last executing test programs: 27.429706372s ago: executing program 0 (id=10035): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) 27.31529588s ago: executing program 0 (id=10038): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a600000001d0a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30"], 0x88}}, 0x0) 27.032763002s ago: executing program 0 (id=10044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0x1000, 0xa, 0x0, 0xffffffffffffffff, 0xd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x15, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 26.884615012s ago: executing program 0 (id=10048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd25, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 26.769319955s ago: executing program 0 (id=10051): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 26.65651322s ago: executing program 0 (id=10053): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000740)="6943ed", 0x0}, 0x20) 11.519184935s ago: executing program 32 (id=10053): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000050000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000740)="6943ed", 0x0}, 0x20) 5.47707981s ago: executing program 1 (id=10389): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @random="f4f377ffcf87"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) 5.352459114s ago: executing program 1 (id=10391): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) 5.217476118s ago: executing program 1 (id=10394): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback, 0x4d6}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x80}, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xfffffff9, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x800, 0x401, 0x5}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.11830504s ago: executing program 1 (id=10397): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800)=r0, 0x4) 4.890643055s ago: executing program 1 (id=10403): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]}) 4.728200795s ago: executing program 1 (id=10409): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.739231553s ago: executing program 3 (id=10436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008800}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x240000c0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000ec0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f00000002c0)={0x964, 0x1, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x3, 0xfffffffb}, 0x3, 0x0, 0x9, 0x8001, 0xd, 'syz1\x00', "c142b8cdf9b1af75d875f888622c0142b16c8bced17eb1c0fbae163ed28a9856", "b6731a72cca791cd63572e3768a57e872d1db936d96f854fe1facbc3fb2f5df5", [{0x5, 0xfff3, {0x3, 0x6}}, {0x5, 0xc, {0x1, 0x7}}, {0xfffc, 0x8, {0x1, 0x100}}, {0x0, 0xcf, {0x2, 0x3ff}}, {0x1, 0x5387, {0x3, 0x800}}, {0x7fff, 0x5, {0x3, 0x9}}, {0x1, 0xba, {0x3, 0x1}}, {0x100, 0x9, {0x2, 0x4}}, {0x6, 0xb5c, {0x1, 0x5}}, {0x3, 0x0, {0x3, 0x101}}, {0x1, 0x2, {0x2, 0xf03c}}, {0x1, 0xc, {0x1, 0x46}}, {0xfffa, 0x5, {0x1, 0x2}}, {0xa, 0x400, {0x2, 0x1000}}, {0x4, 0x4, {0x3, 0x4}}, {0xe84e, 0xf, {0x0, 0x200}}, {0x7ff, 0x5, {0x1, 0x3}}, {0x7fff, 0x8}, {0x1, 0x3, {0x2, 0xfffffffa}}, {0xfc95, 0x1, {0x2, 0x6}}, {0x6, 0x8}, {0x4, 0x1, {0x0, 0x7}}, {0x7f, 0x2, {0x1, 0x8}}, {0x8, 0x0, {0x1, 0x6}}, {0x5, 0x2, {0x2, 0x5}}, {0xf001, 0x7f, {0x0, 0x4f4be6be}}, {0x7, 0xfff7, {0x0, 0x998}}, {0x818, 0x7, {0x2, 0x8000}}, {0xe1, 0x1, {0x2, 0xb}}, {0x4, 0x832, {0x3, 0xd9b}}, {0xad7, 0xfffa, {0x3, 0x5}}, {0x8, 0x7, {0x3, 0xfff}}, {0x895, 0x9, {0x0, 0x100}}, {0x101, 0x3, {0x2, 0x9}}, {0x8, 0x401, {0x0, 0xd1}}, {0x2, 0x7, {0x1, 0x2}}, {0xc, 0x9, {0x0, 0x1768}}, {0xd, 0x13f6, {0x3, 0x3}}, {0x7, 0x1, {0x3, 0x7fffffff}}, {0xdd, 0x1, {0x2, 0xffff}}]}}}, {{0x254, 0x1, {{0x2, 0x100}, 0x3e, 0x6, 0x7f, 0x0, 0x20, 'syz1\x00', "72624e1baafe75e86fbc11015e570418f022d27af106494c5c75040e0c35b434", "3367fceb1eb5c1321fe55c8e8963bd4c25b37ff408df9e905fc1579e648bae1b", [{0x4f, 0x3, {0x3, 0x5}}, {0x9, 0x100, {0x0, 0xd9a}}, {0x7, 0xc5, {0x3, 0x2}}, {0x800, 0x1ff, {0x0, 0x7f}}, {0x6, 0x5, {0x1, 0xe85}}, {0x9, 0x400, {0x3, 0x7}}, {0x9be9, 0xfffe, {0x3, 0x6}}, {0x2, 0x6, {0x1, 0x3}}, {0x7, 0x200, {0x3, 0x100}}, {0x5, 0x7, {0x1, 0x1}}, {0x2, 0x8, {0x3, 0x5}}, {0x2, 0x8, {0x0, 0xd18}}, {0x9, 0x9, {0x1, 0xff}}, {0x7, 0x6, {0x1, 0xa}}, {0x3, 0x7, {0x3, 0x7}}, {0x6, 0x1, {0x3, 0x6}}, {0x9, 0x4, {0x1, 0x7}}, {0x7, 0xffff, {0x0, 0xfffffeff}}, {0x316, 0xc, {0x1, 0xe96}}, {0x355, 0x7, {0x2, 0x6}}, {0xffff, 0x1ff, {0x2, 0x34180f79}}, {0x7, 0xd261, {0x3, 0x1ff}}, {0x7, 0x1000, {0x2, 0x173}}, {0x7f, 0x8bc, {0x3, 0x2}}, {0x4, 0x40, {0x3, 0xf68}}, {0x1c00, 0x7, {0x2, 0x1}}, {0x1, 0x9, {0x3, 0xbeea}}, {0xc00d, 0x6ec, {0x2, 0xf0}}, {0xff, 0x3, {0x1, 0xbce}}, {0x5, 0xf0, {0x1, 0x10000}}, {0x1, 0x3, {0x1, 0x6}}, {0x1f, 0x433c, {0x2, 0xff}}, {0x5, 0x9, {0x0, 0xd8c3}}, {0x7fff, 0x5, {0x4ab52aed886958eb, 0x6}}, {0x0, 0x6, {0x2, 0x2}}, {0x1, 0x100, {0x3, 0x2}}, {0x8000, 0x6, {0x3, 0x9}}, {0xc, 0x4, {0x2, 0xb2}}, {0x4, 0x73b8, {0x6, 0x6}}, {0x2, 0xff, {0x1, 0x8001}}]}}}, {{0x254, 0x1, {{0x2, 0xb1}, 0x2, 0x2, 0xff, 0xe, 0x6, 'syz1\x00', "8404d678b1f928d92b548162026afc6f0ce2c18bf36373b6e4adaadc74874506", "e7fe45197d947e46461cffe34811d2dcb50a599bbe9772f4c347835479a8d42b", [{0x5, 0x8, {0x1, 0x4}}, {0x2, 0xf, {0x1, 0x2}}, {0x800, 0x349, {0x0, 0xb}}, {0x4, 0x8, {0x0, 0x2}}, {0x6, 0x3, {0x2, 0x4}}, {0xff, 0x0, {0x1, 0x3}}, {0x80, 0x28c6, {0x3, 0x4}}, {0x4, 0x2, {0x1, 0x4}}, {0x7, 0xfa1f, {0x2, 0xc}}, {0x7, 0x38b7, {0x1, 0x1}}, {0x9, 0xa000, {0x0, 0x2}}, {0x6, 0x7757, {0x2, 0x295}}, {0x7, 0x6, {0x0, 0xfffffffe}}, {0x0, 0x7, {0x3, 0x4}}, {0x401, 0x0, {0x1, 0x4}}, {0x92, 0x6, {0x3, 0x4}}, {0xff, 0x3, {0x2, 0xffffffff}}, {0x1, 0x3, {0x2, 0x5}}, {0x9, 0x3ff, {0x1, 0x4}}, {0xa6, 0x800, {0x0, 0x800}}, {0x3, 0x2, {0x0, 0x80000001}}, {0x1, 0x8000, {0x3, 0xffff}}, {0x2, 0xfff9, {0x0, 0x2}}, {0xfffc, 0x4, {0x0, 0x3}}, {0x7, 0x1, {0x2, 0x5}}, {0x3, 0xf7, {0x1, 0x4}}, {0x3, 0x3, {0x1, 0x2}}, {0x0, 0xc99, {0x0, 0x5}}, {0x2, 0x2, {0x1, 0x1}}, {0x6, 0x0, {0x0, 0xffffffff}}, {0x0, 0x7, {0x1}}, {0x7ff, 0x1, {0x1, 0x9}}, {0x4, 0x9, {0x3, 0x800}}, {0x5d8, 0x0, {0x2, 0x85}}, {0x1996, 0x6, {0x3, 0x7fff}}, {0x5, 0x7, {0x3, 0x1}}, {0xa828, 0x0, {0x3, 0x3}}, {0x10, 0x6, {0x1, 0xffffffc0}}, {0x1, 0x401, {0x1, 0xfe5}}, {0x9, 0x7, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x2, 0x7fffffff}, 0x7, 0xe0, 0xffff, 0x8, 0xc, 'syz0\x00', "694b7d32d6f881395aa7f102e398eaf3b92d18b2fe154ac1bd112192efb93a62", "7ecb21397679a17c1915bc5b6b1228ec3bcd4819307f79dd60ab69b1d23bad76", [{0x419, 0x0, {0x2, 0xfffffff9}}, {0x6, 0x2, {0x1, 0x1}}, {0xa287, 0xffe6, {0x3, 0x7c2}}, {0x1, 0xdf9f, {0x2, 0x400}}, {0x8, 0x8, {0x1, 0x5}}, {0x1, 0x3, {0x3, 0xfff}}, {0xf4f5, 0x0, {0x0, 0x3}}, {0x6, 0x6800, {0x3, 0x3}}, {0x7, 0x6, {0x0, 0x4}}, {0x7, 0xa, {0x0, 0x1}}, {0x2, 0x1, {0x3, 0x5}}, {0x8, 0xb, {0x0, 0x8}}, {0x4, 0x3, {0x2, 0x208}}, {0x1ff, 0x6}, {0x92, 0x4, {0x0, 0x5}}, {0x6, 0xe, {0x0, 0x7}}, {0xcd6, 0x67c, {0x3, 0x5}}, {0x3c9, 0x5, {0x1, 0xfffffffa}}, {0x7, 0x200, {0x0, 0x7fff}}, {0x4, 0x46, {0x2, 0x3bf6804e}}, {0xb, 0x4, {0x0, 0x4}}, {0x7ff, 0x100, {0x2, 0x8587}}, {0xfffc, 0x8000, {0x2, 0x100}}, {0x1000, 0xd8e, {0x1, 0xca}}, {0x7ff, 0x9, {0x3, 0x8}}, {0xc6e, 0x3, {0x0, 0x6}}, {0x2, 0x5, {0x3, 0x9}}, {0x14, 0x864, {0x0, 0x7}}, {0x5, 0x9, {0x2, 0x5de49546}}, {0x8, 0x4, {0x3, 0xfffff910}}, {0x8, 0x3, {0x3, 0xe}}, {0x7f, 0x8, {0x2, 0x6}}, {0x9, 0x800, {0x2, 0x165}}, {0x2, 0x4, {0x1, 0x4}}, {0x6, 0x4, {0x0, 0x9}}, {0xb, 0xe, {0x2, 0x10000}}, {0x3, 0x1, {0x2, 0x9c}}, {0x7f, 0xb31, {0x3, 0x6}}, {0x100, 0x7, {0x0, 0x100}}, {0x2, 0x7, {0x2, 0xdb1}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x800}, 0x4840) 1.367381412s ago: executing program 3 (id=10440): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1.347255385s ago: executing program 4 (id=10441): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 1.190866979s ago: executing program 4 (id=10443): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) 1.145633697s ago: executing program 3 (id=10446): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x0, 0x0, 0x8, 0x8, 0x77ffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 859.262999ms ago: executing program 5 (id=10450): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x5}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d800000019007b18e00212ba0d8105040a3f1100fe0f040b067c73a1bc0009001e000500000000001500153f05000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 858.886875ms ago: executing program 2 (id=10451): r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 858.423785ms ago: executing program 3 (id=10452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4000, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 723.163704ms ago: executing program 2 (id=10453): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x34, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xd, 0x1}, {0xffe0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8}]}, 0x34}}, 0x44004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 722.387466ms ago: executing program 5 (id=10454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 678.463314ms ago: executing program 3 (id=10455): r0 = socket$kcm(0x2, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0xcff}, {0xffffffff, 0x0, 0x100000001, 0x7fff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0xd0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 609.833502ms ago: executing program 4 (id=10456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0xcb9334c04f4b3ee2}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) close(0x3) 591.219644ms ago: executing program 5 (id=10457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe01"], 0xffdd) 539.941759ms ago: executing program 2 (id=10458): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000030000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000280), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) 506.463017ms ago: executing program 3 (id=10459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc81c}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 469.909449ms ago: executing program 2 (id=10460): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x7, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000840)='O', 0x1}], 0x1}, 0x4008000) 379.953096ms ago: executing program 4 (id=10461): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 369.107075ms ago: executing program 5 (id=10462): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x2062) 250.680663ms ago: executing program 5 (id=10463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, 0x0, 0x0, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 237.885914ms ago: executing program 2 (id=10464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) 216.24089ms ago: executing program 4 (id=10465): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 107.350646ms ago: executing program 5 (id=10466): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000a60000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x48) 40.632804ms ago: executing program 2 (id=10467): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 0s ago: executing program 4 (id=10468): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000160007010200000000000000017c000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) kernel console output (not intermixed with test programs): utes in process `syz.2.3776'. [ 238.099038][T13700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3788'. [ 238.124872][T13699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3789'. [ 238.333599][T13718] netlink: 'syz.2.3798': attribute type 21 has an invalid length. [ 238.357479][T13718] netlink: 'syz.2.3798': attribute type 4 has an invalid length. [ 238.450302][T13725] netlink: 'syz.0.3801': attribute type 3 has an invalid length. [ 238.469719][T13725] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3801'. [ 238.556806][T13731] netlink: 'syz.4.3803': attribute type 21 has an invalid length. [ 238.590396][T13731] netlink: 'syz.4.3803': attribute type 15 has an invalid length. [ 238.616672][T13731] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3803'. [ 238.637023][T13731] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.656300][T13731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.663732][T13731] IPv6: NLM_F_CREATE should be set when creating new route [ 238.671048][T13731] IPv6: NLM_F_CREATE should be set when creating new route [ 238.678330][T13731] IPv6: NLM_F_CREATE should be set when creating new route [ 238.800000][T13743] netlink: 'syz.2.3810': attribute type 21 has an invalid length. [ 239.333634][T13773] netlink: 'syz.4.3824': attribute type 4 has an invalid length. [ 239.812963][T13796] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3836'. [ 240.180660][T13811] netlink: 'syz.2.3842': attribute type 2 has an invalid length. [ 240.411844][T13823] netlink: 'syz.3.3848': attribute type 4 has an invalid length. [ 240.439283][T13823] netlink: 'syz.3.3848': attribute type 17 has an invalid length. [ 240.948238][T13858] caif0: entered promiscuous mode [ 240.953326][T13858] caif0: entered allmulticast mode [ 241.211388][T13882] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.776354][T13991] __nla_validate_parse: 6 callbacks suppressed [ 242.776372][T13991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3930'. [ 243.112688][T14018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3942'. [ 243.122911][T14018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.314468][T14033] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 243.394778][T14037] validate_nla: 11 callbacks suppressed [ 243.394795][T14037] netlink: 'syz.0.3951': attribute type 2 has an invalid length. [ 243.726220][T14062] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.3964'. [ 243.922069][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3970'. [ 244.173470][T14085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3974'. [ 244.239463][T14085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.751887][T14117] delete_channel: no stack [ 244.846743][T14121] netlink: 'syz.0.3992': attribute type 32 has an invalid length. [ 244.899590][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3995'. [ 244.989782][T14134] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3998'. [ 245.006095][T14134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.192174][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4003'. [ 245.315771][T14149] netlink: 'syz.4.4006': attribute type 49 has an invalid length. [ 245.517882][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'. [ 245.576798][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'. [ 245.599038][T14157] netlink: 'syz.4.4010': attribute type 4 has an invalid length. [ 245.802350][T14171] netlink: zone id is out of range [ 245.818170][T14170] batadv_slave_1: entered promiscuous mode [ 245.826775][T14171] netlink: zone id is out of range [ 245.846035][T14170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.855211][T14171] netlink: del zone limit has 4 unknown bytes [ 246.238260][T14197] netlink: 'syz.4.4028': attribute type 11 has an invalid length. [ 246.708856][T14229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.019136][T14250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.175716][T14261] netlink: 'syz.4.4060': attribute type 21 has an invalid length. [ 247.176092][T14263] netlink: 'syz.2.4061': attribute type 4 has an invalid length. [ 247.219103][T14263] .`: renamed from bond0 [ 247.726007][T14299] netlink: 'syz.2.4079': attribute type 1 has an invalid length. [ 247.850597][T14310] __nla_validate_parse: 4 callbacks suppressed [ 247.850618][T14310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4084'. [ 247.889599][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4088'. [ 247.899741][T14313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4088'. [ 248.049980][T14325] netlink: 'syz.4.4092': attribute type 6 has an invalid length. [ 248.061789][T14325] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4092'. [ 248.132738][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 248.210618][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 248.273562][T14340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4099'. [ 248.546887][T14359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4110'. [ 248.735389][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 248.768757][T14375] netlink: 'syz.3.4117': attribute type 2 has an invalid length. [ 248.777800][T14375] netlink: 'syz.3.4117': attribute type 1 has an invalid length. [ 248.788662][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 248.852649][T14381] netlink: 'syz.0.4119': attribute type 1 has an invalid length. [ 249.071715][T14401] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 249.169970][T14403] netlink: zone id is out of range [ 249.175133][T14403] netlink: zone id is out of range [ 249.185460][T14403] netlink: zone id is out of range [ 249.191092][T14403] netlink: zone id is out of range [ 249.196931][T14403] netlink: zone id is out of range [ 249.219102][T14403] netlink: zone id is out of range [ 249.274770][T14403] netlink: zone id is out of range [ 249.280274][T14403] netlink: zone id is out of range [ 249.295785][T14403] netlink: zone id is out of range [ 249.304262][T14403] netlink: zone id is out of range [ 249.760901][T14435] lo speed is unknown, defaulting to 1000 [ 250.335268][T14464] netlink: 'syz.2.4158': attribute type 10 has an invalid length. [ 250.570707][T14480] netlink: 'syz.0.4164': attribute type 41 has an invalid length. [ 250.984904][T14509] netlink: 'syz.2.4179': attribute type 16 has an invalid length. [ 251.575841][T14544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.586417][T14544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.619829][T14544] hsr0: entered promiscuous mode [ 251.636123][T14544] hsr0: entered allmulticast mode [ 251.649246][T14544] hsr_slave_0: entered allmulticast mode [ 251.654946][T14544] hsr_slave_1: entered allmulticast mode [ 251.801353][T14557] netlink: 'syz.2.4201': attribute type 2 has an invalid length. [ 252.360724][T14599] netlink: 'syz.1.4222': attribute type 4 has an invalid length. [ 252.398932][T14599] netlink: 'syz.1.4222': attribute type 16 has an invalid length. [ 252.561001][ T30] audit: type=1107 audit(1760749840.039:3): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 252.646153][T14623] netlink: 'syz.2.4234': attribute type 3 has an invalid length. [ 253.259755][T14669] nftables ruleset with unbound chain [ 253.306161][T14673] __nla_validate_parse: 11 callbacks suppressed [ 253.306181][T14673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4258'. [ 253.334203][T14673] dummy0: entered promiscuous mode [ 253.344631][T14673] .`: (slave dummy0): Releasing backup interface [ 254.048750][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4284'. [ 254.140886][T14734] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4288'. [ 254.159989][T14735] validate_nla: 3 callbacks suppressed [ 254.160007][T14735] netlink: 'syz.2.4289': attribute type 21 has an invalid length. [ 254.177768][T14737] net_ratelimit: 39 callbacks suppressed [ 254.177788][T14737] netlink: zone id is out of range [ 254.189514][T14737] netlink: zone id is out of range [ 254.195857][T14737] netlink: zone id is out of range [ 254.212703][T14737] netlink: zone id is out of range [ 254.222257][T14737] netlink: zone id is out of range [ 254.231526][T14737] netlink: zone id is out of range [ 254.256945][T14737] netlink: zone id is out of range [ 254.262350][T14737] netlink: zone id is out of range [ 254.267745][T14737] netlink: zone id is out of range [ 254.272951][T14737] netlink: zone id is out of range [ 254.418520][T14741] syz.3.4292 (14741) used greatest stack depth: 16056 bytes left [ 254.701652][T14772] netlink: 'syz.2.4308': attribute type 1 has an invalid length. [ 254.769539][T14777] netlink: 'syz.4.4309': attribute type 7 has an invalid length. [ 254.829319][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4313'. [ 254.979796][T14791] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.4317'. [ 255.459477][T14829] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4333'. [ 255.666815][T14840] netlink: 'syz.1.4338': attribute type 2 has an invalid length. [ 255.670791][T14844] netlink: 'syz.0.4340': attribute type 10 has an invalid length. [ 255.697135][T14840] netlink: 'syz.1.4338': attribute type 8 has an invalid length. [ 255.704909][T14840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4338'. [ 255.724135][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4341'. [ 255.801577][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.808280][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.869768][T14854] netlink: 'syz.0.4345': attribute type 3 has an invalid length. [ 255.896837][T14854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4345'. [ 255.919283][T14856] netlink: 'syz.1.4346': attribute type 10 has an invalid length. [ 255.949164][T14856] veth1_vlan: entered allmulticast mode [ 255.955084][T14856] veth1_vlan: left promiscuous mode [ 255.978883][T14856] team0: Device veth1_vlan failed to register rx_handler [ 256.734710][T14908] netlink: 'syz.3.4369': attribute type 5 has an invalid length. [ 256.754344][T14908] netlink: 'syz.3.4369': attribute type 9 has an invalid length. [ 256.778151][T14908] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4369'. [ 257.058406][T14924] raw_sendmsg: syz.3.4376 forgot to set AF_INET. Fix it! [ 258.602750][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4420'. [ 258.625471][T15015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4420'. [ 258.914691][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4431'. [ 259.372155][T15075] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4448'. [ 259.383401][T15075] net_ratelimit: 338 callbacks suppressed [ 259.383418][T15075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 259.387278][T15074] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4449'. [ 259.464019][T15083] netlink: 'syz.2.4453': attribute type 11 has an invalid length. [ 259.489115][T15082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4452'. [ 259.664524][T15093] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4458'. [ 259.699155][T15099] validate_nla: 5 callbacks suppressed [ 259.699171][T15099] netlink: 'syz.1.4460': attribute type 10 has an invalid length. [ 259.723171][T15099] team0: Port device wlan1 added [ 259.736112][T15101] netlink: 'syz.2.4461': attribute type 39 has an invalid length. [ 259.971429][T15115] netlink: 'syz.4.4469': attribute type 1 has an invalid length. [ 259.996731][T15115] netlink: 'syz.4.4469': attribute type 2 has an invalid length. [ 260.322566][T15141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4481'. [ 260.356854][T15145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4484'. [ 260.363033][T15141] tc_dump_action: action bad kind [ 260.750931][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4497'. [ 260.774962][T15176] netlink: 'syz.1.4499': attribute type 97 has an invalid length. [ 260.793135][T15176] netlink: 'syz.1.4499': attribute type 97 has an invalid length. [ 261.027916][T15185] lo speed is unknown, defaulting to 1000 [ 261.229853][T15207] netlink: 'syz.1.4513': attribute type 3 has an invalid length. [ 261.305785][T15211] netlink: 'syz.4.4515': attribute type 8 has an invalid length. [ 263.153555][T15328] netlink: 'syz.3.4563': attribute type 164 has an invalid length. [ 263.392417][T15342] netlink: 'syz.4.4568': attribute type 10 has an invalid length. [ 263.620235][T15358] __nla_validate_parse: 7 callbacks suppressed [ 263.620256][T15358] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4578'. [ 263.767138][T15369] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4583'. [ 263.839970][T15374] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4585'. [ 263.901222][T15378] tc_dump_action: action bad kind [ 264.106844][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4593'. [ 264.936168][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 264.945974][T15454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4625'. [ 264.955780][T15454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4625'. [ 265.095080][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4630'. [ 265.131779][T15470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4632'. [ 265.295315][T15482] validate_nla: 5 callbacks suppressed [ 265.295334][T15482] netlink: 'syz.3.4638': attribute type 21 has an invalid length. [ 265.364631][T15484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4640'. [ 265.661434][T15508] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 266.102529][T15540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.111679][T15539] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 266.145490][T15539] netlink: 'syz.4.4666': attribute type 1 has an invalid length. [ 266.148113][T15544] netlink: 'syz.3.4668': attribute type 2 has an invalid length. [ 266.525487][T15567] netlink: 'syz.3.4680': attribute type 28 has an invalid length. [ 267.564468][T15635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.688641][T15680] netlink: 'syz.2.4733': attribute type 3 has an invalid length. [ 268.697028][T15684] netlink: 'syz.1.4735': attribute type 21 has an invalid length. [ 268.704875][T15684] __nla_validate_parse: 15 callbacks suppressed [ 268.704891][T15684] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4735'. [ 268.738831][T15680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4733'. [ 268.902602][T15695] netlink: 'syz.3.4741': attribute type 1 has an invalid length. [ 268.927777][T15695] netlink: 'syz.3.4741': attribute type 2 has an invalid length. [ 269.238911][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4752'. [ 269.564346][ T30] audit: type=1107 audit(1760749857.039:4): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 269.700010][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4768'. [ 269.919001][T15758] openvswitch: netlink: Message has 4 unknown bytes. [ 270.153219][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4779'. [ 270.406795][T15788] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4787'. [ 270.516461][T15794] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4790'. [ 270.733288][T15808] netlink: 1018 bytes leftover after parsing attributes in process `syz.4.4795'. [ 270.764485][T15728] syz.2.4756: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 270.804343][T15728] CPU: 0 UID: 0 PID: 15728 Comm: syz.2.4756 Not tainted syzkaller #0 PREEMPT(full) [ 270.804366][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.804385][T15728] Call Trace: [ 270.804393][T15728] [ 270.804402][T15728] dump_stack_lvl+0x189/0x250 [ 270.804439][T15728] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 270.804461][T15728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.804480][T15728] ? __pfx__printk+0x10/0x10 [ 270.804498][T15728] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 270.804516][T15728] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 270.804541][T15728] warn_alloc+0x214/0x310 [ 270.804569][T15728] ? __pfx_warn_alloc+0x10/0x10 [ 270.804601][T15728] ? __get_vm_area_node+0x28f/0x300 [ 270.804621][T15728] ? hash_netportnet_create+0x354/0xf90 [ 270.804645][T15728] __vmalloc_node_range_noprof+0x690/0x12d0 [ 270.804667][T15728] ? alloc_vmap_area+0xda0/0x14c0 [ 270.804713][T15728] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.804733][T15728] ? hash_netportnet_create+0x354/0xf90 [ 270.804753][T15728] ? __get_vm_area_node+0x28f/0x300 [ 270.804774][T15728] ? hash_netportnet_create+0x354/0xf90 [ 270.804792][T15728] __vmalloc_node_range_noprof+0x578/0x12d0 [ 270.804813][T15728] ? hash_netportnet_create+0x354/0xf90 [ 270.804856][T15728] ? alloc_pages_mpol+0x3cd/0x4a0 [ 270.804881][T15728] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 270.804907][T15728] ? rcu_is_watching+0x15/0xb0 [ 270.804933][T15728] ? hash_netportnet_create+0x354/0xf90 [ 270.804951][T15728] __kvmalloc_node_noprof+0x674/0x910 [ 270.804973][T15728] ? hash_netportnet_create+0x354/0xf90 [ 270.804988][T15728] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 270.805008][T15728] ? hash_netportnet_create+0x2fa/0xf90 [ 270.805034][T15728] hash_netportnet_create+0x354/0xf90 [ 270.805065][T15728] ? __nla_parse+0x40/0x60 [ 270.805084][T15728] ? __pfx_hash_netportnet_create+0x10/0x10 [ 270.805103][T15728] ip_set_create+0xa97/0x1940 [ 270.805126][T15728] ? ip_set_create+0x4a2/0x1940 [ 270.805161][T15728] ? __pfx_ip_set_create+0x10/0x10 [ 270.805217][T15728] nfnetlink_rcv_msg+0xb4d/0x1130 [ 270.805243][T15728] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 270.805281][T15728] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 270.805328][T15728] ? __lock_acquire+0xab9/0xd20 [ 270.805370][T15728] netlink_rcv_skb+0x208/0x470 [ 270.805396][T15728] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 270.805421][T15728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.805457][T15728] ? bpf_lsm_capable+0x9/0x20 [ 270.805471][T15728] ? security_capable+0x7e/0x2e0 [ 270.805498][T15728] nfnetlink_rcv+0x282/0x2590 [ 270.805522][T15728] ? is_bpf_text_address+0x26/0x2b0 [ 270.805552][T15728] ? __kernel_text_address+0xd/0x40 [ 270.805571][T15728] ? unwind_get_return_address+0x4d/0x90 [ 270.805597][T15728] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.805615][T15728] ? arch_stack_walk+0xfc/0x150 [ 270.805654][T15728] ? stack_trace_save+0x9c/0xe0 [ 270.805672][T15728] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 270.805694][T15728] ? stack_depot_save_flags+0x40/0x860 [ 270.805718][T15728] ? __lock_acquire+0xab9/0xd20 [ 270.805767][T15728] ? __lock_acquire+0xab9/0xd20 [ 270.805800][T15728] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.805833][T15728] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.805865][T15728] netlink_unicast+0x82f/0x9e0 [ 270.805896][T15728] ? __pfx_netlink_unicast+0x10/0x10 [ 270.805921][T15728] ? netlink_sendmsg+0x642/0xb30 [ 270.805944][T15728] ? skb_put+0x11b/0x210 [ 270.805974][T15728] netlink_sendmsg+0x805/0xb30 [ 270.806010][T15728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.806039][T15728] ? aa_sock_msg_perm+0xf1/0x1d0 [ 270.806071][T15728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.806093][T15728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.806118][T15728] __sock_sendmsg+0x21c/0x270 [ 270.806143][T15728] ____sys_sendmsg+0x505/0x830 [ 270.806165][T15728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.806201][T15728] ? import_iovec+0x74/0xa0 [ 270.806228][T15728] ___sys_sendmsg+0x21f/0x2a0 [ 270.806250][T15728] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.806307][T15728] ? __fget_files+0x2a/0x420 [ 270.806329][T15728] ? __fget_files+0x3a0/0x420 [ 270.806362][T15728] __x64_sys_sendmsg+0x19b/0x260 [ 270.806383][T15728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.806420][T15728] ? do_syscall_64+0xbe/0xfa0 [ 270.806444][T15728] do_syscall_64+0xfa/0xfa0 [ 270.806461][T15728] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.806480][T15728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.806499][T15728] ? clear_bhb_loop+0x60/0xb0 [ 270.806522][T15728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.806541][T15728] RIP: 0033:0x7f036398efc9 [ 270.806574][T15728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.806588][T15728] RSP: 002b:00007f0361bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.806607][T15728] RAX: ffffffffffffffda RBX: 00007f0363be5fa0 RCX: 00007f036398efc9 [ 270.806618][T15728] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 270.806627][T15728] RBP: 00007f0363a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.806638][T15728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.806647][T15728] R13: 00007f0363be6038 R14: 00007f0363be5fa0 R15: 00007fffa2e6f268 [ 270.806677][T15728] [ 271.322025][T15728] Mem-Info: [ 271.325324][T15728] active_anon:5258 inactive_anon:0 isolated_anon:0 [ 271.325324][T15728] active_file:17284 inactive_file:39951 isolated_file:0 [ 271.325324][T15728] unevictable:768 dirty:275 writeback:0 [ 271.325324][T15728] slab_reclaimable:11728 slab_unreclaimable:229048 [ 271.325324][T15728] mapped:29063 shmem:1356 pagetables:1476 [ 271.325324][T15728] sec_pagetables:0 bounce:0 [ 271.325324][T15728] kernel_misc_reclaimable:0 [ 271.325324][T15728] free:1156114 free_pcp:12802 free_cma:0 [ 271.389453][T15728] Node 0 active_anon:21032kB inactive_anon:0kB active_file:69136kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116252kB dirty:1096kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12052kB pagetables:5572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.426212][T15728] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.456244][T15728] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.486737][T15728] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 271.492533][T15728] Node 0 DMA32 free:715180kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21080kB inactive_anon:0kB active_file:69136kB inactive_file:159604kB unevictable:1536kB writepending:1104kB zspages:0kB present:3129332kB managed:2561624kB mlocked:0kB bounce:0kB free_pcp:33884kB local_pcp:15796kB free_cma:0kB [ 271.531220][T15728] lowmem_reserve[]: 0 0 1 1 1 [ 271.536002][T15728] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.566873][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 271.571640][T15728] Node 1 Normal free:3893844kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17796kB local_pcp:7524kB free_cma:0kB [ 271.603983][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 271.609012][T15728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.621831][T15728] Node 0 DMA32: 373*4kB (ME) 501*8kB (ME) 355*16kB (ME) 250*32kB (UM) 185*64kB (UME) 699*128kB (UME) 533*256kB (UM) 337*512kB (UME) 127*1024kB (UM) 18*2048kB (UM) 29*4096kB (UM) = 715180kB [ 271.645722][T15728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 271.657555][T15728] Node 1 Normal: 183*4kB (UE) 45*8kB (UME) 31*16kB (UME) 61*32kB (UME) 18*64kB (UME) 6*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3893844kB [ 271.676228][T15728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.686025][T15728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.695424][T15728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.705122][T15728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.714593][T15728] 58587 total pagecache pages [ 271.719695][T15728] 0 pages in swap cache [ 271.723855][T15728] Free swap = 124996kB [ 271.728057][T15728] Total swap = 124996kB [ 271.732240][T15728] 2097051 pages RAM [ 271.736051][T15728] 0 pages HighMem/MovableOnly [ 271.740791][T15728] 424555 pages reserved [ 271.744951][T15728] 0 pages cma reserved [ 272.172231][ T30] audit: type=1107 audit(1760749859.639:5): pid=15840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 274.321851][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4831'. [ 274.714448][T15911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.866934][T15921] netlink: 'syz.3.4849': attribute type 29 has an invalid length. [ 274.889333][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 275.116201][T15934] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4855'. [ 275.286839][T15946] netlink: 'syz.0.4861': attribute type 31 has an invalid length. [ 275.522128][T15964] : renamed from dummy0 [ 275.626824][T15970] netlink: 'syz.4.4874': attribute type 1 has an invalid length. [ 275.634626][T15970] netlink: 'syz.4.4874': attribute type 1 has an invalid length. [ 275.876297][T15990] netlink: 380 bytes leftover after parsing attributes in process `syz.1.4881'. [ 276.018392][T16001] netlink: 'syz.3.4888': attribute type 2 has an invalid length. [ 276.058238][T16001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4888'. [ 276.100581][T16007] netlink: 'syz.2.4890': attribute type 1 has an invalid length. [ 276.298389][T16020] netlink: 'syz.3.4899': attribute type 1 has an invalid length. [ 276.349606][T16026] netlink: 'syz.0.4901': attribute type 1 has an invalid length. [ 276.434370][T16032] netlink: 'syz.3.4903': attribute type 17 has an invalid length. [ 276.452685][T16032] netlink: 'syz.3.4903': attribute type 16 has an invalid length. [ 276.484476][T16032] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4903'. [ 276.714181][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4915'. [ 276.730464][T16052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4915'. [ 276.906795][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4921'. [ 277.159286][T16085] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4931'. [ 277.929531][T16142] unsupported nla_type 65024 [ 277.998853][T16148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.456900][T16252] __nla_validate_parse: 10 callbacks suppressed [ 279.456919][T16252] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5003'. [ 279.507174][T16252] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5003'. [ 279.525831][T16256] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 279.538611][T16258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5006'. [ 279.767054][T16278] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5015'. [ 279.943061][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5020'. [ 279.999367][T16292] validate_nla: 9 callbacks suppressed [ 279.999387][T16292] netlink: 'syz.2.5023': attribute type 9 has an invalid length. [ 280.037102][T16294] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5024'. [ 280.068417][T16292] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5023'. [ 280.324619][T16315] netlink: 'syz.2.5034': attribute type 1 has an invalid length. [ 280.489907][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.506129][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.524114][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.561343][T16327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 280.600842][T16327] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 280.634867][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.643588][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.652351][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.663812][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.672980][T16327] wg0 speed is unknown, defaulting to 1000 [ 280.974624][T16356] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5054'. [ 281.266220][T16380] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5064'. [ 281.399033][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5067'. [ 281.776006][T16420] netlink: 'syz.1.5080': attribute type 10 has an invalid length. [ 281.815190][T16420] vlan0: entered allmulticast mode [ 281.822757][T16420] veth0_vlan: entered allmulticast mode [ 282.003329][T16434] netlink: 'syz.4.5087': attribute type 6 has an invalid length. [ 282.408117][T16461] netlink: 'syz.3.5100': attribute type 1 has an invalid length. [ 282.582500][T16477] netlink: 'syz.4.5107': attribute type 1 has an invalid length. [ 282.584347][T16478] netlink: 'syz.2.5108': attribute type 10 has an invalid length. [ 282.707787][T16488] D`: renamed from hsr_slave_1 [ 282.823641][T16495] netlink: 'syz.3.5115': attribute type 1 has an invalid length. [ 282.898953][T16500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.913068][T16500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.927523][T16500] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 282.944241][T16500] batman_adv: batadv0: Removing interface: virt_wifi0 [ 283.262672][T16526] netlink: 'syz.3.5128': attribute type 16 has an invalid length. [ 283.288069][T16526] netlink: 'syz.3.5128': attribute type 3 has an invalid length. [ 283.687153][T16559] TCP: TCP_TX_DELAY enabled [ 284.469549][T16615] __nla_validate_parse: 12 callbacks suppressed [ 284.469569][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5172'. [ 284.919271][T16649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5188'. [ 284.993055][T16653] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5191'. [ 285.250736][T16675] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5202'. [ 285.260289][T16675] tc_dump_action: action bad kind [ 285.306160][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5203'. [ 285.332819][T16679] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.359023][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5203'. [ 285.383678][T16677] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5203'. [ 285.540811][T16694] validate_nla: 6 callbacks suppressed [ 285.540832][T16694] netlink: 'syz.4.5212': attribute type 4 has an invalid length. [ 285.557412][T16694] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5212'. [ 285.674783][T16704] netlink: 'syz.4.5216': attribute type 1 has an invalid length. [ 285.929372][T16718] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5220'. [ 286.265639][T16746] openvswitch: netlink: IP tunnel dst address not specified [ 286.328926][T16752] syz_tun: entered promiscuous mode [ 286.527948][T16765] netlink: 'syz.3.5245': attribute type 21 has an invalid length. [ 286.550923][T16765] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5245'. [ 286.576846][T16765] netlink: 'syz.3.5245': attribute type 5 has an invalid length. [ 286.643463][T16775] netlink: 'syz.4.5250': attribute type 2 has an invalid length. [ 286.691902][T16778] openvswitch: netlink: Message has 2 unknown bytes. [ 286.699408][T16778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.916260][T16795] netlink: zone id is out of range [ 287.074779][T16805] netlink: 'syz.2.5265': attribute type 28 has an invalid length. [ 287.085077][T16805] netlink: 'syz.2.5265': attribute type 29 has an invalid length. [ 287.144247][T16811] netlink: 'syz.1.5267': attribute type 1 has an invalid length. [ 287.160000][T16813] netlink: 'syz.0.5269': attribute type 1 has an invalid length. [ 287.659884][T16850] netlink: 'syz.2.5286': attribute type 1 has an invalid length. [ 287.996037][T16874] : entered promiscuous mode [ 287.999266][T16876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.368863][T16896] openvswitch: netlink: Key type 29 is not supported [ 289.559479][T16978] __nla_validate_parse: 13 callbacks suppressed [ 289.559500][T16978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5349'. [ 289.627104][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5352'. [ 289.636284][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5352'. [ 289.653831][T16982] openvswitch: netlink: Flow key attribute not present in set flow. [ 289.693439][T16985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5353'. [ 289.696727][ T30] audit: type=1107 audit(1760749877.169:6): pid=16986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 289.910042][ T30] audit: type=1107 audit(1760749877.379:7): pid=16999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 290.226864][T17024] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5373'. [ 290.471554][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5382'. [ 290.924790][T17071] lo speed is unknown, defaulting to 1000 [ 290.959749][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5398'. [ 291.102848][T17082] validate_nla: 4 callbacks suppressed [ 291.102870][T17082] netlink: 'syz.2.5399': attribute type 3 has an invalid length. [ 291.138851][T17071] wg0 speed is unknown, defaulting to 1000 [ 291.298525][T17096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5403'. [ 291.412533][T17102] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5409'. [ 291.429729][T17104] ksmbd: Unknown IPC event: 1, ignore. [ 291.454551][T17106] netlink: 'syz.0.5408': attribute type 39 has an invalid length. [ 291.504566][T17108] netlink: 'syz.2.5410': attribute type 12 has an invalid length. [ 291.521255][T17108] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5410'. [ 291.857150][T17126] netlink: 'syz.4.5419': attribute type 1 has an invalid length. [ 292.295451][T17146] netlink: 'syz.2.5428': attribute type 7 has an invalid length. [ 292.974251][T17184] netlink: 'syz.2.5447': attribute type 10 has an invalid length. [ 293.006967][T17184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.056313][T17184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.077928][T17184] hsr0: entered promiscuous mode [ 293.417018][T17218] : entered promiscuous mode [ 293.499287][T17224] netlink: 'syz.3.5465': attribute type 21 has an invalid length. [ 293.759607][T17242] netlink: 'syz.1.5476': attribute type 10 has an invalid length. [ 294.141595][T17270] netlink: 'syz.1.5488': attribute type 4 has an invalid length. [ 294.742997][T17314] tQ6\bY4: renamed from lo [ 294.822700][T17319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.839485][T17320] __nla_validate_parse: 11 callbacks suppressed [ 294.839505][T17320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5507'. [ 294.957824][T17329] netlink: 'syz.0.5510': attribute type 32 has an invalid length. [ 295.121291][T17342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5518'. [ 295.333019][T17356] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5523'. [ 295.524575][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5529'. [ 295.759561][T17386] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5536'. [ 295.970062][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5544'. [ 296.308903][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5557'. [ 296.944537][T17473] sctp: [Deprecated]: syz.0.5580 (pid 17473) Use of int in maxseg socket option. [ 296.944537][T17473] Use struct sctp_assoc_value instead [ 296.972666][T17474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5579'. [ 297.113410][T17484] validate_nla: 5 callbacks suppressed [ 297.113430][T17484] netlink: 'syz.3.5584': attribute type 8 has an invalid length. [ 297.139065][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.308790][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5592'. [ 297.584121][T17522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5603'. [ 297.796013][T17537] netlink: 'syz.4.5610': attribute type 1 has an invalid length. [ 297.930871][T17547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.986813][T17548] delete_channel: no stack [ 298.308106][T17569] netlink: 'syz.2.5626': attribute type 10 has an invalid length. [ 298.333082][T17569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.382339][T17569] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 298.593008][T17585] netlink: 'syz.4.5634': attribute type 13 has an invalid length. [ 298.765653][T17594] netlink: 'syz.0.5638': attribute type 4 has an invalid length. [ 298.776571][T17594] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 298.942267][T17604] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 299.103395][T17620] dummy0: left promiscuous mode [ 299.343866][T17635] netlink: 'syz.4.5657': attribute type 4 has an invalid length. [ 299.850223][T17675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.980325][T17687] netlink: 'syz.2.5683': attribute type 1 has an invalid length. [ 299.988302][T17687] __nla_validate_parse: 8 callbacks suppressed [ 299.988318][T17687] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5683'. [ 300.003517][T17685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5684'. [ 300.583370][T17735] netlink: 'syz.2.5708': attribute type 1 has an invalid length. [ 300.648469][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5708'. [ 300.687291][T17744] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5712'. [ 300.850779][T17754] netlink: 'syz.4.5717': attribute type 1 has an invalid length. [ 301.057280][T17770] netlink: 'syz.0.5724': attribute type 1 has an invalid length. [ 301.097006][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5724'. [ 301.291729][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 301.545124][T17810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5744'. [ 301.558288][T17810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5744'. [ 301.692064][T17813] lo speed is unknown, defaulting to 1000 [ 301.903628][T17813] wg0 speed is unknown, defaulting to 1000 [ 302.011055][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5753'. [ 302.354577][T17857] validate_nla: 3 callbacks suppressed [ 302.354598][T17857] netlink: 'syz.4.5765': attribute type 1 has an invalid length. [ 302.571800][T17871] netlink: 'syz.1.5771': attribute type 1 has an invalid length. [ 302.719747][T17882] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5779'. [ 302.963204][T17897] netlink: 'syz.3.5785': attribute type 21 has an invalid length. [ 303.489194][T17936] netlink: 'syz.2.5803': attribute type 1 has an invalid length. [ 303.728633][T17955] netlink: 'syz.3.5812': attribute type 21 has an invalid length. [ 303.737063][T17955] netlink: 'syz.3.5812': attribute type 5 has an invalid length. [ 304.019798][T17976] openvswitch: netlink: EtherType 0 is less than min 600 [ 304.033564][T17979] netlink: 'syz.3.5827': attribute type 4 has an invalid length. [ 304.338973][T18000] netlink: 'syz.2.5836': attribute type 21 has an invalid length. [ 304.357927][T18000] netlink: 'syz.2.5836': attribute type 4 has an invalid length. [ 304.387325][T18000] netlink: 'syz.2.5836': attribute type 5 has an invalid length. [ 304.411973][T17985] netlink: set zone limit has 8 unknown bytes [ 305.068735][T18052] macvlan1: entered promiscuous mode [ 305.074088][T18052] macvlan1: entered allmulticast mode [ 305.139020][T18054] __nla_validate_parse: 15 callbacks suppressed [ 305.139039][T18054] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5862'. [ 305.249383][T18060] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5866'. [ 305.266461][T18063] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5865'. [ 305.915441][T18110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5889'. [ 305.939550][T18113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5890'. [ 306.106480][T18125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5897'. [ 306.150594][T18130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5899'. [ 306.189437][T18130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5899'. [ 306.495380][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5907'. [ 306.518374][T18149] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5909'. [ 306.974608][T18183] delete_channel: no stack [ 307.797229][T18245] validate_nla: 9 callbacks suppressed [ 307.797248][T18245] netlink: 'syz.1.5956': attribute type 21 has an invalid length. [ 307.863439][T18245] netlink: 'syz.1.5956': attribute type 1 has an invalid length. [ 308.228579][T18280] netlink: 'syz.0.5973': attribute type 1 has an invalid length. [ 308.426128][T18292] netlink: 'syz.3.5980': attribute type 9 has an invalid length. [ 308.931576][T18333] netlink: 'syz.4.5999': attribute type 1 has an invalid length. [ 309.395257][T18366] netlink: 'syz.1.6015': attribute type 10 has an invalid length. [ 309.482052][T18366] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 309.559405][T18373] netlink: 'syz.0.6018': attribute type 2 has an invalid length. [ 309.675230][T18380] netlink: 'syz.4.6022': attribute type 2 has an invalid length. [ 309.759267][T18388] netlink: 'syz.1.6026': attribute type 5 has an invalid length. [ 309.816754][T18388] netlink: 'syz.1.6026': attribute type 9 has an invalid length. [ 310.147841][T18412] lo speed is unknown, defaulting to 1000 [ 310.350008][T18426] __nla_validate_parse: 14 callbacks suppressed [ 310.350028][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6043'. [ 310.382649][T18412] wg0 speed is unknown, defaulting to 1000 [ 310.433626][T18431] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6047'. [ 310.543810][T18431] bridge0: port 3(dummy0) entered disabled state [ 310.819385][T18451] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6056'. [ 311.030187][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6063'. [ 311.163817][T18462] hsr_slave_0 (unregistering): left promiscuous mode [ 311.664632][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'. [ 311.698389][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6080'. [ 311.839218][ T30] audit: type=1107 audit(1760749899.309:8): pid=18514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 311.961173][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6093'. [ 311.994961][T18524] lo speed is unknown, defaulting to 1000 [ 312.250120][T18545] netlink: 276 bytes leftover after parsing attributes in process `syz.2.6103'. [ 312.259612][T18545] netlink: 10337 bytes leftover after parsing attributes in process `syz.2.6103'. [ 312.364989][T18549] ======================================================= [ 312.364989][T18549] WARNING: The mand mount option has been deprecated and [ 312.364989][T18549] and is ignored by this kernel. Remove the mand [ 312.364989][T18549] option from the mount to silence this warning. [ 312.364989][T18549] ======================================================= [ 312.616960][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6109'. [ 313.428599][T18630] validate_nla: 2 callbacks suppressed [ 313.428616][T18630] netlink: 'syz.1.6143': attribute type 3 has an invalid length. [ 313.935701][T18664] delete_channel: no stack [ 313.996447][T18669] netlink: 'syz.1.6158': attribute type 160 has an invalid length. [ 314.381541][T18701] netlink: 'syz.1.6174': attribute type 1 has an invalid length. [ 314.566354][T18712] netlink: 'syz.3.6180': attribute type 13 has an invalid length. [ 314.582156][T18712] erspan0: refused to change device tx_queue_len [ 314.599799][T18712] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 315.342769][T18773] openvswitch: netlink: IP tunnel dst address not specified [ 315.500100][T18789] __nla_validate_parse: 15 callbacks suppressed [ 315.500119][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6218'. [ 315.974800][T18823] netlink: 'syz.3.6234': attribute type 1 has an invalid length. [ 316.156048][T18837] netlink: 'syz.1.6242': attribute type 10 has an invalid length. [ 316.171135][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6242'. [ 316.379920][T18853] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6250'. [ 316.399991][T18855] netlink: 'syz.2.6251': attribute type 1 has an invalid length. [ 316.417541][T18859] netlink: 'syz.4.6253': attribute type 39 has an invalid length. [ 317.036730][T18904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6275'. [ 317.047578][T18903] netlink: 'syz.2.6274': attribute type 46 has an invalid length. [ 317.201857][T18917] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.241181][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247578][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.302563][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6284'. [ 317.387303][T18927] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.884882][T18967] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6305'. [ 317.991857][T18973] netlink: 'syz.4.6310': attribute type 16 has an invalid length. [ 318.136554][T18973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.169994][T18973] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.188167][T18973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.239078][T18984] C: renamed from team_slave_0 [ 318.270304][T18984] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6316'. [ 318.444689][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 318.556407][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6328'. [ 318.702467][T19019] validate_nla: 2 callbacks suppressed [ 318.702489][T19019] netlink: 'syz.1.6332': attribute type 1 has an invalid length. [ 318.840302][T19030] netlink: 'syz.2.6338': attribute type 21 has an invalid length. [ 318.861273][T19030] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6338'. [ 318.952971][T19038] netlink: 'syz.2.6343': attribute type 1 has an invalid length. [ 319.109836][T19050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.351625][T19068] netlink: 'syz.4.6355': attribute type 21 has an invalid length. [ 319.647959][T19089] openvswitch: netlink: IP tunnel dst address not specified [ 320.041584][T19119] netlink: 'syz.4.6380': attribute type 5 has an invalid length. [ 320.129557][T19121] netlink: 'syz.1.6384': attribute type 21 has an invalid length. [ 320.154040][T19121] netlink: 'syz.1.6384': attribute type 5 has an invalid length. [ 320.299705][T19134] netlink: 'syz.0.6390': attribute type 1 has an invalid length. [ 320.407820][T19143] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check. [ 320.589248][T19157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.773136][T19171] openvswitch: netlink: Unknown key attributes 1 [ 320.875549][T19177] netlink: 'syz.4.6411': attribute type 13 has an invalid length. [ 320.901513][T19179] netlink: 'syz.1.6412': attribute type 1 has an invalid length. [ 320.910311][T19182] __nla_validate_parse: 8 callbacks suppressed [ 320.910331][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6415'. [ 321.089446][T19193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6420'. [ 321.194655][T19202] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6424'. [ 321.436552][T19221] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6433'. [ 321.926493][T19253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.169247][T19274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6460'. [ 322.232056][T19277] 8021q: adding VLAN 0 to HW filter on device .` [ 322.258687][T19277] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.276502][T19277] dummy0: left promiscuous mode [ 322.308286][T19277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.660233][T19306] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 322.698123][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6475'. [ 322.898561][T19322] @: renamed from bond_slave_0 [ 323.066562][T19338] openvswitch: netlink: IPv6 tunnel dst address is zero [ 323.406137][T19359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6502'. [ 323.412444][T19363] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6503'. [ 323.425552][T19363] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6503'. [ 323.699522][T19382] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6512'. [ 323.914821][T19398] validate_nla: 13 callbacks suppressed [ 323.914840][T19398] netlink: 'syz.3.6521': attribute type 1 has an invalid length. [ 324.052792][T19407] openvswitch: netlink: Duplicate key (type 0). [ 324.427903][T19435] netlink: 'syz.1.6540': attribute type 6 has an invalid length. [ 324.435859][T19435] netlink: 'syz.1.6540': attribute type 5 has an invalid length. [ 325.175650][T19493] netlink: 'syz.2.6568': attribute type 11 has an invalid length. [ 325.357278][T19507] netlink: 'syz.2.6574': attribute type 2 has an invalid length. [ 325.494647][T19519] netlink: 'syz.0.6580': attribute type 1 has an invalid length. [ 325.668232][T19536] netlink: 'syz.1.6588': attribute type 14 has an invalid length. [ 325.874591][T19551] tc_dump_action: action bad kind [ 325.980660][T19558] openvswitch: netlink: IP tunnel TTL not specified. [ 326.250255][T19578] __nla_validate_parse: 13 callbacks suppressed [ 326.250273][T19578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6610'. [ 326.657713][T19608] netlink: zone id is out of range [ 326.669363][T19608] netlink: zone id is out of range [ 326.680709][T19608] netlink: set zone limit has 4 unknown bytes [ 326.816549][T19618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6629'. [ 327.152709][T19643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6641'. [ 327.573166][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6655'. [ 327.918972][T19695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.101210][T19707] netlink: 'syz.2.6673': attribute type 1 has an invalid length. [ 328.125501][T19707] netlink: 'syz.2.6673': attribute type 2 has an invalid length. [ 328.326431][T19721] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6679'. [ 328.355342][T19721] netlink: 'syz.4.6679': attribute type 1 has an invalid length. [ 328.465796][T19730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6683'. [ 328.609765][T19745] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 328.876561][T19761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6698'. [ 328.890148][T19761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6698'. [ 328.900560][T19761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6698'. [ 329.165216][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6709'. [ 329.248676][T19789] validate_nla: 1 callbacks suppressed [ 329.248695][T19789] netlink: 'syz.3.6711': attribute type 1 has an invalid length. [ 329.276855][T19789] netlink: 'syz.3.6711': attribute type 1 has an invalid length. [ 329.320954][T19794] caif0: left promiscuous mode [ 329.325773][T19794] caif0: left allmulticast mode [ 329.348839][T19794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.518110][T19809] netlink: get zone limit has 4 unknown bytes [ 329.761454][T19827] netlink: 'syz.4.6731': attribute type 1 has an invalid length. [ 329.902571][T19835] netlink: 'syz.4.6735': attribute type 4 has an invalid length. [ 330.285417][T19863] netlink: 'syz.1.6748': attribute type 21 has an invalid length. [ 330.340650][T19863] netlink: 'syz.1.6748': attribute type 6 has an invalid length. [ 330.668994][T19892] netlink: 'syz.1.6761': attribute type 2 has an invalid length. [ 330.680482][T19895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.717337][T19892] netlink: 'syz.1.6761': attribute type 1 has an invalid length. [ 330.981430][T19916] netlink: 'syz.1.6774': attribute type 1 has an invalid length. [ 331.329947][T19942] __nla_validate_parse: 12 callbacks suppressed [ 331.329966][T19942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6788'. [ 331.371529][T19942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6788'. [ 331.396791][T19942] netlink: 'syz.4.6788': attribute type 4 has an invalid length. [ 331.660998][T19969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6799'. [ 331.840527][T19978] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6805'. [ 331.987607][T19990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6811'. [ 332.057324][T19995] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6814'. [ 332.096787][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6814'. [ 332.301058][T20015] vcan0 speed is unknown, defaulting to 1000 [ 332.321193][T20015] vcan0 speed is unknown, defaulting to 1000 [ 332.330480][T20015] vcan0 speed is unknown, defaulting to 1000 [ 332.470477][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6827'. [ 332.577952][T20026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6829'. [ 332.578369][T20015] infiniband syz1: set active [ 332.592016][T11503] vcan0 speed is unknown, defaulting to 1000 [ 332.598136][T20015] infiniband syz1: added vcan0 [ 332.658364][T20015] RDS/IB: syz1: added [ 332.662464][T20015] smc: adding ib device syz1 with port count 1 [ 332.668722][T20015] smc: ib device syz1 port 1 has no pnetid [ 332.674884][T11503] vcan0 speed is unknown, defaulting to 1000 [ 332.683398][T20015] vcan0 speed is unknown, defaulting to 1000 [ 333.048447][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6839'. [ 333.254472][T20015] vcan0 speed is unknown, defaulting to 1000 [ 333.408717][T20071] caif0: entered promiscuous mode [ 333.413791][T20071] caif0: entered allmulticast mode [ 333.751484][T20015] vcan0 speed is unknown, defaulting to 1000 [ 334.178208][T20118] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 334.273483][T20015] vcan0 speed is unknown, defaulting to 1000 [ 334.577737][T20142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.822590][T20015] vcan0 speed is unknown, defaulting to 1000 [ 335.006820][T20166] validate_nla: 1 callbacks suppressed [ 335.006837][T20166] netlink: 'syz.0.6897': attribute type 164 has an invalid length. [ 335.304027][T20186] netlink: 'syz.4.6906': attribute type 10 has an invalid length. [ 335.368473][T20186] team0: Device ipvlan1 failed to register rx_handler [ 335.824242][T20221] @0: renamed from bond_slave_1 [ 335.943785][T20229] netlink: 'syz.4.6928': attribute type 21 has an invalid length. [ 335.952685][T20229] netlink: 'syz.4.6928': attribute type 5 has an invalid length. [ 335.961196][T20229] netlink: 'syz.4.6928': attribute type 6 has an invalid length. [ 335.981864][T20233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.997195][T20236] netlink: 'syz.3.6932': attribute type 21 has an invalid length. [ 336.229025][T20253] netlink: 'syz.3.6940': attribute type 10 has an invalid length. [ 336.826930][T20298] netlink: 'syz.2.6962': attribute type 2 has an invalid length. [ 336.834701][T20298] __nla_validate_parse: 13 callbacks suppressed [ 336.834718][T20298] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6962'. [ 336.838154][T20299] netlink: 'syz.4.6963': attribute type 4 has an invalid length. [ 336.912189][T20305] netlink: 'syz.3.6966': attribute type 21 has an invalid length. [ 336.932400][T20305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6966'. [ 336.980400][T20307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6968'. [ 337.107393][T20317] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6972'. [ 337.181409][T20325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6976'. [ 337.786852][T20367] nbd: couldn't find device at index 393224 [ 337.826762][T20369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6996'. [ 337.907154][T20374] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 338.012931][T20382] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7004'. [ 338.047732][T20383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7005'. [ 338.151684][T20391] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 338.216381][T20396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7011'. [ 338.259073][T20401] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7014'. [ 338.511991][T20418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.513382][T20415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.645513][T20428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.100030][ T30] audit: type=1107 audit(1760749926.569:9): pid=20461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 339.396362][T20485] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 340.152813][T20540] validate_nla: 5 callbacks suppressed [ 340.152833][T20540] netlink: 'syz.3.7083': attribute type 15 has an invalid length. [ 340.305739][T20548] erspan0: default FDB implementation only supports local addresses [ 340.997932][T20602] netlink: 'syz.0.7113': attribute type 23 has an invalid length. [ 341.021124][T20602] netlink: 'syz.0.7113': attribute type 21 has an invalid length. [ 341.034146][T20602] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.045296][T20605] netlink: 'syz.4.7116': attribute type 29 has an invalid length. [ 341.066792][T20605] netlink: 'syz.4.7116': attribute type 3 has an invalid length. [ 341.078683][T20610] netlink: 'syz.1.7114': attribute type 12 has an invalid length. [ 341.587250][T20647] netlink: 'syz.3.7135': attribute type 27 has an invalid length. [ 341.896779][T20668] netlink: 'syz.0.7145': attribute type 4 has an invalid length. [ 342.206791][T20689] __nla_validate_parse: 19 callbacks suppressed [ 342.206818][T20689] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7155'. [ 342.278174][T20696] netlink: 456 bytes leftover after parsing attributes in process `syz.0.7159'. [ 343.002269][T20752] netlink: 'syz.2.7186': attribute type 1 has an invalid length. [ 343.290155][T20772] netlink: 'syz.2.7197': attribute type 5 has an invalid length. [ 343.309849][T20772] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.7197'. [ 343.348875][T20775] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7198'. [ 343.366862][T20775] team0: entered promiscuous mode [ 343.372508][T20775] team_slave_0: entered promiscuous mode [ 343.379386][T20775] team_slave_1: entered promiscuous mode [ 343.416919][T20775] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.447291][T20775] bridge0: port 3(team0) entered blocking state [ 343.453755][T20775] bridge0: port 3(team0) entered disabled state [ 343.465489][T20775] team0: entered allmulticast mode [ 343.475424][T20775] team_slave_0: entered allmulticast mode [ 343.496720][T20775] team_slave_1: entered allmulticast mode [ 344.531460][T20816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7220'. [ 344.760586][T20826] tmpfs: Bad value for 'mode' [ 345.154695][ T1109] team0: left allmulticast mode [ 345.164651][ T1109] team_slave_0: left allmulticast mode [ 345.183851][ T1109] team_slave_1: left allmulticast mode [ 345.210037][ T1109] bridge0: port 3(team0) entered disabled state [ 345.271096][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.280471][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.297239][ T1109] bridge_slave_1: left allmulticast mode [ 345.308749][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.311991][ T1109] bridge_slave_1: left promiscuous mode [ 345.317171][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.329760][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.358043][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.408167][ T1109] bridge_slave_0: left promiscuous mode [ 345.413997][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.511733][T20862] validate_nla: 5 callbacks suppressed [ 345.511755][T20862] netlink: 'syz.4.7236': attribute type 2 has an invalid length. [ 345.553676][T20862] netlink: 'syz.4.7236': attribute type 8 has an invalid length. [ 345.563032][T20862] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7236'. [ 346.028251][T20848] lo speed is unknown, defaulting to 1000 [ 346.028400][ T1109] 8: left promiscuous mode [ 346.179877][ T1109] : left promiscuous mode [ 346.213030][T20891] xt_l2tp: missing protocol rule (udp|l2tpip) [ 346.756461][T20848] wg0 speed is unknown, defaulting to 1000 [ 346.780137][T20848] vcan0 speed is unknown, defaulting to 1000 [ 347.319546][T20936] netlink: 'syz.3.7261': attribute type 11 has an invalid length. [ 347.396800][ T5839] Bluetooth: hci3: command tx timeout [ 348.427278][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.461734][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.282323][ T1109] team_slave_1 (unregistering): left promiscuous mode [ 349.297715][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 349.377280][ T1109] team_slave_0 (unregistering): left promiscuous mode [ 349.389846][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 349.476796][ T5839] Bluetooth: hci3: command tx timeout [ 349.514184][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 349.523630][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 349.956400][ T60] smc: removing ib device syz2 [ 349.981050][T20848] chnl_net:caif_netlink_parms(): no params data found [ 350.469617][T20848] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.497942][T20848] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.506913][T20848] bridge_slave_0: entered allmulticast mode [ 350.521940][T20848] bridge_slave_0: entered promiscuous mode [ 350.542194][T20848] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.576283][T20848] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.604182][T20848] bridge_slave_1: entered allmulticast mode [ 350.623305][T20848] bridge_slave_1: entered promiscuous mode [ 350.794495][T20848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.840929][T20848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.045787][T20848] team0: Port device team_slave_0 added [ 351.065569][T20848] team0: Port device team_slave_1 added [ 351.113866][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7324'. [ 351.342079][T20848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.557162][ T5839] Bluetooth: hci3: command tx timeout [ 351.570229][T20848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.597304][T20848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.620022][T20848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.636695][T20848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.703201][T20848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.879372][T20848] hsr_slave_0: entered promiscuous mode [ 351.886460][T20848] hsr_slave_1: entered promiscuous mode [ 351.903072][T20848] debugfs: 'hsr0' already exists in 'hsr' [ 351.916198][T20848] Cannot create hsr debugfs directory [ 352.350030][T21146] netlink: 'syz.4.7343': attribute type 33 has an invalid length. [ 352.386915][T21146] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7343'. [ 352.396754][T21149] netlink: 'syz.1.7345': attribute type 46 has an invalid length. [ 353.033487][T21184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7355'. [ 353.113984][T21179] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7355'. [ 353.141309][T21186] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7356'. [ 353.198832][T21190] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7356'. [ 353.340773][T20848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.363065][T20848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.417944][T20848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.473095][T20848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.496443][T21205] netlink: 'syz.3.7362': attribute type 10 has an invalid length. [ 353.541731][T21208] netlink: 'syz.2.7363': attribute type 10 has an invalid length. [ 353.561610][T21211] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.7365'. [ 353.595525][T21208] team0: Device ipvlan1 failed to register rx_handler [ 353.636997][ T5839] Bluetooth: hci3: command tx timeout [ 353.742218][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 353.812079][T20848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.864523][T20848] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.935582][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.942846][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.986491][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.993740][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.668226][T21262] __nla_validate_parse: 2 callbacks suppressed [ 354.668246][T21262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7378'. [ 354.682863][T20848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.722953][T21262] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7378'. [ 354.746718][T21262] netlink: 'syz.3.7378': attribute type 5 has an invalid length. [ 354.764417][T21262] netlink: 'syz.3.7378': attribute type 6 has an invalid length. [ 354.782595][T21262] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7378'. [ 354.804548][T20848] veth0_vlan: entered promiscuous mode [ 354.819379][T20848] veth1_vlan: entered promiscuous mode [ 354.922994][T20848] veth0_macvtap: entered promiscuous mode [ 354.954528][T20848] veth1_macvtap: entered promiscuous mode [ 354.995133][T21277] netlink: 'syz.3.7383': attribute type 10 has an invalid length. [ 355.008085][T20848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.042865][T20848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.085235][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.107512][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.116271][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.272773][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.448474][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.456347][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.553815][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.578871][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.829049][T21372] netlink: 'syz.0.7417': attribute type 10 has an invalid length. [ 356.973970][T21372] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 357.019934][T21372] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 357.042556][T21372] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 357.324453][T21398] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7426'. [ 357.374555][T21398] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 357.519615][T21411] netlink: 'syz.2.7441': attribute type 29 has an invalid length. [ 357.563377][T21411] netlink: 'syz.2.7441': attribute type 29 has an invalid length. [ 358.680865][T21453] netlink: 'syz.3.7444': attribute type 3 has an invalid length. [ 358.713914][T21453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7444'. [ 359.027815][T21472] netlink: 'syz.1.7451': attribute type 10 has an invalid length. [ 359.064979][T21472] team0: Device ipvlan1 failed to register rx_handler [ 359.355766][T21477] can: request_module (can-proto-0) failed. [ 359.478344][T21492] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7458'. [ 360.164799][T21526] netlink: 'syz.0.7470': attribute type 21 has an invalid length. [ 360.173735][T21526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7470'. [ 360.212068][T21526] netlink: 'syz.0.7470': attribute type 5 has an invalid length. [ 360.238711][T21526] netlink: 'syz.0.7470': attribute type 6 has an invalid length. [ 360.256785][T21526] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7470'. [ 360.930849][T21558] netlink: 'syz.0.7481': attribute type 41 has an invalid length. [ 360.955769][T21558] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7481'. [ 361.480601][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7499'. [ 361.815988][T21620] lo speed is unknown, defaulting to 1000 [ 361.992755][T21628] netlink: 'syz.4.7515': attribute type 10 has an invalid length. [ 362.603080][T21655] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7527'. [ 365.185342][T21779] netlink: 'syz.4.7583': attribute type 23 has an invalid length. [ 365.387193][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7590'. [ 367.429838][T21887] netlink: 'syz.2.7634': attribute type 21 has an invalid length. [ 367.874501][T21906] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7643'. [ 367.906351][T21908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.052070][T21921] xt_HMARK: spi-set and port-set can't be combined [ 368.069096][T21918] openvswitch: netlink: Missing key (keys=40, expected=100) [ 368.320239][T21933] netlink: 'syz.0.7654': attribute type 3 has an invalid length. [ 368.351446][T21933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7654'. [ 369.293200][T21976] netlink: 'syz.3.7675': attribute type 1 has an invalid length. [ 369.595035][T21989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7681'. [ 369.847386][T22005] netlink: 'syz.1.7690': attribute type 6 has an invalid length. [ 370.389371][T22035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7704'. [ 371.074817][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7725'. [ 371.511351][T22094] netlink: 'syz.1.7734': attribute type 3 has an invalid length. [ 371.531915][T22094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7734'. [ 371.995206][T22119] netlink: 'syz.1.7745': attribute type 10 has an invalid length. [ 372.056783][T22119] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7745'. [ 372.088871][T22119] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 372.117544][T22119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.250732][T22133] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7752'. [ 372.625573][T22152] netlink: 'syz.1.7762': attribute type 11 has an invalid length. [ 372.830756][T22158] netlink: 'syz.2.7764': attribute type 1 has an invalid length. [ 372.871204][T22158] netlink: 'syz.2.7764': attribute type 2 has an invalid length. [ 374.645949][T22230] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7800'. [ 374.899960][T22243] netlink: 'syz.3.7807': attribute type 29 has an invalid length. [ 374.929150][T22243] netlink: 'syz.3.7807': attribute type 29 has an invalid length. [ 375.052551][T22249] : entered promiscuous mode [ 376.180858][T22297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7832'. [ 376.495263][T22307] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7837'. [ 376.617386][T22311] netlink: 'syz.4.7839': attribute type 11 has an invalid length. [ 376.625403][T22311] netlink: 'syz.4.7839': attribute type 11 has an invalid length. [ 376.995143][T22333] delete_channel: no stack [ 377.030182][T22336] netlink: 'syz.4.7851': attribute type 2 has an invalid length. [ 377.067033][T22336] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.7851'. [ 377.355273][T22358] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7860'. [ 377.838755][T22372] netlink: 'syz.0.7866': attribute type 3 has an invalid length. [ 377.858148][T22373] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7867'. [ 377.867740][T22372] netlink: 'syz.0.7866': attribute type 2 has an invalid length. [ 377.867766][T22372] netlink: 'syz.0.7866': attribute type 5 has an invalid length. [ 377.867779][T22372] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.7866'. [ 378.071131][T22382] netlink: 'syz.2.7871': attribute type 1 has an invalid length. [ 378.088792][T22382] netlink: 'syz.2.7871': attribute type 2 has an invalid length. [ 378.121637][T22382] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.7871'. [ 378.151577][T22384] netlink: 'syz.4.7872': attribute type 2 has an invalid length. [ 378.159433][T22384] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.7872'. [ 378.368050][T22396] smc: removing ib device syz1 [ 378.692429][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.699073][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.725193][T22412] netlink: 'syz.0.7886': attribute type 2 has an invalid length. [ 380.496549][T22464] netlink: 'syz.4.7911': attribute type 29 has an invalid length. [ 380.523615][T22464] netlink: 'syz.4.7911': attribute type 29 has an invalid length. [ 380.593532][T22468] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.7912'. [ 380.792258][T22477] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7920'. [ 381.437061][T22517] __nla_validate_parse: 2 callbacks suppressed [ 381.437086][T22517] netlink: 51 bytes leftover after parsing attributes in process `syz.1.7937'. [ 381.783957][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7945'. [ 381.904802][T22543] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7951'. [ 382.258808][T22564] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7960'. [ 382.781678][T22584] validate_nla: 7 callbacks suppressed [ 382.781699][T22584] netlink: 'syz.2.7969': attribute type 3 has an invalid length. [ 382.949688][T22592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7973'. [ 383.655802][T22627] netlink: 'syz.2.7989': attribute type 1 has an invalid length. [ 384.605062][T22657] netlink: 731 bytes leftover after parsing attributes in process `syz.4.8004'. [ 384.908972][T22676] netlink: 'syz.4.8014': attribute type 29 has an invalid length. [ 385.017629][T22681] netlink: 'syz.3.8015': attribute type 2 has an invalid length. [ 385.058236][T22686] tmpfs: Bad value for 'gid' [ 385.093205][T22686] tmpfs: Bad value for 'gid' [ 385.614229][T22720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8034'. [ 385.626554][T22719] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8033'. [ 386.815403][T22776] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8062'. [ 386.829524][T22776] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8062'. [ 386.987430][T22791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8069'. [ 388.877972][T22855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8099'. [ 389.634749][T22879] wg0 speed is unknown, defaulting to 1000 [ 390.117175][T22904] netlink: 825 bytes leftover after parsing attributes in process `syz.0.8121'. [ 390.126565][T22904] netlink: 130144 bytes leftover after parsing attributes in process `syz.0.8121'. [ 390.187690][T22905] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8120'. [ 390.316968][T22913] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8126'. [ 390.345178][T22913] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8126'. [ 390.853868][T22944] netlink: 'syz.2.8138': attribute type 30 has an invalid length. [ 390.957159][T22950] netlink: 'syz.2.8142': attribute type 27 has an invalid length. [ 390.966216][T22950] netlink: 'syz.2.8142': attribute type 4 has an invalid length. [ 390.978162][T22950] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8142'. [ 391.725818][T22997] netlink: 'syz.0.8164': attribute type 21 has an invalid length. [ 391.765379][T22997] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.775767][T22997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.783235][T22997] IPv6: NLM_F_CREATE should be set when creating new route [ 391.790863][T22997] IPv6: NLM_F_CREATE should be set when creating new route [ 392.311952][T23038] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.8186'. [ 392.577222][T23054] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8193'. [ 392.728398][T23060] netlink: 'syz.3.8196': attribute type 29 has an invalid length. [ 392.761170][T23060] netlink: 'syz.3.8196': attribute type 29 has an invalid length. [ 393.617505][T23119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8223'. [ 393.640237][T23119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8223'. [ 394.523773][T23161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8241'. [ 394.794849][T23175] netlink: 182 bytes leftover after parsing attributes in process `syz.1.8250'. [ 395.292944][T23212] sock: sock_set_timeout: `syz.2.8266' (pid 23212) tries to set negative timeout [ 395.355918][T23215] Zero length message leads to an empty skb [ 395.364073][T23215] netlink: 'syz.0.8268': attribute type 10 has an invalid length. [ 395.372222][T23215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8268'. [ 395.381385][T23215] batadv0: entered promiscuous mode [ 395.389805][T23215] batadv0: entered allmulticast mode [ 395.396486][T23215] bridge0: port 3(batadv0) entered blocking state [ 395.405707][T23215] bridge0: port 3(batadv0) entered disabled state [ 395.415889][T23215] bridge0: port 3(batadv0) entered blocking state [ 395.422535][T23215] bridge0: port 3(batadv0) entered forwarding state [ 395.443353][T23218] netlink: 'syz.4.8270': attribute type 29 has an invalid length. [ 395.589598][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 395.599133][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 395.967618][T23257] netlink: 'syz.3.8287': attribute type 7 has an invalid length. [ 395.975402][T23257] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8287'. [ 396.361711][T23282] netlink: 'syz.1.8301': attribute type 11 has an invalid length. [ 396.378817][T23282] netlink: 'syz.1.8301': attribute type 11 has an invalid length. [ 396.398729][T23282] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8301'. [ 396.985728][T23326] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8318'. [ 397.161258][T23340] netlink: 'syz.3.8326': attribute type 1 has an invalid length. [ 398.192021][T23387] __nla_validate_parse: 2 callbacks suppressed [ 398.192040][T23387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8348'. [ 398.262916][T23391] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.8350'. [ 398.514343][T23405] netlink: 'syz.3.8356': attribute type 10 has an invalid length. [ 398.556762][T23405] netlink: 'syz.3.8356': attribute type 19 has an invalid length. [ 398.564671][T23405] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8356'. [ 398.684016][T23413] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8361'. [ 398.921687][T23430] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8370'. [ 399.042452][T23442] netlink: 'syz.1.8374': attribute type 11 has an invalid length. [ 399.052631][T23442] netlink: 8420 bytes leftover after parsing attributes in process `syz.1.8374'. [ 399.067364][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8375'. [ 399.085849][T23440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8375'. [ 399.095283][T23440] netlink: 42 bytes leftover after parsing attributes in process `syz.0.8375'. [ 399.106570][T23440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8375'. [ 399.729115][T23488] netlink: 'syz.4.8397': attribute type 3 has an invalid length. [ 399.755367][T23488] netlink: 'syz.4.8397': attribute type 3 has an invalid length. [ 402.430605][T23638] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 403.081775][T23672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.360307][T23684] __nla_validate_parse: 6 callbacks suppressed [ 403.360333][T23684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8493'. [ 403.398310][T23684] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 403.952893][T23712] sctp: [Deprecated]: syz.2.8507 (pid 23712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.952893][T23712] Use struct sctp_sack_info instead [ 404.096455][T23722] xt_l2tp: missing protocol rule (udp|l2tpip) [ 404.213834][T23726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8514'. [ 404.341684][T23734] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8518'. [ 406.129413][T23807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.725710][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8559'. [ 406.911406][T23840] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8567'. [ 407.326284][T23863] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8577'. [ 407.693940][T23883] netlink: 'syz.2.8587': attribute type 10 has an invalid length. [ 407.725111][T23883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.802201][T23887] netlink: 'syz.2.8587': attribute type 10 has an invalid length. [ 407.823995][T23883] .`: (slave batadv0): Enslaving as an active interface with an up link [ 407.834754][T23887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8587'. [ 407.863694][T23887] batadv0: entered promiscuous mode [ 407.877067][T23887] batadv0: entered allmulticast mode [ 407.887065][T23887] .`: (slave batadv0): Releasing backup interface [ 407.940278][T23887] bridge0: port 3(batadv0) entered blocking state [ 407.950815][T23887] bridge0: port 3(batadv0) entered disabled state [ 408.434718][ T1175] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 408.444449][ T1175] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 409.275895][T23957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8621'. [ 409.422112][T23961] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8623'. [ 409.565433][T23965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8625'. [ 409.585822][T23965] netlink: 'syz.4.8625': attribute type 1 has an invalid length. [ 409.594948][T23965] netlink: 'syz.4.8625': attribute type 2 has an invalid length. [ 409.868513][T23976] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.8630'. [ 410.242887][T23992] netlink: 'syz.3.8638': attribute type 11 has an invalid length. [ 410.347858][T23999] xt_l2tp: missing protocol rule (udp|l2tpip) [ 410.697184][T24012] netlink: 'syz.4.8648': attribute type 1 has an invalid length. [ 410.960203][T24024] netlink: 'syz.1.8654': attribute type 29 has an invalid length. [ 410.974362][T24026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.998893][T24024] netlink: 'syz.1.8654': attribute type 29 has an invalid length. [ 411.178907][T24037] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 411.193382][T24034] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8659'. [ 411.687517][T24063] tmpfs: Unknown parameter 'audit' [ 412.570395][T24119] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8697'. [ 413.722699][T24173] netlink: zone id is out of range [ 413.999784][T24173] netlink: set zone limit has 8 unknown bytes [ 414.709455][T24220] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8744'. [ 415.057428][T24235] xt_policy: neither incoming nor outgoing policy selected [ 415.061524][T24239] netlink: 'syz.2.8752': attribute type 21 has an invalid length. [ 415.330118][T24257] netlink: 'syz.0.8762': attribute type 4 has an invalid length. [ 415.869652][T24290] netlink: 'syz.2.8778': attribute type 10 has an invalid length. [ 416.168654][T24312] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8789'. [ 416.419064][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8796'. [ 416.557323][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8800'. [ 416.566467][T24339] netlink: 'syz.3.8800': attribute type 1 has an invalid length. [ 416.575009][T24339] netlink: 'syz.3.8800': attribute type 1 has an invalid length. [ 416.882861][T24361] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8810'. [ 417.355190][T24394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8826'. [ 417.487065][T24404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8829'. [ 417.507233][T24401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8829'. [ 417.725892][T24420] netlink: 'syz.2.8839': attribute type 2 has an invalid length. [ 417.736090][T24420] netlink: 'syz.2.8839': attribute type 8 has an invalid length. [ 417.744876][T24420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8839'. [ 417.854494][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8841'. [ 417.937185][T24430] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0 [ 418.543796][T24461] netlink: 'syz.1.8859': attribute type 21 has an invalid length. [ 418.840216][T24475] C: renamed from team_slave_0 [ 418.851219][T24475] netlink: 'syz.4.8866': attribute type 1 has an invalid length. [ 418.863221][T24475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.488367][T24521] netlink: 'syz.3.8888': attribute type 12 has an invalid length. [ 420.210480][T24568] __nla_validate_parse: 5 callbacks suppressed [ 420.210501][T24568] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8908'. [ 420.818337][T24602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8925'. [ 420.837282][T24602] netlink: 'syz.0.8925': attribute type 2 has an invalid length. [ 421.633172][T24660] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.8952'. [ 421.737750][T24663] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.8955'. [ 421.922556][T24675] netlink: 'syz.1.8960': attribute type 29 has an invalid length. [ 421.956871][T24679] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8961'. [ 421.963826][T24675] netlink: 'syz.1.8960': attribute type 29 has an invalid length. [ 422.035662][T24684] netlink: 'syz.0.8963': attribute type 10 has an invalid length. [ 422.074746][T24684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8963'. [ 422.116740][T24684] veth0_vlan: entered allmulticast mode [ 422.128407][T24684] bridge0: port 4(veth0_vlan) entered blocking state [ 422.160772][T24684] bridge0: port 4(veth0_vlan) entered disabled state [ 422.199812][T24684] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 422.491342][T24708] tmpfs: Bad value for 'uid' [ 422.495993][T24708] tmpfs: Bad value for 'uid' [ 422.590868][T24718] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.8980'. [ 423.035557][T24736] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8989'. [ 424.973208][T24776] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9007'. [ 425.015588][T24783] netlink: 316 bytes leftover after parsing attributes in process `syz.2.9009'. [ 425.230976][T24799] xt_l2tp: invalid flags combination: 8 [ 425.325026][T24806] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9022'. [ 425.468530][T24813] netlink: 'syz.1.9025': attribute type 3 has an invalid length. [ 425.495649][T24813] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.9025'. [ 425.811081][T24833] netlink: 'syz.3.9034': attribute type 3 has an invalid length. [ 425.819699][T24833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9034'. [ 426.025931][T24846] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9042'. [ 426.169236][T24854] netlink: 790 bytes leftover after parsing attributes in process `syz.4.9046'. [ 426.243975][T24858] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.9048'. [ 426.388382][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9049'. [ 426.409885][T24862] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9049'. [ 426.668092][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9058'. [ 426.909229][T24890] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 427.357285][T24918] netlink: 'syz.2.9076': attribute type 21 has an invalid length. [ 427.375395][T24918] netlink: 'syz.2.9076': attribute type 6 has an invalid length. [ 427.399693][T24918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9076'. [ 427.610222][T24938] netlink: 'syz.2.9083': attribute type 21 has an invalid length. [ 427.772207][T24949] netlink: 'syz.1.9091': attribute type 3 has an invalid length. [ 427.787301][T24949] netlink: 'syz.1.9091': attribute type 2 has an invalid length. [ 427.860247][T24954] netlink: 'syz.0.9093': attribute type 2 has an invalid length. [ 428.224929][T24981] netlink: 'syz.3.9107': attribute type 1 has an invalid length. [ 429.409404][T25060] netlink: 'syz.2.9147': attribute type 5 has an invalid length. [ 429.541182][T25068] netlink: 'syz.4.9148': attribute type 4 has an invalid length. [ 430.852763][T25165] netlink: 'syz.1.9196': attribute type 11 has an invalid length. [ 430.872959][T25165] __nla_validate_parse: 11 callbacks suppressed [ 430.872976][T25165] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9196'. [ 431.013076][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9202'. [ 431.048828][T25177] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9201'. [ 431.696032][T25224] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9222'. [ 431.811446][T25234] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.9229'. [ 431.845485][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9230'. [ 432.930124][T25315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9267'. [ 432.943239][T25317] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9269'. [ 432.952882][T25317] validate_nla: 1 callbacks suppressed [ 432.952901][T25317] netlink: 'syz.3.9269': attribute type 1 has an invalid length. [ 432.973601][T25319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9268'. [ 433.045052][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9272'. [ 433.226709][T25336] xt_l2tp: missing protocol rule (udp|l2tpip) [ 433.881349][T25380] netlink: 'syz.1.9299': attribute type 5 has an invalid length. [ 433.932863][T25380] netlink: 'syz.1.9299': attribute type 9 has an invalid length. [ 433.996967][T25386] netlink: 'syz.0.9302': attribute type 1 has an invalid length. [ 434.016547][T25386] netlink: 'syz.0.9302': attribute type 2 has an invalid length. [ 435.514313][T25464] netlink: set zone limit has 8 unknown bytes [ 436.307348][T25529] __nla_validate_parse: 6 callbacks suppressed [ 436.307368][T25529] netlink: 809 bytes leftover after parsing attributes in process `syz.4.9367'. [ 436.345603][T25529] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.9367'. [ 437.020864][T25577] netlink: 'syz.0.9390': attribute type 21 has an invalid length. [ 437.039208][T25578] netlink: 'syz.2.9391': attribute type 13 has an invalid length. [ 437.095916][T25578] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9391'. [ 437.142202][T25578] syz_tun: refused to change device tx_queue_len [ 437.827985][T25628] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9414'. [ 437.905717][T25631] tmpfs: Bad value for 'mode' [ 437.993941][T25637] netlink: 'syz.3.9420': attribute type 3 has an invalid length. [ 438.013228][T25637] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9420'. [ 438.116435][T25643] netlink: 'syz.0.9422': attribute type 10 has an invalid length. [ 438.138501][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9424'. [ 438.150751][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9424'. [ 438.161367][T25643] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9422'. [ 438.185916][T25643] dummy0: entered allmulticast mode [ 438.210491][T25643] bridge0: port 4(dummy0) entered blocking state [ 438.218340][T25643] bridge0: port 4(dummy0) entered disabled state [ 438.262544][T25643] dummy0: entered promiscuous mode [ 438.275986][T25643] bridge0: port 4(dummy0) entered blocking state [ 438.282735][T25643] bridge0: port 4(dummy0) entered forwarding state [ 438.439501][T25662] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9432'. [ 438.531248][T25666] netlink: 'syz.0.9434': attribute type 21 has an invalid length. [ 438.539482][T25666] netlink: 'syz.0.9434': attribute type 15 has an invalid length. [ 438.547927][T25666] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9434'. [ 438.558476][T25666] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.579990][T25666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.587374][T25666] IPv6: NLM_F_CREATE should be set when creating new route [ 438.594721][T25666] IPv6: NLM_F_CREATE should be set when creating new route [ 438.602035][T25666] IPv6: NLM_F_CREATE should be set when creating new route [ 440.122741][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.136960][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.227958][T25770] netlink: 'syz.3.9482': attribute type 2 has an invalid length. [ 440.263784][T25770] netlink: 'syz.3.9482': attribute type 2 has an invalid length. [ 442.028919][T25849] netlink: 'syz.3.9521': attribute type 2 has an invalid length. [ 442.066848][T25849] netlink: 'syz.3.9521': attribute type 1 has an invalid length. [ 442.416019][T25877] __nla_validate_parse: 6 callbacks suppressed [ 442.416038][T25877] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9535'. [ 442.545645][T25886] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9538'. [ 442.990493][T25919] netlink: 'syz.0.9554': attribute type 2 has an invalid length. [ 443.172450][T25935] netlink: zone id is out of range [ 443.186429][T25935] netlink: set zone limit has 4 unknown bytes [ 443.238170][T25940] ]X: renamed from veth0_vlan [ 443.556158][T25960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.279677][T26010] netlink: 'syz.2.9599': attribute type 3 has an invalid length. [ 444.296734][T26010] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.9599'. [ 444.569193][T26031] netlink: 'syz.1.9607': attribute type 2 has an invalid length. [ 444.577314][T26031] netlink: 'syz.1.9607': attribute type 1 has an invalid length. [ 444.585416][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9607'. [ 445.468274][T26043] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.9614'. [ 446.099580][T26089] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.9635'. [ 446.857151][T26121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9652'. [ 446.886002][T26121] netlink: 'syz.1.9652': attribute type 2 has an invalid length. [ 446.924473][T26121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9652'. [ 447.262751][T26148] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9665'. [ 447.272482][T26148] netlink: 43 bytes leftover after parsing attributes in process `syz.4.9665'. [ 447.294654][T26148] netlink: 'syz.4.9665': attribute type 5 has an invalid length. [ 447.336142][T26152] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &!=@Vgc!\㻚 ΁ [ 447.682011][T26175] __nla_validate_parse: 2 callbacks suppressed [ 447.682030][T26175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9678'. [ 447.709463][T26175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9678'. [ 448.035454][T26197] netlink: 'syz.0.9691': attribute type 5 has an invalid length. [ 448.044488][T26197] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9691'. [ 449.547990][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9724'. [ 449.895297][T26286] netlink: 'syz.0.9731': attribute type 27 has an invalid length. [ 449.916114][T26286] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.9731'. [ 450.731277][T26317] netlink: 'syz.1.9744': attribute type 1 has an invalid length. [ 451.064385][T26337] netlink: 'syz.3.9754': attribute type 2 has an invalid length. [ 451.083625][T26338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9755'. [ 451.113083][T26337] netlink: 'syz.3.9754': attribute type 1 has an invalid length. [ 451.162662][T26337] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.9754'. [ 451.204334][T26337] nbd: illegal input index 65540 [ 451.408103][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9760'. [ 451.431539][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9760'. [ 451.502990][T26360] C: renamed from team_slave_0 [ 451.521586][T26360] netlink: 'syz.2.9766': attribute type 3 has an invalid length. [ 451.573700][T26362] netlink: 'syz.4.9767': attribute type 21 has an invalid length. [ 451.595536][T26365] netlink: 'syz.3.9769': attribute type 1 has an invalid length. [ 451.729973][T26374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9773'. [ 452.856063][T26425] __nla_validate_parse: 5 callbacks suppressed [ 452.856076][T26425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9796'. [ 452.916852][T26425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9796'. [ 453.978719][T26453] netlink: 'syz.4.9809': attribute type 7 has an invalid length. [ 453.986895][T26453] netlink: 'syz.4.9809': attribute type 6 has an invalid length. [ 454.032959][T26455] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9808'. [ 454.097090][T26454] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9808'. [ 454.106581][T26458] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.9808'. [ 454.157880][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9812'. [ 454.601060][T26489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9822'. [ 454.715923][T26484] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9822'. [ 454.742988][T26495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9822'. [ 455.116855][T26514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9835'. [ 455.420281][T26532] netlink: 'syz.3.9844': attribute type 1 has an invalid length. [ 455.439416][T26532] netlink: 'syz.3.9844': attribute type 2 has an invalid length. [ 455.863097][T26562] netlink: 'syz.4.9857': attribute type 2 has an invalid length. [ 455.871123][T26562] netlink: 'syz.4.9857': attribute type 1 has an invalid length. [ 455.883079][T26562] nbd: couldn't find a device at index 149 [ 456.376924][T26586] netlink: 'syz.2.9865': attribute type 1 has an invalid length. [ 457.709473][T26665] netlink: 'syz.3.9903': attribute type 29 has an invalid length. [ 457.738377][T26665] netlink: 'syz.3.9903': attribute type 29 has an invalid length. [ 457.756750][T26665] netlink: 'syz.3.9903': attribute type 29 has an invalid length. [ 457.899883][T26679] __nla_validate_parse: 15 callbacks suppressed [ 457.899903][T26679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9909'. [ 457.922912][T26680] sctp: [Deprecated]: syz.3.9910 (pid 26680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.922912][T26680] Use struct sctp_sack_info instead [ 457.948877][T26679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9909'. [ 457.978075][T26679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9909'. [ 458.040300][T26685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9912'. [ 458.058389][T26688] netlink: 'syz.3.9913': attribute type 3 has an invalid length. [ 458.068717][T26688] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9913'. [ 458.085153][T26688] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 458.349907][T26706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9916'. [ 458.378265][T26698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9916'. [ 458.408258][T26703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9916'. [ 458.440579][T26712] tap0: tun_chr_ioctl cmd 1074025672 [ 458.446062][T26712] tap0: ignored: set checksum enabled [ 459.039954][T26728] netlink: 'syz.4.9930': attribute type 29 has an invalid length. [ 459.077574][T26733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9932'. [ 459.230878][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9937'. [ 459.718751][T26769] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 459.724819][T26769] syzkaller1: linktype set to 823 [ 460.735603][T26826] wg0 speed is unknown, defaulting to 1000 [ 460.908654][T26831] validate_nla: 5 callbacks suppressed [ 460.908674][T26831] netlink: 'syz.3.9980': attribute type 1 has an invalid length. [ 460.971143][T26831] netlink: 'syz.3.9980': attribute type 2 has an invalid length. [ 461.421060][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.434615][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.446803][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.456509][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.471168][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.573358][T26856] wg0 speed is unknown, defaulting to 1000 [ 461.899343][T26856] chnl_net:caif_netlink_parms(): no params data found [ 462.205922][T26856] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.217294][T26856] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.224579][T26856] bridge_slave_0: entered allmulticast mode [ 462.249075][T26856] bridge_slave_0: entered promiscuous mode [ 462.259744][T26856] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.273315][T26856] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.283035][T26856] bridge_slave_1: entered allmulticast mode [ 462.293108][T26856] bridge_slave_1: entered promiscuous mode [ 462.406206][T26856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.430923][T26856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.498658][T26856] team0: Port device team_slave_0 added [ 462.534439][T26856] team0: Port device team_slave_1 added [ 462.620514][T26856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.630544][T26856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.659653][T26856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.683688][T26856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.691590][T26856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.718211][T26856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.846121][T26856] hsr_slave_0: entered promiscuous mode [ 462.855292][T26856] hsr_slave_1: entered promiscuous mode [ 462.870525][T26856] debugfs: 'hsr0' already exists in 'hsr' [ 462.886584][T26856] Cannot create hsr debugfs directory [ 463.047299][T26940] __nla_validate_parse: 6 callbacks suppressed [ 463.047317][T26940] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10025'. [ 463.503865][T26962] netlink: 200 bytes leftover after parsing attributes in process `syz.3.10036'. [ 463.565706][ T5149] Bluetooth: hci2: command tx timeout [ 463.678455][T26971] netlink: 'syz.0.10038': attribute type 4 has an invalid length. [ 463.686835][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10038'. [ 463.815251][T26977] netlink: 'syz.3.10042': attribute type 29 has an invalid length. [ 463.827242][T26976] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 463.857846][T26977] netlink: 'syz.3.10042': attribute type 29 has an invalid length. [ 463.869622][T26977] netlink: 'syz.3.10042': attribute type 29 has an invalid length. [ 463.990677][T26856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.012293][T26856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.064868][T26856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.105434][T26856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.153067][T26995] : entered promiscuous mode [ 464.382428][T26856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.424970][T26856] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.444445][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.451704][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.495404][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.502645][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.608583][T26856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.656926][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10061'. [ 464.697545][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10061'. [ 464.739781][T27022] pimreg: tun_chr_ioctl cmd 1074025675 [ 464.745297][T27022] pimreg: persist disabled [ 465.048642][T26856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.637284][ T5149] Bluetooth: hci2: command tx timeout [ 465.671947][T26856] veth0_vlan: entered promiscuous mode [ 465.688431][T26856] veth1_vlan: entered promiscuous mode [ 465.732633][T26856] veth0_macvtap: entered promiscuous mode [ 465.743228][T26856] veth1_macvtap: entered promiscuous mode [ 465.821440][T26856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.878217][T26856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.908018][ T1175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.937558][ T1175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.946319][ T1175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.997699][ T3984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.219751][ T3984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.266721][ T3984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.329196][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.337201][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.134932][T27092] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10089'. [ 467.202842][T27098] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.10090'. [ 467.227115][T27096] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.10090'. [ 467.249744][T27098] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.10090'. [ 467.420570][T27106] netlink: 'syz.3.10095': attribute type 21 has an invalid length. [ 467.436823][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10095'. [ 467.717042][ T5839] Bluetooth: hci2: command tx timeout [ 467.796903][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 468.748309][T27125] netlink: 14577 bytes leftover after parsing attributes in process `syz.3.10104'. [ 468.993704][T27137] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.10110'. [ 469.200617][T27145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10113'. [ 469.214680][T27145] netlink: 46 bytes leftover after parsing attributes in process `syz.3.10113'. [ 469.227449][T27145] netlink: 46 bytes leftover after parsing attributes in process `syz.3.10113'. [ 469.797654][ T5149] Bluetooth: hci2: command tx timeout [ 470.307916][T27186] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10131'. [ 470.610445][T27186] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.625186][T27186] .` (unregistering): (slave c@0): Releasing backup interface [ 470.639717][T27186] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 470.673548][T27186] .` (unregistering): Released all slaves [ 470.701311][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10136'. [ 471.692167][T27231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10153'. [ 471.756816][T27232] netlink: 'syz.1.10154': attribute type 3 has an invalid length. [ 471.899621][T27240] netlink: 'syz.4.10159': attribute type 29 has an invalid length. [ 471.932393][T27240] netlink: 'syz.4.10159': attribute type 29 has an invalid length. [ 471.990991][T27240] netlink: 'syz.4.10159': attribute type 29 has an invalid length. [ 472.457162][T27261] netlink: 'syz.2.10167': attribute type 39 has an invalid length. [ 473.954284][T27328] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10198'. [ 474.419644][T27352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10211'. [ 474.440360][T27352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10211'. [ 474.469364][T27352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10211'. [ 474.793604][T27370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10217'. [ 474.833547][T27370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10217'. [ 474.852381][T27370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10217'. [ 474.939280][T27374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10220'. [ 475.034480][T27378] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.10222'. [ 475.044242][T27378] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 475.120832][T27382] netlink: 'syz.1.10224': attribute type 33 has an invalid length. [ 475.147243][T27382] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10224'. [ 475.992452][T27422] netlink: 'syz.1.10242': attribute type 2 has an invalid length. [ 476.004847][T27422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 476.451028][T27440] pim6reg: tun_chr_ioctl cmd 1074025677 [ 476.477143][T27440] pim6reg: linktype set to 768 [ 477.432828][T27487] netlink: 'syz.3.10273': attribute type 24 has an invalid length. [ 479.386824][T27517] __nla_validate_parse: 9 callbacks suppressed [ 479.386842][T27517] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10289'. [ 479.427825][T27519] netlink: 'syz.1.10287': attribute type 25 has an invalid length. [ 479.453110][T27519] netlink: 'syz.1.10287': attribute type 7 has an invalid length. [ 480.322651][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.335609][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.346919][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 480.355053][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 480.364398][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.420233][T27549] wg0 speed is unknown, defaulting to 1000 [ 480.471561][T27546] netlink: set zone limit has 8 unknown bytes [ 480.716542][T27568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10309'. [ 480.753626][T27549] chnl_net:caif_netlink_parms(): no params data found [ 480.789536][T27568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10309'. [ 480.815044][T27568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10309'. [ 481.123672][T27549] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.139195][T27549] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.148992][T27549] bridge_slave_0: entered allmulticast mode [ 481.157030][T27549] bridge_slave_0: entered promiscuous mode [ 481.193456][T27549] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.217338][T27549] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.246496][T27549] bridge_slave_1: entered allmulticast mode [ 481.268877][T27549] bridge_slave_1: entered promiscuous mode [ 481.369654][T27587] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 481.376839][T27587] syzkaller1: owner set to 778 [ 481.555216][T27549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.581007][T27549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.864106][T27549] team0: Port device team_slave_0 added [ 481.894208][T27549] team0: Port device team_slave_1 added [ 482.086548][T27549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.095784][T27549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.145236][T27549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.174556][T27549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.197215][T27549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.238613][T27549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.388881][T27549] hsr_slave_0: entered promiscuous mode [ 482.415272][T27549] hsr_slave_1: entered promiscuous mode [ 482.422534][T27549] debugfs: 'hsr0' already exists in 'hsr' [ 482.429060][T27549] Cannot create hsr debugfs directory [ 482.437063][ T5149] Bluetooth: hci3: command tx timeout [ 482.580060][T27643] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10342'. [ 482.672111][T27647] netlink: 3815 bytes leftover after parsing attributes in process `syz.4.10344'. [ 482.943976][T27549] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.972153][T27549] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 483.003034][T27549] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 483.040741][T27549] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 483.128060][T27677] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10355'. [ 483.144172][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10356'. [ 483.164427][T27679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10356'. [ 483.223239][T27549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.270898][T27549] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.300286][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.307515][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.338944][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.346170][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.433116][T27690] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10361'. [ 483.485679][T27549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.084371][T27549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.434156][T27722] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.10372'. [ 484.512409][T27726] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.10373'. [ 484.526791][ T5149] Bluetooth: hci3: command tx timeout [ 484.668954][T27549] veth0_vlan: entered promiscuous mode [ 484.692872][T27549] veth1_vlan: entered promiscuous mode [ 484.796590][T27549] veth0_macvtap: entered promiscuous mode [ 484.821821][T27549] veth1_macvtap: entered promiscuous mode [ 484.865451][T27549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.888766][T27549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.962911][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.983202][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.028699][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.046997][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.113080][T27747] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10384'. [ 485.178574][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.256580][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.376930][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.396142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.413131][T27760] macvlan1: entered promiscuous mode [ 485.419027][T27760] macvlan1: entered allmulticast mode [ 485.426074][T27760] veth1_vlan: entered promiscuous mode [ 485.896355][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10400'. [ 485.906881][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10400'. [ 485.997792][T27791] sysfs: Unknown parameter 'subj_type' [ 486.129730][T27797] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.10406'. [ 486.602354][ T5149] Bluetooth: hci3: command tx timeout [ 488.197918][T27827] netlink: 160 bytes leftover after parsing attributes in process `syz.3.10420'. [ 488.511302][T27836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10424'. [ 488.550040][T27836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10424'. [ 488.577137][T27836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10424'. [ 488.682464][ T5149] Bluetooth: hci3: command tx timeout [ 490.169920][T27901] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10453'. [ 490.816709][ T1109] unregister_netdevice: waiting for lo to become free. Usage count = 8 [ 490.835530][ T1109] ref_tracker: netdev@ffff88802f338610 has 1/1 users at [ 490.835530][ T1109] ib_device_set_netdev+0x31f/0x6d0 [ 490.835530][ T1109] rxe_register_device+0x1c7/0x310 [ 490.835530][ T1109] rxe_net_add+0x81/0x110 [ 490.835530][ T1109] rxe_newlink+0xdd/0x190 [ 490.835530][ T1109] nldev_newlink+0x4a5/0x5a0 [ 490.835530][ T1109] rdma_nl_rcv+0x6ae/0x980 [ 490.835530][ T1109] netlink_unicast+0x82f/0x9e0 [ 490.835530][ T1109] netlink_sendmsg+0x805/0xb30 [ 490.835530][ T1109] __sock_sendmsg+0x21c/0x270 [ 490.835530][ T1109] ____sys_sendmsg+0x505/0x830 [ 490.835530][ T1109] ___sys_sendmsg+0x21f/0x2a0 [ 490.835530][ T1109] __x64_sys_sendmsg+0x19b/0x260 [ 490.835530][ T1109] do_syscall_64+0xfa/0xfa0 [ 490.835530][ T1109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.835530][ T1109]