last executing test programs: 2.703166822s ago: executing program 0 (id=9701): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 2.612532255s ago: executing program 0 (id=9703): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x100, @private0, 0xc3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 2.50733545s ago: executing program 4 (id=9704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2.373879058s ago: executing program 0 (id=9705): socket$unix(0x1, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x6) 2.067428525s ago: executing program 3 (id=9709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) 2.01499365s ago: executing program 0 (id=9710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) 1.928636839s ago: executing program 1 (id=9712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}}, 0x0) 1.758538683s ago: executing program 1 (id=9713): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) 1.742694355s ago: executing program 3 (id=9714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.573387133s ago: executing program 1 (id=9716): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) 1.447630808s ago: executing program 0 (id=9718): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 1.321866143s ago: executing program 1 (id=9719): recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) 1.320639386s ago: executing program 4 (id=9720): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 1.312753102s ago: executing program 3 (id=9721): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'}) 1.225146692s ago: executing program 2 (id=9722): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) 1.171391406s ago: executing program 1 (id=9723): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x136, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x32a5}], 0x1, 0x40003100, 0x0) 1.109655747s ago: executing program 0 (id=9724): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.108098374s ago: executing program 4 (id=9725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.076278357s ago: executing program 3 (id=9726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa120000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.034653554s ago: executing program 2 (id=9727): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x11}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x14, 0x9, 0x2, 0x0, 0xb, 0x0, 0x0, 0x5, 0x0, 0x8, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x5, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 956.817741ms ago: executing program 1 (id=9728): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) 786.754387ms ago: executing program 4 (id=9729): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @remote, 0x6, 0x1}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 690.558227ms ago: executing program 3 (id=9730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 690.367022ms ago: executing program 2 (id=9731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0) 573.696787ms ago: executing program 4 (id=9732): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 505.04814ms ago: executing program 2 (id=9733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote}) 347.553447ms ago: executing program 3 (id=9734): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) 346.04417ms ago: executing program 4 (id=9735): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 152.256565ms ago: executing program 2 (id=9736): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x0) 0s ago: executing program 2 (id=9737): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffffad, 0x1, {0x400}}}}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): .072392][T10093] __nla_validate_parse: 2 callbacks suppressed [ 192.072414][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 192.072449][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 192.400061][T10111] netlink: 'syz.1.2092': attribute type 7 has an invalid length. [ 192.949997][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'. [ 193.072769][T10144] xt_nat: multiple ranges no longer supported [ 193.231946][T10151] netlink: 'syz.0.2111': attribute type 2 has an invalid length. [ 193.388416][T10157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2113'. [ 193.404107][T10157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2113'. [ 194.346472][T10207] xt_hashlimit: size too large, truncated to 1048576 [ 194.346644][T10207] xt_hashlimit: max too large, truncated to 1048576 [ 194.346713][T10207] xt_hashlimit: invalid rate [ 194.527727][T10213] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 194.548145][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.629695][T10222] netlink: 'syz.2.2147': attribute type 29 has an invalid length. [ 194.664250][ T98] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.665050][ T98] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.665087][ T98] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.665121][ T98] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.872659][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 195.543155][T10261] netlink: 'syz.4.2166': attribute type 3 has an invalid length. [ 195.543180][T10261] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 195.767218][T10270] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.196075][T10291] Cannot find add_set index 4 as target [ 196.633800][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 196.749471][T10311] netlink: 'syz.3.2190': attribute type 49 has an invalid length. [ 196.932799][T10311] ip6gretap0: entered promiscuous mode [ 196.932826][T10311] ip6gretap0: entered allmulticast mode [ 197.381182][T10340] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 197.586330][T10348] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 197.843239][T10360] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 197.843266][T10360] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2212'. [ 198.233113][T10380] netlink: 'syz.1.2219': attribute type 4 has an invalid length. [ 198.285631][T10384] netlink: set zone limit has 4 unknown bytes [ 198.545952][T10395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.825878][T10409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.867021][T10406] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 198.884800][T10412] lo: entered allmulticast mode [ 199.314270][T10431] x_tables: duplicate underflow at hook 2 [ 199.871011][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2255'. [ 200.184517][T10476] Illegal XDP return value 4294967274 on prog (id 192) dev N/A, expect packet loss! [ 200.197366][T10469] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 200.227386][T10469] bond3 (unregistering): Released all slaves [ 200.271943][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 200.471477][T10489] netlink: 'syz.2.2269': attribute type 2 has an invalid length. [ 201.594665][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 201.808125][T10554] netlink: 'syz.4.2298': attribute type 5 has an invalid length. [ 202.053312][T10567] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 202.510577][T10589] openvswitch: netlink: IP tunnel dst address not specified [ 203.648249][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 204.078576][T10669] x_tables: ip_tables: osf match: only valid for protocol 6 [ 204.509475][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2365'. [ 204.600776][T10694] openvswitch: netlink: Message has 8 unknown bytes. [ 204.634175][T10697] Cannot find set identified by id 65534 to match [ 205.630229][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 205.677065][T10740] openvswitch: netlink: Duplicate or invalid key (type 0). [ 205.932179][T10752] openvswitch: netlink: Flow key attr not present in new flow. [ 206.854013][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 206.854127][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 206.854168][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 206.854205][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 206.854243][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 207.406193][T10824] xt_policy: output policy not valid in PREROUTING and INPUT [ 207.503816][T10827] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 207.705277][T10839] openvswitch: netlink: IPv4 tunnel dst address is zero [ 207.782504][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.783404][T10842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.819221][T10842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.819249][T10842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.155390][T10857] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 208.711356][T10889] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2464'. [ 208.711386][T10889] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2464'. [ 209.563155][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2481'. [ 209.641078][T10936] wg1 speed is unknown, defaulting to 1000 [ 209.663376][T10936] wg1 speed is unknown, defaulting to 1000 [ 209.670722][T10936] wg1 speed is unknown, defaulting to 1000 [ 210.952074][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 210.989614][T10936] infiniband syz2: set active [ 210.989640][T10936] infiniband syz2: added wg1 [ 210.992986][ T9] wg1 speed is unknown, defaulting to 1000 [ 211.027721][T10936] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 211.046631][T10936] infiniband syz2: Couldn't open port 1 [ 211.046924][T10936] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 211.046956][T10936] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 211.046994][T10936] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 211.240599][T10936] RDS/IB: syz2: added [ 211.258710][T10936] smc: adding ib device syz2 with port count 1 [ 211.258836][T10936] smc: ib device syz2 port 1 has no pnetid [ 211.260544][ T9] wg1 speed is unknown, defaulting to 1000 [ 211.301017][T10936] wg1 speed is unknown, defaulting to 1000 [ 211.372327][T11006] netlink: 'syz.2.2512': attribute type 3 has an invalid length. [ 211.982764][T11033] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 212.012075][T11034] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2528'. [ 212.074106][T11036] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 212.362968][T10936] wg1 speed is unknown, defaulting to 1000 [ 212.589864][T11056] openvswitch: netlink: ct_state flags ffffffff unsupported [ 212.719542][T11064] Cannot find add_set index 65532 as target [ 213.183767][T11077] bond1: entered promiscuous mode [ 213.195358][T11077] bond1: entered allmulticast mode [ 213.195873][T11077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.390493][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 213.539221][T10936] wg1 speed is unknown, defaulting to 1000 [ 214.094593][T11117] netlink: 'syz.3.2563': attribute type 1 has an invalid length. [ 214.094619][T11117] netlink: 'syz.3.2563': attribute type 11 has an invalid length. [ 214.094633][T11117] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2563'. [ 214.169595][T11122] netlink: 'syz.2.2565': attribute type 39 has an invalid length. [ 214.693737][T10936] wg1 speed is unknown, defaulting to 1000 [ 214.739219][T11143] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 214.888896][T11151] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 215.156527][T11161] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 215.770430][T11188] xt_TCPMSS: Only works on TCP SYN packets [ 215.841915][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2599'. [ 215.973717][T10936] wg1 speed is unknown, defaulting to 1000 [ 216.361329][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 216.457359][T11219] netlink: 'syz.0.2609': attribute type 9 has an invalid length. [ 216.457383][T11219] netlink: 'syz.0.2609': attribute type 4 has an invalid length. [ 217.391429][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2627'. [ 217.432852][T11258] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 217.438194][T11258] bond2 (unregistering): Released all slaves [ 217.600439][T11270] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 217.852746][T11280] : renamed from bond0 (while UP) [ 218.127591][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2645'. [ 218.208324][T11298] Cannot find add_set index 34 as target [ 218.281129][T11302] xfrm1: entered allmulticast mode [ 218.422533][T11310] veth1_macvtap: left promiscuous mode [ 218.422565][T11310] macsec0: entered promiscuous mode [ 218.906726][T11330] ip6t_hbh: unknown flags 38 [ 218.927048][T11335] netlink: 'syz.0.2664': attribute type 1 has an invalid length. [ 219.159207][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 219.525837][T11363] hsr0: entered allmulticast mode [ 219.529111][T11363] hsr_slave_0: entered allmulticast mode [ 219.529137][T11363] hsr_slave_1: entered allmulticast mode [ 219.710470][T11372] Cannot find del_set index 4 as target [ 220.125611][T11394] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 220.193717][T11397] netlink: 'syz.1.2696': attribute type 24 has an invalid length. [ 220.822063][T11428] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2712'. [ 221.162100][T11446] Cannot find add_set index 2 as target [ 221.235437][T11448] xt_hashlimit: size too large, truncated to 1048576 [ 221.281819][T11451] openvswitch: netlink: IPv4 tun info is not correct [ 221.470920][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2729'. [ 221.889418][T11482] netlink: 'syz.1.2739': attribute type 2 has an invalid length. [ 222.145321][T11494] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 222.248330][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.250423][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.281736][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.281885][T11494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.282275][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.282421][T11494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.303113][T11494] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 223.030957][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 223.055078][T11537] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2765'. [ 223.055105][T11537] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 223.470865][T11553] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 223.633321][T11563] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2779'. [ 223.815593][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 224.163034][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2792'. [ 224.194644][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2792'. [ 224.194679][T11590] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2792'. [ 224.286009][T11596] netlink: 'syz.4.2795': attribute type 32 has an invalid length. [ 224.308059][T11594] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 224.749331][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2804'. [ 225.204206][T11640] netlink: 'syz.0.2816': attribute type 32 has an invalid length. [ 225.494775][T11655] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 225.696263][T11662] netlink: 'syz.0.2828': attribute type 2 has an invalid length. [ 225.892718][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2833'. [ 225.892752][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2833'. [ 225.892786][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2833'. [ 226.152152][T11688] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 226.727008][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2855'. [ 226.842717][T11716] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 226.850890][T11716] bond2 (unregistering): Released all slaves [ 227.172317][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2862'. [ 227.573461][T11750] xt_CT: No such helper "snmp_trap" [ 227.609566][T11758] xt_addrtype: ipv6 does not support BROADCAST matching [ 228.027454][T11772] bond0: entered allmulticast mode [ 228.029071][T11780] x_tables: unsorted underflow at hook 3 [ 228.029949][T11772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.274740][T11788] netlink: 'syz.3.2889': attribute type 10 has an invalid length. [ 228.274768][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2889'. [ 228.592351][T11807] netlink: zone id is out of range [ 228.592373][T11807] netlink: del zone limit has 4 unknown bytes [ 228.680062][T11811] xt_TCPMSS: Only works on TCP SYN packets [ 229.033313][T11831] IPv6: NLM_F_REPLACE set, but no existing node found! [ 229.299129][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 229.539687][T11855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2922'. [ 230.231334][T11849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.446211][T11899] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2944'. [ 231.000963][T11927] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 231.449649][T11948] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 231.894438][T11970] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 231.894463][T11970] netlink: 'syz.0.2979': attribute type 3 has an invalid length. [ 231.894477][T11970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2979'. [ 232.138298][T11985] tc_dump_action: action bad kind [ 232.141298][T11987] netlink: 'syz.0.2986': attribute type 21 has an invalid length. [ 232.141322][T11987] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2986'. [ 232.141404][T11987] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2986'. [ 232.912423][T12024] sctp: [Deprecated]: syz.1.3005 (pid 12024) Use of int in max_burst socket option. [ 232.912423][T12024] Use struct sctp_assoc_value instead [ 233.085483][T12023] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 233.119694][T12023] bond2 (unregistering): Released all slaves [ 233.950667][T12074] xt_NETMAP: bad rangesize 37. [ 234.237918][T12089] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3037'. [ 234.266886][T12092] netlink: 'syz.0.3039': attribute type 21 has an invalid length. [ 234.266953][T12092] netlink: 'syz.0.3039': attribute type 6 has an invalid length. [ 234.266968][T12092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3039'. [ 234.561497][T12105] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 234.790265][T12118] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 234.790290][T12118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3051'. [ 234.982212][T12125] wg1: entered promiscuous mode [ 234.982237][T12125] wg1: entered allmulticast mode [ 235.278701][T12143] netlink: 'syz.4.3064': attribute type 1 has an invalid length. [ 235.565827][T12156] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3071'. [ 236.012680][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 236.265194][T12192] netlink: 'syz.4.3087': attribute type 15 has an invalid length. [ 236.265219][T12192] netlink: 'syz.4.3087': attribute type 7 has an invalid length. [ 236.820216][T12221] netlink: 'syz.4.3103': attribute type 58 has an invalid length. [ 236.820240][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3103'. [ 237.373774][T12247] netlink: 'syz.4.3115': attribute type 3 has an invalid length. [ 237.373801][T12247] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3115'. [ 237.449894][T12250] openvswitch: netlink: nsh attr 16382 is out of range max 3 [ 237.880298][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 237.880325][T12268] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3128'. [ 238.128156][T12282] bridge0: port 3(veth1_to_bridge) entered blocking state [ 238.128358][T12282] bridge0: port 3(veth1_to_bridge) entered disabled state [ 238.128530][T12282] veth1_to_bridge: entered allmulticast mode [ 238.147855][T12282] veth1_to_bridge: entered promiscuous mode [ 238.683220][T12302] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 239.394533][T12340] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3162'. [ 239.871287][T12356] xt_CT: No such helper "pptp" [ 239.923275][T12367] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 240.090256][T12364] bond4: option all_slaves_active: invalid value (179) [ 240.102589][T12364] bond4 (unregistering): Released all slaves [ 240.417634][T12388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.666279][T12398] netlink: 'syz.2.3189': attribute type 24 has an invalid length. [ 240.898755][T12411] netlink: 'syz.1.3194': attribute type 1 has an invalid length. [ 241.132096][T12420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.674169][T12445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.193171][T12478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.368209][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'. [ 242.564248][T12490] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 243.520771][T12534] netlink: 'syz.1.3255': attribute type 21 has an invalid length. [ 243.702848][T12547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3260'. [ 243.702964][T12547] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 243.739794][T12534] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 243.757376][T12534] bond4 (unregistering): Released all slaves [ 243.935522][T12551] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3263'. [ 243.935737][T12551] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3263'. [ 243.935755][T12551] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3263'. [ 244.243042][T12571] netlink: 'syz.1.3273': attribute type 2 has an invalid length. [ 244.639250][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 244.658053][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'. [ 245.643172][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 245.643291][T12643] bridge_slave_1: left allmulticast mode [ 245.643314][T12643] bridge_slave_1: left promiscuous mode [ 245.643577][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.692781][T12643] bridge_slave_0: left allmulticast mode [ 245.692810][T12643] bridge_slave_0: left promiscuous mode [ 245.706759][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.771661][T12643] bond0: (slave bridge0): Releasing backup interface [ 246.418182][T12681] 8021q: VLANs not supported on lo [ 246.985577][T12708] tipc: Can't bind to reserved service type 2 [ 247.286629][T12724] netlink: 'syz.4.3344': attribute type 13 has an invalid length. [ 247.471505][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3349'. [ 247.515526][T12735] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3350'. [ 247.580646][T12739] lo: entered promiscuous mode [ 247.594667][T12739] tunl0: entered promiscuous mode [ 247.618971][T12739] gre0: entered promiscuous mode [ 247.648786][T12739] gretap0: entered promiscuous mode [ 247.678099][T12739] erspan0: entered promiscuous mode [ 247.695910][T12739] ip_vti0: entered promiscuous mode [ 248.341775][T12775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3370'. [ 248.624798][T12788] bridge3: entered promiscuous mode [ 248.624826][T12788] bridge3: entered allmulticast mode [ 248.974023][T12808] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 249.091906][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3388'. [ 249.461955][T12833] netlink: 'syz.2.3398': attribute type 1 has an invalid length. [ 250.762679][T12901] xt_limit: Overflow, try lower: 536871034/127 [ 251.225285][T12922] nft_compat: unsupported protocol 0 [ 251.379113][T12932] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 251.379113][T12932] Please contact the netfilter-devel mailing list or update your nftables rules. [ 251.557870][T12938] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 251.613977][T12943] IPv6: Can't replace route, no match found [ 252.289842][T12978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3470'. [ 253.312741][T13021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3491'. [ 253.603440][T13037] netlink: 'syz.4.3499': attribute type 11 has an invalid length. [ 253.788276][T13046] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3502'. [ 254.090636][T13056] bond2 (unregistering): Released all slaves [ 254.244893][T13068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3514'. [ 254.357457][T13070] smbdirect: ib_dev[syz0] removed [ 255.453176][T13125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.759099][T13142] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3550'. [ 255.759469][T13142] 8021q: VLANs not supported on gre0 [ 255.977855][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.238579][ T13] IPVS: starting estimator thread 0... [ 256.254434][T13169] Cannot find add_set index 4 as target [ 256.328861][T13168] IPVS: using max 27 ests per chain, 64800 per kthread [ 256.598098][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 256.702914][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3573'. [ 257.241462][T13219] bond0: entered allmulticast mode [ 257.241489][T13219] bond_slave_0: entered allmulticast mode [ 257.241508][T13219] bond_slave_1: entered allmulticast mode [ 257.637972][T13232] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 257.638003][T13232] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 257.856912][T13251] netlink: 'syz.4.3604': attribute type 1 has an invalid length. [ 257.856938][T13251] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3604'. [ 258.135310][T13264] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 258.135334][T13264] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3610'. [ 258.447516][T13281] sctp: [Deprecated]: syz.2.3619 (pid 13281) Use of int in maxseg socket option. [ 258.447516][T13281] Use struct sctp_assoc_value instead [ 258.566149][T13286] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3622'. [ 258.689002][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 258.689040][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3623'. [ 258.776583][T13297] netlink: 'syz.1.3625': attribute type 3 has an invalid length. [ 259.847490][T13353] netlink: 'syz.4.3653': attribute type 11 has an invalid length. [ 259.847516][T13353] netlink: 'syz.4.3653': attribute type 11 has an invalid length. [ 259.847530][T13353] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3653'. [ 260.007971][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 260.230566][T13371] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.350101][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3670'. [ 260.438502][T13381] veth2: entered promiscuous mode [ 260.438530][T13381] veth2: entered allmulticast mode [ 261.238271][T13418] netlink: 'syz.2.3687': attribute type 2 has an invalid length. [ 261.238314][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 261.548758][T13432] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 261.603713][T13391] infiniband syz1: set down [ 261.603738][T13391] infiniband syz1: added team0 [ 261.619418][T13391] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 261.622205][T13391] infiniband syz1: Couldn't open port 1 [ 261.623062][T13391] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 261.623099][T13391] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 261.623139][T13391] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 261.812419][T13391] RDS/IB: syz1: added [ 261.812495][T13391] smc: adding ib device syz1 with port count 1 [ 261.812514][T13391] smc: ib device syz1 port 1 has no pnetid [ 261.856703][T13441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.128907][T13450] xt_TCPMSS: Only works on TCP SYN packets [ 262.164515][T13451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3703'. [ 262.164563][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3703'. [ 262.816391][T13475] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.816485][T13475] gretap1: entered promiscuous mode [ 262.816502][T13475] gretap1: entered allmulticast mode [ 264.007958][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 264.196817][T13541] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 264.304826][T13544] xt_REDIRECT: bad MAP_IPS. [ 264.634029][T13556] netlink: 'syz.2.3755': attribute type 11 has an invalid length. [ 264.634056][T13556] netlink: 'syz.2.3755': attribute type 11 has an invalid length. [ 264.634069][T13556] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3755'. [ 264.808567][T13565] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 264.808592][T13565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3759'. [ 265.002517][T13573] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 265.900498][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 266.083673][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3785'. [ 266.083705][T13620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3785'. [ 266.083726][T13620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3785'. [ 266.952639][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 267.524346][T13679] sctp: [Deprecated]: syz.4.3812 (pid 13679) Use of int in maxseg socket option. [ 267.524346][T13679] Use struct sctp_assoc_value instead [ 267.731999][T13691] netlink: 'syz.4.3817': attribute type 9 has an invalid length. [ 268.203254][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 268.203279][T13714] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3827'. [ 268.226807][T13705] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 268.252495][T13705] bond2 (unregistering): Released all slaves [ 268.398216][T13709] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 268.398247][T13709] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 268.776842][T13738] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 269.799081][T13789] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 270.516015][T13823] __nla_validate_parse: 1 callbacks suppressed [ 270.516037][T13823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3881'. [ 270.660659][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 271.068458][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'. [ 272.111852][T13896] netlink: 'syz.0.3918': attribute type 16 has an invalid length. [ 272.111879][T13896] netlink: 'syz.0.3918': attribute type 3 has an invalid length. [ 272.111893][T13896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3918'. [ 272.323470][T13902] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3923'. [ 272.774818][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3930'. [ 273.243344][T13934] bond2: Unable to set up delay as MII monitoring is disabled [ 273.246573][T13943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3941'. [ 273.268856][T13934] bond2 (unregistering): Released all slaves [ 273.751435][T13963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3951'. [ 273.751464][T13963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3951'. [ 274.074633][T13978] netlink: 'syz.4.3958': attribute type 7 has an invalid length. [ 274.074661][T13978] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3958'. [ 274.697282][T14011] netlink: 'syz.1.3974': attribute type 3 has an invalid length. [ 275.165316][T14037] ipt_ECN: cannot use operation on non-tcp rule [ 275.755872][T14068] __nla_validate_parse: 1 callbacks suppressed [ 275.755896][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4003'. [ 276.469807][T14104] netlink: 'syz.2.4018': attribute type 1 has an invalid length. [ 276.469832][T14104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4018'. [ 276.876590][T14126] netlink: 'syz.4.4028': attribute type 1 has an invalid length. [ 276.876617][T14126] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4028'. [ 277.001095][T14132] netlink: 'syz.4.4031': attribute type 1 has an invalid length. [ 277.001122][T14132] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4031'. [ 277.048885][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'. [ 277.048914][T14133] netlink: 'syz.1.4030': attribute type 3 has an invalid length. [ 277.101172][T14135] siw: device registration error -23 [ 277.384591][T14146] netlink: 'syz.1.4037': attribute type 10 has an invalid length. [ 278.260399][T14191] netlink: 'syz.0.4056': attribute type 64 has an invalid length. [ 278.452729][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 278.452759][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 278.452831][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4062'. [ 278.896518][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4071'. [ 278.911447][T14225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4072'. [ 279.022949][T14228] netlink: 'syz.0.4074': attribute type 32 has an invalid length. [ 279.205046][T14237] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 279.341350][T14242] netlink: 'syz.3.4082': attribute type 1 has an invalid length. [ 279.341375][T14242] netlink: 'syz.3.4082': attribute type 268 has an invalid length. [ 280.154220][T14286] xt_HMARK: proto mask must be zero with L3 mode [ 281.179056][T14338] __nla_validate_parse: 3 callbacks suppressed [ 281.179078][T14338] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4128'. [ 281.311607][T14345] netlink: 'syz.1.4133': attribute type 2 has an invalid length. [ 281.311633][T14345] netlink: 'syz.1.4133': attribute type 11 has an invalid length. [ 281.311647][T14345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4133'. [ 281.378359][T14348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4132'. [ 281.618629][T14359] bond0: Error: Cannot enslave bond to itself. [ 281.838053][T14368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4144'. [ 282.422109][T14400] netlink: 'syz.3.4159': attribute type 21 has an invalid length. [ 282.422182][T14400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4159'. [ 282.849627][T14423] openvswitch: netlink: IP tunnel TTL not specified. [ 283.138130][T14438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'. [ 283.720368][T14467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4193'. [ 283.720397][T14467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4193'. [ 283.823773][T14472] netlink: 344 bytes leftover after parsing attributes in process `syz.4.4196'. [ 284.173195][T14490] ipt_REJECT: TCP_RESET invalid for non-tcp [ 284.177267][T14488] netlink: 'syz.2.4203': attribute type 11 has an invalid length. [ 284.177286][T14488] netlink: 'syz.2.4203': attribute type 4 has an invalid length. [ 284.177297][T14488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4203'. [ 284.629369][T14505] bond4: invalid ARP target 0.0.0.0 specified for addition [ 284.629395][T14505] bond4: option arp_ip_target: invalid value (0) [ 284.650654][T14505] bond4 (unregistering): Released all slaves [ 285.139217][T14535] netlink: 'syz.2.4226': attribute type 11 has an invalid length. [ 286.368414][T14598] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4256'. [ 287.399539][T14651] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 287.718430][T14667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.881491][T14675] netlink: 'syz.3.4295': attribute type 21 has an invalid length. [ 287.881554][T14675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4295'. [ 288.102073][T14686] netlink: 'syz.3.4300': attribute type 2 has an invalid length. [ 288.395930][T14702] netlink: 'syz.1.4309': attribute type 8 has an invalid length. [ 289.076040][T14737] xt_cluster: node mask cannot exceed total number of nodes [ 290.071366][T14786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4351'. [ 290.614702][T14813] set match dimension is over the limit! [ 290.713320][T14818] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4366'. [ 290.952683][T14834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4372'. [ 291.513118][T14858] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4385'. [ 291.768088][T14871] xt_recent: Unsupported userspace flags (000000b1) [ 291.879290][T14874] xt_CT: No such helper "netbios-ns" [ 292.100709][ T13] bond0: (slave bond_slave_0): interface is now down [ 292.100736][ T13] bond0: (slave bond_slave_1): interface is now down [ 292.146903][ T13] bond0: now running without any active interface! [ 292.419454][T14903] netlink: 'syz.0.4404': attribute type 6 has an invalid length. [ 292.423560][T14904] bond2: option resend_igmp: invalid value (32767) [ 292.423593][T14904] bond2: option resend_igmp: allowed values 0 - 255 [ 292.430153][T14907] ip6t_srh: unknown srh match flags 4000 [ 292.460744][T14904] bond2 (unregistering): Released all slaves [ 293.450398][T14951] IPv6: sit2: Disabled Multicast RS [ 294.196964][T14989] netlink: 'syz.2.4448': attribute type 8 has an invalid length. [ 295.155678][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4470'. [ 295.350450][T15045] bridge3: entered allmulticast mode [ 296.019853][T15075] bond3: Removing last arp target with arp_interval on [ 296.408386][T15102] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 296.425814][T15103] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 296.425837][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 296.425851][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 296.558330][T15106] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 297.068584][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 297.851258][T15172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4538'. [ 298.348731][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4551'. [ 298.415179][T15197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4551'. [ 298.435217][T15203] SET target dimension over the limit! [ 299.537919][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4580'. [ 299.538564][T15259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.600829][T15262] netlink: 'syz.0.4582': attribute type 21 has an invalid length. [ 300.149634][T15287] netlink: 'syz.0.4594': attribute type 1 has an invalid length. [ 300.552787][T15307] xt_MASQUERADE: bad MAP_IPS. [ 300.702948][T15315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4608'. [ 301.147275][T15337] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4619'. [ 301.262010][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4622'. [ 301.369874][T15350] netlink: 'syz.2.4627': attribute type 1 has an invalid length. [ 301.548368][T15360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.667577][T15363] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.896323][T15376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4640'. [ 302.019921][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4642'. [ 302.034472][T15385] ip6t_srh: unknown srh match flags 5F28 [ 302.487495][T15402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4652'. [ 302.498753][T15403] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4651'. [ 302.945030][T15428] xt_LOG: prefix is not null-terminated [ 303.423242][T15454] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4677'. [ 303.821472][T15473] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4684'. [ 304.517058][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 304.517087][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 304.517121][T15509] netlink: 'syz.0.4702': attribute type 3 has an invalid length. [ 304.796227][T15522] netlink: 'syz.1.4709': attribute type 11 has an invalid length. [ 305.142030][T15543] IPv6: Can't replace route, no match found [ 305.702042][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4732'. [ 306.587972][T15611] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 306.808752][T15623] netlink: 'syz.3.4760': attribute type 1 has an invalid length. [ 306.808777][T15623] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4760'. [ 306.867051][T15627] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 307.519853][T15662] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.4779'. [ 307.519967][T15662] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.4779'. [ 307.974594][T15673] bond3: option fail_over_mac: invalid value (16) [ 307.982433][T15673] bond3 (unregistering): Released all slaves [ 308.000741][T15685] netlink: 'syz.0.4789': attribute type 1 has an invalid length. [ 308.000766][T15685] netlink: 756 bytes leftover after parsing attributes in process `syz.0.4789'. [ 308.523066][T15709] netlink: 'syz.0.4800': attribute type 2 has an invalid length. [ 308.524043][T15711] netlink: Unknown conntrack attr (0) [ 308.717571][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 309.245839][T15749] x_tables: duplicate underflow at hook 4 [ 309.715531][T15769] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 309.955307][T15781] xt_nat: multiple ranges no longer supported [ 310.560068][T15769] bond3 (unregistering): Released all slaves [ 310.687929][T15793] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4841'. [ 310.869895][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 310.869925][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 310.869940][T15801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4846'. [ 311.109283][T15812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.158157][T15816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.365672][T15828] netlink: 'syz.4.4854': attribute type 2 has an invalid length. [ 312.008740][T15859] netlink: 'syz.2.4873': attribute type 21 has an invalid length. [ 312.008839][T15859] netlink: 'syz.2.4873': attribute type 1 has an invalid length. [ 312.149448][T15868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.458588][ T1494] IPVS: starting estimator thread 0... [ 312.546705][T15881] IPVS: using max 29 ests per chain, 69600 per kthread [ 312.973680][T15907] netlink: NAT attribute has 1 unknown bytes [ 312.973721][T15907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.999607][T15904] netlink: 'syz.2.4894': attribute type 1 has an invalid length. [ 313.144629][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4897'. [ 313.232530][T15915] bridge5: entered promiscuous mode [ 313.232572][T15915] bridge5: entered allmulticast mode [ 313.896514][T15954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4919'. [ 314.053088][T15960] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4922'. [ 314.053115][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4922'. [ 314.249663][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4925'. [ 314.496822][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4932'. [ 314.496854][T15980] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 315.002703][T16004] netlink: Unknown conntrack attr (0) [ 315.002741][T16004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.139533][T16010] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4947'. [ 315.139561][T16010] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.4947'. [ 315.526669][T16026] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 316.259986][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4968'. [ 316.263194][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4969'. [ 316.824293][T16073] netlink: 'syz.3.4977': attribute type 2 has an invalid length. [ 316.975494][T16073] : entered promiscuous mode [ 317.423582][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.440124][T16134] xt_bpf: check failed: parse error [ 318.604627][ T31] audit: type=1107 audit(1789697356.207:2): pid=16138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 318.619830][T16141] netlink: 'syz.0.5012': attribute type 12 has an invalid length. [ 319.363064][T16167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.024498][T16189] netlink: 'syz.2.5036': attribute type 1 has an invalid length. [ 320.521674][T16213] netlink: 'syz.2.5048': attribute type 4 has an invalid length. [ 320.731702][T16221] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 320.731742][T16221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.439486][T16258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.659406][T16268] __nla_validate_parse: 2 callbacks suppressed [ 321.659428][T16268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5074'. [ 321.794251][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 322.054928][T16287] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.162803][T16293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.417750][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5094'. [ 322.424249][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 322.452649][T16308] SET target dimension over the limit! [ 322.689809][T16319] Bluetooth: MGMT ver 1.23 [ 322.689849][T16319] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 322.876077][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 323.074449][T16342] netlink: 'syz.4.5111': attribute type 6 has an invalid length. [ 323.074473][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5111'. [ 323.406334][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5119'. [ 323.756395][T16376] netlink: 'syz.0.5128': attribute type 2 has an invalid length. [ 323.812643][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5129'. [ 323.930499][T16382] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5130'. [ 324.089807][ T8100] IPVS: starting estimator thread 0... [ 324.095902][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5135'. [ 324.120794][T16393] macsec1: entered promiscuous mode [ 324.120822][T16393] bridge0: entered promiscuous mode [ 324.122064][T16393] macsec1: entered allmulticast mode [ 324.122083][T16393] bridge0: entered allmulticast mode [ 324.128207][T16393] bridge0: port 1(macsec1) entered blocking state [ 324.128415][T16393] bridge0: port 1(macsec1) entered disabled state [ 324.135604][ T8100] wlan1: Trigger new scan to find an IBSS to join [ 324.186101][T16394] IPVS: using max 25 ests per chain, 60000 per kthread [ 324.190941][T16393] bridge0: left allmulticast mode [ 324.190968][T16393] bridge0: left promiscuous mode [ 326.030713][T16490] IPVS: length: 8 != 1152 [ 326.299362][T16502] netlink: zone id is out of range [ 326.299380][T16502] netlink: zone id is out of range [ 326.300746][T16502] netlink: zone id is out of range [ 326.501388][T16511] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 326.515436][T16511] 0ªX¹¦Dö»: entered allmulticast mode [ 326.587251][T16514] netlink: 'syz.2.5194': attribute type 29 has an invalid length. [ 326.587879][T16514] netlink: 'syz.2.5194': attribute type 29 has an invalid length. [ 326.872776][T16529] __nla_validate_parse: 6 callbacks suppressed [ 326.872798][T16529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5201'. [ 327.009609][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5202'. [ 327.095069][ T8105] wlan1: Trigger new scan to find an IBSS to join [ 327.627131][ T8105] IPVS: starting estimator thread 0... [ 327.627425][T16566] IPVS: ip_vs_edit_dest(): server weight less than zero [ 327.713988][T16568] IPVS: using max 24 ests per chain, 57600 per kthread [ 327.886276][T16576] netlink: 'syz.4.5223': attribute type 2 has an invalid length. [ 327.886302][T16576] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5223'. [ 328.142291][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5226'. [ 328.142335][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5226'. [ 328.301105][T16591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5230'. [ 328.301176][T16591] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 328.474268][T16602] openvswitch: netlink: Missing valid actions attribute. [ 328.898506][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5243'. [ 329.314278][T16641] netlink: 'syz.1.5254': attribute type 33 has an invalid length. [ 329.463384][T16649] Bluetooth: hci0: unsupported parameter 5135 [ 329.463411][T16649] Bluetooth: hci0: unsupported parameter 8192 [ 329.463424][T16649] Bluetooth: hci0: unsupported parameter 5135 [ 329.463437][T16649] Bluetooth: hci0: unsupported parameter 8192 [ 330.137025][ T43] wlan1: Trigger new scan to find an IBSS to join [ 330.560465][T16708] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5286'. [ 330.561543][T16708] Zero length message leads to an empty skb [ 330.782919][T16716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5291'. [ 330.782944][T16716] tipc: Invalid UDP bearer configuration [ 330.782993][T16716] tipc: Enabling of bearer rejected, failed to enable media [ 330.901764][T16722] tipc: Started in network mode [ 330.901797][T16722] tipc: Node identity ac14142f, cluster identity 4711 [ 330.904010][T16722] tipc: Enabling of bearer rejected, failed to enable media [ 331.020039][ T43] wlan1: Creating new IBSS network, BSSID ca:41:d8:6a:9d:e0 [ 331.206711][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5303'. [ 331.206743][T16736] block nbd0: Unsupported socket: should be TCP or UNIX. [ 331.857427][T16766] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 333.228459][T16814] __nla_validate_parse: 2 callbacks suppressed [ 333.228482][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5339'. [ 333.228508][T16814] netlink: 'syz.4.5339': attribute type 3 has an invalid length. [ 333.320254][T16819] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5342'. [ 333.320283][T16819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5342'. [ 333.330351][T16817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5340'. [ 333.599478][T16832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5348'. [ 333.707422][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5351'. [ 333.779379][T16838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5353'. [ 334.060600][T16852] Bluetooth: MGMT ver 1.23 [ 334.477461][T16878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5369'. [ 335.191900][T16909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.408799][T16920] ip_tables: iptables: counters copy to user failed while replacing table [ 335.589031][T16926] Bluetooth: hci0: unsupported parameter 5135 [ 335.589057][T16926] Bluetooth: hci0: unsupported parameter 8192 [ 335.589078][T16926] Bluetooth: hci0: unsupported parameter 5135 [ 335.589090][T16926] Bluetooth: hci0: unsupported parameter 8192 [ 336.016297][T16944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5402'. [ 336.299830][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5407'. [ 336.583590][T16962] netlink: 'syz.4.5410': attribute type 1 has an invalid length. [ 338.997159][T17018] ip_tables: iptables: counters copy to user failed while replacing table [ 339.053659][T17021] xt_hashlimit: size too large, truncated to 1048576 [ 340.626288][T17067] block nbd0: not configured, cannot reconfigure [ 341.817613][T17111] netlink: 'syz.4.5482': attribute type 32 has an invalid length. [ 341.817639][T17111] __nla_validate_parse: 1 callbacks suppressed [ 341.817651][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5482'. [ 342.011253][T17111] bond3: Setting coupled_control to off (0) [ 342.079487][T17122] ip_tables: iptables: counters copy to user failed while replacing table [ 342.348717][T17127] openvswitch: netlink: Missing key (keys=40, expected=100) [ 342.367243][T17129] netlink: 'syz.2.5491': attribute type 3 has an invalid length. [ 342.367269][T17129] netlink: 'syz.2.5491': attribute type 1 has an invalid length. [ 342.367284][T17129] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5491'. [ 342.793469][T17139] vlan1: entered allmulticast mode [ 342.793495][T17139] bond0: entered allmulticast mode [ 342.793518][T17139] bond_slave_0: entered allmulticast mode [ 342.813409][T17139] bond_slave_1: entered allmulticast mode [ 344.078260][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5515'. [ 344.362871][T17185] netlink: 'syz.1.5517': attribute type 142 has an invalid length. [ 344.695394][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 344.695711][T17197] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 344.695745][T17197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.755293][T17192] wireguard0: entered promiscuous mode [ 345.377070][T17215] netlink: zone id is out of range [ 345.574184][T17218] IPVS: ip_vs_add_dest(): server weight less than zero [ 345.796418][T17227] macvlan0: entered promiscuous mode [ 347.176805][T17253] tipc: Started in network mode [ 347.176839][T17253] tipc: Node identity e0000001, cluster identity 4711 [ 347.176896][T17253] tipc: Enabling of bearer rejected, failed to enable media [ 347.650528][T17267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.517055][T17294] netlink: 'syz.3.5571': attribute type 9 has an invalid length. [ 349.887634][T17338] ovs-s: entered promiscuous mode [ 349.927585][T17343] openvswitch: ovs-s: Dropping previously announced user features [ 350.030444][T17345] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5595'. [ 350.308256][T17356] Bluetooth: hci0: unsupported parameter 5135 [ 350.308285][T17356] Bluetooth: hci0: unsupported parameter 8192 [ 350.308298][T17356] Bluetooth: hci0: unsupported parameter 5135 [ 350.308310][T17356] Bluetooth: hci0: unsupported parameter 8192 [ 350.918926][T17376] xt_IDLETIMER: label is empty or not nul-terminated [ 351.689799][T17403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5622'. [ 351.896088][T17407] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5624'. [ 351.935128][T17409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 352.153288][ T98] IPVS: starting estimator thread 0... [ 352.350969][T17415] IPVS: Scheduler module ip_vs_mh not found [ 352.351050][T17417] IPVS: using max 27 ests per chain, 64800 per kthread [ 353.509704][T17466] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5652'. [ 353.509768][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5652'. [ 353.629245][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5653'. [ 354.201939][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5662'. [ 354.331592][T17494] nbd: must specify at least one socket [ 354.536259][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5667'. [ 354.861924][T17505] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5670'. [ 354.861956][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5670'. [ 354.923481][T17506] netlink: 'syz.1.5671': attribute type 12 has an invalid length. [ 354.923504][T17506] netlink: 'syz.1.5671': attribute type 11 has an invalid length. [ 355.557606][T17522] netlink: 'syz.2.5679': attribute type 1 has an invalid length. [ 356.122079][T17540] __nla_validate_parse: 2 callbacks suppressed [ 356.122161][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5688'. [ 356.337062][T17548] netlink: 'syz.4.5692': attribute type 1 has an invalid length. [ 356.337146][T17548] netlink: 'syz.4.5692': attribute type 1 has an invalid length. [ 357.000597][T17567] Bluetooth: hci0: unsupported parameter 5161 [ 357.000625][T17567] Bluetooth: hci0: unsupported parameter 8192 [ 357.000662][T17567] Bluetooth: hci0: unsupported parameter 5161 [ 357.000676][T17567] Bluetooth: hci0: unsupported parameter 8192 [ 357.086710][T17574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.959614][T17597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5713'. [ 358.812855][T17624] veth3: entered allmulticast mode [ 359.358146][T17644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.676889][T17655] netlink: 75 bytes leftover after parsing attributes in process `syz.4.5742'. [ 361.025536][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5769'. [ 361.049297][T17710] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5769'. [ 361.425218][T17717] vlan2: entered allmulticast mode [ 361.425246][T17717] bond0: entered allmulticast mode [ 361.425261][T17717] bond_slave_0: entered allmulticast mode [ 361.425280][T17717] bond_slave_1: entered allmulticast mode [ 361.823398][T17735] ip_tables: iptables: counters copy to user failed while replacing table [ 362.724083][T17764] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 362.995210][T17768] Bluetooth: hci0: unsupported parameter 5161 [ 362.995236][T17768] Bluetooth: hci0: unsupported parameter 8192 [ 362.995249][T17768] Bluetooth: hci0: unsupported parameter 5161 [ 362.995261][T17768] Bluetooth: hci0: unsupported parameter 8192 [ 363.501134][ T8105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.650620][T17786] tipc: Started in network mode [ 363.650654][T17786] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 363.665233][T17786] tipc: Enabled bearer , priority 10 [ 364.148454][T17804] ip_tables: iptables: counters copy to user failed while replacing table [ 364.507559][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5822'. [ 364.766073][ T987] tipc: Node number set to 4269801488 [ 365.569830][T17858] Bluetooth: MGMT ver 1.23 [ 366.025014][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5849'. [ 366.362589][T17886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5852'. [ 366.591367][T17895] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 366.678358][T17901] netlink: 'syz.1.5860': attribute type 2 has an invalid length. [ 366.698353][T17899] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5859'. [ 367.244883][T17913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.017644][T17939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5879'. [ 368.017675][T17939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5879'. [ 368.888848][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5892'. [ 369.071975][T17974] ip_tables: iptables: counters copy to user failed while replacing table [ 369.107751][T17971] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 369.108375][T17971] team0: Device ipvlan2 is already an upper device of the team interface [ 369.610013][T17994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5906'. [ 369.895848][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 370.272356][T18012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.231608][T18077] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5946'. [ 372.351975][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5948'. [ 372.589183][T18081] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 372.617118][T18081] bond4 (unregistering): Released all slaves [ 373.350388][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5961'. [ 374.177575][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5970'. [ 374.338024][T18138] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5975'. [ 374.393690][T18136] tipc: MTU too low for tipc bearer [ 374.918731][T18153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5981'. [ 375.818925][T18189] pimreg: entered allmulticast mode [ 375.838914][T18189] pimreg: left allmulticast mode [ 376.196946][T18200] netlink: Invalid conntrack helper [ 376.196982][T18200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.406300][T18209] netlink: 'syz.0.6006': attribute type 3 has an invalid length. [ 377.319406][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6020'. [ 378.555556][T18282] netlink: 'syz.3.6039': attribute type 1 has an invalid length. [ 378.860862][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.602581][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6052'. [ 379.712982][T18317] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6054'. [ 379.713006][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6054'. [ 379.713024][T18317] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6054'. [ 379.713038][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6054'. [ 379.713053][T18317] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6054'. [ 380.227373][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6063'. [ 380.509410][T18344] tipc: Enabling not permitted [ 380.509447][T18344] tipc: Enabling of bearer rejected, failed to enable media [ 380.853826][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6071'. [ 382.577046][T18414] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6101'. [ 382.663169][T18418] team0: Device veth1_macvtap failed to register rx_handler [ 383.155406][T18435] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6111'. [ 383.675432][T18447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6116'. [ 383.846330][T18451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6118'. [ 385.138550][T18488] sit2: entered promiscuous mode [ 385.138776][T18488] sit2: entered allmulticast mode [ 385.230473][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6138'. [ 385.230506][T18493] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6138'. [ 385.230522][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6138'. [ 385.869410][T18516] netlink: 'syz.2.6150': attribute type 1 has an invalid length. [ 386.423452][T18531] Bluetooth: hci0: unsupported parameter 5135 [ 386.423477][T18531] Bluetooth: hci0: unsupported parameter 8192 [ 386.423491][T18531] Bluetooth: hci0: unsupported parameter 5135 [ 386.423504][T18531] Bluetooth: hci0: unsupported parameter 8192 [ 386.951513][T18543] netlink: 'syz.4.6163': attribute type 13 has an invalid length. [ 387.302530][ T31] audit: type=1107 audit(1789697424.907:3): pid=18554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 388.028527][T18581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6182'. [ 388.240992][T18589] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 389.487979][T18630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6206'. [ 389.504944][T18630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6206'. [ 389.923606][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6212'. [ 389.923632][T18643] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6212'. [ 389.923648][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6212'. [ 390.511106][T18659] netlink: 'syz.0.6220': attribute type 3 has an invalid length. [ 390.905066][T18672] ip_tables: iptables: counters copy to user failed while replacing table [ 391.191096][T18680] nbd: must specify an index to disconnect [ 392.737690][T18732] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 393.772528][T18768] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6273'. [ 394.873850][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6292'. [ 395.502960][ T8105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.505386][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.511997][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.513151][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.516305][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.518949][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.520525][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.522593][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 396.526167][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6315'. [ 397.915668][T18903] netlink: 'syz.0.6338': attribute type 11 has an invalid length. [ 398.984096][T18938] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 399.523579][T18956] vxcan1: Master is either lo or non-ether device [ 399.787428][T18964] __nla_validate_parse: 41 callbacks suppressed [ 399.787452][T18964] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6367'. [ 400.202931][T18980] netlink: 'syz.4.6375': attribute type 1 has an invalid length. [ 400.202954][T18980] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6375'. [ 400.202970][T18980] netlink: 'syz.4.6375': attribute type 1 has an invalid length. [ 401.522490][T19025] netlink: 'syz.2.6392': attribute type 1 has an invalid length. [ 401.522518][T19025] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6392'. [ 401.522535][T19025] netlink: 'syz.2.6392': attribute type 1 has an invalid length. [ 401.581417][T19027] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.912096][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6398'. [ 402.481674][T19053] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6406'. [ 402.801259][T19063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.352334][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6420'. [ 403.352359][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6420'. [ 403.352384][T19083] netlink: 'syz.4.6420': attribute type 14 has an invalid length. [ 403.352398][T19083] netlink: 'syz.4.6420': attribute type 13 has an invalid length. [ 403.777902][T19096] netlink: 'syz.3.6426': attribute type 1 has an invalid length. [ 403.777930][T19096] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6426'. [ 403.777946][T19096] netlink: 'syz.3.6426': attribute type 1 has an invalid length. [ 404.796816][T19128] netlink: 'syz.1.6442': attribute type 18 has an invalid length. [ 405.400874][T19146] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6451'. [ 405.993219][T19167] macvtap1: entered promiscuous mode [ 405.993429][T19167] macvtap1: entered allmulticast mode [ 405.993444][T19167] veth1_vlan: entered allmulticast mode [ 406.218690][T19175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6464'. [ 406.315382][T19179] vlan1: entered allmulticast mode [ 406.315418][T19179] veth0_vlan: entered allmulticast mode [ 406.424856][T19186] netlink: 'syz.2.6469': attribute type 4 has an invalid length. [ 407.026042][T19205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6478'. [ 407.522821][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 408.097808][T19241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6496'. [ 408.412406][T19254] Bluetooth: hci0: unsupported parameter 5134 [ 408.412433][T19254] Bluetooth: hci0: unsupported parameter 8192 [ 408.412447][T19254] Bluetooth: hci0: unsupported parameter 5134 [ 408.412459][T19254] Bluetooth: hci0: unsupported parameter 8192 [ 408.559326][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 408.560093][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 408.560377][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 408.560739][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 408.560958][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 410.706750][T19329] tipc: Enabling of bearer rejected, failed to enable media [ 410.921996][T19337] netlink: 'syz.0.6541': attribute type 49 has an invalid length. [ 411.718249][T19365] __nla_validate_parse: 45 callbacks suppressed [ 411.718273][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6555'. [ 411.718292][T19365] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6555'. [ 411.829019][T19371] tipc: Enabling of bearer rejected, failed to enable media [ 411.871923][T19369] netlink: 'syz.0.6556': attribute type 2 has an invalid length. [ 411.871949][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6556'. [ 412.145200][T19378] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.6559'. [ 412.145225][T19378] netlink: 'syz.2.6559': attribute type 1 has an invalid length. [ 413.488995][T19419] Bluetooth: hci0: unsupported parameter 5135 [ 413.489021][T19419] Bluetooth: hci0: unsupported parameter 8192 [ 413.489034][T19419] Bluetooth: hci0: unsupported parameter 5135 [ 413.489046][T19419] Bluetooth: hci0: unsupported parameter 8192 [ 414.305876][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6589'. [ 414.581168][T19453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.603458][T19455] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 415.005229][T19467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6602'. [ 415.005279][T19467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6602'. [ 415.499634][T19477] Bluetooth: hci0: unsupported parameter 5161 [ 415.499660][T19477] Bluetooth: hci0: unsupported parameter 8192 [ 415.499674][T19477] Bluetooth: hci0: unsupported parameter 5161 [ 415.499686][T19477] Bluetooth: hci0: unsupported parameter 8192 [ 415.926915][T19483] vlan2: entered promiscuous mode [ 415.926938][T19483] bridge0: entered promiscuous mode [ 415.928331][T19483] vlan2: entered allmulticast mode [ 415.928347][T19483] bridge0: entered allmulticast mode [ 416.259344][T19499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.326508][T19503] sctp: [Deprecated]: syz.2.6621 (pid 19503) Use of int in max_burst socket option deprecated. [ 416.326508][T19503] Use struct sctp_assoc_value instead [ 416.424501][T19504] tipc: Enabling of bearer rejected, media not registered [ 416.501294][T19510] netlink: Unknown nat attribute (0) [ 416.501332][T19510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.381531][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6648'. [ 420.362860][T19630] raw_sendmsg: syz.1.6680 forgot to set AF_INET. Fix it! [ 421.521884][T19667] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 421.608728][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6701'. [ 421.869558][T19681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.366235][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6713'. [ 422.389917][T19697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.391623][T19697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6713'. [ 422.771055][T19714] xt_hashlimit: size too large, truncated to 1048576 [ 423.337593][T19735] xt_IDLETIMER: label is empty or not nul-terminated [ 424.585480][T19782] xt_ecn: cannot match TCP bits for non-tcp packets [ 424.778944][T19788] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 424.930946][T19784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.999780][T19784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.003671][T19784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.032125][T19784] erspan0: entered promiscuous mode [ 425.525530][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6767'. [ 426.363964][T19842] netlink: NAT attribute has 4 unknown bytes [ 426.364004][T19842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.478956][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6784'. [ 426.898913][T19865] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 427.400199][T19885] tipc: Failed to obtain node identity [ 427.400239][T19885] tipc: Enabling of bearer rejected, failed to enable media [ 427.613073][ T1494] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 428.024843][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6812'. [ 428.233377][T19911] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6815'. [ 428.380059][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6820'. [ 428.380090][T19916] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6820'. [ 428.380139][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6820'. [ 428.500594][T19924] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.968023][T19942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6829'. [ 430.482523][T19986] bridge0: port 3(ipvlan2) entered blocking state [ 430.485654][T19986] bridge0: port 3(ipvlan2) entered disabled state [ 430.485817][T19986] ipvlan2: entered allmulticast mode [ 430.485836][T19986] bridge0: entered allmulticast mode [ 430.510634][T19986] ipvlan2: left allmulticast mode [ 430.510657][T19986] bridge0: left allmulticast mode [ 430.558478][T19992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6855'. [ 430.668117][T19995] netlink: 'syz.1.6857': attribute type 2 has an invalid length. [ 432.871404][T20064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6890'. [ 432.871436][T20064] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6890'. [ 432.871454][T20064] netlink: 'syz.0.6890': attribute type 6 has an invalid length. [ 432.871467][T20064] netlink: 'syz.0.6890': attribute type 5 has an invalid length. [ 432.871480][T20064] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6890'. [ 433.112195][T20070] netlink: 'syz.0.6893': attribute type 23 has an invalid length. [ 433.475583][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6896'. [ 433.811040][T20085] tipc: Enabling of bearer rejected, failed to enable media [ 433.911396][T20090] netlink: 'syz.4.6902': attribute type 1 has an invalid length. [ 433.911423][T20090] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6902'. [ 433.911439][T20090] netlink: 'syz.4.6902': attribute type 1 has an invalid length. [ 434.693719][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6914'. [ 436.176526][ T31] audit: type=1800 audit(1789697473.777:4): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6934" name="memory.events" dev="tmpfs" ino=7087 res=0 errno=0 [ 436.183642][ T31] audit: type=1804 audit(1789697473.787:5): pid=20155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6934" name="/newroot/1412/memory.events" dev="tmpfs" ino=7087 res=1 errno=0 [ 436.596168][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6940'. [ 436.814909][ T1494] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.814959][ T1494] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.814994][ T1494] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.815028][ T1494] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.863311][T20176] netlink: 'syz.0.6944': attribute type 7 has an invalid length. [ 437.395949][T20195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6951'. [ 437.750686][T20207] Bluetooth: hci0: unsupported parameter 5134 [ 437.750712][T20207] Bluetooth: hci0: unsupported parameter 8192 [ 437.750726][T20207] Bluetooth: hci0: unsupported parameter 5134 [ 437.750739][T20207] Bluetooth: hci0: unsupported parameter 8192 [ 439.409298][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6986'. [ 439.471495][T20268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6988'. [ 439.740666][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6991'. [ 439.801869][T20279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6993'. [ 440.298521][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.840424][T20313] openvswitch: netlink: Missing key (keys=40, expected=100) [ 440.967889][T20319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.733636][T20371] Bluetooth: hci0: unsupported parameter 5135 [ 442.733664][T20371] Bluetooth: hci0: unsupported parameter 8192 [ 442.733678][T20371] Bluetooth: hci0: unsupported parameter 5135 [ 442.733690][T20371] Bluetooth: hci0: unsupported parameter 8192 [ 442.756564][T20375] netlink: 'syz.2.7040': attribute type 2 has an invalid length. [ 444.714994][T20425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7064'. [ 444.715037][T20425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7064'. [ 444.875014][T20433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7068'. [ 446.050814][T20476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7084'. [ 447.245456][T20519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 447.739829][T20536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7110'. [ 448.266719][T20555] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7120'. [ 449.352454][T20584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7135'. [ 449.352938][T20584] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 449.422469][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7136'. [ 449.435091][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7136'. [ 449.435724][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7136'. [ 450.231917][T20620] sctp: [Deprecated]: syz.4.7151 (pid 20620) Use of int in maxseg socket option. [ 450.231917][T20620] Use struct sctp_assoc_value instead [ 450.545393][T20632] __nla_validate_parse: 2 callbacks suppressed [ 450.545417][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7154'. [ 450.545436][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7154'. [ 451.368818][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7167'. [ 451.368846][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7167'. [ 451.721242][T20663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7172'. [ 452.873978][T20698] tunl0: entered promiscuous mode [ 452.963764][T20698] netlink: 'syz.4.7189': attribute type 4 has an invalid length. [ 452.963793][T20698] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7189'. [ 453.066684][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7193'. [ 453.449459][T20723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7198'. [ 453.466119][T20723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7198'. [ 453.677297][T20729] netlink: 'syz.0.7202': attribute type 1 has an invalid length. [ 453.677339][T20729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.035950][T20745] nftables ruleset with unbound set [ 454.196212][T20748] xt_hashlimit: size too large, truncated to 1048576 [ 455.124814][T20784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7228'. [ 455.368403][T20791] tipc: Enabling of bearer rejected, failed to enable media [ 455.603182][T20803] netlink: 'syz.4.7237': attribute type 11 has an invalid length. [ 457.203174][T20845] __nla_validate_parse: 1 callbacks suppressed [ 457.203201][T20845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7256'. [ 457.227921][T20845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7256'. [ 457.788882][T20868] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 458.252588][T20888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.014542][T20912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7287'. [ 459.496304][ T1011] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.980604][T20947] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7305'. [ 460.534549][T20963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7312'. [ 460.534597][T20963] netlink: 'syz.0.7312': attribute type 1 has an invalid length. [ 460.726904][T20969] netlink: 'syz.4.7315': attribute type 11 has an invalid length. [ 461.130604][T20982] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7322'. [ 462.314852][T21019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7339'. [ 462.489363][T21019] vlan3: entered promiscuous mode [ 462.489390][T21019] gretap0: entered promiscuous mode [ 464.324058][T21093] netlink: 'syz.4.7374': attribute type 2 has an invalid length. [ 465.560143][T21137] netlink: 'syz.4.7396': attribute type 1 has an invalid length. [ 465.560170][T21137] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7396'. [ 465.560186][T21137] netlink: 'syz.4.7396': attribute type 1 has an invalid length. [ 465.875229][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7400'. [ 466.565034][T21171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7413'. [ 466.587555][T21171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7413'. [ 467.109424][T21188] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7421'. [ 467.397023][T21196] netlink: 'syz.3.7425': attribute type 2 has an invalid length. [ 467.501518][T21198] sock: sock_timestamping_bind_phc: sock not bind to device [ 468.465876][T21234] rdma_op ffff88802a7fb238 conn xmit_rdma 0000000000000000 [ 469.400962][T21257] team0: Device ipvlan0 failed to register rx_handler [ 470.115217][T21282] netlink: NAT attribute has 4 unknown bytes [ 470.115258][T21282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.766520][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7484'. [ 471.774712][T21318] atomic_op ffff88807f2dc1e0 conn xmit_atomic 0000000000000000 [ 472.108773][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7489'. [ 472.113528][T21331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.519331][T21338] tipc: Enabling of bearer rejected, already enabled [ 472.582804][T21341] netlink: 'syz.1.7495': attribute type 1 has an invalid length. [ 472.815052][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7499'. [ 472.815078][T21349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7499'. [ 474.011654][T21388] bridge_slave_1: default FDB implementation only supports local addresses [ 474.527632][T21400] netlink: 'syz.2.7523': attribute type 58 has an invalid length. [ 474.527658][T21400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7523'. [ 474.819673][T21409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7527'. [ 475.033637][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7529'. [ 475.323107][T21421] tipc: Enabling of bearer rejected, failed to enable media [ 475.977682][T21444] netlink: 'syz.4.7544': attribute type 62 has an invalid length. [ 476.823758][T21480] ip_tables: iptables: counters copy to user failed while replacing table [ 479.499151][T21580] syz.1.7610 (21580) used obsolete PPPIOCDETACH ioctl [ 479.858942][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7616'. [ 479.859267][T21593] xt_cgroup: path and classid specified [ 480.167007][T21600] netlink: 'syz.4.7618': attribute type 1 has an invalid length. [ 480.905244][T21630] netlink: 'syz.2.7633': attribute type 1 has an invalid length. [ 481.805853][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7651'. [ 481.840900][T21667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7652'. [ 482.106160][T21675] netlink: 'syz.0.7656': attribute type 1 has an invalid length. [ 482.106186][T21675] nbd: error processing sock list [ 482.963189][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7670'. [ 483.235205][T21715] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7675'. [ 483.272332][T21717] Bluetooth: hci0: unsupported parameter 5134 [ 483.272356][T21717] Bluetooth: hci0: unsupported parameter 8192 [ 483.272386][T21717] Bluetooth: hci0: unsupported parameter 5134 [ 483.272399][T21717] Bluetooth: hci0: unsupported parameter 8192 [ 484.426599][T21753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7695'. [ 484.426646][T21753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.660687][T21757] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7697'. [ 484.934875][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7700'. [ 485.731083][T21787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.309584][T21803] nbd: must specify a size in bytes for the device [ 486.394742][T21808] Bluetooth: hci0: unsupported parameter 5161 [ 486.394772][T21808] Bluetooth: hci0: unsupported parameter 8192 [ 486.394786][T21808] Bluetooth: hci0: unsupported parameter 5161 [ 486.394799][T21808] Bluetooth: hci0: unsupported parameter 8192 [ 486.908641][T21825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.908661][T21825] IPv6: NLM_F_CREATE should be set when creating new route [ 486.967806][T21829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7731'. [ 487.039253][T21821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.449866][T21821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.698397][T21821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.821502][T21858] smc: net device lo applied user defined pnetid SYZ0 [ 487.821601][T21858] smc: smcd device lo applied user defined pnetid SYZ0 [ 487.905258][T21860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7749'. [ 488.036560][T21821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.324901][ T1011] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.371850][T21875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7753'. [ 488.394528][ T1011] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.429897][T21877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7755'. [ 488.429932][T21877] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 488.445196][ T1011] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.454141][ T1011] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.701352][T21883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7756'. [ 490.922622][T21961] vlan3: entered allmulticast mode [ 491.497984][ T1494] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.651212][T21978] sctp: [Deprecated]: syz.3.7803 (pid 21978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.651212][T21978] Use struct sctp_sack_info instead [ 492.006399][T21984] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7807'. [ 492.006711][T21984] xt_policy: neither incoming nor outgoing policy selected [ 492.072215][T21987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7808'. [ 492.072270][T21987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7808'. [ 492.187986][T21991] tipc: Enabling of bearer rejected, media not registered [ 492.647888][T22009] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.199891][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7826'. [ 493.277531][T22030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.502034][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7829'. [ 493.922045][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7837'. [ 493.922072][T22056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7837'. [ 493.980007][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 493.982766][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 494.016025][ T987] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 494.125598][T22062] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 494.126879][T22062] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 494.436056][T22071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7842'. [ 494.437658][T22071] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7842'. [ 494.699592][T22078] Bluetooth: hci0: unsupported parameter 5134 [ 494.699618][T22078] Bluetooth: hci0: unsupported parameter 8192 [ 494.699631][T22078] Bluetooth: hci0: unsupported parameter 5134 [ 494.699644][T22078] Bluetooth: hci0: unsupported parameter 8192 [ 494.938242][ T987] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 495.025865][ T987] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 495.032738][T22090] ip_tables: iptables: counters copy to user failed while replacing table [ 495.365489][T22100] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 495.613788][T22109] netlink: 'syz.2.7862': attribute type 1 has an invalid length. [ 495.613814][T22109] netlink: 'syz.2.7862': attribute type 3 has an invalid length. [ 495.613827][T22109] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7862'. [ 495.613844][T22109] NCSI netlink: No device for ifindex 813332851 [ 495.825131][T22113] netlink: 'syz.3.7865': attribute type 1 has an invalid length. [ 498.294110][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 498.692129][T22193] __nla_validate_parse: 1 callbacks suppressed [ 498.692154][T22193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7903'. [ 498.812677][T22197] netlink: 'syz.3.7907': attribute type 2 has an invalid length. [ 499.051095][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7908'. [ 500.246743][T22253] openvswitch: netlink: Unknown nsh attribute 0 [ 500.848519][T22276] pim6reg527: entered allmulticast mode [ 500.941731][T22281] openvswitch: netlink: Missing key (keys=40, expected=100) [ 501.019808][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7950'. [ 501.106330][T22289] netlink: 'syz.3.7952': attribute type 1 has an invalid length. [ 501.345191][T22297] netlink: 'syz.1.7954': attribute type 4 has an invalid length. [ 501.746159][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.066326][T22323] macsec2: entered promiscuous mode [ 502.179118][T22331] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 502.179160][T22331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.592070][T22342] tipc: Started in network mode [ 502.592107][T22342] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 502.592374][T22342] tipc: Enabled bearer , priority 10 [ 502.879714][T22350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7977'. [ 502.879745][T22350] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7977'. [ 502.879761][T22350] netlink: 'syz.1.7977': attribute type 5 has an invalid length. [ 502.879774][T22350] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7977'. [ 503.431936][T22363] netlink: 'syz.2.7984': attribute type 3 has an invalid length. [ 503.527815][T22366] netlink: 'syz.0.7985': attribute type 1 has an invalid length. [ 503.565952][T22367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.713258][ T5721] tipc: Node number set to 10136234 [ 503.912155][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7992'. [ 503.912192][T22382] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 504.135812][T22388] Bluetooth: hci0: unsupported parameter 5161 [ 504.135841][T22388] Bluetooth: hci0: unsupported parameter 8192 [ 504.135854][T22388] Bluetooth: hci0: unsupported parameter 5161 [ 504.135868][T22388] Bluetooth: hci0: unsupported parameter 8192 [ 504.245090][T22393] netlink: Setting conntrack mark requires 'commit' flag. [ 504.245131][T22393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.189193][T22464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.364403][T22469] netlink: 'syz.2.8037': attribute type 3 has an invalid length. [ 506.364429][T22469] netlink: 'syz.2.8037': attribute type 1 has an invalid length. [ 506.364442][T22469] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8037'. [ 506.468769][T22472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8039'. [ 507.027779][T22491] netlink: 'syz.1.8047': attribute type 2 has an invalid length. [ 507.302080][T22500] pim6reg: entered allmulticast mode [ 507.310794][T22501] netlink: 'syz.4.8052': attribute type 1 has an invalid length. [ 507.310818][T22501] netlink: 'syz.4.8052': attribute type 3 has an invalid length. [ 507.310831][T22501] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8052'. [ 507.310849][T22501] NCSI netlink: No device for ifindex 813332851 [ 507.391337][T22474] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 507.493944][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 507.828570][T22513] netlink: 'syz.0.8058': attribute type 2 has an invalid length. [ 507.927365][T22521] smc: net device team0 applied user defined pnetid SYZ2 [ 508.080226][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8066'. [ 509.115858][T22550] team0: Device gtp1 is up. Set it down before adding it as a team port [ 509.486443][T22564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.629909][T22570] nbd: must specify a device to reconfigure [ 510.384439][T22601] Bluetooth: hci0: unsupported parameter 5135 [ 510.384465][T22601] Bluetooth: hci0: unsupported parameter 8192 [ 510.384479][T22601] Bluetooth: hci0: unsupported parameter 5135 [ 510.384491][T22601] Bluetooth: hci0: unsupported parameter 8192 [ 510.392188][T22600] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 510.658236][T22609] netlink: 'syz.4.8105': attribute type 29 has an invalid length. [ 510.754655][T22613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8106'. [ 512.533580][T22678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8139'. [ 513.296269][T22698] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 513.584067][T22706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8153'. [ 513.584100][T22706] netlink: 35 bytes leftover after parsing attributes in process `syz.3.8153'. [ 513.584117][T22706] netlink: 'syz.3.8153': attribute type 5 has an invalid length. [ 513.584131][T22706] netlink: 'syz.3.8153': attribute type 6 has an invalid length. [ 513.584144][T22706] netlink: 35 bytes leftover after parsing attributes in process `syz.3.8153'. [ 515.418326][T22765] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8182'. [ 516.331780][T22790] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8193'. [ 516.331808][T22790] nbd: illegal input index -8454144 [ 518.400728][T22868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8232'. [ 518.689961][T22877] openvswitch: netlink: Missing valid actions attribute. [ 518.690000][T22877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.386887][T22900] vlan3: entered promiscuous mode [ 519.386913][T22900] geneve1: entered promiscuous mode [ 519.387125][T22900] vlan3: entered allmulticast mode [ 519.387140][T22900] geneve1: entered allmulticast mode [ 521.017420][T22958] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8273'. [ 521.560197][T22980] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8284'. [ 522.119500][T22995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.178547][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8292'. [ 522.340533][T23001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8294'. [ 522.919695][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8299'. [ 523.499405][T23037] netlink: 'syz.3.8312': attribute type 1 has an invalid length. [ 523.499431][T23037] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8312'. [ 523.499448][T23037] netlink: 'syz.3.8312': attribute type 1 has an invalid length. [ 523.536059][ T98] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 524.063667][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8320'. [ 524.499154][T23070] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8328'. [ 524.499180][T23070] netlink: 'syz.2.8328': attribute type 9 has an invalid length. [ 524.898629][T23084] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 525.413963][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 525.832478][T23116] smc: net device lo erased user defined pnetid SYZ0 [ 525.832607][T23116] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 525.832686][T23116] smc: smcd device lo erased user defined pnetid SYZ0 [ 526.013516][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8352'. [ 527.858924][T23183] netlink: 'syz.0.8382': attribute type 10 has an invalid length. [ 528.014973][T23188] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8384'. [ 529.299871][T23235] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8407'. [ 530.209957][T23269] netlink: 'syz.0.8424': attribute type 25 has an invalid length. [ 530.244934][T23272] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.8426'. [ 530.244962][T23272] netlink: 'syz.2.8426': attribute type 2 has an invalid length. [ 531.053016][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8441'. [ 531.238711][T23310] netlink: 'syz.3.8445': attribute type 4 has an invalid length. [ 531.238737][T23310] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8445'. [ 531.421875][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8450'. [ 531.422233][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8450'. [ 531.643169][T23322] nbd: socks must be embedded in a SOCK_ITEM attr [ 532.002268][T23339] netlink: 'syz.2.8460': attribute type 1 has an invalid length. [ 532.389792][T23349] netlink: Failed to add %pB helper -22 [ 532.389858][T23349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.569390][T23358] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8469'. [ 533.198536][T23375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.198555][T23375] IPv6: NLM_F_CREATE should be set when creating new route [ 533.198625][T23375] IPv6: NLM_F_CREATE should be set when creating new route [ 533.198650][T23375] IPv6: NLM_F_CREATE should be set when creating new route [ 533.239176][T23375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.311570][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8479'. [ 533.311597][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8479'. [ 533.768934][T23397] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8486'. [ 534.219526][T23412] netlink: 'syz.3.8495': attribute type 29 has an invalid length. [ 534.220950][T23412] netlink: 'syz.3.8495': attribute type 29 has an invalid length. [ 534.846572][T23433] netlink: 'syz.1.8504': attribute type 1 has an invalid length. [ 534.846600][T23433] netlink: 'syz.1.8504': attribute type 2 has an invalid length. [ 534.846614][T23433] netlink: 'syz.1.8504': attribute type 3 has an invalid length. [ 534.846626][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8504'. [ 535.261959][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8511'. [ 536.200476][T23484] Bluetooth: MGMT ver 1.23 [ 536.475327][T23496] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8535'. [ 536.977551][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8543'. [ 537.325582][T23526] netlink: 'syz.3.8550': attribute type 4 has an invalid length. [ 537.325607][T23526] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8550'. [ 537.950642][T23547] Bluetooth: hci0: unsupported parameter 5135 [ 537.950671][T23547] Bluetooth: hci0: unsupported parameter 8192 [ 537.950684][T23547] Bluetooth: hci0: unsupported parameter 5135 [ 537.950697][T23547] Bluetooth: hci0: unsupported parameter 8192 [ 538.584450][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8565'. [ 538.835782][T23568] vlan2: entered promiscuous mode [ 538.835810][T23568] bridge0: entered promiscuous mode [ 539.047188][T23576] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 540.219554][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8589'. [ 540.463156][T23622] bond4: Invalid ad_actor_system MAC address. [ 540.467012][T23622] bond4: option ad_actor_system: invalid value (1) [ 540.501526][T23622] bond4 (unregistering): Released all slaves [ 540.681028][T23631] tipc: Enabled bearer , priority 10 [ 540.881616][T23639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8596'. [ 541.275150][T23652] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8601'. [ 541.749857][ T9] tipc: Node number set to 2886997039 [ 543.044492][T23713] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8625'. [ 543.044522][T23713] nbd: illegal input index 65508 [ 544.090561][T23754] netlink: 'syz.2.8643': attribute type 1 has an invalid length. [ 544.090589][T23754] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8643'. [ 544.683374][T23778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8654'. [ 544.683401][T23778] bridge: RTM_NEWNEIGH with invalid ether address [ 545.242328][T23799] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 545.271724][T23797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.692277][T23819] netlink: 'syz.4.8675': attribute type 1 has an invalid length. [ 545.692303][T23819] netlink: 500 bytes leftover after parsing attributes in process `syz.4.8675'. [ 546.489157][T23849] netlink: 'syz.2.8687': attribute type 1 has an invalid length. [ 546.560537][T23851] tipc: Enabling of bearer rejected, failed to enable media [ 546.987472][T23864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8693'. [ 547.335140][T23872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.311661][T23897] netlink: NAT attribute has 4 unknown bytes [ 548.311704][T23897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.568250][T23906] netlink: 'syz.2.8710': attribute type 3 has an invalid length. [ 549.109592][T23926] nbd: couldn't find device at index 15663104 [ 549.622245][T23947] netlink: 'syz.0.8728': attribute type 8 has an invalid length. [ 549.622270][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8728'. [ 549.931605][T23955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8731'. [ 549.992609][T23958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.061886][T23961] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 550.226641][T23967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8736'. [ 550.290753][T23969] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8737'. [ 550.563879][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8742'. [ 550.563909][T23982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8742'. [ 550.986212][T23998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.774533][T24130] veth0_to_bond: entered allmulticast mode [ 555.132587][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8806'. [ 555.145501][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8809'. [ 555.497932][ T8105] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 555.849686][T24169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8816'. [ 556.191784][T24180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8821'. [ 556.340545][T24182] tipc: Enabled bearer , priority 11 [ 558.115692][T24234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8843'. [ 558.453624][T24246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8847'. [ 558.481306][T24246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8847'. [ 558.889230][T24257] netlink: 'syz.3.8852': attribute type 21 has an invalid length. [ 558.889260][T24257] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8852'. [ 558.889314][T24257] netlink: 'syz.3.8852': attribute type 4 has an invalid length. [ 558.889329][T24257] netlink: 'syz.3.8852': attribute type 5 has an invalid length. [ 558.889342][T24257] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8852'. [ 558.922430][T24257] netlink: 'syz.3.8852': attribute type 21 has an invalid length. [ 558.922453][T24257] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8852'. [ 558.922505][T24257] netlink: 'syz.3.8852': attribute type 4 has an invalid length. [ 558.922517][T24257] netlink: 'syz.3.8852': attribute type 5 has an invalid length. [ 559.552787][T24273] sctp: [Deprecated]: syz.4.8860 (pid 24273) Use of int in max_burst socket option. [ 559.552787][T24273] Use struct sctp_assoc_value instead [ 560.821854][T24318] netlink: 'syz.2.8879': attribute type 4 has an invalid length. [ 560.860824][T24320] netlink: 'syz.1.8880': attribute type 1 has an invalid length. [ 560.860851][T24320] netlink: 'syz.1.8880': attribute type 7 has an invalid length. [ 560.860864][T24320] netlink: 'syz.1.8880': attribute type 8 has an invalid length. [ 560.860876][T24320] __nla_validate_parse: 2 callbacks suppressed [ 560.860888][T24320] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8880'. [ 560.860904][T24320] NCSI netlink: No device for ifindex 65584 [ 561.166850][T24328] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8884'. [ 561.516316][T24340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8890'. [ 561.694740][T24349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8893'. [ 561.894007][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 562.286171][T24367] netlink: Only one type of NAT may be specified [ 562.286211][T24367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.179909][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.398106][T24406] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8922'. [ 563.717117][T24415] batman_adv: batadv0: Adding interface: wlan1 [ 563.717139][T24415] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.717173][T24415] batman_adv: batadv0: Interface activated: wlan1 [ 563.973619][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8928'. [ 564.044565][T24424] TCP: TCP_TX_DELAY enabled [ 564.291399][T24429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8932'. [ 564.291432][T24429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8932'. [ 564.468560][T24436] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8936'. [ 564.626693][T24440] ip_tables: iptables: counters copy to user failed while replacing table [ 565.139958][T24461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8948'. [ 565.898817][T24466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 566.074975][T24466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.085343][T24466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.117464][T24466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.592461][T24468] veth0_macvtap: left allmulticast mode [ 566.652689][T24468] ip6tnl1: left allmulticast mode [ 566.661697][T24468] veth3: left allmulticast mode [ 566.675265][T24468] bond0: left allmulticast mode [ 566.682628][T24468] bridge3: left allmulticast mode [ 566.696710][T24468] bridge5: left allmulticast mode [ 566.762954][T24468] macvtap1: left allmulticast mode [ 566.762979][T24468] veth1_vlan: left allmulticast mode [ 567.273620][T24474] tipc: Disabling bearer [ 567.425479][T24474] vlan1 (unregistering): left allmulticast mode [ 567.425508][T24474] veth0_vlan (unregistering): left allmulticast mode [ 567.757063][T24492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.758903][T24492] bond_slave_0: left allmulticast mode [ 567.779445][T24492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.782939][T24492] bond_slave_1: left allmulticast mode [ 567.793163][T24492] bond0 (unregistering): Released all slaves [ 568.810264][T24546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8984'. [ 568.860535][T24546] hsr_slave_0: left promiscuous mode [ 568.871836][T24546] hsr_slave_1: left promiscuous mode [ 569.237411][T24558] openvswitch: netlink: EtherType 2 is less than min 600 [ 570.027469][T24590] openvswitch: netlink: IP tunnel dst address not specified [ 570.027508][T24590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.251189][T24596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9007'. [ 570.369693][T24600] blkio.reset_stats is deprecated [ 571.190690][T24631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9021'. [ 571.778158][T24645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9029'. [ 572.252351][ T8105] tipc: Subscription rejected, illegal request [ 572.782768][T24680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9043'. [ 572.841843][T24682] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9045'. [ 572.841874][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9045'. [ 573.120253][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9049'. [ 573.707432][T24709] openvswitch: netlink: IPv4 tunnel dst address is zero [ 573.707471][T24709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.309032][T24725] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9065'. [ 574.680642][T24736] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 577.141347][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9103'. [ 577.568271][T24810] netlink: 576 bytes leftover after parsing attributes in process `syz.3.9107'. [ 578.152981][T24831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9117'. [ 578.993171][T24865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9132'. [ 578.993205][T24865] nbd: socks must be embedded in a SOCK_ITEM attr [ 579.151857][T24871] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.508610][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9141'. [ 579.517682][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9141'. [ 579.949315][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9147'. [ 580.095773][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9149'. [ 580.396136][T24913] validate_nla: 2 callbacks suppressed [ 580.396159][T24913] netlink: 'syz.4.9153': attribute type 5 has an invalid length. [ 580.638079][T24919] netlink: 'syz.0.9155': attribute type 83 has an invalid length. [ 581.001292][T24929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9160'. [ 581.688503][T24960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9174'. [ 581.688543][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9174'. [ 582.896671][T25006] tipc: Enabling of bearer rejected, already enabled [ 583.187554][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9202'. [ 583.467320][T25024] netlink: 'syz.3.9205': attribute type 28 has an invalid length. [ 583.467347][T25024] netlink: 'syz.3.9205': attribute type 3 has an invalid length. [ 583.467360][T25024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9205'. [ 583.785516][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9207'. [ 584.811050][T25057] netlink: 'syz.1.9221': attribute type 15 has an invalid length. [ 585.240787][T25076] __nla_validate_parse: 1 callbacks suppressed [ 585.240811][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9231'. [ 585.248747][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9231'. [ 585.452420][T25084] netlink: 'syz.3.9236': attribute type 4 has an invalid length. [ 585.596355][T25087] wg2: Caught tx_queue_len zero misconfig [ 587.473463][T25156] Cannot find set identified by id 4 to match [ 587.496524][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.980087][T25172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9276'. [ 588.081060][T25178] netlink: 'syz.3.9277': attribute type 1 has an invalid length. [ 588.081085][T25178] netlink: 'syz.3.9277': attribute type 3 has an invalid length. [ 588.081099][T25178] netlink: 'syz.3.9277': attribute type 7 has an invalid length. [ 588.081112][T25178] netlink: 'syz.3.9277': attribute type 8 has an invalid length. [ 588.081133][T25178] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9277'. [ 588.081149][T25178] NCSI netlink: No device for ifindex 131092 [ 588.404663][T25185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9281'. [ 588.417321][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9281'. [ 588.417353][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9281'. [ 589.260850][ T4932] Bluetooth: hci2: connection err: -111 [ 589.944412][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9308'. [ 589.997097][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9308'. [ 590.305438][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'. [ 590.305467][T25251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9313'. [ 590.608013][T25264] netlink: 'syz.4.9319': attribute type 2 has an invalid length. [ 591.017499][T25268] bond4: entered promiscuous mode [ 591.103399][T25286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9328'. [ 592.084569][T25310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9338'. [ 592.094456][T25310] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.094929][T25310] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.315727][T25321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9342'. [ 592.315856][T25321] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9342'. [ 593.306077][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9356'. [ 593.311241][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9356'. [ 593.311506][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9356'. [ 593.704740][T25359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9362'. [ 593.978888][T25363] tun0: tun_chr_ioctl cmd 1074025675 [ 593.978915][T25363] tun0: persist disabled [ 594.719200][T25388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.670169][T25425] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 595.909952][T25434] __nla_validate_parse: 3 callbacks suppressed [ 595.909978][T25434] netlink: 71 bytes leftover after parsing attributes in process `syz.0.9394'. [ 596.710037][T25456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9406'. [ 596.785557][T25463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9409'. [ 597.033614][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9413'. [ 598.115623][T25506] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9429'. [ 598.280543][T25510] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 599.451074][T25557] openvswitch: netlink: Unknown key attributes 1 [ 599.619958][T25564] netlink: 'syz.1.9457': attribute type 83 has an invalid length. [ 599.741290][T25571] IPv6: Can't replace route, no match found [ 599.753299][T25571] IPv6: Can't replace route, no match found [ 600.263453][T25591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9468'. [ 602.288379][T25661] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 602.657382][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9511'. [ 602.799076][T25680] sctp: [Deprecated]: syz.3.9512 (pid 25680) Use of int in maxseg socket option. [ 602.799076][T25680] Use struct sctp_assoc_value instead [ 602.816471][T25685] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.9515'. [ 603.148479][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9516'. [ 603.472686][T25704] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9522'. [ 603.660699][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9529'. [ 603.827167][T25723] lo: Caught tx_queue_len zero misconfig [ 604.079940][T25726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9533'. [ 604.532889][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9537'. [ 604.560311][T25738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9537'. [ 604.560354][T25738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9537'. [ 604.604535][T25740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9538'. [ 604.997213][T25750] netlink: Failed to add ¦â—k\ helper -22 [ 604.997274][T25750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.170844][T25761] ip6tnl0: Caught tx_queue_len zero misconfig [ 605.975897][T25792] batman_adv: batadv0: Adding interface: gretap1 [ 605.975919][T25792] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.975953][T25792] batman_adv: batadv0: Interface activated: gretap1 [ 607.624529][T25849] sch_fq: defrate 0 ignored. [ 608.531599][T25884] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.927396][T25899] __nla_validate_parse: 3 callbacks suppressed [ 608.927419][T25899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9613'. [ 608.927434][T25899] tipc: Invalid UDP bearer configuration [ 608.927479][T25899] tipc: Enabling of bearer rejected, failed to enable media [ 609.241609][T25911] netlink: 'syz.4.9619': attribute type 21 has an invalid length. [ 609.241635][T25911] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9619'. [ 610.150226][T25946] veth0: entered promiscuous mode [ 610.153471][T25943] veth0: left promiscuous mode [ 610.181533][T25948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9637'. [ 611.451541][T25996] netlink: 'syz.3.9662': attribute type 2 has an invalid length. [ 611.939249][T26017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.423004][T26035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9679'. [ 612.423043][T26035] netlink: 'syz.4.9679': attribute type 8 has an invalid length. [ 612.423057][T26035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9679'. [ 612.472103][T26038] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9681'. [ 612.984031][T26053] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9688'. [ 613.140207][T26060] veth0_to_bridge: entered promiscuous mode [ 613.142503][T26057] veth0_to_bridge: left promiscuous mode [ 613.455724][T26072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9697'. [ 613.455759][T26072] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9697'. [ 613.764245][T26072] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9697'. [ 614.276685][T26085] udevd[26085]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 615.431475][T26138] openvswitch: netlink: Unknown key attributes 1 [ 616.374445][ C1] ------------[ cut here ]------------ [ 616.374465][ C1] current_phy->suspended [ 616.374477][ C1] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0x15f4/0x1620, CPU#1: kworker/u8:11/8105 [ 616.397537][ C1] Modules linked in: [ 616.401473][ C1] CPU: 1 UID: 0 PID: 8105 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 616.411137][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.421297][ C1] Workqueue: phy0-mac-cmds mac802154_scan_worker [ 616.427816][ C1] RIP: 0010:hwsim_hw_xmit+0x15f4/0x1620 [ 616.433458][ C1] Code: c6 05 83 97 24 09 01 48 c7 c7 e0 5a be 8c be 0d 01 00 00 48 c7 c2 80 5b be 8c e8 37 6a 64 fa e9 f4 eb ff ff e8 dd be 88 fa 90 <0f> 0b 90 e9 e1 ea ff ff 89 d9 80 e1 07 38 c1 0f 8c c6 ea ff ff 48 [ 616.453227][ C1] RSP: 0018:ffffc90000a18a80 EFLAGS: 00010246 [ 616.459443][ C1] RAX: ffffffff873f0bd3 RBX: ffff888029096d78 RCX: ffff88802a049f40 [ 616.467486][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: ffff888029096720 [ 616.475539][ C1] RBP: ffffc90000a18bf8 R08: ffff8880290966ab R09: 1ffff11005212cd5 [ 616.483725][ C1] R10: dffffc0000000000 R11: ffffffff873ef5e0 R12: dffffc0000000000 [ 616.491845][ C1] R13: ffff888029096760 R14: ffff888029096d20 R15: 1ffff11005212cec [ 616.499883][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 616.508886][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.515561][ C1] CR2: 00007f32fb3556c8 CR3: 000000005d702000 CR4: 00000000003526f0 [ 616.523574][ C1] Call Trace: [ 616.526980][ C1] [ 616.529911][ C1] ? ieee802154_hold_queue+0xd1/0x3a0 [ 616.535493][ C1] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 616.540682][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 616.546627][ C1] ieee802154_tx+0x26d/0x510 [ 616.551262][ C1] ieee802154_subif_start_xmit+0x110/0x190 [ 616.557131][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 616.562403][ C1] sch_direct_xmit+0x257/0x4c0 [ 616.567274][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 616.572603][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 616.577842][ C1] __qdisc_run+0xb11/0x1620 [ 616.582396][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 616.588089][ C1] net_tx_action+0x7cb/0xc30 [ 616.592779][ C1] ? net_tx_action+0x5bb/0xc30 [ 616.597607][ C1] handle_softirqs+0x226/0x860 [ 616.602430][ C1] ? do_softirq+0x77/0xd0 [ 616.606814][ C1] ? hwsim_update_pib+0x25f/0x400 [ 616.611887][ C1] do_softirq+0x77/0xd0 [ 616.616157][ C1] [ 616.619122][ C1] [ 616.622103][ C1] __local_bh_enable_ip+0x100/0x140 [ 616.627358][ C1] hwsim_update_pib+0x25f/0x400 [ 616.632251][ C1] ? hwsim_hw_channel+0x50/0x2b0 [ 616.637293][ C1] hwsim_hw_channel+0x178/0x2b0 [ 616.642221][ C1] drv_set_channel+0x103/0x280 [ 616.647084][ C1] mac802154_scan_cleanup_locked+0x116/0x280 [ 616.653089][ C1] mac802154_scan_worker+0x775/0xe60 [ 616.658433][ C1] ? mac802154_scan_worker+0xc9/0xe60 [ 616.663962][ C1] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 616.669795][ C1] ? rcu_is_watching+0x16/0xb0 [ 616.674657][ C1] ? process_scheduled_works+0x97a/0x1630 [ 616.680446][ C1] process_scheduled_works+0xc3d/0x1630 [ 616.686077][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 616.692101][ C1] ? assign_work+0x3cf/0x5d0 [ 616.696823][ C1] worker_thread+0xa47/0xfb0 [ 616.701470][ C1] kthread+0x38b/0x480 [ 616.705633][ C1] ? __pfx_worker_thread+0x10/0x10 [ 616.710782][ C1] ? __pfx_kthread+0x10/0x10 [ 616.715425][ C1] ret_from_fork+0x514/0xb70 [ 616.720098][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 616.725357][ C1] ? __switch_to+0xc89/0x1420 [ 616.730100][ C1] ? __pfx_kthread+0x10/0x10 [ 616.734793][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.739645][ C1] [ 616.742666][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 616.750634][ C1] CPU: 1 UID: 0 PID: 8105 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 616.760229][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.770307][ C1] Workqueue: phy0-mac-cmds mac802154_scan_worker [ 616.776673][ C1] Call Trace: [ 616.779982][ C1] [ 616.782841][ C1] vpanic+0x56d/0xa60 [ 616.786865][ C1] ? __pfx__printk+0x10/0x10 [ 616.791472][ C1] ? __pfx_vpanic+0x10/0x10 [ 616.796026][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 616.801359][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 616.806586][ C1] panic+0xc5/0xd0 [ 616.810510][ C1] ? __pfx_panic+0x10/0x10 [ 616.814968][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 616.819950][ C1] __warn+0x315/0x4c0 [ 616.823959][ C1] ? hwsim_hw_xmit+0x15f4/0x1620 [ 616.828926][ C1] ? hwsim_hw_xmit+0x15f4/0x1620 [ 616.833878][ C1] __report_bug+0x276/0x570 [ 616.838490][ C1] ? arch_stack_walk+0x11b/0x150 [ 616.843446][ C1] ? hwsim_hw_xmit+0x15f4/0x1620 [ 616.848403][ C1] ? __pfx___report_bug+0x10/0x10 [ 616.854291][ C1] ? __bfs+0x153/0x290 [ 616.858387][ C1] ? __pfx_usage_match+0x10/0x10 [ 616.863355][ C1] ? __bfs+0x153/0x290 [ 616.867524][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 616.872753][ C1] ? check_path+0x21/0x40 [ 616.877100][ C1] ? hwsim_hw_xmit+0x15f4/0x1620 [ 616.882058][ C1] report_bug+0x16b/0x220 [ 616.886407][ C1] ? hwsim_hw_xmit+0x15f4/0x1620 [ 616.891357][ C1] ? hwsim_hw_xmit+0x15f6/0x1620 [ 616.896307][ C1] handle_bug+0x9c/0x200 [ 616.900608][ C1] exc_invalid_op+0x1a/0x50 [ 616.905144][ C1] asm_exc_invalid_op+0x1a/0x20 [ 616.910030][ C1] RIP: 0010:hwsim_hw_xmit+0x15f4/0x1620 [ 616.915678][ C1] Code: c6 05 83 97 24 09 01 48 c7 c7 e0 5a be 8c be 0d 01 00 00 48 c7 c2 80 5b be 8c e8 37 6a 64 fa e9 f4 eb ff ff e8 dd be 88 fa 90 <0f> 0b 90 e9 e1 ea ff ff 89 d9 80 e1 07 38 c1 0f 8c c6 ea ff ff 48 [ 616.935427][ C1] RSP: 0018:ffffc90000a18a80 EFLAGS: 00010246 [ 616.941521][ C1] RAX: ffffffff873f0bd3 RBX: ffff888029096d78 RCX: ffff88802a049f40 [ 616.949596][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: ffff888029096720 [ 616.957605][ C1] RBP: ffffc90000a18bf8 R08: ffff8880290966ab R09: 1ffff11005212cd5 [ 616.965595][ C1] R10: dffffc0000000000 R11: ffffffff873ef5e0 R12: dffffc0000000000 [ 616.973587][ C1] R13: ffff888029096760 R14: ffff888029096d20 R15: 1ffff11005212cec [ 616.981576][ C1] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 616.986714][ C1] ? hwsim_hw_xmit+0x15f3/0x1620 [ 616.991695][ C1] ? ieee802154_hold_queue+0xd1/0x3a0 [ 616.997096][ C1] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 617.002244][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 617.008088][ C1] ieee802154_tx+0x26d/0x510 [ 617.012697][ C1] ieee802154_subif_start_xmit+0x110/0x190 [ 617.018528][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 617.023701][ C1] sch_direct_xmit+0x257/0x4c0 [ 617.028512][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 617.033824][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 617.038971][ C1] __qdisc_run+0xb11/0x1620 [ 617.043506][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 617.049166][ C1] net_tx_action+0x7cb/0xc30 [ 617.053772][ C1] ? net_tx_action+0x5bb/0xc30 [ 617.058568][ C1] handle_softirqs+0x226/0x860 [ 617.063355][ C1] ? do_softirq+0x77/0xd0 [ 617.067714][ C1] ? hwsim_update_pib+0x25f/0x400 [ 617.072778][ C1] do_softirq+0x77/0xd0 [ 617.076947][ C1] [ 617.079886][ C1] [ 617.082823][ C1] __local_bh_enable_ip+0x100/0x140 [ 617.088036][ C1] hwsim_update_pib+0x25f/0x400 [ 617.092909][ C1] ? hwsim_hw_channel+0x50/0x2b0 [ 617.097871][ C1] hwsim_hw_channel+0x178/0x2b0 [ 617.102772][ C1] drv_set_channel+0x103/0x280 [ 617.107560][ C1] mac802154_scan_cleanup_locked+0x116/0x280 [ 617.113653][ C1] mac802154_scan_worker+0x775/0xe60 [ 617.118964][ C1] ? mac802154_scan_worker+0xc9/0xe60 [ 617.124357][ C1] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 617.130195][ C1] ? rcu_is_watching+0x16/0xb0 [ 617.134976][ C1] ? process_scheduled_works+0x97a/0x1630 [ 617.140800][ C1] process_scheduled_works+0xc3d/0x1630 [ 617.146409][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 617.152616][ C1] ? assign_work+0x3cf/0x5d0 [ 617.157254][ C1] worker_thread+0xa47/0xfb0 [ 617.161913][ C1] kthread+0x38b/0x480 [ 617.166006][ C1] ? __pfx_worker_thread+0x10/0x10 [ 617.171131][ C1] ? __pfx_kthread+0x10/0x10 [ 617.175745][ C1] ret_from_fork+0x514/0xb70 [ 617.180554][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 617.185708][ C1] ? __switch_to+0xc89/0x1420 [ 617.190423][ C1] ? __pfx_kthread+0x10/0x10 [ 617.195124][ C1] ret_from_fork_asm+0x1a/0x30 [ 617.199934][ C1] [ 617.203232][ C1] Kernel Offset: disabled [ 617.207661][ C1] Rebooting in 86400 seconds..