last executing test programs: 2.143585786s ago: executing program 0 (id=2166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.614479976s ago: executing program 3 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.477359325s ago: executing program 3 (id=2179): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001fa80)=ANY=[@ANYBLOB="280000001e0001000000d707fe94bb21d64e9db9"], 0x28}}, 0x0) 1.192962721s ago: executing program 0 (id=2183): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="f84ce885b5ebb27c5b52dae00eacbc00", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000180)="86b71146478c4ed35f2cbdfd5e24e29050", 0x11}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x80) 1.167801449s ago: executing program 1 (id=2184): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x50}}) 1.042485962s ago: executing program 2 (id=2185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) 991.331712ms ago: executing program 2 (id=2186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r1, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 985.818691ms ago: executing program 4 (id=2187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) 922.346121ms ago: executing program 1 (id=2188): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff28bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002900ccf6000014001280090001007866726d00"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 818.399785ms ago: executing program 0 (id=2189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) 800.924238ms ago: executing program 4 (id=2190): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'batadv0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 694.180824ms ago: executing program 1 (id=2191): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x14, 0x0, 0x0, 0x2}, 0x10}}, 0x24044000) 694.052481ms ago: executing program 2 (id=2192): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 640.217391ms ago: executing program 4 (id=2193): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040)=0x7ff, 0x4) 619.426876ms ago: executing program 0 (id=2194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x20, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 558.390894ms ago: executing program 3 (id=2195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001002abd700000000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000513766214f467107324622cef067220589d8166ac48979e9ad6fc66924aab14160d1acc025e08472b9d9b501b051abe197fafc1441c830568233b66383360cf4f204f9c1ff1e84d17ffb9aac3b32b3e42bbf0f3e9ba0e56b3c6ea4d9b37d0b21cbf66492266e202ed6fa3d52a7a3c1d5921bfd4c"], 0xc4}, 0x1, 0x0, 0x0, 0x8040}, 0x8044) 558.218001ms ago: executing program 1 (id=2196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0x0) 546.08222ms ago: executing program 2 (id=2197): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 446.122691ms ago: executing program 4 (id=2198): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 439.514269ms ago: executing program 0 (id=2199): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 354.414372ms ago: executing program 1 (id=2200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 350.745759ms ago: executing program 3 (id=2201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='/\x00'], 0x20) 324.30162ms ago: executing program 2 (id=2202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040845}, 0x0) 254.521473ms ago: executing program 4 (id=2203): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 249.103411ms ago: executing program 1 (id=2204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7}}]}, 0x40}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 196.504241ms ago: executing program 3 (id=2205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r1 = socket$inet(0x2, 0xa, 0x262) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 106.382874ms ago: executing program 0 (id=2206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15227}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xb9a8}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) 106.243931ms ago: executing program 2 (id=2207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0x1, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 59.71458ms ago: executing program 4 (id=2208): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 0s ago: executing program 3 (id=2209): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x6, 0xdb}) kernel console output (not intermixed with test programs): will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.537142][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.591446][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.598439][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.624492][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.658001][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.665522][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.692148][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.718981][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.726127][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.752547][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.766844][ T5877] team0: Port device team_slave_0 added [ 94.776515][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.783781][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.810231][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.835278][ T5864] hsr_slave_0: entered promiscuous mode [ 94.846201][ T5864] hsr_slave_1: entered promiscuous mode [ 94.868341][ T5877] team0: Port device team_slave_1 added [ 94.995199][ T5871] hsr_slave_0: entered promiscuous mode [ 95.002722][ T5871] hsr_slave_1: entered promiscuous mode [ 95.008876][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 95.015233][ T5871] Cannot create hsr debugfs directory [ 95.065999][ T5866] hsr_slave_0: entered promiscuous mode [ 95.073205][ T5866] hsr_slave_1: entered promiscuous mode [ 95.079409][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 95.085261][ T5866] Cannot create hsr debugfs directory [ 95.109071][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.116124][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.143029][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.156194][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.163301][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.189698][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.233159][ T5860] hsr_slave_0: entered promiscuous mode [ 95.239853][ T5860] hsr_slave_1: entered promiscuous mode [ 95.246341][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 95.252229][ T5860] Cannot create hsr debugfs directory [ 95.551406][ T5877] hsr_slave_0: entered promiscuous mode [ 95.558006][ T5877] hsr_slave_1: entered promiscuous mode [ 95.564527][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 95.570297][ T5877] Cannot create hsr debugfs directory [ 95.953981][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.967768][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.999362][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.020202][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.075309][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.093309][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.105457][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.133748][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.161053][ T5868] Bluetooth: hci0: command tx timeout [ 96.161066][ T5867] Bluetooth: hci1: command tx timeout [ 96.241705][ T5867] Bluetooth: hci2: command tx timeout [ 96.247185][ T5867] Bluetooth: hci3: command tx timeout [ 96.259712][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.279504][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.326046][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.339039][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.401521][ T5867] Bluetooth: hci4: command tx timeout [ 96.408440][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.422923][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.446798][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.458718][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.608403][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.634342][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.647894][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.660331][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.674018][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.727788][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.790357][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.803486][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.832932][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.840311][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.867929][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.875217][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.892843][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.900142][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.929702][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.937018][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.977560][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.018059][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.081680][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.114008][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.138666][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.148484][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.155688][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.205363][ T981] cfg80211: failed to load regulatory.db [ 97.220098][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.227471][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.249405][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.256636][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.278832][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.307360][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.318906][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.326234][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.388888][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.396204][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.498508][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.505882][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.690410][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.903154][ T5864] veth0_vlan: entered promiscuous mode [ 97.940200][ T5864] veth1_vlan: entered promiscuous mode [ 98.066643][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.157726][ T5864] veth0_macvtap: entered promiscuous mode [ 98.219414][ T5864] veth1_macvtap: entered promiscuous mode [ 98.246766][ T5867] Bluetooth: hci0: command tx timeout [ 98.246793][ T5868] Bluetooth: hci1: command tx timeout [ 98.319619][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.327211][ T5867] Bluetooth: hci3: command tx timeout [ 98.332446][ T5868] Bluetooth: hci2: command tx timeout [ 98.342854][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.378656][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.447216][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.459874][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.469585][ T3521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.480085][ T3521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.489326][ T5867] Bluetooth: hci4: command tx timeout [ 98.510456][ T3521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.550075][ T3521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.683985][ T5860] veth0_vlan: entered promiscuous mode [ 98.691762][ T5871] veth0_vlan: entered promiscuous mode [ 98.739612][ T5871] veth1_vlan: entered promiscuous mode [ 98.760324][ T5860] veth1_vlan: entered promiscuous mode [ 98.766958][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.775907][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.838541][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.852169][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.898468][ T5877] veth0_vlan: entered promiscuous mode [ 98.927031][ T5871] veth0_macvtap: entered promiscuous mode [ 98.956849][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.969498][ T5877] veth1_vlan: entered promiscuous mode [ 99.045773][ T5866] veth0_vlan: entered promiscuous mode [ 99.064223][ T5871] veth1_macvtap: entered promiscuous mode [ 99.070272][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.091982][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.099937][ T5860] veth0_macvtap: entered promiscuous mode [ 99.120371][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.124057][ T5860] veth1_macvtap: entered promiscuous mode [ 99.144029][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.167689][ T5866] veth1_vlan: entered promiscuous mode [ 99.186761][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.226693][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.256546][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.302709][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.314578][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.335258][ T5877] veth0_macvtap: entered promiscuous mode [ 99.369978][ T5877] veth1_macvtap: entered promiscuous mode [ 99.384182][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.506497][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.534071][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.586276][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.599111][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.608891][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.625417][ T5866] veth0_macvtap: entered promiscuous mode [ 99.697120][ T5866] veth1_macvtap: entered promiscuous mode [ 99.715640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.732498][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.739814][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.805456][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.816353][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.853577][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.867188][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.919626][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.982373][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.984295][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.006002][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.070191][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.083509][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.097115][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.108306][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.135005][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.229943][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.295703][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.296739][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.304949][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 100.323537][ T5867] Bluetooth: hci0: command tx timeout [ 100.329062][ T5867] Bluetooth: hci1: command tx timeout [ 100.341484][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.381375][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.389900][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.401589][ T5867] Bluetooth: hci3: command tx timeout [ 100.401982][ T5868] Bluetooth: hci2: command tx timeout [ 100.457011][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 100.467303][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.478352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.562016][ T5868] Bluetooth: hci4: command tx timeout [ 100.631046][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.638932][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.713050][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.764931][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.794610][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.137415][ T6021] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.661584][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.726727][ T6041] netlink: 'syz.0.17': attribute type 33 has an invalid length. [ 101.770049][ T6041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17'. [ 101.824752][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 101.834327][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 102.404336][ T6065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.23'. [ 102.548530][ T6070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.629988][ T6070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.289263][ T6084] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 103.351856][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 103.390445][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 103.397415][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 103.404180][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 103.410918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.419183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.427257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.435622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.443599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.451729][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.459594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.462756][ T6094] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 103.467590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.481578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.489215][ T6098] netlink: 'syz.2.32': attribute type 33 has an invalid length. [ 103.489609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.505237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.513222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.521096][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.529036][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.536903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.544975][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.552967][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.560969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.568824][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.576838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.584767][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.592762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.600615][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.608631][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.616526][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.624518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.632425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.640466][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.648373][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.656392][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.664354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.672340][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.680234][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.688264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.696228][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.704226][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.712109][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.720063][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.728132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.736217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.744116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.752095][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.759949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.767936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.775905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.783983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.792042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.799994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.808109][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.816727][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.824625][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.832634][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.840520][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.848532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.856424][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.864438][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.872417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.880381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.888476][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.896482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.904379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.912538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.920567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.009182][ T6098] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 104.039362][ T6104] tipc: Started in network mode [ 104.047546][ T6104] tipc: Node identity fffff001, cluster identity 4711 [ 104.062046][ T6104] tipc: Node number set to 4294963201 [ 104.178897][ T6113] Zero length message leads to an empty skb [ 104.450154][ T6122] netlink: 76 bytes leftover after parsing attributes in process `syz.2.38'. [ 104.606420][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 104.764436][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 105.169058][ T6159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.47'. [ 105.218985][ T6152] bridge_slave_0: left allmulticast mode [ 105.220950][ T6154] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 105.249935][ T6154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.47'. [ 105.291611][ T6154] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 105.321149][ T6152] bridge_slave_0: left promiscuous mode [ 105.328005][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.344540][ T6164] netlink: 936 bytes leftover after parsing attributes in process `syz.0.48'. [ 105.399665][ T6152] bridge_slave_1: left allmulticast mode [ 105.446580][ T6152] bridge_slave_1: left promiscuous mode [ 105.453735][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.473073][ T6152] bond0: (slave bond_slave_0): Releasing backup interface [ 105.504281][ T6152] bond0: (slave bond_slave_1): Releasing backup interface [ 105.564173][ T6152] team0: Port device team_slave_0 removed [ 105.577749][ T6152] team0: Port device team_slave_1 removed [ 105.590588][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.615216][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.627496][ T6152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.639199][ T6152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.187402][ T6183] bridge_slave_0: left allmulticast mode [ 106.195535][ T6183] bridge_slave_0: left promiscuous mode [ 106.206453][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.268495][ T6183] bridge_slave_1: left allmulticast mode [ 106.274915][ T6183] bridge_slave_1: left promiscuous mode [ 106.291942][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.367534][ T6183] bond0: (slave bond_slave_0): Releasing backup interface [ 106.386350][ T6183] bond0: (slave bond_slave_1): Releasing backup interface [ 106.413123][ T6183] team0: Port device team_slave_0 removed [ 106.444507][ T6183] team0: Port device team_slave_1 removed [ 106.459932][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.499342][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.508451][ T30] audit: type=1800 audit(1755634979.814:2): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=87 res=0 errno=0 [ 106.529407][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 106.548464][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.557111][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.626418][ T6204] netlink: 'syz.3.62': attribute type 49 has an invalid length. [ 106.626766][ T6205] netlink: 'syz.3.62': attribute type 49 has an invalid length. [ 106.861306][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 106.878042][ T6215] Bluetooth: MGMT ver 1.23 [ 106.909014][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 106.978938][ T6215] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 106.990466][ T6215] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 107.004104][ T6214] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 107.049974][ T6224] netlink: 'syz.3.67': attribute type 33 has an invalid length. [ 107.075460][ T6217] veth0: entered promiscuous mode [ 107.236563][ T6216] veth0: left promiscuous mode [ 107.385490][ T6236] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 107.486781][ T6236] bond1: entered promiscuous mode [ 107.502267][ T6236] bond1: entered allmulticast mode [ 107.515968][ T6236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.780430][ T6253] veth0_virt_wifi: renamed from vlan0 [ 108.042530][ T6271] netlink: 108 bytes leftover after parsing attributes in process `syz.3.76'. [ 108.087384][ T6275] netlink: 'syz.2.77': attribute type 16 has an invalid length. [ 108.104469][ T6275] netlink: 'syz.2.77': attribute type 17 has an invalid length. [ 108.252695][ T6275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.627829][ T6298] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 108.721789][ T5868] Bluetooth: hci4: command tx timeout [ 109.001011][ T6314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.470168][ T6338] __nla_validate_parse: 3 callbacks suppressed [ 109.470191][ T6338] netlink: 144 bytes leftover after parsing attributes in process `syz.1.95'. [ 109.515833][ T6338] netlink: 'syz.1.95': attribute type 18 has an invalid length. [ 109.700229][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.748058][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.807192][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.857342][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.459557][ T6376] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 110.815128][ T6390] veth0: entered promiscuous mode [ 111.144626][ T6366] netlink: 84 bytes leftover after parsing attributes in process `syz.0.101'. [ 111.189570][ T6366] netlink: 84 bytes leftover after parsing attributes in process `syz.0.101'. [ 111.213765][ T6388] veth0: left promiscuous mode [ 111.428451][ T6416] netlink: 248 bytes leftover after parsing attributes in process `syz.1.116'. [ 111.679611][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 111.971447][ T6442] sctp: [Deprecated]: syz.3.123 (pid 6442) Use of int in max_burst socket option. [ 111.971447][ T6442] Use struct sctp_assoc_value instead [ 112.168129][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.125'. [ 112.895042][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 112.965305][ T6478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 113.110308][ T6486] lo: entered promiscuous mode [ 113.119410][ T6486] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 113.134174][ T6486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.313150][ T6492] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 113.333678][ T6492] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 113.351756][ T6492] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 113.359767][ T6492] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 113.401438][ T6491] netlink: zone id is out of range [ 113.406683][ T6491] netlink: zone id is out of range [ 113.420854][ T6491] netlink: zone id is out of range [ 113.432938][ T6491] netlink: zone id is out of range [ 113.439054][ T6491] netlink: zone id is out of range [ 113.441324][ T6492] netlink: zone id is out of range [ 113.459921][ T6492] netlink: zone id is out of range [ 113.484213][ T6492] netlink: zone id is out of range [ 113.489580][ T6492] netlink: zone id is out of range [ 113.518341][ T6492] netlink: zone id is out of range [ 113.639850][ T6507] tipc: Enabling of bearer rejected, media not registered [ 113.862180][ T6514] netlink: 9 bytes leftover after parsing attributes in process `syz.3.142'. [ 113.925415][ T6514] gretap0: entered promiscuous mode [ 114.316431][ T6530] macvlan2: entered allmulticast mode [ 114.331440][ T6530] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 114.651640][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 114.800594][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.153'. [ 115.303129][ T6568] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.156'. [ 115.839044][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.855224][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 115.873273][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 115.874675][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.894966][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 115.944798][ T6585] geneve2: entered promiscuous mode [ 115.994859][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 116.006622][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 116.036439][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 116.052994][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 116.064338][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.102843][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.154824][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.182996][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.194115][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.125131][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.210972][ T979] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.756796][ T6668] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 118.402413][ T6663] syz.4.188 (6663) used greatest stack depth: 17864 bytes left [ 118.548364][ T6706] netlink: 'syz.1.198': attribute type 6 has an invalid length. [ 118.891050][ T6722] netlink: 'syz.1.205': attribute type 25 has an invalid length. [ 118.989634][ T6726] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 119.091166][ T6726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.106897][ T6728] tipc: Started in network mode [ 119.137487][ T6728] tipc: Node identity 8eccbd9a58f5, cluster identity 4711 [ 119.164151][ T6728] tipc: Enabled bearer , priority 0 [ 119.310820][ T6749] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 119.355842][ T6729] bond1 (unregistering): Released all slaves [ 119.383993][ T6731] syzkaller0: entered promiscuous mode [ 119.389533][ T6731] syzkaller0: entered allmulticast mode [ 119.465205][ T6752] tipc: Resetting bearer [ 119.530984][ T6725] tipc: Resetting bearer [ 119.612439][ T6761] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 119.612526][ T6725] tipc: Disabling bearer [ 119.698249][ T6770] trusted_key: syz.4.216 sent an empty control message without MSG_MORE. [ 120.000854][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.014278][ T6789] net_ratelimit: 874 callbacks suppressed [ 120.014299][ T6789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.250060][ T6794] netlink: 'syz.1.220': attribute type 13 has an invalid length. [ 120.313609][ T6797] sctp: [Deprecated]: syz.2.222 (pid 6797) Use of int in maxseg socket option. [ 120.313609][ T6797] Use struct sctp_assoc_value instead [ 120.335634][ T6797] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.975356][ T6814] __nla_validate_parse: 77 callbacks suppressed [ 120.975377][ T6814] netlink: 13 bytes leftover after parsing attributes in process `syz.0.228'. [ 121.459742][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 121.475378][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 121.624132][ T6851] tipc: Enabled bearer , priority 0 [ 121.654593][ T981] IPVS: starting estimator thread 0... [ 121.675119][ T6851] syzkaller0: entered promiscuous mode [ 121.727921][ T6851] syzkaller0: entered allmulticast mode [ 121.744704][ T6860] IPVS: using max 27 ests per chain, 64800 per kthread [ 121.770837][ T6851] syzkaller0: mtu less than device minimum [ 121.790970][ T6847] tipc: Resetting bearer [ 121.886052][ T6847] tipc: Disabling bearer [ 122.105195][ T6878] bridge_slave_0: left allmulticast mode [ 122.137237][ T6878] bridge_slave_0: left promiscuous mode [ 122.178781][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.266049][ T6878] bridge_slave_1: left allmulticast mode [ 122.280928][ T6878] bridge_slave_1: left promiscuous mode [ 122.299741][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.384541][ T6878] bond0: (slave bond_slave_0): Releasing backup interface [ 122.421615][ T6878] bond0: (slave bond_slave_1): Releasing backup interface [ 122.486179][ T6878] team0: Port device team_slave_0 removed [ 122.508607][ T6878] team0: Port device team_slave_1 removed [ 122.516973][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.524452][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.533996][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.541778][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.558911][ T6904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.252'. [ 122.599274][ T6900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.251'. [ 123.436993][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 123.492967][ T6947] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 123.640307][ T6952] netlink: 84 bytes leftover after parsing attributes in process `syz.0.263'. [ 124.154391][ T6957] netlink: 788 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.209404][ T6982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.455032][ T6990] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.273'. [ 124.986701][ T981] IPVS: starting estimator thread 0... [ 125.059769][ T7011] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 125.104664][ T7016] IPVS: using max 26 ests per chain, 62400 per kthread [ 125.126194][ T7011] netlink: 'syz.4.278': attribute type 2 has an invalid length. [ 125.618327][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.642769][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.666543][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.675426][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.697821][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.733950][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.766467][ T7036] netlink: 'syz.0.284': attribute type 28 has an invalid length. [ 125.771384][ T7055] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 125.903830][ T7064] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 125.928790][ T7053] syzkaller0: entered promiscuous mode [ 125.988462][ T7053] syzkaller0: entered allmulticast mode [ 126.033969][ T3521] syzkaller0: tun_net_xmit 48 [ 126.064726][ T7059] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 126.085386][ T7059] syzkaller0: Linktype set failed because interface is up [ 126.177116][ T7074] __nla_validate_parse: 2 callbacks suppressed [ 126.177139][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 127.644571][ T7103] netlink: 1 bytes leftover after parsing attributes in process `syz.1.293'. [ 127.879927][ T7084] geneve2: entered promiscuous mode [ 127.890006][ T7084] geneve2: entered allmulticast mode [ 127.920861][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.938622][ T7085] gretap0: left promiscuous mode [ 128.053670][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.062465][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.105833][ T7111] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.295'. [ 128.157100][ T7113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.270465][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.287233][ T7085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.336259][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 128.348690][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 128.492809][ T7086] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.518726][ T7104] IPv6: sit1: Disabled Multicast RS [ 128.541982][ T7104] sit1: entered allmulticast mode [ 128.620634][ T3009] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 128.637854][ T3009] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 128.647772][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 128.668972][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.691644][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.700611][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.745090][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.767295][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.797668][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.818214][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.829341][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.004086][ T7131] sctp: [Deprecated]: syz.0.301 (pid 7131) Use of int in maxseg socket option. [ 129.004086][ T7131] Use struct sctp_assoc_value instead [ 129.369081][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.304'. [ 129.560863][ T7145] syz.0.306 uses old SIOCAX25GETINFO [ 129.707730][ T7149] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.308'. [ 129.903704][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 129.960602][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 129.978116][ T7164] openvswitch: netlink: Duplicate or invalid key (type 0). [ 129.992438][ T7164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.042669][ T7164] Unsupported ieee802154 address type: 0 [ 130.072051][ T7164] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.089702][ T7086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.111777][ T7086] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 130.154281][ T7169] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.317'. [ 130.228775][ T7086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.252619][ T7086] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 130.569706][ T7086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.614195][ T7086] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 130.979892][ T3009] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 131.034988][ T3009] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.117057][ T34] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 131.145548][ T34] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.214627][ T7191] __nla_validate_parse: 1 callbacks suppressed [ 131.214647][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.326'. [ 131.265320][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 131.294756][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.333107][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 131.365687][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 131.582481][ T7205] netlink: 14 bytes leftover after parsing attributes in process `syz.0.330'. [ 131.587940][ T7209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.331'. [ 131.607058][ T7207] syzkaller1: entered promiscuous mode [ 131.614495][ T7207] syzkaller1: entered allmulticast mode [ 131.625413][ T7205] hsr_slave_0: left promiscuous mode [ 131.635143][ T7205] hsr_slave_1: left promiscuous mode [ 131.662617][ T7208] netlink: 216 bytes leftover after parsing attributes in process `syz.4.331'. [ 131.738343][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 132.107211][ T7234] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.335'. [ 132.129038][ T7234] netlink: zone id is out of range [ 132.137920][ T7234] netlink: zone id is out of range [ 132.148347][ T7234] netlink: zone id is out of range [ 132.157042][ T7234] netlink: zone id is out of range [ 132.165657][ T7234] netlink: zone id is out of range [ 132.173934][ T7234] netlink: zone id is out of range [ 132.178689][ T7229] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 132.179425][ T7234] netlink: get zone limit has 8 unknown bytes [ 132.196210][ T7236] validate_nla: 27 callbacks suppressed [ 132.196228][ T7236] netlink: 'syz.1.338': attribute type 33 has an invalid length. [ 132.218359][ T7236] netlink: 152 bytes leftover after parsing attributes in process `syz.1.338'. [ 132.270330][ T7241] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 132.285534][ T7241] netlink: 236 bytes leftover after parsing attributes in process `syz.2.339'. [ 132.820820][ T7233] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 132.829759][ T7233] netlink: 228 bytes leftover after parsing attributes in process `syz.1.338'. [ 132.846186][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 133.134603][ T7277] openvswitch: netlink: Message has -1 unknown bytes. [ 133.340604][ T7288] syz_tun: entered allmulticast mode [ 133.406695][ T7284] syz_tun: left allmulticast mode [ 134.188457][ T7325] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 134.502749][ T7347] C: renamed from lo (while UP) [ 134.602260][ T7347] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 135.196443][ T7369] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 136.139523][ T7415] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 136.209979][ T7412] tipc: Enabled bearer , priority 0 [ 136.321785][ T7412] syzkaller0: entered promiscuous mode [ 136.327330][ T7412] syzkaller0: entered allmulticast mode [ 136.380827][ T7416] __nla_validate_parse: 10 callbacks suppressed [ 136.380847][ T7416] netlink: 256 bytes leftover after parsing attributes in process `syz.1.389'. [ 136.474106][ T7412] tipc: Resetting bearer [ 136.499677][ T7435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.566772][ T7435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.622999][ T7409] tipc: Resetting bearer [ 136.694539][ T7409] tipc: Disabling bearer [ 136.729050][ T7432] syzkaller1: entered promiscuous mode [ 136.763268][ T7432] syzkaller1: entered allmulticast mode [ 136.953432][ T7452] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 136.975427][ T7452] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.200190][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'. [ 137.228510][ T7468] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 137.258515][ T7468] netlink: 208 bytes leftover after parsing attributes in process `syz.1.401'. [ 137.269810][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.399'. [ 137.305603][ T7468] netlink: 'syz.1.401': attribute type 1 has an invalid length. [ 137.335930][ T7468] netlink: 'syz.1.401': attribute type 2 has an invalid length. [ 137.372213][ T7474] netlink: 232 bytes leftover after parsing attributes in process `syz.3.403'. [ 137.432924][ T7477] C: renamed from team_slave_0 [ 137.491284][ T7477] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 137.522665][ T7477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 137.641072][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 137.641190][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 137.837305][ T7493] sit1: entered promiscuous mode [ 137.843314][ T7493] sit1: entered allmulticast mode [ 138.096353][ T7506] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 138.111950][ T7510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.122373][ T7506] netlink: 228 bytes leftover after parsing attributes in process `syz.3.413'. [ 138.152341][ T7510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.168063][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.180834][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.246750][ T7506] netlink: 'syz.3.413': attribute type 3 has an invalid length. [ 138.262890][ T7506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.413'. [ 138.695251][ T7540] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 138.841511][ T7542] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 138.943912][ T7540] netlink: 'syz.0.417': attribute type 29 has an invalid length. [ 139.079169][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 139.102960][ T7555] netlink: 'syz.1.422': attribute type 2 has an invalid length. [ 139.266568][ T7571] unsupported nlmsg_type 40 [ 139.642097][ T7584] tipc: Enabled bearer , priority 0 [ 139.675623][ T7581] syzkaller0: entered promiscuous mode [ 139.693130][ T7581] syzkaller0: entered allmulticast mode [ 139.759344][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.868406][ T7583] syzkaller0: entered promiscuous mode [ 139.879847][ T7583] syzkaller0: entered allmulticast mode [ 139.994801][ T7581] tipc: Resetting bearer [ 140.054729][ T7581] tipc: Disabling bearer [ 140.516312][ T7625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.488531][ T7664] __nla_validate_parse: 3 callbacks suppressed [ 141.488553][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 141.756497][ T7671] netlink: 277 bytes leftover after parsing attributes in process `syz.2.444'. [ 141.810084][ T7673] netlink: 277 bytes leftover after parsing attributes in process `syz.2.444'. [ 142.155406][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.1.439'. [ 142.306365][ T7690] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 143.620758][ T7685] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 143.920969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.952213][ T7700] tipc: Started in network mode [ 143.957152][ T7700] tipc: Node identity 627168e0210c, cluster identity 4711 [ 144.005205][ T7700] tipc: Enabled bearer , priority 0 [ 144.152400][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 144.184899][ T7708] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 144.192434][ T7700] tipc: Resetting bearer [ 144.289159][ T7694] tipc: Disabling bearer [ 144.346440][ T7708] veth0_macvtap: left promiscuous mode [ 144.585441][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 144.802695][ T7738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.459'. [ 144.866409][ T7738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.459'. [ 144.915634][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 144.981008][ T7746] bond2: entered allmulticast mode [ 144.986629][ T7746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.994743][ T7746] bridge0: port 1(bond2) entered blocking state [ 145.001659][ T7746] bridge0: port 1(bond2) entered disabled state [ 145.012234][ T7746] bond2: entered promiscuous mode [ 145.030150][ T7746] bridge0: port 1(bond2) entered blocking state [ 145.036812][ T7746] bridge0: port 1(bond2) entered forwarding state [ 145.195925][ T7755] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 145.242689][ T13] bridge0: port 1(bond2) entered disabled state [ 145.278021][ T7767] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 145.586893][ T7779] netlink: 'syz.4.470': attribute type 5 has an invalid length. [ 145.665516][ T7767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.904617][ T7794] Driver unsupported XDP return value 0 on prog (id 101) dev N/A, expect packet loss! [ 147.469517][ T7803] syzkaller1: entered promiscuous mode [ 147.475184][ T7803] syzkaller1: entered allmulticast mode [ 147.626993][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.482'. [ 147.836530][ T7837] netlink: 32 bytes leftover after parsing attributes in process `syz.0.482'. [ 147.977473][ T7834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.482'. [ 148.026155][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.054771][ T7861] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 148.091756][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.697538][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 148.835063][ T7888] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 149.022595][ T7888] tipc: Started in network mode [ 149.061747][ T7888] tipc: Node identity 2ec68f5e1668, cluster identity 4711 [ 149.091835][ T7888] tipc: Enabled bearer , priority 0 [ 149.171900][ T7888] tipc: Resetting bearer [ 149.228927][ T7888] syzkaller0: entered allmulticast mode [ 149.311505][ T7887] tipc: Resetting bearer [ 149.458356][ T7887] tipc: Disabling bearer [ 149.845291][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'. [ 149.879090][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 149.962357][ T7935] netlink: 'syz.4.503': attribute type 3 has an invalid length. [ 150.185792][ T7950] netlink: 'syz.4.506': attribute type 16 has an invalid length. [ 150.199410][ T7950] netlink: 'syz.4.506': attribute type 17 has an invalid length. [ 150.240198][ T7952] openvswitch: netlink: Flow key attr not present in new flow. [ 150.262964][ T7950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.357191][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.506'. [ 150.508350][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 150.756222][ T7972] netlink: 'syz.1.513': attribute type 5 has an invalid length. [ 150.764364][ T7972] netlink: 140 bytes leftover after parsing attributes in process `syz.1.513'. [ 150.831514][ T7957] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.144378][ T7957] bond5 (unregistering): Released all slaves [ 151.192349][ T7973] macvlan3: entered promiscuous mode [ 151.197910][ T7973] macvlan3: entered allmulticast mode [ 151.206310][ T7973] bond4: entered promiscuous mode [ 151.230262][ T7973] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.260330][ T7973] bond4: left promiscuous mode [ 151.304335][ T7970] netlink: 204 bytes leftover after parsing attributes in process `syz.3.510'. [ 151.531532][ T8003] netlink: 'syz.2.515': attribute type 14 has an invalid length. [ 151.539330][ T8003] netlink: 'syz.2.515': attribute type 13 has an invalid length. [ 151.747388][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 151.756881][ T8016] netlink: 'syz.1.518': attribute type 5 has an invalid length. [ 152.315467][ T8041] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 152.777156][ T8065] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 152.858980][ T8065] veth1_macvtap: left promiscuous mode [ 152.920085][ T8065] team0: Device veth1_macvtap failed to register rx_handler [ 153.324118][ T8094] tipc: Started in network mode [ 153.344766][ T8094] tipc: Node identity e0000002, cluster identity 4711 [ 153.373128][ T8094] tipc: Enabling of bearer rejected, failed to enable media [ 153.478436][ T8103] __nla_validate_parse: 5 callbacks suppressed [ 153.478458][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 153.557282][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 154.196451][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 154.287020][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 154.716077][ T8150] netlink: 80 bytes leftover after parsing attributes in process `syz.0.553'. [ 155.087103][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 156.150989][ T8216] sctp: [Deprecated]: syz.0.572 (pid 8216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.150989][ T8216] Use struct sctp_sack_info instead [ 156.591259][ T8239] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 156.789661][ T8254] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 156.876221][ T8254] bridge_slave_0: left allmulticast mode [ 156.910912][ T8254] bridge_slave_0: left promiscuous mode [ 156.945842][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.007461][ T8261] netlink: 'syz.3.582': attribute type 27 has an invalid length. [ 157.058367][ T8254] bridge_slave_1: left allmulticast mode [ 157.068673][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 157.073689][ T8254] bridge_slave_1: left promiscuous mode [ 157.093820][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.120440][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 157.159100][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 157.164210][ T8254] bond0: (slave bond_slave_0): Releasing backup interface [ 157.209297][ T8254] bond0: (slave bond_slave_1): Releasing backup interface [ 157.254861][ T8254] team0: Port device C removed [ 157.281098][ T8254] team0: Port device team_slave_1 removed [ 157.287334][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.610511][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 158.123857][ T8312] netlink: 'syz.2.597': attribute type 21 has an invalid length. [ 158.561097][ T8337] __nla_validate_parse: 2 callbacks suppressed [ 158.561117][ T8337] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.604'. [ 158.721860][ T8344] netlink: 'syz.1.607': attribute type 32 has an invalid length. [ 158.738837][ T8344] netlink: 776 bytes leftover after parsing attributes in process `syz.1.607'. [ 159.338524][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 159.348011][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 159.586241][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 160.194695][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 160.205351][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 160.425805][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 160.773425][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 160.829799][ T8449] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.127677][ T8463] netlink: 'syz.3.635': attribute type 3 has an invalid length. [ 161.168405][ T8472] netlink: 104 bytes leftover after parsing attributes in process `syz.2.637'. [ 161.176091][ T8468] netlink: 'syz.3.635': attribute type 3 has an invalid length. [ 161.217387][ T8470] tipc: Enabled bearer , priority 0 [ 161.247565][ T8470] syzkaller0: entered promiscuous mode [ 161.257393][ T8470] syzkaller0: entered allmulticast mode [ 161.265821][ T8475] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 161.300014][ T8475] team0: Port device hsr0 added [ 161.403626][ T8481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.407206][ T5916] IPVS: starting estimator thread 0... [ 161.442055][ T8477] tipc: Resetting bearer [ 161.534197][ T8482] IPVS: using max 25 ests per chain, 60000 per kthread [ 161.931044][ T8467] tipc: Resetting bearer [ 162.047643][ T8467] tipc: Disabling bearer [ 162.701928][ T8542] ksmbd: Unknown IPC event: 3, ignore. [ 162.750914][ T8544] ksmbd: Unknown IPC event: 3, ignore. [ 162.995735][ T8557] netlink: 'syz.1.660': attribute type 11 has an invalid length. [ 163.237470][ T8564] hsr_slave_0 (unregistering): left promiscuous mode [ 163.299492][ T8577] C: entered allmulticast mode [ 163.484046][ T8587] bridge: RTM_NEWNEIGH with invalid ether address [ 163.525793][ T8587] vlan2: entered promiscuous mode [ 163.531536][ T8587] bridge0: entered promiscuous mode [ 164.141036][ T8616] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 164.267673][ T8612] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 164.426551][ T8640] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 164.437332][ T8640] netlink: 'syz.0.678': attribute type 3 has an invalid length. [ 164.465758][ T8640] __nla_validate_parse: 5 callbacks suppressed [ 164.465777][ T8640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.678'. [ 164.528338][ T8612] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 164.605751][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 164.729747][ T8644] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.757040][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 164.815771][ T8657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 164.849870][ T8643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.871433][ T8657] netlink: 'syz.1.682': attribute type 7 has an invalid length. [ 164.879317][ T8657] netlink: 'syz.1.682': attribute type 8 has an invalid length. [ 164.887743][ T8643] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.925397][ T8643] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 164.933357][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 165.101275][ T8666] netlink: 596 bytes leftover after parsing attributes in process `syz.2.686'. [ 165.142543][ T8669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.690'. [ 165.211963][ T8675] netlink: 148 bytes leftover after parsing attributes in process `syz.0.689'. [ 165.383551][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 165.414834][ T8689] netlink: 'syz.4.692': attribute type 2 has an invalid length. [ 166.083164][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 166.084749][ T8720] chnl_net:caif_netlink_parms(): no params data found [ 166.145165][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 166.183450][ T8724] pim6reg: entered allmulticast mode [ 166.197689][ T8724] netlink: 'syz.0.706': attribute type 9 has an invalid length. [ 166.213649][ T3521] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.213856][ T8724] netlink: 'syz.0.706': attribute type 9 has an invalid length. [ 166.237485][ T3521] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.266028][ T3521] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.294434][ T3521] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.364240][ T8731] netlink: 'syz.3.708': attribute type 4 has an invalid length. [ 166.384296][ T8731] hsr_slave_0: left promiscuous mode [ 166.414675][ T8731] hsr_slave_1: left promiscuous mode [ 166.870250][ T8752] IPv6: Can't replace route, no match found [ 167.063519][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ca3c00: rx timeout, send abort [ 167.073364][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059ca3c00: 0x3fe02: (3) A timeout occurred and this is the connection abort to close the session. [ 167.360263][ T8775] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 167.793749][ T8798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 168.184800][ T8817] syzkaller1: entered promiscuous mode [ 168.190611][ T8817] syzkaller1: entered allmulticast mode [ 168.595017][ T8834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.267315][ T8863] syzkaller1: entered promiscuous mode [ 169.283427][ T8863] syzkaller1: entered allmulticast mode [ 169.939368][ T8898] __nla_validate_parse: 15 callbacks suppressed [ 169.939391][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 170.130821][ T8901] macvlan0: entered promiscuous mode [ 170.136195][ T8901] macvlan0: entered allmulticast mode [ 170.310295][ T8916] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.756'. [ 170.327094][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 170.406825][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 170.571175][ T8929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.759'. [ 170.618781][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.762'. [ 170.639551][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'. [ 170.674163][ T8938] netlink: 9 bytes leftover after parsing attributes in process `syz.0.762'. [ 170.727192][ T8935] netlink: 5 bytes leftover after parsing attributes in process `syz.0.762'. [ 170.780481][ T8938] gretap0: entered promiscuous mode [ 170.851673][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 170.897075][ T8935] 0ªî{X¹¦: renamed from gretap0 [ 170.920068][ T8935] 0ªî{X¹¦: left promiscuous mode [ 170.949216][ T8935] 0ªî{X¹¦: entered allmulticast mode [ 170.962110][ T8935] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 171.190389][ T8961] tipc: Enabled bearer , priority 0 [ 171.205316][ T8961] syzkaller0: entered promiscuous mode [ 171.228669][ T8961] syzkaller0: entered allmulticast mode [ 171.273181][ T8961] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 171.345519][ T8961] tipc: Resetting bearer [ 171.399140][ T8960] tipc: Resetting bearer [ 171.553034][ T8960] tipc: Disabling bearer [ 171.686674][ T8994] syzkaller0: entered promiscuous mode [ 171.701166][ T8994] syzkaller0: entered allmulticast mode [ 171.741838][ T8994] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 172.257220][ T9027] tipc: Trying to set illegal importance in message [ 172.867485][ T9055] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 173.038113][ T9060] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 173.091662][ T9060] netlink: 'syz.3.798': attribute type 11 has an invalid length. [ 173.138767][ T9069] IPVS: ip_vs_add_dest(): server weight less than zero [ 173.558913][ T9078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 173.572910][ T9078] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.580757][ T9078] gretap2: entered promiscuous mode [ 173.586132][ T9078] gretap2: entered allmulticast mode [ 173.921358][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 174.218739][ T9100] tipc: Enabled bearer , priority 0 [ 174.228790][ T9100] syzkaller0: entered promiscuous mode [ 174.237277][ T9100] syzkaller0: entered allmulticast mode [ 174.289548][ T9100] tipc: Resetting bearer [ 174.314199][ T9099] tipc: Resetting bearer [ 174.355142][ T9099] tipc: Disabling bearer [ 174.366233][ T9109] ieee802154 phy0 wpan0: encryption failed: -90 [ 175.016927][ T9145] __nla_validate_parse: 13 callbacks suppressed [ 175.016947][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 175.177351][ T9157] netlink: 'syz.3.830': attribute type 4 has an invalid length. [ 175.218910][ T9157] netlink: 'syz.3.830': attribute type 4 has an invalid length. [ 175.280931][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.402898][ T9164] 8021q: VLANs not supported on sit0 [ 175.562421][ T9172] tipc: Enabled bearer , priority 10 [ 176.278790][ T9199] netlink: 'syz.3.844': attribute type 1 has an invalid length. [ 176.550020][ T9208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.845'. [ 176.663463][ T9211] netlink: 'syz.4.847': attribute type 26 has an invalid length. [ 176.913295][ T9216] netlink: 76 bytes leftover after parsing attributes in process `syz.3.848'. [ 177.154578][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 177.886780][ T9244] delete_channel: no stack [ 178.010311][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.859'. [ 178.040195][ T9256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.859'. [ 178.186088][ T9263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 178.248018][ T9263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 178.260026][ T9262] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 178.277405][ T9263] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 178.498149][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 178.533790][ T9275] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 178.757876][ T9278] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.803701][ T9278] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 178.904709][ T9282] gretap1: entered promiscuous mode [ 178.939712][ T9282] bond1: (slave gretap1): making interface the new active one [ 178.965572][ T9282] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.984948][ T9284] netlink: 108 bytes leftover after parsing attributes in process `syz.4.866'. [ 179.018021][ T9275] macvlan3: entered promiscuous mode [ 179.027147][ T9275] macvlan3: entered allmulticast mode [ 179.034149][ T9275] bond1: entered promiscuous mode [ 179.048302][ T9275] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 179.059956][ T9275] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 179.073461][ T9275] bond1: left promiscuous mode [ 179.102915][ T9295] tipc: Enabling of bearer rejected, failed to enable media [ 179.281743][ T9300] netlink: 168 bytes leftover after parsing attributes in process `syz.3.869'. [ 179.774502][ T9327] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 179.811046][ T9327] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 179.875347][ T9325] delete_channel: no stack [ 179.976599][ T9339] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 180.119975][ T9346] __nla_validate_parse: 2 callbacks suppressed [ 180.119995][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 180.248394][ T9350] veth0_to_team: entered promiscuous mode [ 180.268169][ T9356] netlink: 44 bytes leftover after parsing attributes in process `syz.1.887'. [ 180.275839][ T9350] veth0_to_team: entered allmulticast mode [ 180.296404][ T9356] netlink: 43 bytes leftover after parsing attributes in process `syz.1.887'. [ 180.316400][ T9356] netlink: 'syz.1.887': attribute type 5 has an invalid length. [ 180.351926][ T9356] netlink: 43 bytes leftover after parsing attributes in process `syz.1.887'. [ 180.416572][ T9361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.889'. [ 180.756647][ T9375] netlink: 48 bytes leftover after parsing attributes in process `syz.3.890'. [ 180.976005][ T9396] netlink: 'syz.4.896': attribute type 5 has an invalid length. [ 181.140364][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.898'. [ 181.149944][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 181.180068][ T9401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.897'. [ 181.408228][ T9415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.448258][ T9415] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 181.473366][ T9415] veth0_vlan: entered allmulticast mode [ 181.978917][ T9442] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 181.990374][ T9444] tipc: Can't bind to reserved service type 1 [ 182.013859][ T9442] netlink: 'syz.0.910': attribute type 4 has an invalid length. [ 182.031742][ T9442] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.910'. [ 182.044945][ T9449] openvswitch: netlink: Multiple metadata blocks provided [ 182.105930][ T9442] vlan0: entered allmulticast mode [ 182.111239][ T9442] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 182.762779][ T9461] netlink: 'syz.4.912': attribute type 29 has an invalid length. [ 183.068771][ T9482] openvswitch: netlink: Tunnel attr 16371 out of range max 16 [ 183.305483][ T9465] netlink: 'syz.4.912': attribute type 29 has an invalid length. [ 183.318139][ T9484] lo: entered promiscuous mode [ 183.351964][ T9484] netlink: 'syz.3.919': attribute type 2 has an invalid length. [ 183.380075][ T9484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.752911][ T9512] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 183.852643][ T9512] bond2 (unregistering): Released all slaves [ 183.867740][ T9518] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.282140][ T9538] netlink: 'syz.1.934': attribute type 16 has an invalid length. [ 184.300836][ T9538] netlink: 'syz.1.934': attribute type 3 has an invalid length. [ 184.537590][ T9546] veth1_macvtap: left promiscuous mode [ 184.838670][ T9560] tipc: Enabled bearer , priority 0 [ 185.013397][ T9560] syzkaller0: entered promiscuous mode [ 185.036747][ T9560] syzkaller0: entered allmulticast mode [ 185.057265][ T9560] tipc: Resetting bearer [ 185.121431][ T9569] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 185.155306][ T9559] tipc: Resetting bearer [ 185.459831][ T9590] Bluetooth: MGMT ver 1.23 [ 185.468625][ T9590] __nla_validate_parse: 11 callbacks suppressed [ 185.468644][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.947'. [ 185.575177][ T3009] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 185.583353][ T9597] netlink: 183092 bytes leftover after parsing attributes in process `syz.4.948'. [ 185.873402][ T5938] tipc: Node number set to 3594108314 [ 186.737702][ T9559] tipc: Disabling bearer [ 187.014448][ T9633] netlink: 'syz.3.957': attribute type 21 has an invalid length. [ 187.015758][ T9630] dvmrp1: entered allmulticast mode [ 187.087456][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 187.561625][ T9658] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 187.816256][ T9671] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 187.863017][ T9671] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 187.900797][ T9671] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 187.962166][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.968'. [ 188.535137][ T9708] vxcan1: tx address claim with dlc 0 [ 188.624148][ T9674] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 188.662696][ T9674] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 188.693486][ T9674] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 188.891943][ T9725] netlink: 13 bytes leftover after parsing attributes in process `syz.0.985'. [ 189.124679][ T9738] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 189.134035][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 189.150356][ T9736] tipc: Enabled bearer , priority 0 [ 189.159342][ T9736] syzkaller0: entered promiscuous mode [ 189.179351][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 189.188913][ T9736] syzkaller0: entered allmulticast mode [ 189.241670][ T9736] tipc: Resetting bearer [ 189.291311][ T9734] tipc: Resetting bearer [ 189.353965][ T9734] tipc: Disabling bearer [ 189.431784][ T9753] IPVS: stopping master sync thread 9755 ... [ 189.435003][ T9755] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 189.645428][ T9759] netlink: 108 bytes leftover after parsing attributes in process `syz.0.995'. [ 189.684142][ T9763] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 189.692612][ T9763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 189.710905][ T9763] dummy0: entered promiscuous mode [ 189.735636][ T9763] bridge0: port 3(dummy0) entered blocking state [ 189.757844][ T9763] bridge0: port 3(dummy0) entered disabled state [ 189.787371][ T9763] dummy0: entered allmulticast mode [ 189.959626][ T9773] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1001'. [ 190.586173][ T9803] __nla_validate_parse: 1 callbacks suppressed [ 190.586193][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 190.670792][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 190.743972][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1012'. [ 190.778268][ T9812] netlink: 'syz.1.1012': attribute type 7 has an invalid length. [ 190.831766][ T9812] netlink: 'syz.1.1012': attribute type 8 has an invalid length. [ 190.859340][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 190.887832][ T9815] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 190.976133][ T9817] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 191.004262][ T9820] atomic_op ffff888030c70198 conn xmit_atomic 0000000000000000 [ 191.244781][ T9833] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1019'. [ 191.268069][ T9832] batadv_slave_0: entered promiscuous mode [ 191.311078][ T9831] batadv_slave_0: left promiscuous mode [ 191.387671][ T9841] sctp: [Deprecated]: syz.4.1021 (pid 9841) Use of int in max_burst socket option. [ 191.387671][ T9841] Use struct sctp_assoc_value instead [ 191.595934][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 191.717141][ T9849] netlink: 'syz.1.1025': attribute type 21 has an invalid length. [ 191.728337][ T9849] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1025'. [ 191.741815][ T9849] netlink: 'syz.1.1025': attribute type 5 has an invalid length. [ 191.753539][ T9849] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1025'. [ 191.868555][ T9861] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 192.003762][ T9863] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 192.036502][ T9863] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 192.229445][ T9861] gretap1: entered promiscuous mode [ 192.265933][ T9861] bond3: (slave gretap1): making interface the new active one [ 192.315099][ T9861] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 192.367026][ T9875] macvlan2: entered promiscuous mode [ 192.391217][ T9875] macvlan2: entered allmulticast mode [ 192.451594][ T9875] bond3: entered promiscuous mode [ 192.457585][ T9875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.527581][ T9875] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 192.566939][ T9875] bond3: left promiscuous mode [ 192.738735][ T981] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 192.765914][ T981] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 192.861249][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'. [ 193.455701][ T9950] sctp: Trying to GSO but underlying device doesn't support it. [ 193.836616][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.052236][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 194.391435][ T9996] netlink: 'syz.2.1069': attribute type 11 has an invalid length. [ 194.448594][ T9996] netlink: 'syz.2.1069': attribute type 11 has an invalid length. [ 194.483841][ T9996] netlink: 'syz.2.1069': attribute type 11 has an invalid length. [ 194.520060][ T9996] netlink: 'syz.2.1069': attribute type 11 has an invalid length. [ 194.685210][T10004] team0: Device vti0 is up. Set it down before adding it as a team port [ 194.881350][T10020] netlink: 'syz.4.1077': attribute type 20 has an invalid length. [ 195.008442][T10028] mac80211_hwsim hwsim9 : renamed from wlan1 [ 195.089389][ T3521] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.109366][ T3521] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.166927][ T3521] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.290162][ T3521] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.626730][T10057] team0: Device vti0 is of different type [ 196.146135][T10078] __nla_validate_parse: 11 callbacks suppressed [ 196.146155][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'. [ 196.165425][T10086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.173851][T10085] netlink: 'syz.3.1096': attribute type 11 has an invalid length. [ 196.215876][T10073] delete_channel: no stack [ 196.339782][T10092] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 196.387557][T10092] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 197.816248][T10107] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 197.998973][T10119] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1106'. [ 198.046976][T10121] vlan1: entered allmulticast mode [ 198.054442][T10121] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 198.062196][T10126] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 198.073090][T10121] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1108'. [ 198.162864][T10134] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 198.266698][T10134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.347555][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1110'. [ 198.399736][T10137] bond6: (slave geneve2): making interface the new active one [ 198.409763][T10137] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 198.419396][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 198.475163][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 198.548091][T10154] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 198.759842][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 198.910893][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1118'. [ 198.960356][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 199.461164][T10193] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 199.594838][T10193] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.595621][T10202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1133'. [ 199.621501][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.627880][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.645732][T10202] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 199.702168][T10202] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 199.966167][T10216] ipvlan2: entered promiscuous mode [ 200.003807][T10216] bridge0: port 4(ipvlan2) entered blocking state [ 200.036229][T10218] raw_sendmsg: syz.4.1138 forgot to set AF_INET. Fix it! [ 200.040084][T10216] bridge0: port 4(ipvlan2) entered disabled state [ 200.059083][T10216] ipvlan2: entered allmulticast mode [ 200.101516][T10216] bridge0: entered allmulticast mode [ 200.133301][T10216] ipvlan2: left allmulticast mode [ 200.138774][T10216] bridge0: left allmulticast mode [ 200.191842][T10195] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 200.231723][T10195] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 200.549104][T10249] : entered promiscuous mode [ 201.083443][T10270] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 201.118109][T10270] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 201.212144][T10273] Unsupported ieee802154 address type: 0 [ 201.291143][T10279] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 201.460544][T10279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.505467][T10282] bond2: (slave veth5): Enslaving as an active interface with a down link [ 201.575247][T10285] bond2: (slave veth0_to_bond): making interface the new active one [ 201.587682][T10285] veth0_to_bond: entered promiscuous mode [ 201.598079][T10285] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.728468][T10299] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 202.037327][T10318] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 202.041963][T10309] bond2: entered promiscuous mode [ 202.079804][T10309] bond2: entered allmulticast mode [ 202.093060][T10309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.119678][T10318] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 202.142667][T10325] netlink: 'syz.3.1169': attribute type 8 has an invalid length. [ 202.144111][T10327] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 202.303348][T10334] __nla_validate_parse: 1 callbacks suppressed [ 202.303369][T10334] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1169'. [ 202.807699][T10352] netlink: 'syz.2.1179': attribute type 11 has an invalid length. [ 203.104657][ T5938] hid-generic 0005:15C2:5505.0002: item fetching failed at offset 0/1 [ 203.157744][ T5938] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22 [ 203.314109][ T3521] tipc: Subscription rejected, illegal request [ 204.077034][T10412] veth1_macvtap: left promiscuous mode [ 204.488791][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 204.500930][ T30] audit: type=1804 audit(1755635077.784:3): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1199" name="/newroot/225/cgroup.controllers" dev="tmpfs" ino=1162 res=1 errno=0 [ 204.530287][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 204.547838][ T30] audit: type=1800 audit(1755635077.784:4): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1199" name="cgroup.controllers" dev="tmpfs" ino=1162 res=0 errno=0 [ 205.768366][T10456] infiniband syz!: set active [ 205.773781][T10456] infiniband syz!: added team_slave_0 [ 205.783915][T10456] syz!: rxe_create_cq: returned err = -12 [ 205.792135][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'. [ 205.801524][T10456] infiniband syz!: Couldn't create ib_mad CQ [ 205.807745][T10456] infiniband syz!: Couldn't open port 1 [ 205.840414][ T3521] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 205.861264][ T5937] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 205.869222][ T3521] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 206.003587][T10456] RDS/IB: syz!: added [ 206.008288][T10456] smc: adding ib device syz! with port count 1 [ 206.027636][T10456] smc: ib device syz! port 1 has pnetid [ 206.054952][T10503] netlink: 'syz.0.1224': attribute type 6 has an invalid length. [ 206.063168][T10503] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1224'. [ 206.073890][ T5937] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 206.454552][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1230'. [ 206.561700][ T5937] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.244468][T10564] sctp: [Deprecated]: syz.3.1243 (pid 10564) Use of int in maxseg socket option. [ 207.244468][T10564] Use struct sctp_assoc_value instead [ 207.383637][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1246'. [ 207.926732][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 207.977022][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 208.218371][T10610] netlink: 'syz.2.1256': attribute type 33 has an invalid length. [ 208.401397][T10620] tipc: Enabled bearer , priority 0 [ 208.433392][T10617] syzkaller0: entered promiscuous mode [ 208.439020][T10617] syzkaller0: entered allmulticast mode [ 208.451637][T10617] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 208.472066][T10618] syzkaller0: entered promiscuous mode [ 208.477599][T10618] syzkaller0: entered allmulticast mode [ 208.612052][T10619] tipc: Resetting bearer [ 208.645330][T10619] tipc: Disabling bearer [ 208.882732][T10640] netlink: 'syz.4.1266': attribute type 2 has an invalid length. [ 208.929146][T10639] bridge3: entered promiscuous mode [ 208.934819][T10639] bridge3: entered allmulticast mode [ 208.994994][T10648] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 209.027613][T10648] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1267'. [ 209.117436][T10649] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1267'. [ 209.152165][T10651] lo: left promiscuous mode [ 209.246387][T10651] bridge3: left promiscuous mode [ 209.252669][T10651] bridge3: left allmulticast mode [ 209.709793][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 209.728501][T10675] netlink: 'syz.0.1278': attribute type 21 has an invalid length. [ 209.741032][T10675] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1278'. [ 210.197047][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 210.243305][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 210.329838][T10699] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.1282'. [ 210.385715][T10699] netlink: zone id is out of range [ 210.410147][T10699] netlink: zone id is out of range [ 210.449386][T10699] netlink: zone id is out of range [ 210.456894][T10699] netlink: zone id is out of range [ 210.475614][T10699] netlink: zone id is out of range [ 210.485246][T10699] netlink: zone id is out of range [ 210.502248][T10699] netlink: zone id is out of range [ 210.538402][T10699] netlink: zone id is out of range [ 210.552554][T10699] netlink: zone id is out of range [ 210.580920][T10699] netlink: zone id is out of range [ 211.836638][T10778] Bluetooth: MGMT ver 1.23 [ 212.618079][T10824] __nla_validate_parse: 15 callbacks suppressed [ 212.618100][T10824] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1320'. [ 212.888270][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 212.951657][ T13] veth0_to_bond: left promiscuous mode [ 213.094027][T10849] netlink: 'syz.1.1328': attribute type 10 has an invalid length. [ 213.116585][T10849] syz_tun: entered promiscuous mode [ 213.148641][T10849] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 213.396522][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 213.937520][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 213.970179][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 214.093620][T10898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1341'. [ 214.150135][T10900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.218317][T10904] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1343'. [ 214.234264][T10904] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1343'. [ 214.244383][T10904] netlink: 'syz.3.1343': attribute type 5 has an invalid length. [ 214.257914][T10904] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1343'. [ 214.325729][T10898] netlink: 'syz.2.1341': attribute type 29 has an invalid length. [ 214.361053][T10898] netlink: 'syz.2.1341': attribute type 29 has an invalid length. [ 214.394338][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 214.517193][T10914] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 214.687970][T10927] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 214.856604][T10936] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 215.362165][T10962] macvlan0: left promiscuous mode [ 215.399091][T10962] macvlan0: left allmulticast mode [ 215.439901][T10962] netlink: 'syz.2.1360': attribute type 3 has an invalid length. [ 215.489776][T10968] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 215.923805][T10992] net_ratelimit: 226 callbacks suppressed [ 215.923826][T10992] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 216.002799][T10996] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 216.147210][T10994] IPVS: Scheduler module ip_vs_sip not found [ 216.187771][T10996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.215266][T11004] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 216.263560][T11004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.321710][T11007] syzkaller0: refused to change device tx_queue_len [ 217.041170][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.047312][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 217.053376][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 217.053466][ T5182] Bluetooth: hci2: command 0x0406 tx timeout [ 217.208907][T11059] sctp: [Deprecated]: syz.3.1389 (pid 11059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.208907][T11059] Use struct sctp_sack_info instead [ 217.832539][T11090] __nla_validate_parse: 20 callbacks suppressed [ 217.832562][T11090] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1397'. [ 217.887691][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'. [ 217.904125][ T5968] IPVS: starting estimator thread 0... [ 217.929786][T11098] chnl_net:caif_netlink_parms(): no params data found [ 217.983329][T11101] openvswitch: netlink: Missing key (keys=40, expected=100) [ 217.992434][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 218.021293][T11100] IPVS: using max 26 ests per chain, 62400 per kthread [ 218.346600][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1402'. [ 218.406229][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 218.415892][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 218.427415][T11123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1403'. [ 218.447308][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 218.483974][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 218.503166][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 218.803619][T11135] gretap3: entered promiscuous mode [ 218.809033][T11135] gretap3: entered allmulticast mode [ 219.380267][T11169] validate_nla: 4 callbacks suppressed [ 219.380288][T11169] netlink: 'syz.1.1415': attribute type 8 has an invalid length. [ 220.340099][T11200] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 220.358990][T11200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.551051][T11205] pimreg: entered allmulticast mode [ 220.576355][T11208] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 220.601792][T11208] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 222.072209][T11286] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.111873][T11287] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 222.525024][T11311] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 222.656353][T11320] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.078586][T11340] __nla_validate_parse: 18 callbacks suppressed [ 223.078608][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 223.238691][T11347] netlink: 'syz.2.1462': attribute type 21 has an invalid length. [ 223.259947][T11347] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1462'. [ 223.271714][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1461'. [ 223.287325][T11347] netlink: 'syz.2.1462': attribute type 4 has an invalid length. [ 223.327379][T11347] netlink: 'syz.2.1462': attribute type 5 has an invalid length. [ 223.348702][T11347] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1462'. [ 223.414748][T11354] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1461'. [ 223.478172][T11349] netlink: 376 bytes leftover after parsing attributes in process `syz.0.1461'. [ 223.487351][T11356] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 223.508314][T11357] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 223.550388][T11356] sctp: [Deprecated]: syz.3.1466 (pid 11356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.550388][T11356] Use struct sctp_sack_info instead [ 223.723064][T11367] bond0: (slave syz_tun): Releasing backup interface [ 223.739543][T11369] netlink: 'syz.2.1469': attribute type 6 has an invalid length. [ 223.776994][T11367] dummy0: left allmulticast mode [ 223.785396][T11373] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1473'. [ 223.801398][T11367] bridge0: port 3(dummy0) entered disabled state [ 223.812585][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 223.819320][T11367] bridge_slave_0: left allmulticast mode [ 223.829683][T11367] bridge_slave_0: left promiscuous mode [ 223.848658][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.913031][T11367] bridge_slave_1: left promiscuous mode [ 223.939358][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.022665][T11367] bond2: (slave veth0_to_bond): Releasing active interface [ 224.110536][T11367] bond0: (slave bond_slave_0): Releasing backup interface [ 224.143823][T11367] bond0: (slave bond_slave_1): Releasing backup interface [ 224.245728][T11367] team0: Port device team_slave_0 removed [ 224.296913][T11367] team0: Port device team_slave_1 removed [ 224.324738][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.343911][T11367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.353908][T11367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.364995][T11367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.387398][T11367] bond0: (slave geneve1): Releasing backup interface [ 224.418970][T11367] bond0: (slave wlan1): Releasing backup interface [ 224.452649][T11367] bond1: (slave gretap1): Releasing active interface [ 224.498454][T11367] bond2: (slave veth5): Releasing active interface [ 224.661572][ T981] syz!: Port: 1 Link DOWN [ 224.779868][T11411] netlink: 'syz.0.1481': attribute type 33 has an invalid length. [ 224.799032][T11411] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1481'. [ 224.861555][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 224.871786][T11409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.879050][T11409] IPv6: NLM_F_CREATE should be set when creating new route [ 224.886357][T11409] IPv6: NLM_F_CREATE should be set when creating new route [ 224.920527][T11409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.120023][T11424] IPv6: sit1: Disabled Multicast RS [ 225.140524][T11428] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 226.048380][T11458] nbd: socks must be embedded in a SOCK_ITEM attr [ 226.364900][T11476] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 226.385463][T11475] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 227.132072][ T3009] wlan0: Trigger new scan to find an IBSS to join [ 227.142779][T11519] tipc: Enabled bearer , priority 0 [ 227.181446][T11514] netlink: 'syz.1.1509': attribute type 21 has an invalid length. [ 227.248012][T11514] virt_wifi0: mtu less than device minimum [ 227.298299][T11513] tipc: Disabling bearer [ 227.352631][T11528] syzkaller0: entered promiscuous mode [ 227.361523][T11528] syzkaller0: entered allmulticast mode [ 227.565317][T11543] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 228.256263][T11582] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 228.291172][T11582] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 228.569314][T11597] __nla_validate_parse: 8 callbacks suppressed [ 228.569407][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 228.625890][T11602] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1533'. [ 229.085695][T11623] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 229.227154][T11637] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1540'. [ 229.552704][T11660] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 229.594424][T11661] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1545'. [ 230.025933][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 230.035476][T11691] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1555'. [ 230.182470][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 230.585310][T11709] netlink: 'syz.2.1562': attribute type 1 has an invalid length. [ 230.601686][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 230.843863][T11721] pimreg: left allmulticast mode [ 230.865943][T11722] netlink: 'syz.3.1567': attribute type 1 has an invalid length. [ 230.893388][T11722] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1567'. [ 231.005195][T11731] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1569'. [ 231.069514][T11731] openvswitch: netlink: Actions may not be safe on all matching packets [ 231.467430][T11749] tipc: Enabled bearer , priority 0 [ 231.478765][T11752] syzkaller0: entered allmulticast mode [ 231.498730][T11745] syzkaller0: entered promiscuous mode [ 231.506874][T11745] syzkaller0: entered allmulticast mode [ 231.961963][T11734] tipc: Disabling bearer [ 232.009366][T11776] netlink: 'syz.1.1578': attribute type 8 has an invalid length. [ 232.020278][T11779] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 232.069553][T11779] bond4 (unregistering): Released all slaves [ 232.092781][T11654] wlan0: Trigger new scan to find an IBSS to join [ 232.113518][T11776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.401622][T11802] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.614053][T11813] sctp: [Deprecated]: syz.1.1590 (pid 11813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.614053][T11813] Use struct sctp_sack_info instead [ 232.787387][T11817] tipc: Enabling of bearer rejected, failed to enable media [ 233.106141][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.793306][T11867] netlink: 'syz.0.1609': attribute type 10 has an invalid length. [ 234.126917][T11883] ip6gre1: entered allmulticast mode [ 234.190942][T11887] __nla_validate_parse: 11 callbacks suppressed [ 234.190965][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 234.428296][T11889] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1616'. [ 234.645072][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 234.689190][T11895] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 234.720492][T11895] bond0: (slave ): Enslaving as an active interface with an up link [ 234.899769][T11899] veth0: entered promiscuous mode [ 235.005865][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 235.053511][T11910] syzkaller0: refused to change device tx_queue_len [ 235.120066][T11898] veth0: left promiscuous mode [ 235.448581][T11926] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 235.457355][T11926] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 235.472768][T11926] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 235.480573][T11926] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 236.310297][T11955] tipc: Enabled bearer , priority 0 [ 236.334651][T11955] syzkaller0: entered promiscuous mode [ 236.341298][T11955] syzkaller0: entered allmulticast mode [ 236.368484][T11958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1634'. [ 236.426938][T11961] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 236.454851][T11960] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 236.524068][T11955] tipc: Resetting bearer [ 236.545860][T11955] netlink: 'syz.2.1633': attribute type 3 has an invalid length. [ 236.557054][T11955] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1633'. [ 236.679901][T11967] macsec1: entered promiscuous mode [ 236.694817][T11967] macsec1: entered allmulticast mode [ 236.929828][T11954] tipc: Resetting bearer [ 237.019673][T11954] tipc: Disabling bearer [ 237.699340][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'. [ 237.737033][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 238.308624][T12050] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 238.544744][T12050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.706453][T12062] bond3: (slave gretap3): making interface the new active one [ 238.747204][T12062] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 239.217199][T12092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.392470][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 239.408032][T12105] netlink: 'syz.3.1673': attribute type 21 has an invalid length. [ 239.580568][T12111] netlink: 'syz.0.1674': attribute type 10 has an invalid length. [ 239.595346][T12111] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 239.674530][T12121] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 239.902624][T12126] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 240.431104][T12158] tipc: Enabled bearer , priority 0 [ 240.560981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.642558][T12172] netlink: 'syz.4.1689': attribute type 35 has an invalid length. [ 240.724885][T12158] syzkaller0: entered promiscuous mode [ 240.739636][T12158] syzkaller0: entered allmulticast mode [ 240.761254][T12158] tipc: Resetting bearer [ 242.554036][T12157] veth0_to_team: entered promiscuous mode [ 242.559881][T12157] veth0_to_team: entered allmulticast mode [ 242.626994][T11654] tipc: Resetting bearer [ 242.738480][T12152] tipc: Resetting bearer [ 242.759397][T12198] openvswitch: netlink: Missing key (keys=40, expected=80) [ 242.835409][T12152] tipc: Disabling bearer [ 242.860146][T12194] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 243.264960][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 243.307888][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 243.358906][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 243.365880][T12222] xfrm1: entered promiscuous mode [ 243.375892][T12222] xfrm1: entered allmulticast mode [ 244.690884][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'. [ 244.947257][T12292] tipc: Enabled bearer , priority 0 [ 244.989349][T12290] syzkaller0: entered promiscuous mode [ 245.017640][T12290] syzkaller0: entered allmulticast mode [ 245.049583][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 245.078502][T12290] tipc: Resetting bearer [ 245.164067][T12289] tipc: Resetting bearer [ 245.240560][T12289] tipc: Disabling bearer [ 245.349812][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'. [ 245.437043][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 245.655648][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1736'. [ 245.897011][T12344] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 245.908199][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1741'. [ 245.938864][T12345] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 245.982298][T12344] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 246.005008][T12345] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 246.043314][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1741'. [ 246.267241][T12364] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1746'. [ 246.283686][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1746'. [ 246.317040][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1745'. [ 246.593142][T12378] geneve3: entered promiscuous mode [ 246.598434][T12378] geneve3: entered allmulticast mode [ 246.619922][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.637261][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.662876][T11653] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.730475][T12387] geneve3: entered promiscuous mode [ 246.824912][T11653] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.990448][T12378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.018061][T12378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.058631][T12378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 247.116120][T12393] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 247.215783][T12378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.229495][T12378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.257956][T12378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 247.303612][T12412] gre1: entered promiscuous mode [ 247.336875][T12412] gre1: entered allmulticast mode [ 247.395116][T12378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.415161][T12378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.432976][T12378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 247.523791][T12378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.536061][T12378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.546984][T12378] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 247.609864][T12418] syzkaller0: entered promiscuous mode [ 247.615616][T12418] syzkaller0: entered allmulticast mode [ 249.462518][T11654] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.489368][T11654] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.514379][T11654] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.596984][T11654] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.625026][T11654] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.647458][T11654] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.703838][T11653] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.715565][T11653] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.746924][T11653] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.849763][ T65] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.883494][T12444] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 249.898091][ T65] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.923365][T12445] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 249.930442][ T65] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.951661][T12446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.965145][T12444] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 250.047648][T12451] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 250.265204][T12462] __nla_validate_parse: 1 callbacks suppressed [ 250.265227][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1776'. [ 250.292281][T12467] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.296689][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 250.323957][T12468] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.344798][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 250.384568][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 250.417843][T12466] netlink: 'syz.0.1778': attribute type 14 has an invalid length. [ 250.449652][T12466] netlink: 'syz.0.1778': attribute type 13 has an invalid length. [ 250.494361][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 250.819512][T12491] x_tables: ip_tables: tcp.0 match: invalid size 16 (kernel) != (user) 312 [ 251.452706][T12523] netlink: 'syz.3.1792': attribute type 11 has an invalid length. [ 251.590966][T12532] netlink: 'syz.0.1795': attribute type 3 has an invalid length. [ 251.725762][T12537] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 253.219700][T12540] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 253.486009][T12549] bond0: (slave ): Releasing backup interface [ 253.734769][T12567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.742098][T12567] IPv6: NLM_F_CREATE should be set when creating new route [ 253.749384][T12567] IPv6: NLM_F_CREATE should be set when creating new route [ 253.756691][T12567] IPv6: NLM_F_CREATE should be set when creating new route [ 253.775797][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1807'. [ 253.836291][T12567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.876825][T12567] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1806'. [ 253.927955][T12567] openvswitch: netlink: Flow key attr not present in new flow. [ 254.084077][T12584] vlan1: entered promiscuous mode [ 254.120400][T12584] bridge0: entered promiscuous mode [ 254.170011][T12593] tipc: Enabling of bearer rejected, already enabled [ 254.331873][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1814'. [ 254.367733][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1814'. [ 256.069297][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1842'. [ 256.784699][T12693] tipc: Enabled bearer , priority 0 [ 256.794611][T12693] syzkaller0: entered promiscuous mode [ 256.800147][T12693] syzkaller0: entered allmulticast mode [ 256.929782][T12693] tipc: Resetting bearer [ 256.957273][T12692] tipc: Resetting bearer [ 256.994631][T12692] tipc: Disabling bearer [ 257.883771][T12738] netem: change failed [ 258.725930][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1888'. [ 259.009070][T12775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'. [ 259.357734][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1899'. [ 260.082035][T12810] tipc: Enabled bearer , priority 0 [ 260.101387][T12810] syzkaller0: entered promiscuous mode [ 260.110054][T12810] syzkaller0: entered allmulticast mode [ 260.180435][T12810] tipc: Resetting bearer [ 260.227778][T12809] tipc: Resetting bearer [ 260.287189][T12809] tipc: Disabling bearer [ 260.817069][T12844] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1923'. [ 260.834021][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1923'. [ 260.938730][T12848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.974260][T12848] bond0: (slave rose0): Enslaving as an active interface with an up link [ 261.048901][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.058637][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.237262][T12854] syzkaller0: entered promiscuous mode [ 261.242989][T12854] syzkaller0: entered allmulticast mode [ 263.624210][T12872] bond6: (slave geneve2): Releasing active interface [ 263.642300][ T5996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.788527][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 264.148884][T12920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.676994][ T5870] Bluetooth: hci4: link tx timeout [ 264.684070][ T5870] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.720888][ T5968] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.844530][T12950] ipip0: entered promiscuous mode [ 265.499047][T12980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.817610][T13001] : entered promiscuous mode [ 265.958246][T13009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2000'. [ 266.199708][T13021] netlink: 'syz.2.2004': attribute type 4 has an invalid length. [ 266.257730][T13022] netlink: 'syz.2.2004': attribute type 4 has an invalid length. [ 266.549720][T13032] tipc: Enabled bearer , priority 0 [ 266.581060][T13032] syzkaller0: entered promiscuous mode [ 266.599139][T13032] syzkaller0: entered allmulticast mode [ 266.601844][T13035] netlink: 568 bytes leftover after parsing attributes in process `syz.3.2011'. [ 266.698229][T13036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.722140][ T5862] Bluetooth: hci4: command 0x0405 tx timeout [ 266.737286][T13040] tipc: Resetting bearer [ 266.778107][T13031] tipc: Resetting bearer [ 266.799198][T13031] tipc: Disabling bearer [ 266.859186][T13036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.046293][T13036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.238676][T13036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.325452][T13059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2018'. [ 267.342379][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2018'. [ 267.376203][T13059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2018'. [ 267.399188][T13059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2018'. [ 267.584083][T11653] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.629897][T11654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.683530][T11653] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.756051][T11653] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.658937][T13111] tipc: Enabled bearer , priority 0 [ 268.701260][T13111] syzkaller0: entered promiscuous mode [ 268.706814][T13111] syzkaller0: entered allmulticast mode [ 268.761214][T13111] tipc: Resetting bearer [ 268.761875][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 268.781883][T13110] tipc: Resetting bearer [ 268.805746][T13121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2046'. [ 268.857667][T13110] tipc: Disabling bearer [ 269.126396][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 269.143656][T13138] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2052'. [ 269.203480][T13140] tipc: Enabled bearer , priority 0 [ 269.226181][T13140] syzkaller0: entered promiscuous mode [ 269.260891][T13140] syzkaller0: entered allmulticast mode [ 269.312179][T13140] tipc: Resetting bearer [ 269.347285][T13139] tipc: Resetting bearer [ 269.451981][T13139] tipc: Disabling bearer [ 270.386747][T13179] tipc: Enabled bearer , priority 0 [ 270.426341][T13179] syzkaller0: entered promiscuous mode [ 270.432931][T13179] syzkaller0: entered allmulticast mode [ 270.506262][T13179] tipc: Resetting bearer [ 270.538801][T13176] tipc: Resetting bearer [ 270.723049][T13176] tipc: Disabling bearer [ 271.084018][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 271.420859][T13225] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2088'. [ 271.678266][T13235] tipc: Enabled bearer , priority 0 [ 271.697816][T13235] syzkaller0: entered promiscuous mode [ 271.707539][T13235] syzkaller0: entered allmulticast mode [ 271.726006][T13235] tipc: Resetting bearer [ 271.761950][T13234] tipc: Resetting bearer [ 271.867969][T13234] tipc: Disabling bearer [ 272.771197][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 272.812317][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 272.854364][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 272.935386][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'. [ 274.774647][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 275.794766][T13389] tipc: Enabled bearer , priority 0 [ 275.830191][T13390] syzkaller0: entered promiscuous mode [ 275.846384][T13390] syzkaller0: entered allmulticast mode [ 275.870042][T13396] tipc: Resetting bearer [ 275.967776][T13386] tipc: Resetting bearer [ 276.118217][T13386] tipc: Disabling bearer [ 276.207053][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 276.250363][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 276.286669][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 276.442497][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2171'. [ 277.354312][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'. [ 277.728008][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 278.080130][T13491] tipc: Enabled bearer , priority 0 [ 278.108709][T13491] syzkaller0: entered promiscuous mode [ 278.131528][T13491] syzkaller0: entered allmulticast mode [ 278.203780][T13491] tipc: Resetting bearer [ 278.259543][T13490] tipc: Resetting bearer [ 278.328098][T13496] [ 278.330506][T13496] ====================================================== [ 278.337556][T13496] WARNING: possible circular locking dependency detected [ 278.344622][T13496] syzkaller #0 Not tainted [ 278.349062][T13496] ------------------------------------------------------ [ 278.356113][T13496] syz.2.2207/13496 is trying to acquire lock: [ 278.362212][T13496] ffff88801b2ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60 [ 278.371599][T13496] [ 278.371599][T13496] but task is already holding lock: [ 278.378996][T13496] ffff888025010a78 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 278.389349][T13496] [ 278.389349][T13496] which lock already depends on the new lock. [ 278.389349][T13496] [ 278.399769][T13496] [ 278.399769][T13496] the existing dependency chain (in reverse order) is: [ 278.408799][T13496] [ 278.408799][T13496] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 278.417431][T13496] lock_acquire+0x120/0x360 [ 278.422485][T13496] blk_alloc_queue+0x538/0x620 [ 278.427786][T13496] __blk_mq_alloc_disk+0x15c/0x340 [ 278.433434][T13496] nbd_dev_add+0x46c/0xae0 [ 278.438406][T13496] nbd_init+0x168/0x1f0 [ 278.443122][T13496] do_one_initcall+0x233/0x820 [ 278.448434][T13496] do_initcall_level+0x104/0x190 [ 278.453911][T13496] do_initcalls+0x59/0xa0 [ 278.458774][T13496] kernel_init_freeable+0x334/0x4b0 [ 278.464503][T13496] kernel_init+0x1d/0x1d0 [ 278.469370][T13496] ret_from_fork+0x3f9/0x770 [ 278.474490][T13496] ret_from_fork_asm+0x1a/0x30 [ 278.479791][T13496] [ 278.479791][T13496] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 278.487012][T13496] lock_acquire+0x120/0x360 [ 278.492046][T13496] fs_reclaim_acquire+0x72/0x100 [ 278.497515][T13496] kmem_cache_alloc_lru_noprof+0x49/0x3d0 [ 278.503778][T13496] alloc_inode+0xb8/0x1b0 [ 278.508665][T13496] iget_locked+0xf0/0x570 [ 278.513528][T13496] kernfs_get_inode+0x4f/0x780 [ 278.518841][T13496] kernfs_get_tree+0x5a9/0x920 [ 278.524151][T13496] sysfs_get_tree+0x46/0x110 [ 278.529294][T13496] vfs_get_tree+0x92/0x2b0 [ 278.534270][T13496] do_new_mount+0x2a2/0x9e0 [ 278.539328][T13496] __se_sys_mount+0x317/0x410 [ 278.544543][T13496] do_syscall_64+0xfa/0x3b0 [ 278.549586][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.556027][T13496] [ 278.556027][T13496] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 278.564047][T13496] validate_chain+0xb9b/0x2140 [ 278.569350][T13496] __lock_acquire+0xab9/0xd20 [ 278.574568][T13496] lock_acquire+0x120/0x360 [ 278.579606][T13496] down_write+0x96/0x1f0 [ 278.584375][T13496] kernfs_remove+0x30/0x60 [ 278.589329][T13496] __kobject_del+0xe1/0x300 [ 278.594371][T13496] kobject_del+0x45/0x60 [ 278.599151][T13496] elevator_change_done+0xef/0x540 [ 278.604791][T13496] elevator_change+0x332/0x450 [ 278.610084][T13496] elevator_set_none+0x42/0xb0 [ 278.615465][T13496] blk_mq_update_nr_hw_queues+0x72c/0x19a0 [ 278.621807][T13496] nbd_start_device+0x17f/0xb10 [ 278.627189][T13496] nbd_genl_connect+0x135b/0x18f0 [ 278.632834][T13496] genl_family_rcv_msg_doit+0x215/0x300 [ 278.638905][T13496] genl_rcv_msg+0x60e/0x790 [ 278.643931][T13496] netlink_rcv_skb+0x205/0x470 [ 278.649245][T13496] genl_rcv+0x28/0x40 [ 278.653752][T13496] netlink_unicast+0x82c/0x9e0 [ 278.659042][T13496] netlink_sendmsg+0x805/0xb30 [ 278.664338][T13496] __sock_sendmsg+0x219/0x270 [ 278.669549][T13496] ____sys_sendmsg+0x505/0x830 [ 278.674853][T13496] ___sys_sendmsg+0x21f/0x2a0 [ 278.680059][T13496] __x64_sys_sendmsg+0x19b/0x260 [ 278.685519][T13496] do_syscall_64+0xfa/0x3b0 [ 278.690554][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.696988][T13496] [ 278.696988][T13496] other info that might help us debug this: [ 278.696988][T13496] [ 278.707234][T13496] Chain exists of: [ 278.707234][T13496] &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 278.707234][T13496] [ 278.721164][T13496] Possible unsafe locking scenario: [ 278.721164][T13496] [ 278.728652][T13496] CPU0 CPU1 [ 278.734019][T13496] ---- ---- [ 278.739394][T13496] lock(&q->q_usage_counter(io)#51); [ 278.744784][T13496] lock(fs_reclaim); [ 278.751293][T13496] lock(&q->q_usage_counter(io)#51); [ 278.759202][T13496] lock(&root->kernfs_rwsem); [ 278.763981][T13496] [ 278.763981][T13496] *** DEADLOCK *** [ 278.763981][T13496] [ 278.772131][T13496] 6 locks held by syz.2.2207/13496: [ 278.777333][T13496] #0: ffffffff8f59d230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 278.785541][T13496] #1: ffffffff8f59d048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 278.794541][T13496] #2: ffff88802500c988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x19a0 [ 278.805981][T13496] #3: ffff88802500c8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x19a0 [ 278.816995][T13496] #4: ffff888025010a78 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 278.827733][T13496] #5: ffff888025010ab0 (&q->q_usage_counter(queue)#3){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 278.838645][T13496] [ 278.838645][T13496] stack backtrace: [ 278.844564][T13496] CPU: 0 UID: 0 PID: 13496 Comm: syz.2.2207 Not tainted syzkaller #0 PREEMPT(full) [ 278.844592][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.844615][T13496] Call Trace: [ 278.844624][T13496] [ 278.844633][T13496] dump_stack_lvl+0x189/0x250 [ 278.844659][T13496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.844681][T13496] ? __pfx__printk+0x10/0x10 [ 278.844707][T13496] ? print_lock_name+0xde/0x100 [ 278.844733][T13496] print_circular_bug+0x2ee/0x310 [ 278.844755][T13496] check_noncircular+0x134/0x160 [ 278.844777][T13496] validate_chain+0xb9b/0x2140 [ 278.844806][T13496] __lock_acquire+0xab9/0xd20 [ 278.844835][T13496] ? kernfs_remove+0x30/0x60 [ 278.844856][T13496] lock_acquire+0x120/0x360 [ 278.844881][T13496] ? kernfs_remove+0x30/0x60 [ 278.844908][T13496] down_write+0x96/0x1f0 [ 278.844924][T13496] ? kernfs_remove+0x30/0x60 [ 278.844945][T13496] ? __pfx_down_write+0x10/0x10 [ 278.844959][T13496] ? kernfs_root+0x1c/0x230 [ 278.844977][T13496] ? kernfs_root+0x1c/0x230 [ 278.844994][T13496] ? kernfs_root+0x1c/0x230 [ 278.845013][T13496] ? kernfs_root+0x1ea/0x230 [ 278.845032][T13496] kernfs_remove+0x30/0x60 [ 278.845053][T13496] __kobject_del+0xe1/0x300 [ 278.845082][T13496] kobject_del+0x45/0x60 [ 278.845108][T13496] elevator_change_done+0xef/0x540 [ 278.845135][T13496] elevator_change+0x332/0x450 [ 278.845164][T13496] elevator_set_none+0x42/0xb0 [ 278.845190][T13496] blk_mq_update_nr_hw_queues+0x72c/0x19a0 [ 278.845217][T13496] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 278.845244][T13496] ? sysfs_add_file_mode_ns+0x259/0x300 [ 278.845276][T13496] nbd_start_device+0x17f/0xb10 [ 278.845306][T13496] ? device_create_file+0xf4/0x1c0 [ 278.845323][T13496] nbd_genl_connect+0x135b/0x18f0 [ 278.845354][T13496] ? __pfx_nbd_genl_connect+0x10/0x10 [ 278.845390][T13496] ? __nla_parse+0x40/0x60 [ 278.845418][T13496] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 278.845443][T13496] genl_family_rcv_msg_doit+0x215/0x300 [ 278.845467][T13496] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.845494][T13496] ? stack_trace_save+0x9c/0xe0 [ 278.845517][T13496] genl_rcv_msg+0x60e/0x790 [ 278.845539][T13496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.845557][T13496] ? __pfx_nbd_genl_connect+0x10/0x10 [ 278.845588][T13496] netlink_rcv_skb+0x205/0x470 [ 278.845615][T13496] ? __lock_acquire+0xab9/0xd20 [ 278.845641][T13496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.845660][T13496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.845693][T13496] ? down_read+0x1ad/0x2e0 [ 278.845721][T13496] genl_rcv+0x28/0x40 [ 278.845738][T13496] netlink_unicast+0x82c/0x9e0 [ 278.845765][T13496] ? __pfx_netlink_unicast+0x10/0x10 [ 278.845788][T13496] ? netlink_sendmsg+0x642/0xb30 [ 278.845813][T13496] ? skb_put+0x11b/0x210 [ 278.845842][T13496] netlink_sendmsg+0x805/0xb30 [ 278.845872][T13496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.845900][T13496] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.845929][T13496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.845948][T13496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.845975][T13496] __sock_sendmsg+0x219/0x270 [ 278.845998][T13496] ____sys_sendmsg+0x505/0x830 [ 278.846019][T13496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.846040][T13496] ? import_iovec+0x74/0xa0 [ 278.846061][T13496] ___sys_sendmsg+0x21f/0x2a0 [ 278.846079][T13496] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.846112][T13496] ? __fget_files+0x2a/0x420 [ 278.846139][T13496] ? __fget_files+0x3a0/0x420 [ 278.846170][T13496] __x64_sys_sendmsg+0x19b/0x260 [ 278.846188][T13496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.846211][T13496] ? rcu_is_watching+0x15/0xb0 [ 278.846230][T13496] ? do_syscall_64+0xbe/0x3b0 [ 278.846259][T13496] do_syscall_64+0xfa/0x3b0 [ 278.846283][T13496] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.846308][T13496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.846326][T13496] ? clear_bhb_loop+0x60/0xb0 [ 278.846346][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.846371][T13496] RIP: 0033:0x7f4c13d8ebe9 [ 278.846388][T13496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.846404][T13496] RSP: 002b:00007f4c11ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.846423][T13496] RAX: ffffffffffffffda RBX: 00007f4c13fb5fa0 RCX: 00007f4c13d8ebe9 [ 278.846437][T13496] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 278.846449][T13496] RBP: 00007f4c13e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 278.846460][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.846470][T13496] R13: 00007f4c13fb6038 R14: 00007f4c13fb5fa0 R15: 00007fff073a26b8 [ 278.846491][T13496] [ 279.302586][T13490] tipc: Disabling bearer [ 279.390485][ T5862] block nbd2: Receive control failed (result -32) [ 279.397364][ T5862] block nbd2: Receive control failed (result -32) [ 279.423058][T13496] nbd2: detected capacity change from 0 to 127 [ 279.458746][ T5915] block nbd2: Dead connection, failed to find a fallback [ 279.476128][ T5915] block nbd2: shutting down sockets [ 279.483973][ T5915] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.493933][ T5915] Buffer I/O error on dev nbd2, logical block 0, async page read [ 279.504229][ T5915] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.515204][ T5915] Buffer I/O error on dev nbd2, logical block 1, async page read [ 279.527898][ T5915] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.537425][ T5915] Buffer I/O error on dev nbd2, logical block 2, async page read [ 279.553136][ T5915] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.562592][ T5915] Buffer I/O error on dev nbd2, logical block 3, async page read [ 279.570494][ T5915] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.579646][ T5915] Buffer I/O error on dev nbd2, logical block 0, async page read [ 279.588325][ T5915] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.598515][ T5915] Buffer I/O error on dev nbd2, logical block 1, async page read [ 279.609105][ T5915] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.619334][ T5915] Buffer I/O error on dev nbd2, logical block 2, async page read [ 279.627954][ T5915] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.637361][ T5915] Buffer I/O error on dev nbd2, logical block 3, async page read [ 279.646497][ T5915] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.655800][ T5915] Buffer I/O error on dev nbd2, logical block 0, async page read [ 279.663841][ T5915] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.673715][ T5915] Buffer I/O error on dev nbd2, logical block 1, async page read [ 279.683403][ T5915] ldm_validate_partition_table(): Disk read failed. [ 279.691716][ T5915] Dev nbd2: unable to read RDB block 0 [ 279.698591][ T5915] nbd2: unable to read partition table [ 279.710489][ T5915] ldm_validate_partition_table(): Disk read failed. [ 279.718574][ T5915] Dev nbd2: unable to read RDB block 0 [ 279.727019][ T5915] nbd2: unable to read partition table