last executing test programs: 2m24.734265834s ago: executing program 4 (id=6001): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x9, 0x4) 2m24.586889882s ago: executing program 4 (id=6007): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="fd", 0x0}, 0x50) 2m24.4823952s ago: executing program 4 (id=6010): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00}, 0x94) 2m24.332422181s ago: executing program 4 (id=6017): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x5, 0x108b, 0x0, 0x1, [@generic="11"]}]}, 0x1c}}, 0x0) 2m24.175736165s ago: executing program 4 (id=6023): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) 2m23.999300217s ago: executing program 4 (id=6029): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) 2m8.88882847s ago: executing program 32 (id=6029): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) 2.011684173s ago: executing program 0 (id=9984): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_regs={0x12, 0x0, 0xd, "ea7bf860630445c76d50d7a351"}}) 1.890971317s ago: executing program 0 (id=9987): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000540}, 0xc) 1.658207058s ago: executing program 0 (id=9995): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000380)=0x9, 0x4) 1.102275955s ago: executing program 0 (id=10011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a318000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) 974.195269ms ago: executing program 0 (id=10016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 949.711433ms ago: executing program 1 (id=10017): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x2}, 0x10) 798.73912ms ago: executing program 5 (id=10021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xfff3, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb6a}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 749.44186ms ago: executing program 3 (id=10023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 678.578359ms ago: executing program 1 (id=10025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010600000000000000001900"], 0x38}}, 0x0) 597.612537ms ago: executing program 3 (id=10026): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x78, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x78}}, 0x0) 593.183098ms ago: executing program 5 (id=10028): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 553.402323ms ago: executing program 1 (id=10029): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f", 0x2b}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) 450.147598ms ago: executing program 5 (id=10030): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) 449.911969ms ago: executing program 2 (id=10031): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 416.250443ms ago: executing program 1 (id=10032): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 412.482954ms ago: executing program 3 (id=10033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 360.754619ms ago: executing program 5 (id=10034): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x2, 0x3, 0x9, 0xb, 0x7fff, 0xfff3615}, &(0x7f0000000080)={0x7, 0x1, 0x8, 0xb, 0x100000000, 0x400, 0x1}, &(0x7f0000000180)={0x8, 0x30, 0xffffffff, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x9ec, 0xff}, 0x0, 0x0) 358.287817ms ago: executing program 2 (id=10035): unshare(0x22020600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x6f8e1ebea8b38322) 290.22268ms ago: executing program 1 (id=10036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 289.862358ms ago: executing program 3 (id=10037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 253.958294ms ago: executing program 2 (id=10038): unshare(0x22020400) r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, 0x0) 252.986669ms ago: executing program 5 (id=10039): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 184.789392ms ago: executing program 2 (id=10040): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) 161.445817ms ago: executing program 3 (id=10041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) 157.052424ms ago: executing program 1 (id=10042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 125.964203ms ago: executing program 2 (id=10043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ebd2c1a20a1ed7251e211a93fce95097df"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 123.529052ms ago: executing program 5 (id=10044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x8, 0x4, 0x81, 0xc1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001280), 0xb47, r0}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 63.811665ms ago: executing program 3 (id=10045): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) 63.612963ms ago: executing program 0 (id=10046): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 2 (id=10047): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 208.072122][T12312] bridge3: entered promiscuous mode [ 208.084665][T12312] bridge3: entered allmulticast mode [ 208.197198][T12321] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 208.213791][T12321] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.879517][T12371] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 209.017275][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3115'. [ 209.528757][T12414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3131'. [ 209.667863][T12425] openvswitch: netlink: Message has 4 unknown bytes. [ 209.680126][T12426] xt_TCPMSS: Only works on TCP SYN packets [ 209.834421][T12432] xt_TCPMSS: Only works on TCP SYN packets [ 209.865780][ C1] bridge0: port 3(netdevsim2) entered forwarding state [ 209.872715][ C1] bridge0: topology change detected, propagating [ 210.239223][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 210.259657][T12452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.771533][T12488] openvswitch: netlink: Message has 1 unknown bytes. [ 210.790966][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3168'. [ 210.809545][T12488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.929618][T12497] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3171'. [ 211.174077][T12513] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3178'. [ 211.601821][T12547] xt_hashlimit: size too large, truncated to 1048576 [ 211.688665][T12553] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 212.472687][T12601] xt_TCPMSS: Only works on TCP SYN packets [ 212.513043][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 212.555763][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 212.859106][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3235'. [ 212.920313][T12629] netlink: 'syz.2.3236': attribute type 12 has an invalid length. [ 213.012728][T12636] netlink: 'syz.4.3239': attribute type 21 has an invalid length. [ 213.031440][T12636] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.047019][T12636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.050957][T12637] Cannot find del_set index 3 as target [ 213.054363][T12636] IPv6: NLM_F_CREATE should be set when creating new route [ 213.067124][T12636] IPv6: NLM_F_CREATE should be set when creating new route [ 213.074423][T12636] IPv6: NLM_F_CREATE should be set when creating new route [ 213.217954][T12643] netlink: 'syz.3.3244': attribute type 2 has an invalid length. [ 213.243795][T12643] netlink: 'syz.3.3244': attribute type 5 has an invalid length. [ 213.428241][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3246'. [ 213.719542][T12639] infiniband syz0: set active [ 213.729640][T12639] infiniband syz0: added bond_slave_0 [ 213.918621][T12639] RDS/IB: syz0: added [ 213.942078][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3257'. [ 213.954652][T12639] smc: adding ib device syz0 with port count 1 [ 213.961222][T12639] smc: ib device syz0 port 1 has no pnetid [ 214.480954][T12706] xt_policy: output policy not valid in PREROUTING and INPUT [ 214.489088][T12707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.651653][T12716] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 214.812367][T12723] __nla_validate_parse: 1 callbacks suppressed [ 214.812385][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 215.035872][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3287'. [ 215.316419][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 216.173648][T12802] x_tables: ip_tables: osf match: only valid for protocol 6 [ 216.394333][T12815] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 216.670664][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3332'. [ 217.464638][T12891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.735247][T12908] netlink: 'syz.1.3371': attribute type 21 has an invalid length. [ 217.754055][T12908] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3371'. [ 217.778073][T12908] netlink: 'syz.1.3371': attribute type 5 has an invalid length. [ 217.799838][T12908] netlink: 'syz.1.3371': attribute type 6 has an invalid length. [ 217.811339][T12908] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3371'. [ 218.035555][T12928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.109639][T12934] netlink: 'syz.4.3384': attribute type 10 has an invalid length. [ 218.231653][T12941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.595384][T12965] netlink: 'syz.3.3399': attribute type 1 has an invalid length. [ 218.619568][T12965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3399'. [ 218.784173][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3403'. [ 219.017804][T12994] netlink: 'syz.4.3413': attribute type 21 has an invalid length. [ 219.043584][T12994] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3413'. [ 219.084133][T12994] netlink: 'syz.4.3413': attribute type 4 has an invalid length. [ 219.109797][T12994] netlink: 'syz.4.3413': attribute type 5 has an invalid length. [ 219.129524][T12994] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3413'. [ 219.182671][T13004] netlink: 'syz.1.3419': attribute type 23 has an invalid length. [ 219.209630][T13008] netlink: 'syz.0.3420': attribute type 13 has an invalid length. [ 219.844518][T13054] netlink: 'syz.4.3444': attribute type 5 has an invalid length. [ 220.373261][T13089] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.458503][T13096] netlink: 'syz.2.3464': attribute type 16 has an invalid length. [ 220.502479][T13096] netlink: 'syz.2.3464': attribute type 17 has an invalid length. [ 220.581622][T13104] __nla_validate_parse: 1 callbacks suppressed [ 220.581650][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3469'. [ 220.710378][T13096] bridge0: port 3(netdevsim2) entered disabled state [ 220.717331][T13096] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.725243][T13096] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.908921][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.946010][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.098768][ T70] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.118706][ T70] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.151756][ T70] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.170857][ T70] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.680290][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3500'. [ 221.689292][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3500'. [ 221.865531][T13182] dummy0: entered promiscuous mode [ 221.873731][T13182] dummy0: entered allmulticast mode [ 222.191215][T13200] bridge2: entered promiscuous mode [ 222.197934][T13200] bridge2: entered allmulticast mode [ 222.685420][T13226] bond5 (unregistering): Released all slaves [ 222.817088][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 222.867862][T13233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3532'. [ 222.890034][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3532'. [ 222.904860][T13233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3532'. [ 222.917344][T13238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.933471][T13233] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3532'. [ 223.060724][T13247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3540'. [ 223.070626][T13245] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3539'. [ 223.331601][T13266] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 223.768921][T13292] netlink: 'syz.1.3561': attribute type 5 has an invalid length. [ 224.081010][T13314] siw: device registration error -23 [ 224.088986][T13317] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 224.110897][T13319] netlink: 'syz.2.3575': attribute type 21 has an invalid length. [ 224.178299][T13321] ip6t_srh: unknown srh invflags 4000 [ 224.252004][T13328] wg1: entered promiscuous mode [ 224.256911][T13328] wg1: entered allmulticast mode [ 224.459215][T13342] netlink: 'syz.0.3585': attribute type 21 has an invalid length. [ 224.972128][T13356] bond1: entered promiscuous mode [ 224.983315][T13356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.092394][T13421] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 226.135529][T13421] bond6 (unregistering): Released all slaves [ 226.348389][T13444] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 226.629612][T13461] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 226.665372][T13461] __nla_validate_parse: 8 callbacks suppressed [ 226.665390][T13461] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3643'. [ 226.707475][T13461] netlink: 'syz.2.3643': attribute type 1 has an invalid length. [ 226.745004][T13468] netlink: 'syz.3.3645': attribute type 7 has an invalid length. [ 228.029162][T13560] bond1: option ad_select: invalid value (254) [ 228.056449][T13560] bond1 (unregistering): Released all slaves [ 228.505017][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3709'. [ 228.521104][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3709'. [ 228.666158][T13605] netlink: 'syz.4.3713': attribute type 2 has an invalid length. [ 229.046095][T13626] netlink: 'syz.4.3724': attribute type 11 has an invalid length. [ 229.063174][T13628] netlink: 'syz.3.3723': attribute type 3 has an invalid length. [ 229.093219][T13626] netlink: 'syz.4.3724': attribute type 11 has an invalid length. [ 229.109503][T13626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3724'. [ 229.286041][T13632] SET target dimension over the limit! [ 230.003820][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'. [ 230.143700][ T30] audit: type=1107 audit(1762447246.068:2): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 230.219059][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3753'. [ 230.372567][T13691] bond3 (unregistering): Released all slaves [ 230.466165][T13709] netlink: 'syz.3.3757': attribute type 2 has an invalid length. [ 230.567780][T13709] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3757'. [ 230.794231][T13724] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 230.834123][T13724] bond1 (unregistering): Released all slaves [ 230.995938][T13740] nft_compat: unsupported protocol 0 [ 231.770389][T13788] bond2 (unregistering): Released all slaves [ 231.957190][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3796'. [ 231.991430][T13805] batadv1: entered allmulticast mode [ 232.020511][T13805] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.061922][T13804] bridge3: entered allmulticast mode [ 232.230364][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3803'. [ 232.418146][T13835] C: renamed from team_slave_0 (while UP) [ 232.470328][T13835] netlink: 'syz.1.3810': attribute type 3 has an invalid length. [ 232.481460][T13835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3810'. [ 232.506365][T13835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 232.745212][T13859] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.985140][T13877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.082368][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 233.492993][T13913] netlink: 'syz.1.3849': attribute type 5 has an invalid length. [ 233.512377][T13916] netlink: 'syz.4.3851': attribute type 3 has an invalid length. [ 233.534547][T13916] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3851'. [ 233.555404][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3850'. [ 233.837810][T13939] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 233.983169][T13941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.040721][T13945] bond3 (unregistering): Released all slaves [ 234.206040][T13963] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 234.237680][T13963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.532456][T13990] netlink: 'syz.3.3883': attribute type 21 has an invalid length. [ 234.549024][T13990] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3883'. [ 234.576134][T13990] netlink: 'syz.3.3883': attribute type 4 has an invalid length. [ 234.599117][T13990] netlink: 'syz.3.3883': attribute type 3 has an invalid length. [ 234.619480][T13990] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3883'. [ 234.682213][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3886'. [ 235.185176][T14030] bond2: option updelay: invalid value (18446744073709551607) [ 235.192837][T14030] bond2: option updelay: allowed values 0 - 2147483647 [ 235.205307][T14030] bond2 (unregistering): Released all slaves [ 235.222825][T14035] netlink: 'syz.4.3899': attribute type 16 has an invalid length. [ 235.232175][T14035] netlink: 'syz.4.3899': attribute type 17 has an invalid length. [ 235.351975][T14035] bridge0: port 3(macsec0) entered disabled state [ 235.358702][T14035] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.366402][T14035] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.457058][T14046] openvswitch: netlink: Flow key attr not present in new flow. [ 235.552743][T14035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.563449][T14052] netlink: 'syz.3.3907': attribute type 21 has an invalid length. [ 235.581570][T14035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.628142][T14035] veth1_macvtap: left allmulticast mode [ 235.699984][T14052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3907'. [ 235.709076][T14052] netlink: 'syz.3.3907': attribute type 1 has an invalid length. [ 235.730258][ T1339] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.780285][ T1339] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.789209][ T1339] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.799176][ T1339] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.860110][ T52] Bluetooth: hci0: command tx timeout [ 235.927775][T14065] xt_hashlimit: max too large, truncated to 1048576 [ 235.935790][T14065] xt_bpf: check failed: parse error [ 235.944987][T14064] netlink: 'syz.3.3914': attribute type 1 has an invalid length. [ 235.986192][T14069] nicvf0: entered promiscuous mode [ 236.031845][ T1339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 236.063413][ T1339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 236.092579][ T1339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 236.129982][ T1339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 236.226465][T14077] bond3 (unregistering): Released all slaves [ 236.252568][T14088] netlink: 'syz.1.3925': attribute type 16 has an invalid length. [ 236.263689][T14088] netlink: 'syz.1.3925': attribute type 17 has an invalid length. [ 236.526685][T14101] xt_bpf: check failed: parse error [ 236.733667][T14088] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.914212][T14119] delete_channel: no stack [ 237.223588][T14088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.263757][T14088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.650595][ T1142] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.689656][ T1142] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.710310][ T1142] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.732741][ T1142] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.026463][T14161] __nla_validate_parse: 5 callbacks suppressed [ 238.026481][T14161] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3957'. [ 238.193037][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 238.239584][T14176] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3965'. [ 239.348456][T14224] xt_CT: No such helper "snmp" [ 239.881020][T14237] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.888717][T14237] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.088408][T14269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4010'. [ 240.322254][T14237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.364501][T14237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.621904][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'. [ 240.644091][T14253] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4002'. [ 240.663869][T14253] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4002'. [ 240.673301][T14253] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4002'. [ 240.693646][ T1142] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.694699][T14273] netdevsim netdevsim3: Direct firmware load for /. failed with error -2 [ 240.717363][ T1142] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.742369][T14273] netdevsim netdevsim3: Falling back to sysfs fallback for: /. [ 240.754927][ T1142] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.778773][ T1142] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.790227][ T1142] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.799217][ T1142] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 240.814859][ T1142] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.836795][ T1142] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 241.191783][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4028'. [ 241.679024][T14345] validate_nla: 5 callbacks suppressed [ 241.679041][T14345] netlink: 'syz.1.4046': attribute type 9 has an invalid length. [ 241.688364][T14347] netlink: 'syz.0.4047': attribute type 1 has an invalid length. [ 242.075695][T14375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.412209][T14390] wg1: entered promiscuous mode [ 242.438010][T14390] wg1: entered allmulticast mode [ 242.442547][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4070'. [ 243.056323][T14425] netlink: 'syz.2.4086': attribute type 21 has an invalid length. [ 243.229624][T14438] netlink: 'syz.0.4091': attribute type 10 has an invalid length. [ 243.256973][T14438] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4091'. [ 243.293006][T14438] dummy0: entered promiscuous mode [ 243.342687][T14438] bridge0: port 3(dummy0) entered blocking state [ 243.379707][T14438] bridge0: port 3(dummy0) entered disabled state [ 243.405963][T14438] dummy0: entered allmulticast mode [ 243.547826][T14454] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 243.804937][T14474] openvswitch: netlink: IP tunnel dst address not specified [ 245.032704][T14479] syz.2.4111: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 245.054173][T14479] CPU: 1 UID: 0 PID: 14479 Comm: syz.2.4111 Not tainted syzkaller #0 PREEMPT(full) [ 245.054197][T14479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.054215][T14479] Call Trace: [ 245.054222][T14479] [ 245.054230][T14479] dump_stack_lvl+0x189/0x250 [ 245.054274][T14479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.054299][T14479] ? __pfx__printk+0x10/0x10 [ 245.054319][T14479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 245.054351][T14479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 245.054385][T14479] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 245.054411][T14479] warn_alloc+0x214/0x310 [ 245.054440][T14479] ? __pfx_warn_alloc+0x10/0x10 [ 245.054461][T14479] ? __get_vm_area_node+0x28f/0x300 [ 245.054475][T14479] ? veth_dev_init+0x368/0x570 [ 245.054488][T14479] __vmalloc_node_range_noprof+0x690/0x12d0 [ 245.054501][T14479] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 245.054531][T14479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 245.054545][T14479] ? __kasan_kmalloc_large+0x1c/0xa0 [ 245.054562][T14479] ? rcu_is_watching+0x15/0xb0 [ 245.054574][T14479] ? veth_dev_init+0x368/0x570 [ 245.054584][T14479] __kvmalloc_node_noprof+0x674/0x910 [ 245.054599][T14479] ? veth_dev_init+0x368/0x570 [ 245.054609][T14479] ? __pfx_netdev_lock_cmp_fn+0x10/0x10 [ 245.054622][T14479] veth_dev_init+0x368/0x570 [ 245.054636][T14479] register_netdevice+0x6bf/0x1ae0 [ 245.054656][T14479] ? snprintf+0xda/0x120 [ 245.054668][T14479] ? __pfx_register_netdevice+0x10/0x10 [ 245.054679][T14479] ? __pfx_snprintf+0x10/0x10 [ 245.054690][T14479] ? __asan_memset+0x22/0x50 [ 245.054703][T14479] ? dev_addr_mod+0x2ce/0x3d0 [ 245.054717][T14479] veth_newlink+0x5d4/0xa60 [ 245.054728][T14479] ? __pfx_veth_newlink+0x10/0x10 [ 245.054736][T14479] ? css_rstat_updated+0x23a/0x4f0 [ 245.054752][T14479] ? __pfx_css_rstat_updated+0x10/0x10 [ 245.054796][T14479] ? validate_linkmsg+0x765/0x950 [ 245.054815][T14479] ? __pfx_veth_newlink+0x10/0x10 [ 245.054825][T14479] rtnl_newlink_create+0x310/0xb00 [ 245.054838][T14479] ? __lock_acquire+0xab9/0xd20 [ 245.054852][T14479] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 245.054864][T14479] ? __pfx___mutex_lock+0x10/0x10 [ 245.054884][T14479] ? ns_capable+0x8a/0xf0 [ 245.054897][T14479] rtnl_newlink+0x16e4/0x1c80 [ 245.054921][T14479] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.054938][T14479] ? __lock_acquire+0xab9/0xd20 [ 245.054986][T14479] ? __lock_acquire+0xab9/0xd20 [ 245.055009][T14479] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.055023][T14479] rtnetlink_rcv_msg+0x7cf/0xb70 [ 245.055037][T14479] ? __lock_acquire+0xab9/0xd20 [ 245.055048][T14479] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 245.055062][T14479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.055085][T14479] netlink_rcv_skb+0x208/0x470 [ 245.055096][T14479] ? __lock_acquire+0xab9/0xd20 [ 245.055107][T14479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.055122][T14479] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.055138][T14479] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.055152][T14479] netlink_unicast+0x82f/0x9e0 [ 245.055172][T14479] ? __pfx_netlink_unicast+0x10/0x10 [ 245.055187][T14479] ? netlink_sendmsg+0x642/0xb30 [ 245.055196][T14479] ? skb_put+0x11b/0x210 [ 245.055208][T14479] netlink_sendmsg+0x805/0xb30 [ 245.055223][T14479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.055235][T14479] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.055254][T14479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.055264][T14479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.055275][T14479] __sock_sendmsg+0x21c/0x270 [ 245.055291][T14479] ____sys_sendmsg+0x505/0x830 [ 245.055306][T14479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.055321][T14479] ? import_iovec+0x74/0xa0 [ 245.055336][T14479] ___sys_sendmsg+0x21f/0x2a0 [ 245.055354][T14479] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.055384][T14479] ? __fget_files+0x2a/0x420 [ 245.055393][T14479] ? __fget_files+0x3a0/0x420 [ 245.055408][T14479] __x64_sys_sendmsg+0x19b/0x260 [ 245.055421][T14479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.055440][T14479] ? do_syscall_64+0xbe/0xfa0 [ 245.055456][T14479] do_syscall_64+0xfa/0xfa0 [ 245.055469][T14479] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.055482][T14479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.055492][T14479] ? clear_bhb_loop+0x60/0xb0 [ 245.055504][T14479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.055513][T14479] RIP: 0033:0x7fa298d8f6c9 [ 245.055529][T14479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.055538][T14479] RSP: 002b:00007fa299c5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.055549][T14479] RAX: ffffffffffffffda RBX: 00007fa298fe5fa0 RCX: 00007fa298d8f6c9 [ 245.055557][T14479] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 245.055563][T14479] RBP: 00007fa298e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.055569][T14479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.055575][T14479] R13: 00007fa298fe6038 R14: 00007fa298fe5fa0 R15: 00007ffe4e4fa0c8 [ 245.055592][T14479] [ 245.055621][T14479] Mem-Info: [ 245.548451][T14479] active_anon:5543 inactive_anon:0 isolated_anon:0 [ 245.548451][T14479] active_file:3209 inactive_file:39936 isolated_file:0 [ 245.548451][T14479] unevictable:768 dirty:331 writeback:0 [ 245.548451][T14479] slab_reclaimable:11280 slab_unreclaimable:102837 [ 245.548451][T14479] mapped:29142 shmem:1362 pagetables:1367 [ 245.548451][T14479] sec_pagetables:0 bounce:0 [ 245.548451][T14479] kernel_misc_reclaimable:0 [ 245.548451][T14479] free:1317964 free_pcp:14586 free_cma:0 [ 245.596012][T14479] Node 0 active_anon:22172kB inactive_anon:0kB active_file:12836kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116580kB dirty:1324kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12496kB pagetables:5300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 245.628209][T14479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 245.658466][T14479] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.688996][T14479] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 245.694828][T14479] Node 0 DMA32 free:1366460kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22172kB inactive_anon:0kB active_file:12836kB inactive_file:159536kB unevictable:1536kB writepending:1324kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:38880kB local_pcp:20764kB free_cma:0kB [ 245.729223][T14479] lowmem_reserve[]: 0 0 0 0 0 [ 245.734031][T14479] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.764459][T14479] lowmem_reserve[]: 0 0 0 0 0 [ 245.769201][T14479] Node 1 Normal free:3890036kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19360kB local_pcp:11168kB free_cma:0kB [ 245.803058][T14479] lowmem_reserve[]: 0 0 0 0 0 [ 245.807792][T14479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.820455][T14479] Node 0 DMA32: 283*4kB (UME) 1306*8kB (UME) 1190*16kB (UME) 1341*32kB (UME) 856*64kB (UME) 539*128kB (UME) 425*256kB (UME) 267*512kB (UM) 120*1024kB (UM) 9*2048kB (UME) 191*4096kB (M) = 1366460kB [ 245.840094][T14479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 245.851674][T14479] Node 1 Normal: 185*4kB (UME) 50*8kB (UME) 48*16kB (UME) 106*32kB (UME) 37*64kB (UME) 7*128kB (UME) 4*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3890036kB [ 245.870865][T14479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.880558][T14479] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.889926][T14479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.899550][T14479] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.908842][T14479] 44503 total pagecache pages [ 245.913588][T14479] 0 pages in swap cache [ 245.917739][T14479] Free swap = 124996kB [ 245.921919][T14479] Total swap = 124996kB [ 245.926072][T14479] 2097051 pages RAM [ 245.929930][T14479] 0 pages HighMem/MovableOnly [ 245.934601][T14479] 424120 pages reserved [ 245.938740][T14479] 0 pages cma reserved [ 248.224943][T14594] netlink: 'syz.4.4157': attribute type 2 has an invalid length. [ 248.230746][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4158'. [ 248.422568][T14607] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 248.437215][T14607] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 248.509626][T14613] netlink: 'syz.0.4167': attribute type 3 has an invalid length. [ 248.591911][T14617] netlink: 'syz.3.4170': attribute type 1 has an invalid length. [ 248.740391][T14632] netlink: 'syz.3.4176': attribute type 21 has an invalid length. [ 248.748684][T14631] SET target dimension over the limit! [ 248.779564][T14632] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4176'. [ 248.789712][T14632] netlink: 'syz.3.4176': attribute type 5 has an invalid length. [ 248.797457][T14632] netlink: 'syz.3.4176': attribute type 6 has an invalid length. [ 248.838198][T14632] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4176'. [ 249.039255][T14651] bond3: option arp_interval: invalid value (18446744073709551615) [ 249.053314][T14651] bond3: option arp_interval: allowed values 0 - 2147483647 [ 249.074200][T14651] bond3 (unregistering): Released all slaves [ 249.104772][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4189'. [ 249.149050][T14660] netlink: 'syz.0.4190': attribute type 1 has an invalid length. [ 249.158785][T14660] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4190'. [ 249.168494][T14660] NCSI netlink: No device for ifindex 0 [ 249.179713][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4189'. [ 249.199809][T14658] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4189'. [ 249.238136][T14663] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4191'. [ 249.786494][T14705] ip6t_srh: unknown srh invflags BA61 [ 249.950679][T14720] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 249.953369][T14717] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 249.978142][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4220'. [ 250.081756][T14728] netlink: 'syz.0.4224': attribute type 21 has an invalid length. [ 250.101356][T14728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4224'. [ 250.178452][T14733] No such timeout policy "syz0" [ 250.194392][T14736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.367396][T14746] bond2: Unable to set up delay as MII monitoring is disabled [ 250.394594][T14746] bond2 (unregistering): Released all slaves [ 250.706696][T14774] x_tables: unsorted underflow at hook 3 [ 250.762878][T14776] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 251.038361][T14797] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4256'. [ 251.098200][T14797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.122957][T14804] xt_hashlimit: max too large, truncated to 1048576 [ 251.508744][T14834] netlink: 'syz.4.4278': attribute type 2 has an invalid length. [ 252.195619][T14886] ip6t_REJECT: ECHOREPLY is not supported [ 253.704505][T15003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.796569][T15006] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 253.813510][T15006] bond3 (unregistering): Released all slaves [ 253.817212][T15012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.892241][T15016] : renamed from team_slave_1 [ 254.262044][T15037] __nla_validate_parse: 10 callbacks suppressed [ 254.262063][T15037] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4373'. [ 254.269444][T15039] validate_nla: 1 callbacks suppressed [ 254.269460][T15039] netlink: 'syz.0.4374': attribute type 11 has an invalid length. [ 254.301424][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4373'. [ 254.570991][T15054] netlink: 'syz.0.4380': attribute type 2 has an invalid length. [ 254.715925][T15067] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.737616][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'. [ 254.765884][T15070] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4389'. [ 254.823174][T15076] netlink: 'syz.4.4392': attribute type 5 has an invalid length. [ 254.862191][T15076] ip6erspan0: entered promiscuous mode [ 255.116277][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 255.692273][T15140] netlink: 'syz.3.4423': attribute type 7 has an invalid length. [ 255.724498][T15140] netlink: 'syz.3.4423': attribute type 8 has an invalid length. [ 255.850092][T15152] netlink: 'syz.4.4429': attribute type 2 has an invalid length. [ 255.867213][T15150] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 255.876088][T15152] : entered promiscuous mode [ 255.892484][T15156] netlink: 'syz.0.4430': attribute type 10 has an invalid length. [ 255.906859][T15156] batman_adv: batadv0: Adding interface: netdevsim0 [ 255.909582][T15150] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4427'. [ 255.937014][T15156] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (255) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.967745][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974398][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.986381][T15156] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 256.051848][T15162] netlink: 'syz.3.4432': attribute type 2 has an invalid length. [ 256.258690][T15176] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 256.266055][T15180] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 256.266079][T15180] openvswitch: netlink: Flow key attr not present in new flow. [ 256.462626][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.626846][T15204] IPv6: Can't replace route, no match found [ 256.726119][T15211] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 256.755585][T15210] geneve2: entered promiscuous mode [ 256.771138][ T1343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.786942][ T1343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.817666][ T1343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.849602][ T1343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.971098][T15223] xt_TCPMSS: Only works on TCP SYN packets [ 257.171754][T15234] bond2: option xmit_hash_policy: invalid value (6) [ 257.184168][T15234] bond2 (unregistering): Released all slaves [ 257.563957][T15264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.620083][T15267] ieee802154 phy0 wpan0: encryption failed: -90 [ 257.902922][T15290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4494'. [ 257.935860][T15293] ipt_rpfilter: unknown options [ 258.176415][T15310] netlink: 'syz.0.4505': attribute type 11 has an invalid length. [ 258.214567][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 258.229555][T15310] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4505'. [ 258.619643][T15341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4520'. [ 259.221988][T15388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.574744][T15413] __nla_validate_parse: 6 callbacks suppressed [ 259.574761][T15413] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4555'. [ 259.598669][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4555'. [ 259.629530][T15413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4555'. [ 260.096393][T15455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4577'. [ 260.116124][T15455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4577'. [ 260.418867][T15477] validate_nla: 8 callbacks suppressed [ 260.418887][T15477] netlink: 'syz.2.4588': attribute type 3 has an invalid length. [ 260.615932][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4596'. [ 260.651150][T15494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4596'. [ 260.720368][T15498] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4597'. [ 260.809727][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4602'. [ 260.857570][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4605'. [ 260.967033][T15518] xt_connbytes: Forcing CT accounting to be enabled [ 261.534972][T15562] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 261.889736][T15586] bond7: option mode: invalid value (254) [ 261.897649][T15586] bond7 (unregistering): Released all slaves [ 262.766510][T15652] bond2: option resend_igmp: invalid value (2878) [ 262.773184][T15652] bond2: option resend_igmp: allowed values 0 - 255 [ 262.791201][T15652] bond2 (unregistering): Released all slaves [ 262.892865][T15664] netlink: 'syz.3.4680': attribute type 1 has an invalid length. [ 263.642220][T15724] netlink: 'syz.2.4709': attribute type 21 has an invalid length. [ 264.494899][T15791] netlink: 'syz.3.4743': attribute type 1 has an invalid length. [ 264.528969][T15791] netlink: 'syz.3.4743': attribute type 11 has an invalid length. [ 264.646083][T15801] __nla_validate_parse: 15 callbacks suppressed [ 264.646102][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4748'. [ 264.662371][T15801] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 264.669758][T15801] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 264.684804][T15801] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4748'. [ 264.715449][T15805] netlink: 'syz.1.4750': attribute type 21 has an invalid length. [ 264.848301][T15815] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.244492][T15841] : renamed from team_slave_1 (while UP) [ 265.297308][T15844] : renamed from bond_slave_0 [ 265.432229][T15848] xt_CT: No such helper "syz0" [ 265.639176][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4782'. [ 265.653664][T15868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4782'. [ 265.665774][T15868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4782'. [ 265.783932][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4787'. [ 265.840360][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4785'. [ 266.021417][T15895] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4793'. [ 266.033485][T15895] openvswitch: netlink: Missing key (keys=40, expected=100) [ 266.282596][T15917] netlink: 'syz.0.4804': attribute type 3 has an invalid length. [ 266.566717][T15938] netlink: 'syz.0.4815': attribute type 32 has an invalid length. [ 266.811862][T15958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4824'. [ 266.859935][T15958] tc_dump_action: action bad kind [ 266.916906][T15965] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 267.104644][T15979] netlink: 'syz.2.4834': attribute type 1 has an invalid length. [ 267.292133][T15991] xt_nat: multiple ranges no longer supported [ 267.316337][T15993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4842'. [ 267.744649][T16025] gretap1: entered promiscuous mode [ 267.749349][T16027] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 267.764028][T16025] gretap1: entered allmulticast mode [ 267.785067][T16031] netlink: 'syz.1.4860': attribute type 30 has an invalid length. [ 267.868374][T16031] bond3: option arp_missed_max: invalid value (0) [ 267.874966][T16031] bond3: option arp_missed_max: allowed values 1 - 255 [ 267.904430][T16031] bond3 (unregistering): Released all slaves [ 268.814333][T16100] netlink: 'syz.4.4894': attribute type 11 has an invalid length. [ 268.941351][T16106] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 268.955005][T16112] netlink: 'syz.0.4899': attribute type 5 has an invalid length. [ 268.993779][T16106] bond3 (unregistering): Released all slaves [ 269.234663][T16131] netlink: 'syz.2.4908': attribute type 10 has an invalid length. [ 269.248541][T16133] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 270.132678][T16202] netlink: 'syz.0.4943': attribute type 1 has an invalid length. [ 270.354320][T16215] __nla_validate_parse: 6 callbacks suppressed [ 270.354339][T16215] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4952'. [ 270.815310][T16254] openvswitch: netlink: Flow actions attr not present in new flow. [ 271.039622][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 271.232466][T16284] SET target dimension over the limit! [ 271.562243][T16310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4995'. [ 271.849581][T16323] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5002'. [ 272.033538][T16338] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5007'. [ 272.067746][T16332] bond2: option arp_validate: invalid value (32768) [ 272.082147][T16332] bond2 (unregistering): Released all slaves [ 272.286499][T16355] IPVS: length: 209 != 24 [ 272.368667][T16357] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 272.657361][T16380] bridge6: entered promiscuous mode [ 272.825615][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5034'. [ 272.989070][T16405] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5042'. [ 273.516525][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5058'. [ 273.543745][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5058'. [ 273.574542][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5058'. [ 273.616427][T16443] netlink: 'syz.4.5061': attribute type 6 has an invalid length. [ 274.035976][T16475] netlink: 'syz.3.5077': attribute type 2 has an invalid length. [ 274.317619][T16497] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.890724][T16541] Cannot find del_set index 4 as target [ 275.070581][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.312741][T16618] __nla_validate_parse: 74 callbacks suppressed [ 276.312758][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5148'. [ 276.359777][T16618] bridge_slave_0: left allmulticast mode [ 276.380394][T16618] bridge_slave_0: left promiscuous mode [ 276.388410][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.441822][T16692] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5184'. [ 277.933515][T16712] ip6erspan0: entered allmulticast mode [ 278.006466][T16718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5197'. [ 278.615418][T16761] Cannot find del_set index 4 as target [ 279.207945][T16803] netlink: 'syz.0.5239': attribute type 6 has an invalid length. [ 279.342921][T16814] netlink: 'syz.0.5245': attribute type 3 has an invalid length. [ 279.388861][T16816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5242'. [ 279.560051][T16826] netlink: 'syz.2.5251': attribute type 21 has an invalid length. [ 279.589587][T16826] netlink: 'syz.2.5251': attribute type 1 has an invalid length. [ 279.597844][T16826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5251'. [ 279.667623][T16835] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5253'. [ 279.707137][T16835] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5253'. [ 279.758923][T16840] netlink: 'syz.1.5257': attribute type 1 has an invalid length. [ 280.183981][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5275'. [ 280.209582][T16874] netlink: 'syz.2.5274': attribute type 10 has an invalid length. [ 280.253819][T16871] veth3: entered promiscuous mode [ 280.266006][T16874] team0: Port device bridge0 added [ 280.529547][T16900] netlink: 'syz.4.5287': attribute type 15 has an invalid length. [ 280.643247][T16908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5289'. [ 280.827142][T16923] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 280.874944][T16923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 281.064203][T16937] netlink: 'syz.4.5305': attribute type 13 has an invalid length. [ 281.357780][T16959] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5316'. [ 281.425265][ T1339] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.455805][ T1339] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.492938][ T1339] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.534401][ T1339] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.794362][T16981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5327'. [ 281.925587][T16993] Cannot find set identified by id 65534 to match [ 282.311270][T17020] xfrm1: entered allmulticast mode [ 282.403818][T17024] netlink: 'syz.3.5348': attribute type 4 has an invalid length. [ 282.436857][T17024] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5348'. [ 282.470336][T17024] .`: renamed from bond0 (while UP) [ 282.828991][T17058] openvswitch: netlink: Actions may not be safe on all matching packets [ 282.946961][T17066] netlink: 'syz.2.5369': attribute type 3 has an invalid length. [ 283.106760][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 283.563750][T17116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.639813][T17120] netlink: 820 bytes leftover after parsing attributes in process `syz.1.5395'. [ 283.675717][T17120] netlink: 820 bytes leftover after parsing attributes in process `syz.1.5395'. [ 283.683770][T17123] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5396'. [ 283.876434][T17137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5402'. [ 284.467611][T17182] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5424'. [ 284.539793][T17180] bond2: option min_links: invalid value (18446744073709551612) [ 284.570040][T17180] bond2: option min_links: allowed values 0 - 2147483647 [ 284.601967][T17180] bond2 (unregistering): Released all slaves [ 284.760438][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5435'. [ 285.573564][T17267] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 286.044407][T17300] openvswitch: netlink: IP tunnel dst address not specified [ 286.447846][T17332] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 286.561723][T17341] __nla_validate_parse: 3 callbacks suppressed [ 286.561740][T17341] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5504'. [ 287.008151][T17373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5520'. [ 287.262710][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5529'. [ 287.587277][T17419] validate_nla: 2 callbacks suppressed [ 287.587295][T17419] netlink: 'syz.0.5542': attribute type 11 has an invalid length. [ 287.932196][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5550'. [ 287.963251][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5550'. [ 287.997332][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5550'. [ 288.342621][T17470] ipt_REJECT: ECHOREPLY no longer supported. [ 289.165469][T17529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.220560][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5587'. [ 289.266616][T17540] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5590'. [ 289.372103][T17545] netlink: 'syz.3.5594': attribute type 3 has an invalid length. [ 289.384198][T17545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5594'. [ 289.450871][T17550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.689325][T17570] netlink: 'syz.3.5605': attribute type 21 has an invalid length. [ 289.701005][T17570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5605'. [ 289.738722][T17572] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 290.078783][T17600] ip6tnl4: entered allmulticast mode [ 290.542447][T17629] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.672098][T17635] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 290.738276][T17638] netlink: 'syz.0.5638': attribute type 1 has an invalid length. [ 291.312288][T17677] netlink: 'syz.2.5655': attribute type 13 has an invalid length. [ 291.417434][T17685] netlink: zone id is out of range [ 291.445871][T17685] netlink: zone id is out of range [ 291.459989][T17685] netlink: zone id is out of range [ 291.465235][T17685] netlink: zone id is out of range [ 291.489536][T17685] netlink: zone id is out of range [ 291.494693][T17685] netlink: zone id is out of range [ 291.508600][T17685] netlink: zone id is out of range [ 291.515713][T17685] netlink: zone id is out of range [ 291.521103][T17685] netlink: zone id is out of range [ 291.522951][ T1339] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 291.546573][T17685] netlink: zone id is out of range [ 291.554122][ T1339] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 291.579718][ T1339] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 291.589324][ T1339] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 291.712103][T17701] netlink: 'syz.2.5666': attribute type 1 has an invalid length. [ 291.726443][T17701] __nla_validate_parse: 5 callbacks suppressed [ 291.726463][T17701] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5666'. [ 291.796808][T17704] netlink: 'syz.4.5671': attribute type 32 has an invalid length. [ 291.812697][T17704] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5671'. [ 291.900379][T17712] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5674'. [ 292.684194][T17769] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5696'. [ 292.771434][T17771] netlink: 'syz.3.5698': attribute type 1 has an invalid length. [ 292.779335][T17771] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5698'. [ 292.835916][T17774] ip6tnl5: entered promiscuous mode [ 292.860130][T17777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5701'. [ 293.399073][T17822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5723'. [ 293.498386][T17829] x_tables: duplicate entry at hook 2 [ 293.761723][T17847] netlink: 'syz.0.5733': attribute type 1 has an invalid length. [ 293.954126][T17864] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 294.089071][T17874] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5748'. [ 294.115139][T17874] 0XD: renamed from gretap0 (while UP) [ 294.152337][T17874] 0XD: entered allmulticast mode [ 294.949939][T17939] netlink: 'syz.1.5779': attribute type 1 has an invalid length. [ 294.968014][T17939] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5779'. [ 295.082378][T17949] netlink: 'syz.3.5784': attribute type 1 has an invalid length. [ 295.319495][T17963] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 295.687166][T17986] bond2 (unregistering): Released all slaves [ 295.784044][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5811'. [ 295.987822][T18011] bond8: Removing last arp target with arp_interval on [ 295.996883][T18011] bond8: entered promiscuous mode [ 296.003400][T18011] bond8: entered allmulticast mode [ 296.009086][T18011] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.298584][T18034] bridge0: port 3(dummy0) entered blocking state [ 296.305251][T18034] bridge0: port 3(dummy0) entered forwarding state [ 296.343501][T18034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.358543][T18034] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.925002][T18079] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.380698][ T52] Bluetooth: hci0: command tx timeout [ 297.467763][T18118] netlink: 'syz.1.5865': attribute type 32 has an invalid length. [ 297.514930][T18118] __nla_validate_parse: 18 callbacks suppressed [ 297.514947][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5865'. [ 297.588589][T18118] bond3: Setting coupled_control to off (0) [ 297.963366][T18156] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5881'. [ 298.059675][T18163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5886'. [ 298.164766][T18171] xt_ecn: cannot match TCP bits for non-tcp packets [ 298.356687][T18185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5897'. [ 298.388730][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5897'. [ 298.440452][T18192] xt_TCPMSS: Only works on TCP SYN packets [ 298.557471][T18199] net_ratelimit: 11 callbacks suppressed [ 298.557490][T18199] openvswitch: netlink: IP tunnel dst address not specified [ 298.559510][T18202] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5905'. [ 299.154496][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 299.188545][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 299.239600][T18252] netlink: 'syz.1.5930': attribute type 1 has an invalid length. [ 299.259808][T18252] netlink: 'syz.1.5930': attribute type 2 has an invalid length. [ 299.535265][T18261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.556723][T18261] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.572473][T18261] dummy0: left promiscuous mode [ 299.577530][T18261] dummy0: left allmulticast mode [ 299.605321][T18261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.231455][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5962'. [ 300.374222][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5965'. [ 300.524618][T18336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.772619][T18357] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.026754][T18375] wg1: left promiscuous mode [ 301.037294][T18375] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 301.055504][T18375] bond2: left promiscuous mode [ 301.070467][T18375] bond3: left promiscuous mode [ 301.099501][T18375] ip6erspan0: left promiscuous mode [ 301.105254][T18375] geneve2: left promiscuous mode [ 301.111848][T18375] gretap1: left promiscuous mode [ 301.247848][T18389] netlink: 'syz.1.5995': attribute type 4 has an invalid length. [ 301.265558][T18389] .`: renamed from bond0 [ 302.123469][T18458] smc: removing ib device syz0 [ 302.558818][T18489] Cannot find del_set index 4 as target [ 302.748636][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.756128][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.767354][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.793246][T18500] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 302.811133][T18500] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 302.859047][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.868100][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.878935][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.895065][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.907628][T18500] wlan0 speed is unknown, defaulting to 1000 [ 302.983439][T18510] bond2 (unregistering): Released all slaves [ 303.025877][T18515] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.094980][T18519] __nla_validate_parse: 4 callbacks suppressed [ 303.094999][T18519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6058'. [ 303.191332][T18525] geneve3: entered promiscuous mode [ 303.243021][T18528] netlink: 'syz.0.6063': attribute type 1 has an invalid length. [ 303.251160][T18528] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6063'. [ 303.265483][T18528] NCSI netlink: No device for ifindex 0 [ 303.526192][T18549] netlink: 'syz.2.6073': attribute type 41 has an invalid length. [ 303.544406][T18551] netlink: 'syz.3.6074': attribute type 11 has an invalid length. [ 303.718868][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6081'. [ 303.742429][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6081'. [ 303.759837][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6081'. [ 303.824490][T18571] netlink: 'syz.2.6084': attribute type 1 has an invalid length. [ 303.832483][T18571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6084'. [ 304.052634][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6091'. [ 304.099591][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 304.121965][T18590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6093'. [ 304.158258][T18592] tipc: Can't bind to reserved service type 1 [ 304.296641][T18603] netlink: 'syz.1.6098': attribute type 1 has an invalid length. [ 304.307256][T18601] netlink: 'syz.3.6100': attribute type 1 has an invalid length. [ 304.327296][T18601] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6100'. [ 304.346577][T18606] netlink: 'syz.0.6101': attribute type 7 has an invalid length. [ 304.403020][T18608] netlink: 'syz.2.6102': attribute type 10 has an invalid length. [ 304.433307][T18608] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6102'. [ 304.448106][T18608] batadv_slave_1: entered promiscuous mode [ 304.456269][T18608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.464514][T18608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.483855][T18608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.505695][T18608] bridge0: port 4(batadv_slave_1) entered blocking state [ 304.519818][T18608] bridge0: port 4(batadv_slave_1) entered disabled state [ 304.537326][T18608] batadv_slave_1: entered allmulticast mode [ 305.109714][T18661] netlink: 'syz.1.6127': attribute type 1 has an invalid length. [ 305.124453][T18661] netlink: 'syz.1.6127': attribute type 2 has an invalid length. [ 305.654658][T18704] delete_channel: no stack [ 305.673005][T18705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.039902][T18733] Unknown options in mask b7f2 [ 306.195699][T18743] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 307.144778][T18815] ip6gre2: entered allmulticast mode [ 307.232952][T18821] x_tables: duplicate underflow at hook 2 [ 307.377318][T18834] netlink: 'syz.3.6211': attribute type 21 has an invalid length. [ 307.946933][T18878] netlink: 'syz.2.6235': attribute type 6 has an invalid length. [ 307.969796][T18878] netlink: 'syz.2.6235': attribute type 6 has an invalid length. [ 308.088922][ T30] audit: type=1800 audit(1762447324.008:3): pid=18889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6238" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6054 res=0 errno=0 [ 308.406459][T18912] netlink: 'syz.2.6250': attribute type 22 has an invalid length. [ 308.810211][T18944] __nla_validate_parse: 15 callbacks suppressed [ 308.810228][T18944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6267'. [ 309.011093][T18961] IPv6: Can't replace route, no match found [ 309.342066][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6285'. [ 309.969514][T19033] netlink: 'syz.2.6309': attribute type 13 has an invalid length. [ 310.213610][T19051] netlink: 732 bytes leftover after parsing attributes in process `syz.2.6317'. [ 310.253661][T19053] netlink: 'syz.3.6319': attribute type 16 has an invalid length. [ 310.261706][T19051] netlink: 732 bytes leftover after parsing attributes in process `syz.2.6317'. [ 310.271426][T19053] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6319'. [ 310.528154][T19075] netlink: 'syz.1.6330': attribute type 1 has an invalid length. [ 310.734858][T19089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.775881][T19093] netlink: 'syz.3.6339': attribute type 1 has an invalid length. [ 310.883882][T19102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6344'. [ 310.988705][T19109] xt_socket: unknown flags 0x50 [ 311.259947][T19131] netlink: 'syz.3.6356': attribute type 33 has an invalid length. [ 311.268008][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6355'. [ 311.281420][T19132] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 311.406557][T19139] netlink: 'syz.3.6361': attribute type 2 has an invalid length. [ 311.637840][T19158] netlink: 'syz.0.6370': attribute type 2 has an invalid length. [ 311.658366][T19158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6370'. [ 311.689589][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6371'. [ 312.336979][T19209] netlink: 'syz.3.6395': attribute type 1 has an invalid length. [ 312.532709][T19225] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6402'. [ 312.625496][T19232] xt_TCPMSS: Only works on TCP SYN packets [ 313.422995][T19291] netlink: 'syz.2.6433': attribute type 9 has an invalid length. [ 314.299223][T19358] __nla_validate_parse: 6 callbacks suppressed [ 314.299244][T19358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6467'. [ 314.624020][T19383] mac80211_hwsim hwsim9 ;: renamed from wlan0 (while UP) [ 314.705197][T19387] bond0: option arp_validate: invalid value (55553) [ 314.712305][ T3502] bond0: (slave bond_slave_0): interface is now down [ 314.719229][ T3502] bond0: (slave bond_slave_1): interface is now down [ 314.749543][ T1142] bond0: (slave bond_slave_0): interface is now down [ 314.756283][ T1142] bond0: (slave bond_slave_1): interface is now down [ 314.786678][ T1142] bond0: now running without any active interface! [ 314.901303][T19398] netlink: zone id is out of range [ 314.906469][T19398] netlink: zone id is out of range [ 314.935077][T19398] netlink: zone id is out of range [ 314.940754][T19398] netlink: zone id is out of range [ 314.948115][T19398] netlink: zone id is out of range [ 314.948155][T19403] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6489'. [ 314.954625][T19398] netlink: zone id is out of range [ 314.969227][T19398] netlink: zone id is out of range [ 314.974852][T19398] netlink: zone id is out of range [ 315.037714][ T979] IPVS: starting estimator thread 0... [ 315.043842][T19407] netlink: 'syz.2.6490': attribute type 15 has an invalid length. [ 315.057478][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6490'. [ 315.150035][T19408] IPVS: using max 26 ests per chain, 62400 per kthread [ 315.594865][T19452] netlink: 'syz.0.6513': attribute type 1 has an invalid length. [ 315.729942][T19459] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6516'. [ 316.439689][T19511] netlink: 'syz.3.6540': attribute type 3 has an invalid length. [ 316.779682][T19539] netlink: 'syz.1.6550': attribute type 4 has an invalid length. [ 316.914671][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6553'. [ 316.939862][T19551] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6555'. [ 317.387955][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.603837][T19588] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6568'. [ 318.060971][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.083959][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.092077][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.106200][T19618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6580'. [ 318.118544][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.127696][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.136315][T19618] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6580'. [ 318.278102][T19614] wlan0 speed is unknown, defaulting to 1000 [ 318.317550][T19627] xt_TCPMSS: Only works on TCP SYN packets [ 318.706103][T19614] chnl_net:caif_netlink_parms(): no params data found [ 319.001890][T19669] bond2: option packets_per_slave: invalid value (1048582) [ 319.009144][T19669] bond2: option packets_per_slave: allowed values 0 - 65535 [ 319.019007][T19669] bond2 (unregistering): Released all slaves [ 319.117773][T19614] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.135777][T19614] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.153145][T19614] bridge_slave_0: entered allmulticast mode [ 319.170382][T19614] bridge_slave_0: entered promiscuous mode [ 319.195995][T19674] bridge5: entered allmulticast mode [ 319.227340][T19614] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.238017][T19614] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.257866][T19614] bridge_slave_1: entered allmulticast mode [ 319.266266][T19614] bridge_slave_1: entered promiscuous mode [ 319.366902][T19614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.393071][T19614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.437193][T19698] netlink: 'syz.0.6614': attribute type 10 has an invalid length. [ 319.488373][T19614] team0: Port device team_slave_0 added [ 319.513953][T19702] netlink: 'syz.1.6615': attribute type 10 has an invalid length. [ 319.518323][T19614] team0: Port device team_slave_1 added [ 319.548556][T19702] team0: Port device syz_tun added [ 319.696168][T19614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.713963][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.748607][T19614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.796167][T19614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.821092][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.873104][T19614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.914330][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6626'. [ 320.081539][T19614] hsr_slave_0: entered promiscuous mode [ 320.098358][T19614] hsr_slave_1: entered promiscuous mode [ 320.179624][ T52] Bluetooth: hci5: command tx timeout [ 320.407064][T19759] No such timeout policy "syz1" [ 320.522855][T19765] xt_TPROXY: Can be used only with -p tcp or -p udp [ 320.545270][T19767] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.698238][T19614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.764751][T19614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 320.788842][T19614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.836495][T19614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.114874][T19614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.186266][T19614] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.217895][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.225105][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.270669][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.277896][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.310148][T19821] netlink: 'syz.1.6667': attribute type 8 has an invalid length. [ 321.427845][T19614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.553102][T19836] netlink: 'syz.3.6675': attribute type 12 has an invalid length. [ 321.824168][T19614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.001894][T19863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6683'. [ 322.264175][ T52] Bluetooth: hci5: command tx timeout [ 322.497704][T19897] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6698'. [ 322.523621][T19614] veth0_vlan: entered promiscuous mode [ 322.552095][T19614] veth1_vlan: entered promiscuous mode [ 322.627028][T19614] veth0_macvtap: entered promiscuous mode [ 322.645918][T19614] veth1_macvtap: entered promiscuous mode [ 322.697972][T19614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.732847][T19614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.739373][T19909] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6704'. [ 322.790898][T19911] netlink: 'syz.3.6705': attribute type 1 has an invalid length. [ 322.822509][ T1142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.839635][ T1142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.876708][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.904641][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.087785][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.112642][T19927] netlink: 'syz.0.6713': attribute type 2 has an invalid length. [ 323.122035][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.130303][T19927] netlink: 'syz.0.6713': attribute type 1 has an invalid length. [ 323.203342][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.225762][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.647933][T19963] netlink: 'syz.2.6729': attribute type 1 has an invalid length. [ 323.666581][T19963] netlink: 'syz.2.6729': attribute type 2 has an invalid length. [ 324.085894][T19967] bridge0: port 3(dummy0) entered disabled state [ 324.198401][T19967] bridge2: left promiscuous mode [ 324.208800][T19967] geneve2: left promiscuous mode [ 324.220355][T19967] ip6gretap1: left promiscuous mode [ 324.341961][ T52] Bluetooth: hci5: command tx timeout [ 324.472455][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6751'. [ 324.612757][T20013] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.998429][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6765'. [ 325.421850][T20069] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6782'. [ 325.635317][T20078] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 326.419598][ T52] Bluetooth: hci5: command tx timeout [ 326.525281][T20142] ipt_REJECT: TCP_RESET invalid for non-tcp [ 326.762967][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6826'. [ 326.826545][T20163] netlink: 34 bytes leftover after parsing attributes in process `syz.0.6827'. [ 326.953579][T20171] net_ratelimit: 3 callbacks suppressed [ 326.953598][T20171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.563867][T20207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.968277][T20228] bond0: option primary_reselect: invalid value (6) [ 328.003201][T20228] bond0 (unregistering): Released all slaves [ 328.136460][T20241] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 328.503385][T20269] netlink: 'syz.1.6880': attribute type 6 has an invalid length. [ 328.882941][T20282] ip6tnl1: entered allmulticast mode [ 329.185982][T20296] netlink: 'syz.3.6893': attribute type 1 has an invalid length. [ 329.210342][T20296] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6893'. [ 329.469667][T20311] netlink: 'syz.3.6901': attribute type 10 has an invalid length. [ 329.517585][T20311] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 329.884483][T20339] netlink: 'syz.2.6914': attribute type 21 has an invalid length. [ 329.929570][T20339] netlink: 'syz.2.6914': attribute type 6 has an invalid length. [ 329.967911][T20339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6914'. [ 329.967924][T20347] netlink: 'syz.5.6918': attribute type 1 has an invalid length. [ 329.967941][T20347] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6918'. [ 330.193419][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6925'. [ 330.225608][T20361] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 330.296237][T20367] bond1: left promiscuous mode [ 330.326203][T20367] bridge1: left promiscuous mode [ 330.356584][T20367] veth3: left promiscuous mode [ 330.409868][T20376] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 330.885718][T20405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6945'. [ 331.081725][T20418] sctp: [Deprecated]: syz.3.6950 (pid 20418) Use of int in maxseg socket option. [ 331.081725][T20418] Use struct sctp_assoc_value instead [ 331.162694][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6951'. [ 331.403123][T20435] netlink: 'syz.3.6956': attribute type 21 has an invalid length. [ 331.429808][T20435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6956'. [ 331.699726][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6962'. [ 331.709239][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6961'. [ 331.734484][T20450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 331.742624][T20455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6965'. [ 331.749183][T20454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6964'. [ 331.762495][T20454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6964'. [ 332.129985][T20479] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.172108][T20482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6979'. [ 332.194258][T20482] netlink: 'syz.2.6979': attribute type 3 has an invalid length. [ 332.328596][T20493] netlink: 'syz.0.6984': attribute type 1 has an invalid length. [ 332.473994][T20503] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 332.829625][T20524] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 332.839224][T20524] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 333.221799][T20549] openvswitch: netlink: IP tunnel dst address not specified [ 333.640455][T20576] bond0: Error: Cannot enslave bond to itself. [ 335.080082][T20670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.325273][T20694] __nla_validate_parse: 7 callbacks suppressed [ 335.325294][T20694] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7080'. [ 335.389563][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7085'. [ 335.391160][T20698] netlink: 'syz.3.7083': attribute type 1 has an invalid length. [ 335.409671][T20700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7085'. [ 335.453814][T20698] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7083'. [ 335.761926][T20720] netlink: 'syz.2.7095': attribute type 13 has an invalid length. [ 335.770065][T20720] netlink: 'syz.2.7095': attribute type 17 has an invalid length. [ 335.813238][T20722] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7097'. [ 335.823426][T20720] gretap0: refused to change device tx_queue_len [ 335.840144][T20720] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 335.969335][T20732] netlink: 'syz.3.7102': attribute type 1 has an invalid length. [ 336.088051][T20740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7105'. [ 336.100169][T20743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.105316][T20744] xt_TCPMSS: Only works on TCP SYN packets [ 336.245347][T20750] x_tables: unsorted entry at hook 1 [ 336.268803][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7112'. [ 336.484405][T20767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.491697][T20767] IPv6: NLM_F_CREATE should be set when creating new route [ 336.498962][T20767] IPv6: NLM_F_CREATE should be set when creating new route [ 336.664175][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7126'. [ 336.696498][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7126'. [ 336.726239][T20783] netlink: 'syz.1.7126': attribute type 4 has an invalid length. [ 336.926548][T20800] xt_cgroup: xt_cgroup: no path or classid specified [ 337.034045][T20806] netlink: 'syz.5.7135': attribute type 10 has an invalid length. [ 337.044248][T20806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7135'. [ 337.070608][T20806] batadv0: entered promiscuous mode [ 337.075868][T20806] batadv0: entered allmulticast mode [ 337.099035][T20806] bridge0: port 3(batadv0) entered blocking state [ 337.107299][T20806] bridge0: port 3(batadv0) entered disabled state [ 337.126068][T20806] bridge0: port 3(batadv0) entered blocking state [ 337.132736][T20806] bridge0: port 3(batadv0) entered forwarding state [ 337.143034][T20812] SET target dimension over the limit! [ 337.249870][ T3502] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 337.259348][ T3502] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 337.410365][T20826] : entered promiscuous mode [ 337.800792][T20855] xt_l2tp: v2 sid > 0xffff: 262147 [ 338.406557][ T1142] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.423553][ T1142] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.445332][ T1142] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.469757][T20891] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 338.493061][ T3502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.231611][T20925] netlink: 'syz.3.7194': attribute type 5 has an invalid length. [ 339.259861][T20925] netlink: 'syz.3.7194': attribute type 6 has an invalid length. [ 340.786948][T21002] Bluetooth: MGMT ver 1.23 [ 341.302293][T21035] __nla_validate_parse: 10 callbacks suppressed [ 341.302311][T21035] netlink: 7016 bytes leftover after parsing attributes in process `syz.0.7250'. [ 341.336984][T21035] openvswitch: netlink: Message has 8 unknown bytes. [ 341.677371][T21057] team0: Port device bridge0 removed [ 341.690587][T21057] bridge_slave_0: left allmulticast mode [ 341.709631][T21057] bridge_slave_0: left promiscuous mode [ 341.716643][T21057] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.763601][T21057] bridge_slave_1: left allmulticast mode [ 341.809590][T21057] bridge_slave_1: left promiscuous mode [ 341.853071][T21057] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.892673][T21066] netlink: 'syz.0.7265': attribute type 1 has an invalid length. [ 341.911542][T21057] bond0: (slave 30): Releasing backup interface [ 341.917646][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7265'. [ 341.933857][T21057] bond0: (slave bond_slave_1): Releasing backup interface [ 341.956845][T21057] team0: Port device team_slave_0 removed [ 341.985343][T21057] team0: Port device team_slave_1 removed [ 341.999996][T21057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.020698][T21057] batadv_slave_1: left allmulticast mode [ 342.045750][T21057] bridge0: port 4(batadv_slave_1) entered disabled state [ 342.078159][T21057] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 342.085557][T21057] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 342.101030][T21057] bridge0: port 3(netdevsim2) entered disabled state [ 342.154910][T21081] netlink: 'syz.1.7271': attribute type 2 has an invalid length. [ 342.189353][T21081] netlink: 'syz.1.7271': attribute type 2 has an invalid length. [ 342.363475][ T979] IPVS: starting estimator thread 0... [ 342.469603][T21093] IPVS: using max 31 ests per chain, 74400 per kthread [ 342.547957][T21104] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 342.977728][T21132] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7297'. [ 342.999878][T21132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7297'. [ 343.677376][T21157] netlink: 'syz.0.7308': attribute type 1 has an invalid length. [ 343.731488][T21161] netlink: 348 bytes leftover after parsing attributes in process `syz.5.7307'. [ 344.030131][T21178] netlink: 'syz.1.7317': attribute type 66 has an invalid length. [ 344.618725][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7336'. [ 344.929972][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7346'. [ 344.955490][T21242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.153715][T21252] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 345.260747][T21205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 345.307392][T21262] netlink: 'syz.1.7357': attribute type 1 has an invalid length. [ 345.839586][T21292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7370'. [ 345.842305][T21294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.003147][T21301] .`: (slave syz_tun): Releasing backup interface [ 346.081264][T21301] x9: left allmulticast mode [ 346.097722][T21301] x9: left promiscuous mode [ 346.111798][T21301] bridge0: port 1(1x9) entered disabled state [ 346.142706][T21301] bridge_slave_1: left allmulticast mode [ 346.164861][T21301] bridge_slave_1: left promiscuous mode [ 346.173675][T21301] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.201079][T21301] .`: (slave bond_slave_0): Releasing backup interface [ 346.313911][T21301] .`: (slave bond_slave_1): Releasing backup interface [ 347.067396][T21301] team0: Port device team_slave_0 removed [ 347.093743][T21301] team0: Port device 26 removed [ 347.110227][T21301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.118178][T21301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.127492][T21301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.136600][T21301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.147123][T21301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.355590][T21337] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7393'. [ 347.483230][T21344] netlink: 'syz.0.7396': attribute type 1 has an invalid length. [ 347.557528][T21347] Bluetooth: MGMT ver 1.23 [ 347.604764][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7399'. [ 347.619836][T21351] netlink: 'syz.3.7399': attribute type 2 has an invalid length. [ 347.627608][T21351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7399'. [ 347.648831][T21354] tipc: Started in network mode [ 347.654871][T21354] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 347.669605][T21354] tipc: Enabling of bearer rejected, failed to enable media [ 348.310156][T21400] netlink: 'syz.1.7421': attribute type 49 has an invalid length. [ 348.850269][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7440'. [ 349.355090][T21474] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7456'. [ 349.955958][T21502] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 350.013330][T21502] bond0 (unregistering): Released all slaves [ 350.345869][T21529] Bluetooth: MGMT ver 1.23 [ 350.419188][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7486'. [ 350.673825][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7496'. [ 350.686349][T21556] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7495'. [ 350.700162][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7496'. [ 350.709355][T21553] netlink: 'syz.1.7496': attribute type 11 has an invalid length. [ 350.718869][T21553] netlink: 'syz.1.7496': attribute type 13 has an invalid length. [ 350.839373][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7499'. [ 351.424261][T21563] veth3: entered promiscuous mode [ 351.450922][T21565] IPVS: Error connecting to the multicast addr [ 352.772022][T21646] __nla_validate_parse: 3 callbacks suppressed [ 352.772040][T21646] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7538'. [ 352.829158][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7538'. [ 353.036498][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7547'. [ 353.589269][T21697] xt_HMARK: spi-set and port-set can't be combined [ 354.271477][T21740] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 354.540924][T21754] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7590'. [ 354.618548][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7592'. [ 354.734837][ T5884] IPVS: starting estimator thread 0... [ 354.786038][T21769] netlink: 'syz.2.7597': attribute type 1 has an invalid length. [ 354.794596][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7597'. [ 354.836066][T21765] IPVS: using max 31 ests per chain, 74400 per kthread [ 354.903159][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7599'. [ 354.950154][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7599'. [ 354.970426][T21773] netlink: 'syz.0.7599': attribute type 12 has an invalid length. [ 355.290044][T21799] netlink: 'syz.3.7613': attribute type 4 has an invalid length. [ 355.320479][T21803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7611'. [ 355.341987][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7614'. [ 355.899326][T21840] tipc: Started in network mode [ 355.922229][T21840] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 355.955312][T21840] tipc: Enabling of bearer rejected, failed to enable media [ 356.347668][T21866] netlink: 'syz.5.7642': attribute type 18 has an invalid length. [ 356.555086][T21880] netlink: 'syz.5.7650': attribute type 3 has an invalid length. [ 357.547154][T21948] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 357.597315][T21948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.025832][T21982] __nla_validate_parse: 8 callbacks suppressed [ 358.025851][T21982] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7699'. [ 358.103698][T21988] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7702'. [ 358.203327][T21994] vlan2: entered allmulticast mode [ 358.222251][T21994] batadv_slave_1: entered allmulticast mode [ 358.440958][T22008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7712'. [ 358.548798][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7717'. [ 358.567190][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7717'. [ 358.583142][T22016] netlink: 'syz.1.7717': attribute type 14 has an invalid length. [ 358.600806][T22016] netlink: 'syz.1.7717': attribute type 13 has an invalid length. [ 359.048542][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7726'. [ 359.238546][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 359.269715][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7731'. [ 359.487474][T22075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.884363][T22100] xt_socket: unknown flags 0xfc [ 360.049652][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7755'. [ 360.123922][T22111] macsec1: entered allmulticast mode [ 360.133770][T22111] syz_tun: entered allmulticast mode [ 360.151827][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7759'. [ 360.164662][T22111] syz_tun: left allmulticast mode [ 361.021564][T22177] IPVS: sh: FWM 3 0x00000003 - no destination available [ 361.100861][T22180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.117230][T22180] bond0: (slave rose0): Enslaving as an active interface with an up link [ 361.747053][T22225] openvswitch: netlink: Message has 536 unknown bytes. [ 361.771815][T22225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.790534][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 363.430289][T22334] __nla_validate_parse: 5 callbacks suppressed [ 363.430306][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7845'. [ 363.492974][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7845'. [ 363.680736][T22343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.463831][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7865'. [ 364.714964][T22392] dvmrp1: entered allmulticast mode [ 364.742745][T22392] dvmrp1: left allmulticast mode [ 365.033657][T22396] bridge0: port 1(veth0_to_bridge) entered blocking state [ 365.049587][T22396] bridge0: port 1(veth0_to_bridge) entered disabled state [ 365.057123][T22396] veth0_to_bridge: entered allmulticast mode [ 365.074972][T22396] veth0_to_bridge: entered promiscuous mode [ 365.451414][T22423] netlink: 'syz.2.7883': attribute type 10 has an invalid length. [ 365.555830][T22432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.794976][T22449] netlink: 'syz.2.7895': attribute type 3 has an invalid length. [ 365.831627][T22451] netlink: 'syz.0.7896': attribute type 2 has an invalid length. [ 366.234536][T22469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.246284][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7909'. [ 366.273180][T22469] team0: Port device bond3 added [ 366.520444][T22490] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7916'. [ 366.818589][T22508] netem: change failed [ 366.897859][T22513] netlink: 'syz.1.7926': attribute type 11 has an invalid length. [ 367.206668][T22534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7938'. [ 367.418133][T22534] syz.1.7938 (22534) used greatest stack depth: 17832 bytes left [ 367.521442][T22539] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 368.853455][T22615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7963'. [ 368.863612][T22615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7963'. [ 368.893729][T22615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7963'. [ 369.010391][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7967'. [ 370.019142][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7986'. [ 370.053993][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7985'. [ 370.102906][T22669] bridge_slave_0: default FDB implementation only supports local addresses [ 370.120380][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7986'. [ 370.130787][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7986'. [ 370.154980][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7986'. [ 370.494779][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7996'. [ 370.974630][T22727] netlink: 'syz.2.8007': attribute type 298 has an invalid length. [ 371.588126][T22764] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 371.605631][T22764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.124379][T22799] xt_socket: unknown flags 0x50 [ 372.447149][T22822] sctp: [Deprecated]: syz.1.8044 (pid 22822) Use of int in max_burst socket option. [ 372.447149][T22822] Use struct sctp_assoc_value instead [ 372.554251][T22826] vlan0: entered allmulticast mode [ 372.582656][T22826] gretap0: entered allmulticast mode [ 373.021714][T22850] netlink: 'syz.5.8056': attribute type 1 has an invalid length. [ 374.890216][T22959] __nla_validate_parse: 6 callbacks suppressed [ 374.890236][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8097'. [ 375.058304][T22969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8101'. [ 378.458015][T23160] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8170'. [ 378.738212][T23170] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.8173'. [ 378.828747][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.397556][T23202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8185'. [ 379.448209][T23202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8185'. [ 379.474786][T23202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8185'. [ 379.521836][T23202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8185'. [ 380.708092][T23269] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 380.970678][T23284] netlink: 'syz.3.8214': attribute type 3 has an invalid length. [ 380.991412][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8214'. [ 381.070345][T23290] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.8217'. [ 381.110268][T23290] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 381.567488][T23322] netlink: 'syz.3.8227': attribute type 1 has an invalid length. [ 383.314092][T23424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.002071][T23469] netlink: 'syz.2.8286': attribute type 6 has an invalid length. [ 384.050760][T23469] netlink: 'syz.2.8286': attribute type 6 has an invalid length. [ 384.294702][T23483] netlink: 'syz.0.8291': attribute type 3 has an invalid length. [ 384.431183][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8294'. [ 384.470925][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8294'. [ 384.502170][T23491] netlink: 'syz.3.8294': attribute type 12 has an invalid length. [ 384.507662][T23495] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8295'. [ 384.540040][T23491] netlink: 'syz.3.8294': attribute type 11 has an invalid length. [ 384.773082][T23509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8301'. [ 384.814302][T23509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8301'. [ 384.829122][T23515] netlink: 'syz.1.8305': attribute type 3 has an invalid length. [ 384.855692][T23509] netlink: 'syz.0.8301': attribute type 2 has an invalid length. [ 384.982169][T23519] tipc: MTU too low for tipc bearer [ 385.033405][T23524] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8310'. [ 385.055139][T23524] netlink: 'syz.0.8310': attribute type 9 has an invalid length. [ 385.530236][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8325'. [ 385.629940][T23564] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 385.650825][T23564] team0: Device ipvlan0 is already an upper device of the team interface [ 385.772285][T23572] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 385.917472][T23578] IPVS: stopping backup sync thread 21740 ... [ 386.532464][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8357'. [ 387.133340][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8372'. [ 387.293013][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8377'. [ 387.634005][T23686] netlink: 'syz.3.8387': attribute type 9 has an invalid length. [ 387.763490][T23693] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 387.777745][T23693] batman_adv: batadv0: Adding interface: gretap2 [ 387.785626][T23693] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.842441][T23693] batman_adv: batadv0: Interface activated: gretap2 [ 388.025663][T23711] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8401'. [ 388.179520][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 388.416873][T23737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8414'. [ 388.960506][T23776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8432'. [ 388.980098][T23775] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8429'. [ 388.990894][T23776] block nbd0: not configured, cannot reconfigure [ 389.197645][T23792] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8436'. [ 389.210316][T23792] netlink: 'syz.1.8436': attribute type 9 has an invalid length. [ 389.218504][T23792] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8436'. [ 389.228556][T23792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8436'. [ 389.452904][T23807] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 390.059027][T23845] macsec1: entered allmulticast mode [ 390.064623][T23845] macsec0: entered allmulticast mode [ 390.082336][T23845] veth1_macvtap: entered allmulticast mode [ 390.823103][T23892] netlink: 'syz.1.8489': attribute type 83 has an invalid length. [ 391.353754][T23920] vlan2: entered promiscuous mode [ 391.399678][T23920] gretap0: entered promiscuous mode [ 391.574645][T23934] __nla_validate_parse: 2 callbacks suppressed [ 391.574664][T23934] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8510'. [ 392.064636][T23969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8527'. [ 392.129689][T23974] netlink: 'syz.3.8529': attribute type 2 has an invalid length. [ 392.321699][T23981] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8532'. [ 392.365710][T23981] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8532'. [ 392.893079][T24016] netlink: 'syz.0.8548': attribute type 46 has an invalid length. [ 392.946437][T24020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.325252][T24040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8560'. [ 393.370856][T24040] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 393.378334][T24040] team0: Device ipvlan0 is already an upper device of the team interface [ 394.371147][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8584'. [ 394.449702][T24092] Bluetooth: MGMT ver 1.23 [ 395.038758][T24098] netlink: 'syz.2.8588': attribute type 101 has an invalid length. [ 395.076470][T24098] netlink: 'syz.2.8588': attribute type 7 has an invalid length. [ 395.093257][T24104] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8590'. [ 395.386731][T24125] netlink: 19 bytes leftover after parsing attributes in process `syz.0.8598'. [ 395.396747][T24122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8599'. [ 396.032857][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8618'. [ 396.273314][T24146] infiniband syz2: set down [ 396.292788][T24146] infiniband syz2: added ipvlan1 [ 396.434343][T24146] RDS/IB: syz2: added [ 396.454910][T24146] smc: adding ib device syz2 with port count 1 [ 396.479615][T24146] smc: ib device syz2 port 1 has no pnetid [ 396.665345][T24195] netlink: 'syz.1.8634': attribute type 3 has an invalid length. [ 397.059838][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8640'. [ 397.069939][T24207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8640'. [ 397.112467][T24207] netlink: 'syz.0.8640': attribute type 18 has an invalid length. [ 397.344591][T24211] xt_CT: No such helper "snmp" [ 398.217904][T24264] tipc: Started in network mode [ 398.223199][T24264] tipc: Node identity ac14140f, cluster identity 4711 [ 398.240877][T24264] tipc: New replicast peer: 255.255.255.83 [ 398.247248][T24264] tipc: Enabled bearer , priority 10 [ 398.418349][T24273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8673'. [ 398.440911][T24273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8673'. [ 398.543435][T24276] bond0: option all_slaves_active: invalid value (7) [ 398.706157][T24282] netlink: 'syz.2.8678': attribute type 2 has an invalid length. [ 399.184921][T24301] netlink: 664 bytes leftover after parsing attributes in process `syz.1.8687'. [ 399.230043][T24301] netlink: 664 bytes leftover after parsing attributes in process `syz.1.8687'. [ 399.371415][ T5823] tipc: Node number set to 2886997007 [ 399.650622][T24324] netlink: 'syz.3.8697': attribute type 4 has an invalid length. [ 399.669620][T24324] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8697'. [ 399.871053][T24334] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 399.891497][T24334] bond0 (unregistering): Released all slaves [ 399.896308][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8701'. [ 400.063027][T24348] netlink: 'syz.3.8704': attribute type 42 has an invalid length. [ 400.072173][T24350] tipc: Enabling of bearer rejected, failed to enable media [ 400.252810][T24358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8711'. [ 400.515921][T24375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8719'. [ 402.325989][T24441] netlink: 'syz.2.8752': attribute type 2 has an invalid length. [ 402.353537][T24443] __nla_validate_parse: 1 callbacks suppressed [ 402.353554][T24443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8750'. [ 402.421921][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 402.561601][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8760'. [ 402.571900][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8760'. [ 402.847161][T24474] bridge0: entered promiscuous mode [ 402.856498][T24474] macsec2: entered allmulticast mode [ 402.873921][T24474] bridge0: entered allmulticast mode [ 402.880537][T24474] bridge0: port 1(macsec2) entered blocking state [ 402.887754][T24474] bridge0: port 1(macsec2) entered disabled state [ 402.915091][T24474] bridge0: left allmulticast mode [ 402.920407][T24474] bridge0: left promiscuous mode [ 402.947703][T24476] tipc: Enabling of bearer rejected, media not registered [ 403.124497][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8771'. [ 403.176055][T24490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8771'. [ 403.178400][T24484] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 403.207807][T24484] bond4 (unregistering): Released all slaves [ 403.237209][T24494] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8775'. [ 403.271856][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8774'. [ 403.393228][T24502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8778'. [ 403.530839][T24508] : entered promiscuous mode [ 404.092795][T24545] batadv0: entered promiscuous mode [ 404.098472][T24545] macvtap1: entered promiscuous mode [ 404.143072][T24545] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 404.207938][T24545] batadv0: left promiscuous mode [ 404.298565][T24552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8802'. [ 404.616403][T24563] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.638321][T24571] netlink: 'syz.0.8811': attribute type 2 has an invalid length. [ 404.671295][T24571] netlink: 'syz.0.8811': attribute type 8 has an invalid length. [ 404.685349][T24571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8811'. [ 404.751926][T24563] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.969153][T24563] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.051081][T24593] netlink: 'syz.2.8822': attribute type 58 has an invalid length. [ 405.142765][T24563] netdevsim netdevsim5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.511319][ T70] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.550299][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.579196][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.607415][ T50] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.887612][T24638] smc: net device bond0 applied user defined pnetid S [ 406.500601][T24669] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 407.337939][T24727] netlink: 'syz.2.8879': attribute type 15 has an invalid length. [ 407.584479][T24741] netlink: 'syz.2.8887': attribute type 4 has an invalid length. [ 407.618648][T24741] __nla_validate_parse: 6 callbacks suppressed [ 407.618664][T24741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8887'. [ 407.661500][T24747] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8890'. [ 407.671072][T24747] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8890'. [ 408.635438][T24810] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8920'. [ 408.877911][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8928'. [ 409.089766][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8934'. [ 409.368204][T24855] tipc: Enabling of bearer rejected, failed to enable media [ 409.614570][T24873] IPVS: Error connecting to the multicast addr [ 409.631400][T24874] netlink: 'syz.3.8951': attribute type 8 has an invalid length. [ 410.071545][T24902] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8967'. [ 410.191628][T24912] netem: change failed [ 410.423079][T24924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8977'. [ 410.527330][T24934] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8981'. [ 410.792416][T19487] udevd[19487]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 410.844030][T19489] udevd[19489]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 411.340983][T24982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9003'. [ 411.385354][T24982] netlink: 'syz.1.9003': attribute type 18 has an invalid length. [ 411.420402][T24985] macsec1: entered promiscuous mode [ 411.442540][T24985] macsec1: entered allmulticast mode [ 411.942777][T25020] netlink: 'syz.2.9023': attribute type 1 has an invalid length. [ 412.968909][T25059] __nla_validate_parse: 3 callbacks suppressed [ 412.968928][T25059] netlink: 4308 bytes leftover after parsing attributes in process `syz.3.9041'. [ 413.122905][T25065] IPVS: Error connecting to the multicast addr [ 413.454798][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9053'. [ 413.656845][T25090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9056'. [ 413.666425][T25090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9056'. [ 413.697756][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9059'. [ 414.467130][T25148] netlink: 'syz.0.9080': attribute type 8 has an invalid length. [ 414.621148][ T1339] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 414.629850][ T1339] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 414.650378][ T5823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 414.700366][ T5959] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 415.140055][T25181] tipc: Started in network mode [ 415.159791][T25181] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 415.193330][T25181] tipc: Enabled bearer , priority 10 [ 415.208919][T25185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.244201][T25186] ipvlan2: entered promiscuous mode [ 415.281555][T25186] bridge0: port 4(ipvlan2) entered blocking state [ 415.302359][T25186] bridge0: port 4(ipvlan2) entered disabled state [ 415.309186][T25186] ipvlan2: entered allmulticast mode [ 415.329678][T25186] bridge0: entered allmulticast mode [ 415.337290][T25186] ipvlan2: left allmulticast mode [ 415.363765][T25186] bridge0: left allmulticast mode [ 415.380549][ T5823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 416.056202][T25235] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 416.329500][ T5913] tipc: Node number set to 11578026 [ 416.723590][T25268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9140'. [ 417.157963][T25297] nbd: couldn't find device at index 536870912 [ 418.129172][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9180'. [ 418.303446][T25355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.306177][T25359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.693736][T25384] lo: entered allmulticast mode [ 418.709935][T25384] lo: left allmulticast mode [ 418.819618][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 419.263481][T25421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.303089][T25421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.374215][T25427] tipc: Enabling of bearer rejected, failed to enable media [ 419.470699][T25421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.506364][T25421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.637307][T25421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.664594][T25421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.741746][T25421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.754450][T25421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.783048][T25447] tipc: Enabled bearer , priority 10 [ 419.928416][ T1339] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.937830][ T1339] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.983868][T25459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9233'. [ 419.998724][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.016312][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.059257][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.080445][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.124515][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.162641][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.389133][T25481] vlan2: entered promiscuous mode [ 420.395070][T25481] geneve1: entered promiscuous mode [ 420.415315][T25481] vlan2: entered allmulticast mode [ 420.434847][T25481] geneve1: entered allmulticast mode [ 420.534737][T25489] No such timeout policy "syz1" [ 421.037890][T25530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.300994][T25545] netlink: 'syz.3.9276': attribute type 5 has an invalid length. [ 421.607371][T25564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9284'. [ 422.799134][T25640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9319'. [ 423.092374][T25662] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 423.105018][T25663] netlink: 348 bytes leftover after parsing attributes in process `syz.0.9331'. [ 423.222825][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9336'. [ 423.331977][ T30] audit: type=1800 audit(1762447439.258:4): pid=25680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9338" name="memory.events" dev="tmpfs" ino=9811 res=0 errno=0 [ 423.382535][ T30] audit: type=1804 audit(1762447439.278:5): pid=25680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9338" name="/newroot/1956/memory.events" dev="tmpfs" ino=9811 res=1 errno=0 [ 423.458119][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9344'. [ 423.470471][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9344'. [ 423.844322][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9357'. [ 423.868489][T25715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9357'. [ 423.932018][T25719] netlink: 'syz.3.9359': attribute type 27 has an invalid length. [ 423.952263][T25719] netlink: 'syz.3.9359': attribute type 4 has an invalid length. [ 423.970134][T25719] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9359'. [ 424.679157][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9385'. [ 424.755351][T25776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9387'. [ 425.003242][T25794] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9398'. [ 425.012726][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9398'. [ 425.255467][T25812] bridge10: entered promiscuous mode [ 425.423449][T25824] xt_l2tp: missing protocol rule (udp|l2tpip) [ 425.887777][T25858] tipc: Invalid UDP bearer configuration [ 425.887827][T25858] tipc: Enabling of bearer rejected, failed to enable media [ 425.962455][T25863] tipc: Enabling of bearer rejected, failed to enable media [ 426.104873][T25869] macsec1: entered promiscuous mode [ 426.110787][T25869] macsec1: entered allmulticast mode [ 426.116490][T25872] netlink: 'syz.3.9436': attribute type 7 has an invalid length. [ 426.129565][T25872] netlink: 'syz.3.9436': attribute type 8 has an invalid length. [ 427.469596][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 427.681203][T25978] xt_l2tp: unknown flags: 51 [ 428.164500][T26009] netlink: 'syz.3.9503': attribute type 1 has an invalid length. [ 428.244286][T26013] netlink: 'syz.5.9505': attribute type 63 has an invalid length. [ 428.380467][T26021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.694755][T26039] netlink: 'syz.1.9518': attribute type 1 has an invalid length. [ 429.171633][T26061] netlink: 'syz.5.9529': attribute type 29 has an invalid length. [ 429.646692][T26087] netlink: 'syz.3.9541': attribute type 15 has an invalid length. [ 429.935817][T26108] netlink: 'syz.3.9551': attribute type 1 has an invalid length. [ 430.186507][T26127] __nla_validate_parse: 8 callbacks suppressed [ 430.186542][T26127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9562'. [ 430.224660][T26130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9563'. [ 430.380053][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9568'. [ 430.402571][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9568'. [ 430.446763][T26140] netlink: 'syz.1.9568': attribute type 14 has an invalid length. [ 430.947007][T26182] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.019594][T26241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9616'. [ 432.182048][T26250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9621'. [ 432.193983][T26250] netlink: 35 bytes leftover after parsing attributes in process `syz.0.9621'. [ 432.205452][T26250] netlink: 'syz.0.9621': attribute type 5 has an invalid length. [ 432.214131][T26250] netlink: 'syz.0.9621': attribute type 6 has an invalid length. [ 432.223902][T26251] netlink: 'syz.3.9617': attribute type 25 has an invalid length. [ 432.232967][T26250] netlink: 35 bytes leftover after parsing attributes in process `syz.0.9621'. [ 432.258110][T26253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9622'. [ 432.675900][T26268] ip6gre1: entered promiscuous mode [ 434.392268][T26371] netlink: 'syz.2.9681': attribute type 3 has an invalid length. [ 434.699626][T26388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9689'. [ 435.235809][T26424] __nla_validate_parse: 3 callbacks suppressed [ 435.235828][T26424] netlink: 296 bytes leftover after parsing attributes in process `syz.3.9705'. [ 435.661838][T26442] netlink: 'syz.5.9714': attribute type 1 has an invalid length. [ 435.679884][T26442] nbd: error processing sock list [ 436.937846][T26522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9751'. [ 437.004400][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9755'. [ 437.415744][T26559] netlink: 91 bytes leftover after parsing attributes in process `syz.0.9770'. [ 437.522828][T26564] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9772'. [ 437.564645][T26564] IPv6: sit2: Disabled Multicast RS [ 437.598530][T26564] sit2: entered allmulticast mode [ 437.651205][T26572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9775'. [ 437.894608][T26591] openvswitch: netlink: Unknown nsh attribute 0 [ 437.919589][T26591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.938673][T26594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.965973][T26596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9787'. [ 438.435883][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9803'. [ 438.610929][T26636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9808'. [ 438.760469][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9812'. [ 438.782091][T26649] netlink: 'syz.2.9812': attribute type 4 has an invalid length. [ 439.593806][T26694] bond4: (slave bond_slave_1): Device is not our slave [ 439.618370][T26694] bond4: option active_slave: invalid value (bond_slave_1) [ 439.656818][T26694] bond4 (unregistering): Released all slaves [ 439.904482][T26722] netlink: 'syz.5.9850': attribute type 3 has an invalid length. [ 440.268814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.746272][T26783] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 440.929712][T26798] __nla_validate_parse: 3 callbacks suppressed [ 440.929732][T26798] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9887'. [ 441.230198][T26821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9898'. [ 441.596050][T26840] netlink: 'syz.5.9907': attribute type 62 has an invalid length. [ 441.898600][T26865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9919'. [ 441.932961][T26865] erspan0: entered promiscuous mode [ 441.954686][T26865] erspan0: left promiscuous mode [ 443.163214][T26932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.099864][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 444.339715][ T5824] Bluetooth: hci5: command 0x0405 tx timeout [ 444.976319][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10011'. [ 445.062181][ T5823] IPVS: starting estimator thread 0... [ 445.149814][T27064] IPVS: using max 31 ests per chain, 74400 per kthread [ 445.310811][T27079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10021'. [ 445.349936][T27079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10021'. [ 445.379272][T27079] netlink: 'syz.5.10021': attribute type 13 has an invalid length. [ 445.405043][T27083] netlink: 165 bytes leftover after parsing attributes in process `syz.3.10023'. [ 445.437252][T27087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10025'. [ 445.543680][T27089] vlan4: entered promiscuous mode [ 445.548758][T27089] geneve1: entered promiscuous mode [ 445.569001][T27095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.574743][T27089] vlan4: entered allmulticast mode [ 445.584030][T27089] geneve1: entered allmulticast mode [ 446.019740][ T31] INFO: task syz.4.6029:18458 blocked for more than 143 seconds. [ 446.027532][ T31] Not tainted syzkaller #0 [ 446.032738][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10042'. [ 446.056118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.068636][ T31] task:syz.4.6029 state:D stack:23512 pid:18458 tgid:18457 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 446.093638][ T31] Call Trace: [ 446.099267][ T31] [ 446.116036][ T31] __schedule+0x1798/0x4cc0 [ 446.128630][ T31] ? validate_chain+0x897/0x2140 [ 446.144319][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.149793][ T31] ? __pfx___schedule+0x10/0x10 [ 446.157038][ T31] ? schedule+0x91/0x360 [ 446.166162][ T31] schedule+0x165/0x360 [ 446.173860][ T31] schedule_timeout+0x9a/0x270 [ 446.180993][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 446.186491][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.191883][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.197129][ T31] ? wait_for_completion+0x267/0x5d0 [ 446.202925][ T31] wait_for_completion+0x2bf/0x5d0 [ 446.208169][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 446.214010][ T31] ? remove_client_context+0x19c/0x1e0 [ 446.219607][ T31] disable_device+0x1c6/0x320 [ 446.224303][ T31] ? __pfx_disable_device+0x10/0x10 [ 446.229870][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 446.235278][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 446.241415][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 446.247164][ T31] nldev_dellink+0x2d1/0x320 [ 446.252106][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 446.257288][ T31] ? apparmor_capable+0x137/0x1b0 [ 446.262758][ T31] ? bpf_lsm_capable+0x9/0x20 [ 446.267589][ T31] ? security_capable+0x7e/0x2e0 [ 446.272884][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 446.278151][ T31] rdma_nl_rcv+0x6ae/0x980 [ 446.282960][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 446.287905][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.292878][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.298094][ T31] netlink_unicast+0x82f/0x9e0 [ 446.302995][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 446.308303][ T31] ? netlink_sendmsg+0x642/0xb30 [ 446.313645][ T31] ? skb_put+0x11b/0x210 [ 446.317979][ T31] netlink_sendmsg+0x805/0xb30 [ 446.323720][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.329030][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 446.334186][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.339626][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.344925][ T31] __sock_sendmsg+0x21c/0x270 [ 446.349962][ T31] ____sys_sendmsg+0x505/0x830 [ 446.354777][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.360411][ T31] ? import_iovec+0x74/0xa0 [ 446.364940][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 446.369792][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.375027][ T31] ? __fget_files+0x2a/0x420 [ 446.379936][ T31] ? __fget_files+0x3a0/0x420 [ 446.384629][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 446.389716][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.395202][ T31] ? do_syscall_64+0xbe/0xfa0 [ 446.400023][ T31] do_syscall_64+0xfa/0xfa0 [ 446.404560][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.410269][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.416469][ T31] ? clear_bhb_loop+0x60/0xb0 [ 446.421597][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.427575][ T31] RIP: 0033:0x7f6d1258f6c9 [ 446.432102][ T31] RSP: 002b:00007f6d134c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.440777][ T31] RAX: ffffffffffffffda RBX: 00007f6d127e5fa0 RCX: 00007f6d1258f6c9 [ 446.448750][ T31] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000003 [ 446.456860][ T31] RBP: 00007f6d12611f91 R08: 0000000000000000 R09: 0000000000000000 [ 446.464943][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.473358][ T31] R13: 00007f6d127e6038 R14: 00007f6d127e5fa0 R15: 00007ffcc905e3f8 [ 446.481654][ T31] [ 446.484994][ T31] [ 446.484994][ T31] Showing all locks held in the system: [ 446.492973][ T31] 1 lock held by khungtaskd/31: [ 446.497857][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 446.515497][ T31] 2 locks held by getty/5581: [ 446.520591][ T31] #0: ffff88814dc550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 446.530615][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 446.541082][ T31] 2 locks held by syz-executor/5820: [ 446.546371][ T31] #0: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 446.556465][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 446.565588][ T31] 2 locks held by syz.4.6029/18458: [ 446.571028][ T31] #0: ffffffff99b63918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 446.581372][ T31] #1: ffff88807e47c700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 446.593096][ T31] 4 locks held by syz.1.10042/27123: [ 446.598393][ T31] #0: ffff888085507508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 446.609054][ T31] #1: ffffffff8f32fa70 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 446.620337][ T31] #2: ffff88802077acd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 446.631084][ T31] #3: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 446.642701][ T31] [ 446.645126][ T31] ============================================= [ 446.645126][ T31] [ 446.654311][ T31] NMI backtrace for cpu 1 [ 446.654332][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.654352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.654363][ T31] Call Trace: [ 446.654369][ T31] [ 446.654377][ T31] dump_stack_lvl+0x189/0x250 [ 446.654407][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.654430][ T31] ? __pfx__printk+0x10/0x10 [ 446.654461][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 446.654485][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 446.654507][ T31] ? __pfx__printk+0x10/0x10 [ 446.654530][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.654560][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 446.654582][ T31] watchdog+0xf60/0xfa0 [ 446.654614][ T31] ? watchdog+0x1e2/0xfa0 [ 446.654637][ T31] kthread+0x711/0x8a0 [ 446.654664][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.654681][ T31] ? __pfx_kthread+0x10/0x10 [ 446.654705][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.654726][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.654747][ T31] ? __pfx_kthread+0x10/0x10 [ 446.654770][ T31] ret_from_fork+0x4bc/0x870 [ 446.654792][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 446.654818][ T31] ? __switch_to_asm+0x39/0x70 [ 446.654833][ T31] ? __switch_to_asm+0x33/0x70 [ 446.654845][ T31] ? __pfx_kthread+0x10/0x10 [ 446.654864][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.654897][ T31] [ 446.654904][ T31] Sending NMI from CPU 1 to CPUs 0: [ 446.801446][ C0] NMI backtrace for cpu 0 [ 446.801463][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 446.801481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.801491][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 446.801517][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 446.801532][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 446.801547][ C0] RAX: cdc7a1e71e1cd300 RBX: ffffffff81967be7 RCX: cdc7a1e71e1cd300 [ 446.801560][ C0] RDX: 0000000000000001 RSI: ffffffff8d70db46 RDI: ffffffff8bbf05e0 [ 446.801571][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 446.801583][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd870 [ 446.801596][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 446.801606][ C0] FS: 0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000 [ 446.801620][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.801631][ C0] CR2: 00007f4bdd7b12f8 CR3: 000000007a6e4000 CR4: 00000000003526f0 [ 446.801646][ C0] Call Trace: [ 446.801653][ C0] [ 446.801659][ C0] default_idle+0x13/0x20 [ 446.801674][ C0] default_idle_call+0x73/0xb0 [ 446.801689][ C0] do_idle+0x1e7/0x510 [ 446.801706][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.801735][ C0] ? __pfx_do_idle+0x10/0x10 [ 446.801754][ C0] ? do_idle+0x4e7/0x510 [ 446.801777][ C0] cpu_startup_entry+0x44/0x60 [ 446.801793][ C0] rest_init+0x2de/0x300 [ 446.801809][ C0] start_kernel+0x3ae/0x410 [ 446.801838][ C0] x86_64_start_reservations+0x24/0x30 [ 446.801857][ C0] x86_64_start_kernel+0x143/0x1c0 [ 446.801874][ C0] common_startup_64+0x13e/0x147 [ 446.801904][ C0]