. [ 451.845770][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6758'. [ 451.869703][T20366] netlink: 'syz.2.6758': attribute type 4 has an invalid length. [ 452.093065][T20377] Cannot find del_set index 286 as target [ 452.514006][T20400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6775'. [ 452.538143][T20402] netlink: 'syz.1.6774': attribute type 4 has an invalid length. [ 452.890008][T20420] netlink: 'syz.2.6784': attribute type 1 has an invalid length. [ 453.323289][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6795'. [ 455.245383][T20533] xt_hashlimit: max too large, truncated to 1048576 [ 455.447638][T20543] No such timeout policy "syz0" [ 455.627460][T20551] Unknown options in mask 1f4 [ 455.733255][T20558] netlink: 'syz.0.6851': attribute type 11 has an invalid length. [ 456.538410][T20587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6862'. [ 456.873895][T20598] openvswitch: netlink: Actions may not be safe on all matching packets [ 457.105592][T20607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6873'. [ 457.125567][T20609] xt_cgroup: xt_cgroup: no path or classid specified [ 457.448210][T20623] netlink: 'syz.1.6879': attribute type 6 has an invalid length. [ 457.499006][T20623] netlink: 'syz.1.6879': attribute type 7 has an invalid length. [ 457.528467][T20623] netlink: 'syz.1.6879': attribute type 8 has an invalid length. [ 457.733828][T20635] netlink: 'syz.1.6885': attribute type 1 has an invalid length. [ 458.168347][T20658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6898'. [ 458.580599][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6906'. [ 459.697148][T20719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6926'. [ 459.765374][T20722] x_tables: duplicate entry at hook 2 [ 459.913846][T20727] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 460.020221][T20735] SET target dimension over the limit! [ 460.096196][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'. [ 460.125075][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6936'. [ 460.744940][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6950'. [ 460.765426][T20769] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6949'. [ 461.425615][T20802] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.510680][T20858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.690140][T20862] delete_channel: no stack [ 462.835638][T20870] netlink: 'syz.1.7000': attribute type 10 has an invalid length. [ 463.048507][T20880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.401161][T20896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7013'. [ 464.417606][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7036'. [ 464.471305][T20946] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.7037'. [ 464.504052][T20946] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.7037'. [ 465.071225][T20974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7053'. [ 466.102057][T21024] netlink: 'syz.3.7076': attribute type 303 has an invalid length. [ 466.168691][T21027] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7079'. [ 466.273157][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7080'. [ 466.416995][T21038] x_tables: duplicate underflow at hook 3 [ 467.472381][T21092] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 467.866198][T21108] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7118'. [ 468.045906][T21118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7123'. [ 468.155885][ T30] audit: type=1107 audit(1742304962.746:2): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='��' [ 468.313602][T21128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7129'. [ 468.343855][T21128] vlan0: entered promiscuous mode [ 468.901473][T21156] netlink: 'syz.2.7142': attribute type 1 has an invalid length. [ 468.945397][T21158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7143'. [ 468.983632][T21161] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 468.992135][T21158] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7143'. [ 469.035458][T21158] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7143'. [ 469.060664][T21158] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 469.429165][T21179] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 469.873166][T21202] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7164'. [ 470.584484][T21234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7181'. [ 470.775837][T21246] netlink: 'syz.1.7187': attribute type 1 has an invalid length. [ 471.364506][T21275] netlink: 'syz.1.7200': attribute type 1 has an invalid length. [ 471.384759][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7200'. [ 471.901435][T21298] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 472.380270][T21318] sctp: [Deprecated]: syz.0.7223 (pid 21318) Use of int in max_burst socket option. [ 472.380270][T21318] Use struct sctp_assoc_value instead [ 473.152422][T21357] netlink: set zone limit has 4 unknown bytes [ 473.196076][T21360] x_tables: unsorted entry at hook 2 [ 473.679547][T21384] netlink: 'syz.4.7246': attribute type 10 has an invalid length. [ 473.715601][T21384] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 473.740022][T21384] bond0: (slave hsr0): Error -95 calling set_mac_address [ 473.805428][T21392] netlink: 'syz.1.7250': attribute type 1 has an invalid length. [ 474.168071][T21409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7258'. [ 474.193505][T21409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7258'. [ 474.583708][T21430] netlink: 'syz.3.7268': attribute type 21 has an invalid length. [ 474.630747][T21430] netlink: 'syz.3.7268': attribute type 6 has an invalid length. [ 474.655160][T21430] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7268'. [ 474.915780][T21442] xt_TCPMSS: Only works on TCP SYN packets [ 475.070748][T21450] netlink: 'syz.2.7278': attribute type 1 has an invalid length. [ 475.652109][T21479] netlink: 1672 bytes leftover after parsing attributes in process `syz.1.7291'. [ 475.699564][T21479] netlink: 1672 bytes leftover after parsing attributes in process `syz.1.7291'. [ 476.061727][T21498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7300'. [ 476.188282][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7303'. [ 476.908791][T21536] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.7317'. [ 476.959548][T21536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.120399][T21543] netlink: 'syz.1.7321': attribute type 30 has an invalid length. [ 477.142160][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7323'. [ 477.723489][T21574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.273092][T21601] netlink: 280 bytes leftover after parsing attributes in process `syz.2.7348'. [ 478.598410][T21615] Zero length message leads to an empty skb [ 478.653022][T21617] netlink: zone id is out of range [ 478.673580][T21617] netlink: get zone limit has 8 unknown bytes [ 478.749695][T21621] netlink: 'syz.2.7360': attribute type 3 has an invalid length. [ 478.862228][T21625] Bluetooth: MGMT ver 1.23 [ 479.571272][T21660] __nla_validate_parse: 1 callbacks suppressed [ 479.571297][T21660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7376'. [ 480.156763][T21684] netlink: 'syz.2.7387': attribute type 1 has an invalid length. [ 480.164590][T21684] netlink: 'syz.2.7387': attribute type 2 has an invalid length. [ 480.291097][T21690] tipc: Started in network mode [ 480.305321][T21690] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 480.325385][T21690] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media [ 480.527735][T21700] vlan2: entered promiscuous mode [ 480.736582][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7400'. [ 480.812158][T21715] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media [ 481.441683][T21742] bridge3: entered promiscuous mode [ 481.476680][T21742] bridge3: entered allmulticast mode [ 481.490977][T21742] team0: Device bridge3 is up. Set it down before adding it as a team port [ 481.679966][T21752] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 481.731244][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7422'. [ 481.735274][T21752] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 481.781273][T21754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7422'. [ 481.810601][T21754] netlink: 'syz.3.7422': attribute type 19 has an invalid length. [ 482.731795][T21797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7443'. [ 482.776410][T21798] lo: entered promiscuous mode [ 482.783923][T21795] lo: left promiscuous mode [ 483.354563][T21827] netlink: 'syz.2.7458': attribute type 2 has an invalid length. [ 483.441125][T21830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7460'. [ 483.478579][T21832] pim6reg: entered allmulticast mode [ 483.508564][T21832] pim6reg: left allmulticast mode [ 483.888213][T21853] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.7471'. [ 485.090544][ T9] IPVS: starting estimator thread 0... [ 485.114571][T21912] netlink: 'syz.4.7497': attribute type 4 has an invalid length. [ 485.143193][T21912] netlink: 'syz.4.7497': attribute type 2 has an invalid length. [ 485.185328][T21911] IPVS: using max 21 ests per chain, 50400 per kthread [ 486.592758][T21962] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7519'. [ 486.915399][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7526'. [ 487.556625][T21997] netlink: 'syz.0.7536': attribute type 4 has an invalid length. [ 487.585438][T21997] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7536'. [ 487.914777][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7542'. [ 488.003885][T22013] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.7545'. [ 488.035603][T22013] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 488.174855][T22017] nbd: must specify an index to disconnect [ 488.385651][T22028] netlink: 'syz.4.7552': attribute type 1 has an invalid length. [ 489.050508][T22052] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 489.573687][T22078] Bluetooth: MGMT ver 1.23 [ 490.114451][T22107] netlink: 'syz.1.7587': attribute type 30 has an invalid length. [ 490.287315][T22117] Bluetooth: MGMT ver 1.23 [ 491.276058][T22151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.620340][T22163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7615'. [ 492.809842][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7635'. [ 492.888526][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7638'. [ 492.935842][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7638'. [ 492.965958][T22211] netlink: 'syz.3.7638': attribute type 18 has an invalid length. [ 492.973845][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7638'. [ 493.289354][T22228] netlink: 'syz.0.7646': attribute type 5 has an invalid length. [ 493.662240][T22240] openvswitch: netlink: Actions may not be safe on all matching packets [ 493.935724][ T5147] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 495.350741][T22314] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7687'. [ 495.544687][T22321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.673167][T22325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7693'. [ 496.886549][T22386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7720'. [ 496.940732][T22386] gretap0: entered promiscuous mode [ 496.958813][T22386] gretap0: left promiscuous mode [ 497.085663][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7723'. [ 497.866605][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 498.483600][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7755'. [ 499.002046][T22479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7766'. [ 500.637920][T22522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7786'. [ 500.715420][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7787'. [ 501.195666][T22544] smc: net device bond0 applied user defined pnetid SYZ2 [ 502.250126][T22595] netlink: 'syz.4.7821': attribute type 8 has an invalid length. [ 502.367717][T22599] netlink: 'syz.3.7823': attribute type 1 has an invalid length. [ 502.384639][T22599] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7823'. [ 503.379152][T22643] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7845'. [ 503.948615][T22672] netlink: 'syz.1.7859': attribute type 3 has an invalid length. [ 503.957051][T22672] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7859'. [ 504.102700][T22679] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7862'. [ 504.312972][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7867'. [ 504.354514][T22688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7867'. [ 504.747981][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7876'. [ 504.832410][T22709] bridge0: port 1(veth0_to_bridge) entered blocking state [ 504.848325][T22709] bridge0: port 1(veth0_to_bridge) entered disabled state [ 504.865853][T22709] veth0_to_bridge: entered allmulticast mode [ 504.884579][T22709] veth0_to_bridge: entered promiscuous mode [ 504.974204][T22712] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.983642][T22712] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.992582][T22712] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.001388][T22712] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.155950][T22717] tipc: Started in network mode [ 505.175497][T22717] tipc: Node identity 724d29d6, cluster identity 4711 [ 505.182451][T22717] tipc: Node number set to 1917659606 [ 505.556592][T22733] netlink: set zone limit has 8 unknown bytes [ 505.771362][T22744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7895'. [ 505.956217][T22753] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7898'. [ 506.103913][T22757] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 506.114400][T22757] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 506.159796][T22757] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 506.189016][T22757] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 506.876336][T22791] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7918'. [ 507.119289][T22801] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 507.741297][T22820] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.7929'. [ 507.780525][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 507.789316][T22820] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 508.007990][T22828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7936'. [ 508.116750][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.126950][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.151089][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.174914][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.198235][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.207156][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.215855][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.224507][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.233768][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 508.261079][T22833] netlink: 'syz.1.7937': attribute type 29 has an invalid length. [ 510.833698][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7995'. [ 510.866702][T22948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7995'. [ 511.658618][T22988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8014'. [ 512.110901][T23008] tipc: Started in network mode [ 512.116505][T23008] tipc: Node identity , cluster identity 4711 [ 512.123183][T23008] tipc: Failed to obtain node identity [ 512.129202][T23008] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media [ 512.406880][T23015] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8026'. [ 512.710390][T23021] netdevsim netdevsim2 ������: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.719473][T23021] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.728523][T23021] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.737466][T23021] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.755982][T23021] vxlan0: entered promiscuous mode [ 512.762495][T23021] vxlan0: entered allmulticast mode [ 512.781349][T23021] netdevsim netdevsim2 ������: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.790488][T23021] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.799979][T23021] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.809301][T23021] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.920529][T23060] nbd: must specify at least one socket [ 514.092023][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8051'. [ 514.618423][T23091] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8062'. [ 514.665659][T23091] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8062'. [ 514.815812][T23100] validate_nla: 23 callbacks suppressed [ 514.815834][T23100] netlink: 'syz.2.8067': attribute type 1 has an invalid length. [ 514.916391][T23105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8068'. [ 515.139837][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8075'. [ 515.175667][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8075'. [ 516.100622][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8093'. [ 516.117211][T23156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8093'. [ 516.342062][T23167] netlink: 'syz.0.8098': attribute type 3 has an invalid length. [ 516.478201][T23171] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8101'. [ 516.523615][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8102'. [ 518.858342][T23263] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 519.229951][T23280] dvmrp5: entered allmulticast mode [ 519.246899][T23280] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 519.270106][T23280] dvmrp5: left allmulticast mode [ 519.289232][T23280] pimreg: left allmulticast mode [ 519.293715][T23284] __nla_validate_parse: 4 callbacks suppressed [ 519.293735][T23284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8156'. [ 520.301218][T23315] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.8171'. [ 520.331271][T23315] openvswitch: netlink: Unknown key attributes 20 [ 520.745860][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8181'. [ 520.757244][T23336] netlink: 'syz.3.8181': attribute type 8 has an invalid length. [ 522.134246][T23402] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8214'. [ 522.136783][T23403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.078181][T23444] netlink: 'syz.2.8234': attribute type 1 has an invalid length. [ 523.651486][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8245'. [ 523.684812][T23471] netlink: 'syz.1.8245': attribute type 30 has an invalid length. [ 523.716191][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8245'. [ 524.226615][T23495] netlink: 'syz.1.8255': attribute type 1 has an invalid length. [ 524.691249][T23515] netlink: 'syz.1.8268': attribute type 4 has an invalid length. [ 524.759241][T23519] IPVS: Error connecting to the multicast addr [ 524.903135][ T9] IPVS: starting estimator thread 0... [ 525.015302][T23527] IPVS: using max 20 ests per chain, 48000 per kthread [ 526.343541][T23595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8306'. [ 526.764457][T23616] bond0: option all_slaves_active: invalid value (7) [ 526.787861][T23617] bridge0: port 3(hsr0) entered blocking state [ 526.815497][T23617] bridge0: port 3(hsr0) entered disabled state [ 526.832349][T23617] hsr0: entered allmulticast mode [ 526.848003][T23617] hsr_slave_0: entered allmulticast mode [ 526.865482][T23617] hsr_slave_1: entered allmulticast mode [ 526.906464][T23617] hsr0: entered promiscuous mode [ 527.429121][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8330'. [ 527.510016][T23650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8332'. [ 527.679209][T23657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8336'. [ 528.218736][T23676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8344'. [ 528.238438][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8344'. [ 528.970267][T23717] sctp: [Deprecated]: syz.3.8363 (pid 23717) Use of int in max_burst socket option. [ 528.970267][T23717] Use struct sctp_assoc_value instead [ 529.488408][T23737] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8373'. [ 530.395674][T23777] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8393'. [ 530.619154][T23786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.474331][T23821] netlink: 'syz.0.8412': attribute type 1 has an invalid length. [ 531.495994][T23821] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8412'. [ 532.120354][T23843] netlink: 'syz.2.8425': attribute type 1 has an invalid length. [ 532.230157][T23847] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 532.630655][T23864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8434'. [ 532.974072][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8442'. [ 532.993818][T23879] netlink: 'syz.3.8442': attribute type 3 has an invalid length. [ 533.171936][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8443'. [ 533.231317][T23883] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8443'. [ 533.342105][T23891] netlink: 'syz.3.8448': attribute type 11 has an invalid length. [ 533.392942][T23893] IPVS: Error connecting to the multicast addr [ 534.296452][T23936] geneve1: entered promiscuous mode [ 534.412761][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8473'. [ 534.435818][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8473'. [ 534.460288][T23942] netlink: 'syz.3.8473': attribute type 6 has an invalid length. [ 535.072745][T23968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.113304][T23968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.456133][T23986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8494'. [ 535.489389][T23985] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8492'. [ 535.769236][T23999] netlink: 'syz.2.8499': attribute type 58 has an invalid length. [ 535.795428][T23999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8499'. [ 536.885320][T24050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8524'. [ 536.914991][T24052] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 536.988372][T24054] sock: sock_set_timeout: `syz.2.8526' (pid 24054) tries to set negative timeout [ 537.102900][T24061] netlink: 'syz.3.8530': attribute type 2 has an invalid length. [ 537.121453][T24061] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8530'. [ 537.177843][T24062] tipc: Started in network mode [ 537.202519][T24062] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 537.225784][T24062] tipc: Enabled bearer <eth:vlan0>, priority 18 [ 537.313404][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8534'. [ 537.343223][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8534'. [ 537.395599][T24070] netlink: 'syz.3.8534': attribute type 13 has an invalid length. [ 537.551654][T24080] netlink: 'syz.3.8539': attribute type 4 has an invalid length. [ 537.742432][T24084] lo: entered allmulticast mode [ 537.753182][T24084] lo: left allmulticast mode [ 538.347570][T12366] tipc: Node number set to 10005162 [ 538.388803][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8557'. [ 539.122340][T24149] veth1_virt_wifi: entered promiscuous mode [ 539.135321][T24149] veth1_virt_wifi: entered allmulticast mode [ 539.266491][T24155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8575'. [ 539.654174][ T30] audit: type=1800 audit(1742305034.256:3): pid=24172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8583" name="memory.events" dev="tmpfs" ino=8815 res=0 errno=0 [ 539.742748][ T30] audit: type=1804 audit(1742305034.296:4): pid=24172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8583" name="/newroot/1758/memory.events" dev="tmpfs" ino=8815 res=1 errno=0 [ 539.985693][T24187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8589'. [ 540.395583][T24208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8598'. [ 540.565702][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8602'. [ 540.766242][T24224] tipc: Started in network mode [ 540.776085][T24224] tipc: Node identity 5f1414aa, cluster identity 4711 [ 540.807473][T24224] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 540.933173][T24232] macsec0: entered promiscuous mode [ 540.966991][T24232] macsec0: left promiscuous mode [ 541.467959][T24256] nbd: must specify at least one socket [ 541.685920][T24266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8627'. [ 542.109303][T24289] __nla_validate_parse: 1 callbacks suppressed [ 542.109325][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8638'. [ 543.260331][T24340] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 543.881738][T24356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8669'. [ 544.312734][T24374] pim6reg: entered allmulticast mode [ 544.353693][T24374] pim6reg: left allmulticast mode [ 546.115714][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8716'. [ 546.165379][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8716'. [ 546.185836][T24453] netlink: 'syz.3.8716': attribute type 11 has an invalid length. [ 546.457412][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8721'. [ 546.491714][T24471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8721'. [ 546.505693][T24471] netlink: 'syz.3.8721': attribute type 5 has an invalid length. [ 546.529454][T24471] netlink: 'syz.3.8721': attribute type 6 has an invalid length. [ 546.710375][T24481] netlink: 'syz.4.8725': attribute type 24 has an invalid length. [ 547.256973][T24506] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8735'. [ 547.305559][T24506] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8735'. [ 547.365212][T24506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8735'. [ 547.488458][T24517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8739'. [ 547.542232][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8741'. [ 547.586313][T24522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8741'. [ 547.605649][T24522] netlink: 'syz.1.8741': attribute type 11 has an invalid length. [ 547.613569][T24522] netlink: 'syz.1.8741': attribute type 13 has an invalid length. [ 549.413587][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8773'. [ 549.439109][T24613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8773'. [ 550.335545][T24439] Bluetooth: hci4: command 0x0406 tx timeout [ 550.402325][T24657] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 550.438539][T24658] nbd: must specify a size in bytes for the device [ 550.543642][T24663] netlink: 'syz.3.8798': attribute type 4 has an invalid length. [ 550.574767][T24663] netlink: 'syz.3.8798': attribute type 8 has an invalid length. [ 550.605372][T24663] netlink: 236 bytes leftover after parsing attributes in process `syz.3.8798'. [ 550.673425][T24668] netlink: 'syz.0.8802': attribute type 3 has an invalid length. [ 551.355529][T24701] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 551.767332][T24723] netlink: 'syz.0.8828': attribute type 1 has an invalid length. [ 552.126986][T24740] nbd: must specify a device to reconfigure [ 552.654504][T24761] netlink: 'syz.4.8846': attribute type 27 has an invalid length. [ 553.665681][T24806] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8868'. [ 555.312461][T24877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8903'. [ 555.592731][T24886] openvswitch: netlink: Actions may not be safe on all matching packets [ 555.827316][T24891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8911'. [ 556.022926][T24898] netlink: 212400 bytes leftover after parsing attributes in process `syz.1.8915'. [ 556.071925][T24898] netlink: get zone limit has 4 unknown bytes [ 556.479567][T24922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8926'. [ 556.845473][T24935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8932'. [ 556.978587][T24939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8934'. [ 557.014480][T24941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8935'. [ 557.511523][T24966] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8947'. [ 557.533270][T24966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8947'. [ 559.312086][T25050] __nla_validate_parse: 7 callbacks suppressed [ 559.312113][T25050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8987'. [ 559.499959][T25058] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8992'. [ 559.639703][T25064] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8995'. [ 559.660905][T25064] netlink: 'syz.2.8995': attribute type 1 has an invalid length. [ 559.864119][T25072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8999'. [ 559.897550][T25072] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8999'. [ 559.915443][T25072] netlink: 'syz.2.8999': attribute type 5 has an invalid length. [ 559.923255][T25072] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8999'. [ 560.051066][T25078] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 561.242713][T25129] netlink: 'syz.2.9027': attribute type 10 has an invalid length. [ 561.285076][T25129] bond0: (slave ������): Enslaving as an active interface with an up link [ 561.810538][T25151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9039'. [ 561.877078][T25158] netlink: 'syz.1.9041': attribute type 46 has an invalid length. [ 562.130449][T25165] lo speed is unknown, defaulting to 1000 [ 562.159900][T25165] vxcan1 speed is unknown, defaulting to 1000 [ 563.021349][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9061'. [ 563.590063][T25224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9071'. [ 563.612960][T25224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9071'. [ 565.012039][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9089'. [ 565.025997][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9089'. [ 565.054151][T25259] netlink: 'syz.4.9089': attribute type 14 has an invalid length. [ 565.085829][T25259] netlink: 'syz.4.9089': attribute type 11 has an invalid length. [ 565.240346][T25268] geneve1: entered promiscuous mode [ 565.709214][T25289] bond0: option arp_interval: invalid value (18446744072034198015) [ 565.731299][T25289] bond0: option arp_interval: allowed values 0 - 2147483647 [ 566.891172][T25343] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 567.132411][T25350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9134'. [ 567.244927][T25355] sit0: entered promiscuous mode [ 567.271169][T25355] netlink: 'syz.3.9136': attribute type 1 has an invalid length. [ 567.284333][T25355] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9136'. [ 567.352887][T25359] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9138'. [ 567.506904][T25362] netlink: 'syz.4.9140': attribute type 2 has an invalid length. [ 567.796331][T25375] ------------[ cut here ]------------ [ 567.802187][T25375] WARNING: CPU: 0 PID: 25375 at net/ipv4/udp_offload.c:118 udp_tunnel_update_gro_rcv+0x31d/0x670 [ 567.813420][T25375] Modules linked in: [ 567.817472][T25375] CPU: 0 UID: 0 PID: 25375 Comm: syz.0.9145 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 567.828429][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.838630][T25375] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 567.845215][T25375] Code: 23 48 89 eb e8 14 47 4f f7 c7 05 ca a9 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 fb 46 4f f7 eb 40 e8 f4 46 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 e6 46 4f f7 eb 2b e8 df 46 4f f7 eb 24 [ 567.865183][T25375] RSP: 0018:ffffc9000fb9fc40 EFLAGS: 00010293 [ 567.871319][T25375] RAX: ffffffff8a72ab0e RBX: 1ffff1100b5c5c6f RCX: ffff888057625a00 [ 567.879681][T25375] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 567.887760][T25375] RBP: ffffffff86c2d1a0 R08: ffffffff8a72a6a9 R09: 1ffffffff207a2ee [ 567.895888][T25375] R10: dffffc0000000000 R11: fffffbfff207a2ef R12: dffffc0000000000 [ 567.903900][T25375] R13: 0000000000000003 R14: ffff88805ae2e378 R15: 0000000000000000 [ 567.912046][T25375] FS: 000055555850f500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 567.921096][T25375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.928089][T25375] CR2: 0000400000000040 CR3: 00000000216be000 CR4: 00000000003526f0 [ 567.936304][T25375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 567.944327][T25375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 567.952523][T25375] Call Trace: [ 567.955896][T25375] <TASK> [ 567.958868][T25375] ? __warn+0x165/0x4d0 [ 567.963113][T25375] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 567.969081][T25375] ? report_bug+0x2b3/0x500 [ 567.973665][T25375] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 567.979699][T25375] ? handle_bug+0x60/0x90 [ 567.984148][T25375] ? exc_invalid_op+0x1a/0x50 [ 567.988999][T25375] ? asm_exc_invalid_op+0x1a/0x20 [ 567.994103][T25375] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 567.999707][T25375] ? udp_tunnel_update_gro_rcv+0x139/0x670 [ 568.005721][T25375] ? udp_tunnel_update_gro_rcv+0x59e/0x670 [ 568.011584][T25375] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 568.017653][T25375] ? sk_common_release+0x71/0x2e0 [ 568.022745][T25375] udp_destroy_sock+0x2c9/0x340 [ 568.027755][T25375] ? __pfx_udp_destroy_sock+0x10/0x10 [ 568.033187][T25375] sk_common_release+0x71/0x2e0 [ 568.038192][T25375] inet_release+0x17d/0x200 [ 568.042768][T25375] sock_close+0xbc/0x240 [ 568.047145][T25375] ? __pfx_sock_close+0x10/0x10 [ 568.052065][T25375] __fput+0x3e9/0x9f0 [ 568.056174][T25375] task_work_run+0x24f/0x310 [ 568.060820][T25375] ? _raw_spin_unlock+0x28/0x50 [ 568.065843][T25375] ? __pfx_task_work_run+0x10/0x10 [ 568.071030][T25375] ? syscall_exit_to_user_mode+0xa3/0x340 [ 568.076926][T25375] syscall_exit_to_user_mode+0x13f/0x340 [ 568.082633][T25375] do_syscall_64+0x100/0x230 [ 568.087352][T25375] ? clear_bhb_loop+0x35/0x90 [ 568.092092][T25375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.098305][T25375] RIP: 0033:0x7f222a18d169 [ 568.102777][T25375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.122605][T25375] RSP: 002b:00007fff110c05f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 568.131166][T25375] RAX: 0000000000000000 RBX: 000000000008a9c5 RCX: 00007f222a18d169 [ 568.139289][T25375] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 568.147369][T25375] RBP: 00007f222a3a7ba0 R08: 0000000000000001 R09: 00000003110c08ef [ 568.155504][T25375] R10: 00007f222a000000 R11: 0000000000000246 R12: 00007f222a3a5fac [ 568.163579][T25375] R13: 00007f222a3a5fa0 R14: ffffffffffffffff R15: 00007fff110c0710 [ 568.171688][T25375] </TASK> [ 568.174782][T25375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.182120][T25375] CPU: 0 UID: 0 PID: 25375 Comm: syz.0.9145 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 568.193020][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.203116][T25375] Call Trace: [ 568.206440][T25375] <TASK> [ 568.209387][T25375] dump_stack_lvl+0x241/0x360 [ 568.214090][T25375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.219319][T25375] ? __pfx__printk+0x10/0x10 [ 568.223928][T25375] ? _printk+0xd5/0x120 [ 568.228106][T25375] ? __init_begin+0x41000/0x41000 [ 568.233156][T25375] ? vscnprintf+0x5d/0x90 [ 568.237596][T25375] panic+0x349/0x880 [ 568.241512][T25375] ? __warn+0x174/0x4d0 [ 568.245690][T25375] ? __pfx_panic+0x10/0x10 [ 568.250152][T25375] __warn+0x344/0x4d0 [ 568.254151][T25375] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 568.259973][T25375] report_bug+0x2b3/0x500 [ 568.264314][T25375] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 568.270131][T25375] handle_bug+0x60/0x90 [ 568.274315][T25375] exc_invalid_op+0x1a/0x50 [ 568.278830][T25375] asm_exc_invalid_op+0x1a/0x20 [ 568.283692][T25375] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 568.290116][T25375] Code: 23 48 89 eb e8 14 47 4f f7 c7 05 ca a9 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 fb 46 4f f7 eb 40 e8 f4 46 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 e6 46 4f f7 eb 2b e8 df 46 4f f7 eb 24 [ 568.309775][T25375] RSP: 0018:ffffc9000fb9fc40 EFLAGS: 00010293 [ 568.315863][T25375] RAX: ffffffff8a72ab0e RBX: 1ffff1100b5c5c6f RCX: ffff888057625a00 [ 568.323857][T25375] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 568.331840][T25375] RBP: ffffffff86c2d1a0 R08: ffffffff8a72a6a9 R09: 1ffffffff207a2ee [ 568.339847][T25375] R10: dffffc0000000000 R11: fffffbfff207a2ef R12: dffffc0000000000 [ 568.347862][T25375] R13: 0000000000000003 R14: ffff88805ae2e378 R15: 0000000000000000 [ 568.355884][T25375] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 568.361378][T25375] ? udp_tunnel_update_gro_rcv+0x139/0x670 [ 568.367201][T25375] ? udp_tunnel_update_gro_rcv+0x59e/0x670 [ 568.373044][T25375] ? sk_common_release+0x71/0x2e0 [ 568.378113][T25375] udp_destroy_sock+0x2c9/0x340 [ 568.383007][T25375] ? __pfx_udp_destroy_sock+0x10/0x10 [ 568.388412][T25375] sk_common_release+0x71/0x2e0 [ 568.393298][T25375] inet_release+0x17d/0x200 [ 568.397824][T25375] sock_close+0xbc/0x240 [ 568.402116][T25375] ? __pfx_sock_close+0x10/0x10 [ 568.407005][T25375] __fput+0x3e9/0x9f0 [ 568.411018][T25375] task_work_run+0x24f/0x310 [ 568.415631][T25375] ? _raw_spin_unlock+0x28/0x50 [ 568.420535][T25375] ? __pfx_task_work_run+0x10/0x10 [ 568.425765][T25375] ? syscall_exit_to_user_mode+0xa3/0x340 [ 568.431523][T25375] syscall_exit_to_user_mode+0x13f/0x340 [ 568.437202][T25375] do_syscall_64+0x100/0x230 [ 568.441825][T25375] ? clear_bhb_loop+0x35/0x90 [ 568.446546][T25375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.452479][T25375] RIP: 0033:0x7f222a18d169 [ 568.456926][T25375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.476571][T25375] RSP: 002b:00007fff110c05f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 568.485011][T25375] RAX: 0000000000000000 RBX: 000000000008a9c5 RCX: 00007f222a18d169 [ 568.493001][T25375] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 568.500983][T25375] RBP: 00007f222a3a7ba0 R08: 0000000000000001 R09: 00000003110c08ef [ 568.508962][T25375] R10: 00007f222a000000 R11: 0000000000000246 R12: 00007f222a3a5fac [ 568.516941][T25375] R13: 00007f222a3a5fa0 R14: ffffffffffffffff R15: 00007fff110c0710 [ 568.524931][T25375] </TASK> [ 568.528282][T25375] Kernel Offset: disabled [ 568.532693][T25375] Rebooting in 86400 seconds..