last executing test programs: 2.256063577s ago: executing program 2 (id=13033): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 2.133794751s ago: executing program 2 (id=13035): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x6, 0x9) 2.06421935s ago: executing program 0 (id=13036): socket$inet6(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.924283253s ago: executing program 2 (id=13040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x9, 0x3, 0x4}]}}]}, 0x40}}, 0x0) 1.908242273s ago: executing program 0 (id=13041): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x80, 0x0}}], 0x2, 0x44010) 1.870723375s ago: executing program 3 (id=13042): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) 1.805132025s ago: executing program 1 (id=13043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 1.70200358s ago: executing program 0 (id=13044): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0xdb, 0x2, "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"}]}}]}, 0x170}}, 0x0) 1.699313388s ago: executing program 2 (id=13045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xf, 0xfff, 0x1ff, 0x2, 0x2, 0x8}}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x54}}, 0x0) 1.516167455s ago: executing program 4 (id=13046): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 1.416938824s ago: executing program 3 (id=13047): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1ff, 0x12) 1.387787776s ago: executing program 0 (id=13048): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x4}, @TCA_CODEL_TARGET={0x8}]}}]}, 0x44}}, 0x0) 1.344909219s ago: executing program 2 (id=13049): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 1.318855s ago: executing program 1 (id=13050): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x44, r1, 0x821, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) 1.264184511s ago: executing program 4 (id=13051): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6001010000081181fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) 1.198310373s ago: executing program 3 (id=13052): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000007c0)="f6d7c80dfc24d2541747ae65c63e", 0xe}, {&(0x7f0000000540)="a2baaea2343e521bc23c3a10bda506e1c33ecb", 0x13}, {&(0x7f0000000680)="b3", 0x1}], 0x3, 0x0, 0x0, 0x8000}, 0x4880) 1.085107554s ago: executing program 0 (id=13053): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) 1.037366118s ago: executing program 1 (id=13054): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.022692838s ago: executing program 4 (id=13055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x0, 0x0, 0x2, 0xff, 0x1, 0x1600}, [@RTA_NH_ID={0x8, 0x1e, 0x140000}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4008094) 777.488265ms ago: executing program 3 (id=13056): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 755.154921ms ago: executing program 0 (id=13057): accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80800) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fe}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 608.144057ms ago: executing program 1 (id=13058): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xfffb, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="08001efbb07d0000", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) 599.294868ms ago: executing program 4 (id=13059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x21, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 374.942214ms ago: executing program 3 (id=13060): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x4) 312.899177ms ago: executing program 1 (id=13061): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 196.122308ms ago: executing program 4 (id=13062): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @empty, 0xa6, 0x2}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0x2000) 126.832364ms ago: executing program 2 (id=13063): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040), 0x4) 74.948483ms ago: executing program 3 (id=13064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) close(r0) 96.401µs ago: executing program 1 (id=13065): syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ibss_ssid, 0x6, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 0s ago: executing program 4 (id=13066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x44, r1, 0xf2473ed90fb552e1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "ced67e75c6458b0b9c55e4a35ed2aaae"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x44800) kernel console output (not intermixed with test programs): 92] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4825'. [ 349.198164][T16835] netlink: 'syz.2.4846': attribute type 1 has an invalid length. [ 349.232860][T16835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4846'. [ 349.313594][T16842] tipc: Trying to set illegal importance in message [ 349.955020][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4863'. [ 350.056457][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4866'. [ 350.506266][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4877'. [ 350.540792][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4877'. [ 350.788144][T16921] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.873962][T16924] x_tables: ip_tables: ah match: only valid for protocol 51 [ 351.498681][T16959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4899'. [ 352.128379][T16995] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.365207][T17007] xt_TCPMSS: Only works on TCP SYN packets [ 352.631994][T17017] erspan1: entered promiscuous mode [ 352.642473][T17017] erspan1: entered allmulticast mode [ 352.838991][T16987] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 353.206522][T17051] x9: renamed from bridge_slave_0 (while UP) [ 353.289550][T17057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4938'. [ 353.489028][T17066] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4946'. [ 353.494610][T17069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.546430][T17066] 0: renamed from hsr_slave_1 (while UP) [ 353.577528][T17066] 0: entered allmulticast mode [ 353.600889][T17066] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 353.828614][T17086] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 354.110398][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 354.656708][T17133] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 354.939685][T17147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4985'. [ 355.457198][T17179] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551550) [ 355.505743][T17179] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 355.740743][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5002'. [ 355.788017][T17196] netlink: 'syz.3.5005': attribute type 16 has an invalid length. [ 355.822542][T17196] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5005'. [ 355.845283][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5006'. [ 356.928828][T17244] netlink: 'syz.2.5024': attribute type 32 has an invalid length. [ 356.967018][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'. [ 356.999173][T17244] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 357.523002][T17275] netlink: 'syz.1.5036': attribute type 21 has an invalid length. [ 357.599651][T17275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5036'. [ 357.704246][T17281] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5038'. [ 357.854187][T17289] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 358.021669][T17295] xt_bpf: check failed: parse error [ 358.270476][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5048'. [ 358.318516][T17307] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5048'. [ 358.641741][T17326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5056'. [ 358.659120][T17326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5056'. [ 358.808769][T17330] xt_hashlimit: max too large, truncated to 1048576 [ 358.991274][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5062'. [ 359.249100][T17355] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5069'. [ 359.280408][T17355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5069'. [ 359.729130][T17384] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 359.811182][T17388] xt_SECMARK: invalid mode: 0 [ 359.870413][T17392] netlink: 'syz.3.5084': attribute type 26 has an invalid length. [ 359.874383][T17394] netlink: 'syz.0.5082': attribute type 3 has an invalid length. [ 360.580378][T17431] netlink: 'syz.4.5099': attribute type 11 has an invalid length. [ 362.181296][T17513] __nla_validate_parse: 8 callbacks suppressed [ 362.181319][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5133'. [ 362.226333][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5133'. [ 362.661363][T17537] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 35157 - 0 [ 362.710223][T17537] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 35157 - 0 [ 362.742850][T17537] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 35157 - 0 [ 362.818473][T17537] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 35157 - 0 [ 362.850686][T17537] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 43649 - 0 [ 362.873093][T17537] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 43649 - 0 [ 362.900263][T17537] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 43649 - 0 [ 362.936933][T17537] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 43649 - 0 [ 362.952707][T17537] geneve3: entered promiscuous mode [ 362.978704][T17537] geneve3: entered allmulticast mode [ 362.996790][T17540] bridge0: port 5(team0) entered disabled state [ 363.021214][T17540] bridge0: port 4(batadv0) entered disabled state [ 363.069986][T17540] dummy0: left allmulticast mode [ 363.090219][T17540] dummy0: left promiscuous mode [ 363.095452][T17540] bridge0: port 3(dummy0) entered disabled state [ 363.130025][T17540] bridge_slave_1: left allmulticast mode [ 363.138318][T17540] bridge_slave_1: left promiscuous mode [ 363.151785][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.157128][T17562] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 363.184357][T17540] bridge_slave_0: left allmulticast mode [ 363.192606][T17540] bridge_slave_0: left promiscuous mode [ 363.198431][T17540] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.219403][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 364.785114][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5189'. [ 364.806375][T17648] netlink: 'syz.0.5188': attribute type 12 has an invalid length. [ 364.954756][T17656] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 365.060019][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5193'. [ 365.562109][T17684] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 365.829685][T17694] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 365.889504][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'. [ 366.270465][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5215'. [ 366.579104][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 367.150372][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5236'. [ 367.298669][T17774] netlink: 'syz.0.5241': attribute type 9 has an invalid length. [ 367.546179][T17787] netlink: 'syz.0.5246': attribute type 2 has an invalid length. [ 367.752608][T17798] netlink: 508 bytes leftover after parsing attributes in process `syz.0.5253'. [ 367.817419][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5255'. [ 368.324347][T17833] IPVS: length: 78 != 8 [ 368.444667][T17839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.560840][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 368.638490][T17851] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 369.237337][T17879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5295'. [ 369.688381][T17898] netlink: 'syz.4.5303': attribute type 1 has an invalid length. [ 369.839089][T17907] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5306'. [ 369.850583][T17905] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 370.015407][T17912] netlink: 'syz.0.5310': attribute type 21 has an invalid length. [ 370.070687][T17912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5310'. [ 370.476808][T17940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5323'. [ 370.495344][T17940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5323'. [ 371.025821][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5337'. [ 371.066145][T17967] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 371.430403][T17993] netlink: 'syz.0.5350': attribute type 1 has an invalid length. [ 371.462728][T17993] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5350'. [ 372.447331][T18050] No such timeout policy "syz0" [ 372.693289][T18064] netlink: 'syz.0.5384': attribute type 1 has an invalid length. [ 372.733120][T18064] netlink: 'syz.0.5384': attribute type 11 has an invalid length. [ 372.790833][T18072] netlink: 'syz.4.5388': attribute type 1 has an invalid length. [ 372.829019][T18072] netlink: 'syz.4.5388': attribute type 2 has an invalid length. [ 373.347915][T18101] __nla_validate_parse: 5 callbacks suppressed [ 373.347937][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5401'. [ 373.608126][T18118] netlink: 'syz.3.5408': attribute type 10 has an invalid length. [ 373.642875][T18118] batadv0: left promiscuous mode [ 373.647910][T18118] batadv0: left allmulticast mode [ 373.678337][T18118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.715018][T18118] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 374.115165][T18145] netlink: 'syz.2.5424': attribute type 9 has an invalid length. [ 374.126452][T18145] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.5424'. [ 374.443258][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5435'. [ 374.455780][T18167] netlink: 'syz.0.5436': attribute type 21 has an invalid length. [ 374.482990][T18167] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.501640][T18167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.508964][T18167] IPv6: NLM_F_CREATE should be set when creating new route [ 374.516324][T18167] IPv6: NLM_F_CREATE should be set when creating new route [ 374.523610][T18167] IPv6: NLM_F_CREATE should be set when creating new route [ 374.739669][T18181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5442'. [ 374.884653][T18188] xt_socket: unknown flags 0x4 [ 375.299129][T18212] netlink: 'syz.3.5458': attribute type 10 has an invalid length. [ 375.382889][T18212] syz_tun: entered promiscuous mode [ 375.417644][T18212] syz_tun: entered allmulticast mode [ 375.453552][T18212] team0: Port device syz_tun added [ 375.533931][T18226] xt_l2tp: invalid flags combination: 4 [ 375.636181][T18228] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5466'. [ 375.883059][T18246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5473'. [ 375.930365][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5476'. [ 375.939332][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5476'. [ 376.001163][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5478'. [ 376.638966][T18287] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5494'. [ 376.681585][T18292] ipt_REJECT: ECHOREPLY no longer supported. [ 377.939775][T18322] wg1 speed is unknown, defaulting to 1000 [ 378.501529][T18375] openvswitch: netlink: Missing key (keys=40, expected=80) [ 378.923522][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.693394][T18428] IPv6: syztnl2: Disabled Multicast RS [ 379.850704][T18437] __nla_validate_parse: 1 callbacks suppressed [ 379.850727][T18437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5552'. [ 379.934407][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5554'. [ 380.110716][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5559'. [ 380.306689][T18464] netlink: 'syz.0.5565': attribute type 10 has an invalid length. [ 381.190724][T18497] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 381.290025][T18497] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 381.620640][T18515] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 382.125030][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5598'. [ 382.230852][T18507] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 382.341480][T18543] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.670783][T18559] netlink: 'syz.0.5607': attribute type 21 has an invalid length. [ 382.694117][T18559] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5607'. [ 382.723709][T18559] netlink: 'syz.0.5607': attribute type 5 has an invalid length. [ 382.740386][T18559] netlink: 'syz.0.5607': attribute type 6 has an invalid length. [ 382.758543][T18559] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5607'. [ 382.967403][T18571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5611'. [ 383.470413][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 384.104267][T18620] ieee802154 phy1 wpan1: encryption failed: -90 [ 384.407742][T18637] ksmbd: Unknown IPC event: 3, ignore. [ 384.560786][T18641] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 384.605376][T18645] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5641'. [ 384.662442][T18645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5641'. [ 384.883217][T18657] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5645'. [ 385.358404][T18678] xt_l2tp: invalid flags combination: c [ 385.587673][T18690] netlink: 'syz.1.5657': attribute type 2 has an invalid length. [ 386.479043][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5672'. [ 386.511639][T18724] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 386.575414][T18731] netlink: 'syz.4.5675': attribute type 3 has an invalid length. [ 386.956681][T18751] x_tables: unsorted underflow at hook 3 [ 387.226075][T18768] IPVS: set_ctl: invalid protocol: 4598 10.1.1.1:20002 [ 387.246150][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 387.594056][T18790] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 387.607143][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5703'. [ 387.785977][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5708'. [ 388.026697][T18812] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 388.087987][T18814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5716'. [ 388.111893][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5716'. [ 388.183517][T18819] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5719'. [ 388.214169][T18819] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5719'. [ 388.447177][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5727'. [ 388.993475][T18864] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 389.266592][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5748'. [ 389.956852][T18917] IPv6: sit2: Disabled Multicast RS [ 390.300435][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5778'. [ 390.647723][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5784'. [ 390.707335][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5785'. [ 390.897742][T18963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5789'. [ 390.917155][T18935] wg1 speed is unknown, defaulting to 1000 [ 391.534338][T18999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5802'. [ 392.502347][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5827'. [ 392.689602][T19053] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5832'. [ 392.948107][T19059] xt_CT: No such helper "snmp" [ 393.030852][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5839'. [ 393.484861][T19092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5851'. [ 393.935352][T19118] netlink: 'syz.2.5862': attribute type 5 has an invalid length. [ 393.999229][T19122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.143725][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'. [ 394.223157][T19135] netlink: 'syz.3.5870': attribute type 10 has an invalid length. [ 394.246481][T19135] team0: Device hsr_slave_0 failed to register rx_handler [ 394.573333][T19152] netlink: 'syz.0.5879': attribute type 3 has an invalid length. [ 395.750561][T19185] __nla_validate_parse: 2 callbacks suppressed [ 395.750583][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5894'. [ 395.812087][T19185] netlink: 'syz.4.5894': attribute type 5 has an invalid length. [ 395.840395][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5894'. [ 395.902499][T19185] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 256 - 0 [ 395.929296][T19185] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 256 - 0 [ 395.974522][T19185] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 256 - 0 [ 395.990371][T19185] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 256 - 0 [ 396.031220][T19185] geneve4: entered promiscuous mode [ 396.036766][T19185] geneve4: entered allmulticast mode [ 396.077674][T19195] veth0_macvtap: left promiscuous mode [ 396.338689][T19209] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5905'. [ 396.688661][T19230] SET target dimension over the limit! [ 397.237749][T19258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5930'. [ 397.512504][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5936'. [ 397.633921][T19279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5939'. [ 397.753394][T19284] openvswitch: netlink: Key type 156 is out of range max 32 [ 398.511364][T19326] netlink: 'syz.1.5957': attribute type 16 has an invalid length. [ 398.561369][T19326] netlink: 'syz.1.5957': attribute type 3 has an invalid length. [ 398.569176][T19326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5957'. [ 398.643700][T19332] netlink: 'syz.3.5960': attribute type 21 has an invalid length. [ 398.679197][T19332] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5960'. [ 398.708811][T19332] netlink: 'syz.3.5960': attribute type 4 has an invalid length. [ 398.737916][T19332] netlink: 'syz.3.5960': attribute type 3 has an invalid length. [ 398.771056][T19332] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5960'. [ 399.186087][T19358] netlink: 'syz.0.5972': attribute type 8 has an invalid length. [ 399.208829][T19360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5973'. [ 399.419159][T19376] bridge_slave_1: left allmulticast mode [ 399.440601][T19376] bridge_slave_1: left promiscuous mode [ 399.460465][T19376] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.524786][T19376] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 399.654272][T19386] netlink: 'syz.3.5986': attribute type 4 has an invalid length. [ 401.033767][T19459] __nla_validate_parse: 7 callbacks suppressed [ 401.033791][T19459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6020'. [ 401.085368][T19459] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6020'. [ 401.103392][T19459] netlink: 'syz.1.6020': attribute type 5 has an invalid length. [ 401.115769][T19459] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6020'. [ 401.177781][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6024'. [ 401.320986][T19468] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.369857][T19477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6032'. [ 401.446642][T19479] netlink: 'syz.2.6030': attribute type 1 has an invalid length. [ 401.928656][T19510] x_tables: duplicate underflow at hook 2 [ 402.068733][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6049'. [ 402.100297][T19518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6049'. [ 402.137011][T19520] netlink: 'syz.1.6051': attribute type 15 has an invalid length. [ 402.204464][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6054'. [ 402.230390][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6053'. [ 402.259055][T19526] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 402.309608][T19530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6055'. [ 402.788547][T19556] wg1: entered promiscuous mode [ 402.799351][T19556] wg1: entered allmulticast mode [ 402.957920][T19566] SET target dimension over the limit! [ 403.084023][T19572] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 403.114013][T19572] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 403.429272][T19590] netlink: 'syz.0.6086': attribute type 6 has an invalid length. [ 404.207045][T19636] netlink: 'syz.3.6109': attribute type 1 has an invalid length. [ 404.667473][T19660] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 404.720610][T19665] SET target dimension over the limit! [ 405.153905][T19689] netlink: 'syz.0.6135': attribute type 1 has an invalid length. [ 405.177663][T19689] netlink: 'syz.0.6135': attribute type 2 has an invalid length. [ 405.244343][T19693] netlink: 'syz.2.6136': attribute type 4 has an invalid length. [ 406.488225][T19761] __nla_validate_parse: 9 callbacks suppressed [ 406.488245][T19761] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6169'. [ 406.535904][T19761] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 406.573378][T19761] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 406.838321][T19776] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6177'. [ 407.279074][T19795] bridge0: port 3(syz_tun) entered blocking state [ 407.297400][T19795] bridge0: port 3(syz_tun) entered disabled state [ 407.316463][T19795] syz_tun: entered allmulticast mode [ 407.337182][T19795] syz_tun: entered promiscuous mode [ 407.361022][T19795] bridge0: port 3(syz_tun) entered blocking state [ 407.367683][T19795] bridge0: port 3(syz_tun) entered forwarding state [ 407.452232][T19805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6192'. [ 407.463747][T19805] unsupported nlmsg_type 40 [ 408.274129][T19849] netlink: 'syz.4.6214': attribute type 32 has an invalid length. [ 408.395140][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 408.411356][T19857] netlink: 'syz.2.6217': attribute type 31 has an invalid length. [ 408.813588][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6228'. [ 408.923484][T19885] xt_bpf: check failed: parse error [ 408.968812][T19887] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6233'. [ 409.377514][T19912] bond0: option ad_select: unable to set because the bond device is up [ 409.793748][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6255'. [ 410.684075][T19982] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 410.889878][T19996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6286'. [ 410.923762][T19996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6286'. [ 411.093519][T20006] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 411.127576][T20006] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 411.392617][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6299'. [ 411.760651][T20044] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6311'. [ 411.761043][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6310'. [ 412.382718][T20074] netlink: 'syz.1.6324': attribute type 11 has an invalid length. [ 412.405801][T20074] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6324'. [ 412.426909][T20052] infiniband syz1: set down [ 412.431835][T20052] infiniband syz1: added bond_slave_1 [ 412.485117][T20052] RDS/IB: syz1: added [ 412.489303][T20052] smc: adding ib device syz1 with port count 1 [ 412.495696][T20052] smc: ib device syz1 port 1 has pnetid [ 412.624972][T20082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6326'. [ 413.021196][T20067] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 413.336334][T20109] sctp: [Deprecated]: syz.3.6341 (pid 20109) Use of int in maxseg socket option. [ 413.336334][T20109] Use struct sctp_assoc_value instead [ 413.722266][T20126] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6348'. [ 414.285193][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6361'. [ 414.470399][T20160] netlink: 'syz.3.6365': attribute type 1 has an invalid length. [ 414.490716][T20160] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6365'. [ 414.796452][T20177] netlink: 'syz.2.6374': attribute type 5 has an invalid length. [ 415.154488][T20190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6379'. [ 415.324011][T20195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6381'. [ 415.460676][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6385'. [ 415.497392][T20200] tc_dump_action: action bad kind [ 417.273341][T20296] C: renamed from team_slave_0 [ 417.312475][T20296] netlink: 'syz.3.6432': attribute type 1 has an invalid length. [ 417.350179][T20296] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 417.442680][T20304] netlink: 'syz.2.6436': attribute type 2 has an invalid length. [ 417.631436][T20314] __nla_validate_parse: 2 callbacks suppressed [ 417.631457][T20314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6442'. [ 417.688329][T20314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6442'. [ 417.725948][T20320] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 417.755179][T20324] netlink: 'syz.1.6445': attribute type 21 has an invalid length. [ 418.066249][T20340] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 418.112098][T20343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6453'. [ 418.144673][T20343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6453'. [ 418.317121][T20351] netlink: 'syz.2.6457': attribute type 11 has an invalid length. [ 418.999347][T20390] netlink: 'syz.1.6477': attribute type 1 has an invalid length. [ 419.038245][T20390] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6477'. [ 419.215408][T20400] delete_channel: no stack [ 419.397640][T20413] netlink: 'syz.0.6487': attribute type 1 has an invalid length. [ 419.419364][T20413] NCSI netlink: No device for ifindex 0 [ 419.518830][T20421] xt_ipcomp: unknown flags F7 [ 419.662521][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6494'. [ 419.704381][T20426] netlink: 'syz.0.6494': attribute type 1 has an invalid length. [ 419.981856][T20443] ip6gre2: entered promiscuous mode [ 420.189299][T20457] netlink: 'syz.4.6507': attribute type 13 has an invalid length. [ 420.242539][T20459] netlink: 'syz.3.6511': attribute type 1 has an invalid length. [ 420.414305][T20467] netlink: 'syz.3.6515': attribute type 30 has an invalid length. [ 420.424483][T20467] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 420.465580][T20467] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 420.674069][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6522'. [ 420.694004][T20483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6522'. [ 420.753188][T20485] veth7: entered promiscuous mode [ 420.961878][T20495] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 420.970419][T20499] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6531'. [ 420.970483][T20499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6531'. [ 420.995237][T20495] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 421.006132][T20495] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 422.068929][T20551] xt_TCPMSS: Only works on TCP SYN packets [ 422.110773][T20555] netdevsim netdevsim4 netdevsim0: unset [1, 3] type 2 family 0 port 256 - 0 [ 422.119876][T20555] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 43649 - 0 [ 422.180535][T20555] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 35157 - 0 [ 422.189572][T20555] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.369109][T20570] netlink: 'syz.1.6565': attribute type 2 has an invalid length. [ 422.438559][T20570] : entered promiscuous mode [ 423.023107][T20603] __nla_validate_parse: 3 callbacks suppressed [ 423.023131][T20603] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6581'. [ 423.070810][T20607] xt_TCPMSS: Only works on TCP SYN packets [ 423.277846][ T30] audit: type=1107 audit(1744859796.519:2): pid=20613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 423.396868][T20626] netlink: 'syz.0.6591': attribute type 1 has an invalid length. [ 423.719085][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6596'. [ 423.958186][T20647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6604'. [ 424.298068][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'. [ 424.327614][T20669] netlink: 'syz.1.6613': attribute type 3 has an invalid length. [ 424.988629][T20702] xt_CT: No such helper "netbios-ns" [ 425.592355][T20740] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 425.852004][T20753] bond2: entered promiscuous mode [ 425.857260][T20753] bond2: entered allmulticast mode [ 425.864528][T20753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.989937][T20763] netlink: 'syz.1.6658': attribute type 6 has an invalid length. [ 426.002751][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6656'. [ 426.198499][T20766] xt_CT: No such helper "pptp" [ 426.262744][T20775] netlink: 'syz.0.6663': attribute type 32 has an invalid length. [ 426.565160][T20795] netlink: 'syz.2.6672': attribute type 5 has an invalid length. [ 427.018741][T20821] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 427.020635][T20820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6684'. [ 427.249301][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6693'. [ 427.418466][T20843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6695'. [ 427.563324][T20849] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.6700'. [ 427.718411][T20859] sctp: [Deprecated]: syz.1.6705 (pid 20859) Use of int in maxseg socket option. [ 427.718411][T20859] Use struct sctp_assoc_value instead [ 427.848168][T20870] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6710'. [ 428.019548][T20876] netlink: 'syz.0.6713': attribute type 10 has an invalid length. [ 428.061566][T20876] syz_tun: entered promiscuous mode [ 428.079741][T20876] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 428.831299][T20924] netlink: 'syz.3.6735': attribute type 16 has an invalid length. [ 428.868768][T20924] netlink: 'syz.3.6735': attribute type 17 has an invalid length. [ 429.051125][T20924] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 429.176515][T20924] veth1_vlan: left allmulticast mode [ 429.229680][T20924] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.240905][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6745'. [ 429.257965][T20924] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.261434][T20946] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.6747'. [ 429.276712][T20946] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.6747'. [ 429.279410][T20924] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.296659][T20924] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.145161][T20982] netlink: 'syz.0.6764': attribute type 4 has an invalid length. [ 430.585920][T21008] netlink: 'syz.3.6776': attribute type 10 has an invalid length. [ 430.627611][T21008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6776'. [ 430.680810][T21008] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 430.771307][T21016] SET target dimension over the limit! [ 431.786889][T21068] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 431.798186][T21067] Unknown options in mask 1f4 [ 432.129817][T21076] dvmrp0: entered allmulticast mode [ 432.549447][T21093] netlink: 'syz.3.6819': attribute type 2 has an invalid length. [ 432.570633][T21093] netlink: 'syz.3.6819': attribute type 8 has an invalid length. [ 432.578597][T21093] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6819'. [ 432.779392][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6823'. [ 432.788389][T21108] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 433.078388][T21122] netlink: 'syz.1.6834': attribute type 3 has an invalid length. [ 433.105305][T21122] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6834'. [ 433.736403][T21152] hsr_slave_0 (unregistering): left promiscuous mode [ 433.896031][T21165] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 433.996709][T21173] netlink: 'syz.3.6857': attribute type 10 has an invalid length. [ 434.024044][T21173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6857'. [ 434.053086][T21173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.086582][T21177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6861'. [ 434.100387][T21173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.109188][T21173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.140457][T21173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.204545][T21173] geneve0: entered promiscuous mode [ 434.207458][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6864'. [ 434.215815][T21173] geneve0: entered allmulticast mode [ 434.254601][T21173] team0: Port device geneve0 added [ 434.303842][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6864'. [ 434.393895][T21191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6868'. [ 435.200392][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6890'. [ 435.292680][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6894'. [ 435.360350][T21248] syz_tun: left promiscuous mode [ 435.372832][T21248] syz_tun: left allmulticast mode [ 435.409626][T21248] team0: Port device syz_tun removed [ 435.429260][T21248] bond0: (slave batadv0): Releasing backup interface [ 435.455758][T21248] bond0: (slave bond_slave_0): Releasing backup interface [ 435.486454][T21248] bond0: (slave bond_slave_1): Releasing backup interface [ 435.506179][T21248] C: left promiscuous mode [ 435.514207][T21248] C: left allmulticast mode [ 435.528126][T21248] team0: Port device C removed [ 435.543655][T21248] team_slave_1: left promiscuous mode [ 435.555560][T21248] team_slave_1: left allmulticast mode [ 435.569944][T21248] team0: Port device team_slave_1 removed [ 435.582542][T21248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.599347][T21248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.609682][T21248] batman_adv: batadv0: Removing interface: virt_wifi0 [ 435.634329][T21248] bond0: (slave macvlan0): Releasing backup interface [ 435.656572][T21248] geneve0: left promiscuous mode [ 435.662776][T21248] geneve0: left allmulticast mode [ 435.669937][T21248] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.679787][T21248] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.690643][T21248] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.699867][T21248] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.747939][T21248] team0: Port device geneve0 removed [ 436.627734][T21312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.662011][T21312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.699680][T21312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 436.718029][T21312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 437.449519][T21358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6947'. [ 437.465157][T21360] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 437.485946][T21360] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 437.496258][T21358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6947'. [ 438.035376][T21384] Bluetooth: MGMT ver 1.23 [ 438.127576][ T30] audit: type=1107 audit(1744859811.379:3): pid=21385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 438.188417][T21393] sctp: [Deprecated]: syz.3.6965 (pid 21393) Use of int in max_burst socket option deprecated. [ 438.188417][T21393] Use struct sctp_assoc_value instead [ 438.498637][T21404] hsr_slave_0 (unregistering): left promiscuous mode [ 438.662711][T21414] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 438.786444][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6980'. [ 438.834626][T21422] vlan0: entered allmulticast mode [ 438.841922][T21422] gretap0: entered allmulticast mode [ 438.859942][T21426] netlink: 822 bytes leftover after parsing attributes in process `syz.1.6981'. [ 439.083058][T21435] netlink: 'syz.0.6985': attribute type 10 has an invalid length. [ 440.357720][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.613086][T21501] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7017'. [ 441.131986][T21527] tipc: Started in network mode [ 441.136934][T21527] tipc: Node identity _, cluster identity 4711 [ 441.209532][T21531] Bluetooth: MGMT ver 1.23 [ 441.210129][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7028'. [ 441.390398][T21540] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 3, id = 0 [ 441.543623][T21545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7033'. [ 441.578101][T21548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7034'. [ 441.592639][T21545] tipc: Invalid UDP bearer configuration [ 441.592835][T21545] tipc: Enabling of bearer rejected, failed to enable media [ 442.390808][T21590] bond0: option all_slaves_active: invalid value (7) [ 443.826316][T21662] Bluetooth: MGMT ver 1.23 [ 444.028402][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7095'. [ 444.206013][T21677] sctp: [Deprecated]: syz.1.7094 (pid 21677) Use of int in maxseg socket option. [ 444.206013][T21677] Use struct sctp_assoc_value instead [ 444.380420][T21690] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 444.471481][T21696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7105'. [ 444.735593][T21708] pim6reg: entered allmulticast mode [ 446.656912][T21813] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7160'. [ 446.668355][T21813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7160'. [ 446.679351][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7160'. [ 447.463547][T21848] dummy0: entered promiscuous mode [ 447.469562][T21845] dummy0: left promiscuous mode [ 447.698587][T21859] pimreg: entered allmulticast mode [ 447.743742][T21864] pimreg: left allmulticast mode [ 448.037053][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7188'. [ 448.517952][T21901] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 448.890529][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7209'. [ 448.926315][T21920] netlink: 'syz.2.7209': attribute type 12 has an invalid length. [ 449.211951][T21938] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 449.510531][T21953] netlink: 'syz.0.7225': attribute type 58 has an invalid length. [ 449.549608][T21953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7225'. [ 449.578476][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7228'. [ 449.880330][T21971] tipc: Started in network mode [ 449.890344][T21971] tipc: Node identity @, cluster identity 4711 [ 449.917038][T21971] tipc: Enabling of bearer rejected, failed to enable media [ 450.620211][T22009] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7251'. [ 450.652976][T22009] NCSI netlink: No device for ifindex 0 [ 452.672762][T22071] netlink: 504 bytes leftover after parsing attributes in process `syz.2.7279'. [ 453.265232][T22095] netlink: 'syz.1.7290': attribute type 62 has an invalid length. [ 453.469419][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7293'. [ 453.680400][T22111] netlink: 'syz.2.7298': attribute type 1 has an invalid length. [ 453.688217][T22111] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7298'. [ 455.859237][T22223] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 456.011345][T22228] netlink: 'syz.1.7352': attribute type 29 has an invalid length. [ 456.047052][T22228] netlink: 'syz.1.7352': attribute type 29 has an invalid length. [ 457.120735][T22277] Bluetooth: MGMT ver 1.23 [ 457.163245][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7376'. [ 458.597304][T22341] team0: Port device bridge4 added [ 458.913832][T22361] xt_policy: neither incoming nor outgoing policy selected [ 459.028824][T22365] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.029606][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7416'. [ 459.061442][T22366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7416'. [ 459.079837][T22366] netlink: 'syz.2.7416': attribute type 5 has an invalid length. [ 459.089649][T22366] netlink: 'syz.2.7416': attribute type 6 has an invalid length. [ 459.354714][T22378] netlink: 'syz.1.7422': attribute type 4 has an invalid length. [ 459.379563][T22378] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7422'. [ 459.397809][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7424'. [ 459.684712][T22396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7430'. [ 460.041854][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7440'. [ 460.059417][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7440'. [ 460.291427][T22431] tipc: Started in network mode [ 460.303164][T22431] tipc: Node identity , cluster identity 4711 [ 460.318952][T22431] tipc: Failed to obtain node identity [ 460.342928][T22431] tipc: Enabling of bearer rejected, failed to enable media [ 461.102862][T22470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7465'. [ 461.487762][T22494] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7476'. [ 461.517874][T22494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7476'. [ 461.848548][T22513] netlink: 'syz.1.7485': attribute type 7 has an invalid length. [ 462.059700][T22524] tipc: Enabled bearer , priority 10 [ 463.170969][ T5922] tipc: Node number set to 1596850176 [ 463.274641][T22581] netlink: 'syz.1.7518': attribute type 11 has an invalid length. [ 464.260742][T22631] __nla_validate_parse: 9 callbacks suppressed [ 464.260767][T22631] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7541'. [ 464.393596][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7545'. [ 464.451734][T22641] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 464.460611][T22641] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.469340][T22641] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.478507][T22641] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.497371][T22641] Zero length message leads to an empty skb [ 464.565053][T22646] tipc: Enabling of bearer rejected, failed to enable media [ 464.730843][T22652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7553'. [ 465.396307][T22654] wg1 speed is unknown, defaulting to 1000 [ 466.135176][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7583'. [ 466.293410][T22719] tipc: Enabled bearer , priority 10 [ 466.503227][T22730] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7591'. [ 466.658781][T22734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7593'. [ 467.214954][T22756] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7603'. [ 467.550550][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 467.566236][T22766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.613561][ T30] audit: type=1800 audit(1744859840.869:4): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7611" name="memory.events" dev="tmpfs" ino=7690 res=0 errno=0 [ 467.674066][ T30] audit: type=1804 audit(1744859840.869:5): pid=22772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7611" name="/newroot/1533/memory.events" dev="tmpfs" ino=7690 res=1 errno=0 [ 468.640546][T22817] netlink: 'syz.2.7633': attribute type 1 has an invalid length. [ 468.658938][T22817] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7633'. [ 468.832623][T22823] netlink: 'syz.1.7636': attribute type 6 has an invalid length. [ 468.843109][T22823] netlink: 'syz.1.7636': attribute type 7 has an invalid length. [ 468.852471][T22823] netlink: 'syz.1.7636': attribute type 8 has an invalid length. [ 469.014292][T22833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7640'. [ 469.045656][T22835] netlink: 192 bytes leftover after parsing attributes in process `syz.2.7641'. [ 469.170153][T22840] netlink: 'syz.1.7645': attribute type 30 has an invalid length. [ 470.055989][T22890] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7669'. [ 470.286045][T22906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7677'. [ 471.409117][T22963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7705'. [ 471.601261][T22972] netlink: 'syz.1.7710': attribute type 10 has an invalid length. [ 471.638894][T22972] syz_tun: entered promiscuous mode [ 471.686480][T22972] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 472.568968][T23015] netlink: 'syz.2.7730': attribute type 1 has an invalid length. [ 472.598696][T23015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7730'. [ 472.714107][T23020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7733'. [ 472.822464][T23025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7735'. [ 472.855634][T23025] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7735'. [ 472.955740][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7740'. [ 472.990364][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7740'. [ 473.196086][T23041] IPVS: Scheduler module ip_vs_sip not found [ 473.726165][T23072] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 473.787682][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 475.656014][T23182] netlink: 'syz.1.7813': attribute type 10 has an invalid length. [ 475.689704][T23187] __nla_validate_parse: 3 callbacks suppressed [ 475.689728][T23187] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7815'. [ 475.707442][T23190] netlink: 'syz.1.7813': attribute type 10 has an invalid length. [ 475.743143][T23182] batman_adv: batadv0: Adding interface: team0 [ 475.746933][T23190] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7813'. [ 475.788957][T23182] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.820940][T23182] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 475.867088][T23190] team0: entered promiscuous mode [ 475.880262][T23190] C: entered promiscuous mode [ 475.885809][T23190] team_slave_1: entered promiscuous mode [ 475.899183][T23190] bridge4: entered promiscuous mode [ 475.910299][T23190] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.917441][T23190] batman_adv: batadv0: Interface activated: team0 [ 475.933478][T23190] batman_adv: batadv0: Interface deactivated: team0 [ 475.968841][T23190] batman_adv: batadv0: Removing interface: team0 [ 475.978809][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7821'. [ 475.999393][T23190] bridge0: port 3(team0) entered blocking state [ 476.008036][T23190] bridge0: port 3(team0) entered disabled state [ 476.021791][T23190] team0: entered allmulticast mode [ 476.027201][T23190] C: entered allmulticast mode [ 476.038198][T23190] team_slave_1: entered allmulticast mode [ 476.046849][T23190] bridge4: entered allmulticast mode [ 476.063739][T23190] bridge0: port 3(team0) entered blocking state [ 476.070311][T23190] bridge0: port 3(team0) entered forwarding state [ 477.192969][T23268] openvswitch: netlink: IP tunnel dst address not specified [ 477.569862][T23287] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 477.584140][ T9] IPVS: starting estimator thread 0... [ 477.705865][T23297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7860'. [ 477.720829][T23290] IPVS: using max 26 ests per chain, 62400 per kthread [ 477.859730][T23304] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7863'. [ 477.900336][T23304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7863'. [ 477.909449][T23304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7863'. [ 478.660082][T23346] tipc: Enabling of bearer rejected, failed to enable media [ 479.870566][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 479.959648][T23414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7918'. [ 479.977664][T23414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7918'. [ 480.233607][T23427] tipc: Started in network mode [ 480.247218][T23427] tipc: Node identity , cluster identity 4711 [ 480.258002][T23427] tipc: Failed to set node id, please configure manually [ 480.274216][T23427] tipc: Enabling of bearer rejected, failed to enable media [ 480.413476][T23438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7929'. [ 480.668332][T23451] netlink: 'syz.4.7936': attribute type 10 has an invalid length. [ 480.703918][T23451] batman_adv: batadv0: Adding interface: team0 [ 480.728613][T23451] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.826363][T23463] netlink: 'syz.4.7936': attribute type 10 has an invalid length. [ 480.830092][T23462] netlink: 19 bytes leftover after parsing attributes in process `syz.3.7940'. [ 480.844566][T23451] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 480.871584][T23463] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7936'. [ 480.886957][T23465] atomic_op ffff88806086d998 conn xmit_atomic 0000000000000000 [ 480.912593][T23463] team0: entered promiscuous mode [ 480.951454][T23463] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.959135][T23463] batman_adv: batadv0: Interface activated: team0 [ 480.966460][T23463] batman_adv: batadv0: Interface deactivated: team0 [ 480.987273][T23463] batman_adv: batadv0: Removing interface: team0 [ 481.015695][T23463] bridge0: port 1(team0) entered blocking state [ 481.028983][T23463] bridge0: port 1(team0) entered disabled state [ 481.041604][T23463] team0: entered allmulticast mode [ 481.646690][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7960'. [ 482.431209][T23545] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7980'. [ 483.155986][T23588] netlink: 'syz.1.8001': attribute type 11 has an invalid length. [ 483.357900][T23595] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8004'. [ 483.480614][T23595] geneve1: entered promiscuous mode [ 483.575374][T23595] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8004'. [ 483.836402][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8011'. [ 484.054747][T23616] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 484.092857][T23616] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 485.286021][T23668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8039'. [ 485.467281][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8042'. [ 485.468840][T23677] bridge0: port 2(batadv2) entered blocking state [ 485.511521][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8042'. [ 485.526193][T23677] bridge0: port 2(batadv2) entered disabled state [ 485.537761][T23677] batadv2: entered allmulticast mode [ 485.540576][T23679] netlink: 'syz.2.8042': attribute type 18 has an invalid length. [ 485.548761][T23677] batadv2: entered promiscuous mode [ 485.747635][T23689] netlink: 'syz.4.8048': attribute type 3 has an invalid length. [ 485.971758][ T63] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 485.981284][ T63] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 486.316679][T23715] netlink: 'syz.2.8061': attribute type 1 has an invalid length. [ 487.240974][T23761] __nla_validate_parse: 1 callbacks suppressed [ 487.240997][T23761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8084'. [ 487.433043][T23771] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 488.186835][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8111'. [ 488.457672][T23831] macsec1: entered promiscuous mode [ 488.475145][T23831] macsec1: entered allmulticast mode [ 488.548164][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8122'. [ 488.552060][T23833] pimreg3: entered allmulticast mode [ 490.567094][ T5922] IPVS: starting estimator thread 0... [ 490.670811][T23947] IPVS: using max 28 ests per chain, 67200 per kthread [ 491.614686][T24005] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8204'. [ 491.985884][T24025] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8213'. [ 492.333737][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8223'. [ 493.123597][T24086] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8242'. [ 493.242026][T24091] dvmrp3: entered allmulticast mode [ 493.266349][T24091] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 493.330342][T24091] dvmrp3: left allmulticast mode [ 493.777908][T24120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8260'. [ 494.072925][T24138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8269'. [ 494.100567][T24138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8269'. [ 494.391300][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8277'. [ 494.430347][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8277'. [ 494.459642][T24154] netlink: 'syz.1.8277': attribute type 14 has an invalid length. [ 494.485933][T24154] netlink: 'syz.1.8277': attribute type 13 has an invalid length. [ 495.345384][T24205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8303'. [ 495.531865][T24215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8307'. [ 495.794639][T24228] sock: sock_timestamping_bind_phc: sock not bind to device [ 496.002409][T24241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8318'. [ 496.047499][T24239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.076385][T24239] bond0: entered promiscuous mode [ 496.082070][T24239] bond0: entered allmulticast mode [ 496.099868][T24239] team0: Port device bond0 added [ 496.129367][T24244] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 496.274081][T24250] netlink: 'syz.3.8324': attribute type 2 has an invalid length. [ 496.467187][T24262] IPVS: Error connecting to the multicast addr [ 496.980701][T24288] netlink: 'syz.3.8343': attribute type 5 has an invalid length. [ 497.488307][T24318] __nla_validate_parse: 3 callbacks suppressed [ 497.488331][T24318] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8357'. [ 497.512005][T24318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8357'. [ 497.527551][T24318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8357'. [ 498.097116][T24339] netlink: 'syz.0.8366': attribute type 30 has an invalid length. [ 498.525558][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8373'. [ 498.535674][T24351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8373'. [ 499.277796][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8390'. [ 499.876199][T24423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8405'. [ 499.904313][T24423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8405'. [ 499.991826][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8406'. [ 501.252645][T24498] netlink: 'syz.0.8442': attribute type 21 has an invalid length. [ 501.770473][T24521] netlink: 'syz.2.8452': attribute type 322 has an invalid length. [ 501.959128][T24534] netlink: 'syz.2.8458': attribute type 3 has an invalid length. [ 503.095759][T24590] netlink: 'syz.1.8485': attribute type 39 has an invalid length. [ 503.215952][T24590] bond0: (slave syz_tun): Releasing backup interface [ 504.201568][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8513'. [ 504.313231][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8516'. [ 504.360364][T24654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8516'. [ 504.799869][T24680] netlink: 'syz.0.8528': attribute type 29 has an invalid length. [ 504.832798][T24680] netlink: 'syz.0.8528': attribute type 29 has an invalid length. [ 504.866522][T24680] netlink: 'syz.0.8528': attribute type 29 has an invalid length. [ 504.900419][T24680] netlink: 'syz.0.8528': attribute type 29 has an invalid length. [ 504.908514][T24680] netlink: 'syz.0.8528': attribute type 29 has an invalid length. [ 504.932668][T24680] netlink: 'syz.0.8528': attribute type 29 has an invalid length. [ 505.698969][T24726] nbd: must specify at least one socket [ 507.593374][T24810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8587'. [ 507.899626][T24824] validate_nla: 34 callbacks suppressed [ 507.899648][T24824] netlink: 'syz.4.8594': attribute type 3 has an invalid length. [ 508.096805][T24836] rdma_op ffff88805e2501f0 conn xmit_rdma 0000000000000000 [ 508.643359][T24866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8615'. [ 508.850833][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8618'. [ 509.881717][T24932] netlink: 'syz.1.8646': attribute type 298 has an invalid length. [ 510.562864][T24968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8664'. [ 510.582610][T24968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8664'. [ 510.772345][T24976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8668'. [ 510.955827][T24986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8674'. [ 512.690917][T25078] netlink: 'syz.4.8716': attribute type 11 has an invalid length. [ 513.367402][T25110] syz.4.8731 (25110) used obsolete PPPIOCDETACH ioctl [ 514.296743][T25154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8753'. [ 514.944078][T25184] nbd: couldn't find device at index 768 [ 516.170983][T25229] bond0: Unable to set down delay as MII monitoring is disabled [ 516.307111][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8791'. [ 516.325047][T25235] netlink: 'syz.1.8790': attribute type 32 has an invalid length. [ 516.365160][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8791'. [ 516.410300][T25233] netlink: 'syz.3.8791': attribute type 20 has an invalid length. [ 516.612554][T25244] pim6reg: entered allmulticast mode [ 516.635004][T25247] pim6reg: left allmulticast mode [ 516.711870][T25249] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8797'. [ 517.501082][T25282] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 517.970669][T25297] netlink: 'syz.1.8820': attribute type 3 has an invalid length. [ 518.200907][T25308] netlink: 'syz.2.8826': attribute type 1 has an invalid length. [ 518.230428][T25308] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8826'. [ 518.249347][T25308] netlink: 'syz.2.8826': attribute type 1 has an invalid length. [ 518.590222][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 518.985639][T25342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 520.131339][T25394] tipc: Enabling not permitted [ 520.136997][T25394] tipc: Enabling of bearer rejected, failed to enable media [ 520.673872][T25420] macsec0: entered promiscuous mode [ 520.686937][T25420] macsec0: left promiscuous mode [ 521.059133][T25431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8884'. [ 521.172932][T25435] netlink: 'syz.2.8885': attribute type 1 has an invalid length. [ 521.190739][T25435] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8885'. [ 521.510198][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8894'. [ 521.547699][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8894'. [ 521.597570][T25453] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8894'. [ 522.089750][T25477] netlink: 'syz.2.8906': attribute type 1 has an invalid length. [ 522.365165][T25488] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8911'. [ 522.856464][T25510] tipc: Started in network mode [ 522.887239][T25510] tipc: Node identity ac14140f, cluster identity 4711 [ 522.911170][T25510] tipc: New replicast peer: 10.1.1.2 [ 522.925044][T25510] tipc: Enabled bearer , priority 10 [ 524.041270][T11575] tipc: Node number set to 2886997007 [ 526.399518][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9001'. [ 526.585667][T25689] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (20) [ 526.717615][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9008'. [ 526.757118][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 527.058664][T25714] ipvlan2: entered allmulticast mode [ 527.072697][T25714] macsec0: entered allmulticast mode [ 527.255148][T25722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9021'. [ 527.722206][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9030'. [ 527.753091][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9030'. [ 527.860525][T25750] netlink: 'syz.0.9032': attribute type 2 has an invalid length. [ 527.901178][T25750] lave_0: entered promiscuous mode [ 528.276718][T25771] pim6reg: entered allmulticast mode [ 528.296722][T25771] pim6reg: left allmulticast mode [ 528.341304][T25775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9045'. [ 528.849908][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9058'. [ 528.968881][T25808] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9059'. [ 529.694526][T25841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9076'. [ 529.722095][T25843] bond0: left promiscuous mode [ 529.737401][T25843] bond0: left allmulticast mode [ 529.788534][T25843] team0: Port device bond0 removed [ 529.816160][T25843] team0: left allmulticast mode [ 529.829344][T25843] bridge0: port 1(team0) entered disabled state [ 529.986846][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9081'. [ 530.020191][T25856] nbd: must specify a size in bytes for the device [ 530.212381][T25866] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.9087'. [ 530.458840][T25880] vlan2: entered allmulticast mode [ 530.499352][T25880] gretap0: entered allmulticast mode [ 531.992657][T25958] __nla_validate_parse: 5 callbacks suppressed [ 531.992681][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9130'. [ 532.063185][ T30] audit: type=1804 audit(1744859905.309:6): pid=25960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9131" name="/newroot/1873/cgroup.controllers" dev="tmpfs" ino=9401 res=1 errno=0 [ 532.104422][ T30] audit: type=1800 audit(1744859905.319:7): pid=25960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9131" name="cgroup.controllers" dev="tmpfs" ino=9401 res=0 errno=0 [ 532.497361][T25976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9138'. [ 532.523670][T25976] tipc: Enabling of bearer rejected, media not registered [ 532.967844][T25997] netlink: 'syz.3.9149': attribute type 4 has an invalid length. [ 533.501773][T26018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9158'. [ 533.599254][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9161'. [ 533.611455][T26021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9161'. [ 533.621238][T26021] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9161'. [ 533.638681][T26021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9161'. [ 533.951536][T26036] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9166'. [ 534.241623][T26050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9173'. [ 534.258420][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9175'. [ 535.473205][T26116] netlink: 'syz.0.9203': attribute type 1 has an invalid length. [ 536.828932][T26187] netlink: 'syz.1.9237': attribute type 1 has an invalid length. [ 537.127189][T26201] netlink: 'syz.1.9245': attribute type 15 has an invalid length. [ 537.969099][T26232] __nla_validate_parse: 5 callbacks suppressed [ 537.969131][T26232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9260'. [ 538.770335][T26269] siw: device registration error -23 [ 538.982063][T26280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9284'. [ 539.001295][T26285] netlink: 'syz.4.9285': attribute type 23 has an invalid length. [ 539.120439][T26288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 539.483368][T26306] openvswitch: netlink: Key type 30 is not supported [ 539.520657][T26310] Bluetooth: MGMT ver 1.23 [ 540.900190][T26373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9327'. [ 542.441746][T26413] netlink: 'syz.4.9346': attribute type 1 has an invalid length. [ 542.477951][T26413] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9346'. [ 542.496908][ T30] audit: type=1800 audit(1744859915.749:8): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9347" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9402 res=0 errno=0 [ 542.529578][T26413] netlink: 'syz.4.9346': attribute type 1 has an invalid length. [ 542.557641][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9346'. [ 542.572975][ T30] audit: type=1800 audit(1744859915.779:9): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9347" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9402 res=0 errno=0 [ 543.584242][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9367'. [ 544.312558][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9375'. [ 544.356349][T26475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9375'. [ 544.944206][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9386'. [ 545.225999][T26508] vlan2: entered promiscuous mode [ 545.238801][T26508] vlan2: entered allmulticast mode [ 545.251132][T26508] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 545.722788][T26529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9401'. [ 545.750295][T26529] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9401'. [ 545.841516][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9403'. [ 546.183181][T26554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9413'. [ 546.190162][T26555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9414'. [ 546.220267][T26554] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9413'. [ 546.229287][T26554] netlink: 'syz.2.9413': attribute type 5 has an invalid length. [ 547.024741][T26593] netlink: 'syz.4.9433': attribute type 2 has an invalid length. [ 547.043968][T26595] netlink: 'syz.0.9434': attribute type 18 has an invalid length. [ 547.259836][T26607] netlink: 'syz.0.9440': attribute type 2 has an invalid length. [ 547.618895][T26631] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 548.308754][T26660] pim6reg9: entered allmulticast mode [ 549.020864][T26688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.067020][T26688] bond6: entered promiscuous mode [ 549.091256][T26688] bond6: entered allmulticast mode [ 549.107272][T26688] team0: Port device bond6 added [ 549.628371][T26719] __nla_validate_parse: 7 callbacks suppressed [ 549.628393][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9491'. [ 549.670135][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9491'. [ 549.995705][T26742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9500'. [ 550.200663][T26750] netlink: 304 bytes leftover after parsing attributes in process `syz.4.9505'. [ 550.688362][T26774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9517'. [ 550.867639][T26783] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9521'. [ 550.884521][T26783] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9521'. [ 551.225514][T26799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9529'. [ 551.247241][T26799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9529'. [ 551.615544][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9541'. [ 551.942770][T26841] tipc: Failed to obtain node identity [ 551.948489][T26841] tipc: Enabling of bearer rejected, failed to enable media [ 552.237613][T26855] macvlan2: entered promiscuous mode [ 552.277758][T26855] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 554.679390][T26949] netlink: 'syz.0.9600': attribute type 1 has an invalid length. [ 554.693555][T26948] __nla_validate_parse: 6 callbacks suppressed [ 554.693576][T26948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9601'. [ 554.719342][T26949] netlink: 'syz.0.9600': attribute type 2 has an invalid length. [ 555.910634][T27004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9624'. [ 556.029707][T27012] netlink: 'syz.0.9628': attribute type 7 has an invalid length. [ 556.788465][T27053] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9649'. [ 557.031114][T27063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.054019][T27063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35157 - 0 [ 557.082024][T27063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 43649 - 0 [ 557.098413][T27063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 557.145571][T27067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.262410][T27063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.278533][T27063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35157 - 0 [ 557.289752][T27063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 43649 - 0 [ 557.330510][T27063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 557.482222][T27063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.493063][T27063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35157 - 0 [ 557.513636][T27063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 43649 - 0 [ 557.540237][T27063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0 [ 557.835259][T27063] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 557.924283][T27100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9672'. [ 557.940564][T27063] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 43649 - 0 [ 557.948902][T27063] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 35157 - 0 [ 557.976564][T27063] netdevsim netdevsim4 eth0: set [1, 3] type 2 family 0 port 6081 - 0 [ 558.043432][T27063] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 558.075084][T27063] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 43649 - 0 [ 558.108135][T27063] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 35157 - 0 [ 558.140569][T27063] netdevsim netdevsim4 eth1: set [1, 3] type 2 family 0 port 6081 - 0 [ 558.189751][T27063] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 558.228826][T27063] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 43649 - 0 [ 558.246155][T27063] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 35157 - 0 [ 558.256285][T27063] netdevsim netdevsim4 eth2: set [1, 3] type 2 family 0 port 6081 - 0 [ 558.314177][T27063] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 558.357562][T27063] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 43649 - 0 [ 558.387636][T27063] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 35157 - 0 [ 558.399614][T27063] netdevsim netdevsim4 eth3: set [1, 3] type 2 family 0 port 6081 - 0 [ 558.653933][T27129] macsec1: entered promiscuous mode [ 558.667379][T27129] macsec1: entered allmulticast mode [ 559.544075][T27175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9709'. [ 559.586531][T27175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9709'. [ 559.630292][T27175] netlink: 'syz.4.9709': attribute type 5 has an invalid length. [ 560.141919][T27199] netlink: 'syz.0.9720': attribute type 2 has an invalid length. [ 560.204426][T27199] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.9720'. [ 560.933519][T27233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9737'. [ 561.023470][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9739'. [ 561.036050][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9739'. [ 561.319191][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9747'. [ 561.507697][T27261] netlink: 'syz.3.9751': attribute type 27 has an invalid length. [ 561.588247][T27265] block nbd2: not configured, cannot reconfigure [ 561.721188][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'. [ 561.740898][T27274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9758'. [ 561.839165][T27280] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 561.841062][T27281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9760'. [ 561.878184][T27280] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 562.177347][T27295] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 562.306721][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9771'. [ 562.320258][T27303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9771'. [ 562.343894][T27303] netlink: 'syz.2.9771': attribute type 12 has an invalid length. [ 562.365208][T27303] netlink: 'syz.2.9771': attribute type 11 has an invalid length. [ 562.399980][T27307] netlink: 'syz.0.9773': attribute type 14 has an invalid length. [ 562.417326][T27307] netlink: 'syz.0.9773': attribute type 11 has an invalid length. [ 562.742896][T27322] netlink: 'syz.0.9781': attribute type 1 has an invalid length. [ 563.236157][T27343] bridge0: port 4(hsr0) entered blocking state [ 563.266293][T27343] bridge0: port 4(hsr0) entered disabled state [ 563.317129][T27343] bridge0: port 4(hsr0) entered blocking state [ 563.324821][T27343] bridge0: port 4(hsr0) entered forwarding state [ 564.359709][T27397] netlink: 'syz.4.9815': attribute type 5 has an invalid length. [ 564.935390][T27421] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 565.251319][T27436] __nla_validate_parse: 12 callbacks suppressed [ 565.251343][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9834'. [ 565.304666][T27442] netlink: 'syz.4.9837': attribute type 142 has an invalid length. [ 565.314543][T27443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9836'. [ 566.153968][T27473] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9852'. [ 566.178585][T27473] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9852'. [ 566.189465][T27473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9852'. [ 566.768546][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9865'. [ 567.093878][T27516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9873'. [ 567.573178][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9881'. [ 567.600411][T27536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9881'. [ 567.617934][T27536] netlink: 'syz.1.9881': attribute type 14 has an invalid length. [ 567.643656][T27536] netlink: 'syz.1.9881': attribute type 12 has an invalid length. [ 567.662545][T27538] syz_tun: refused to change device tx_queue_len [ 567.668953][T27538] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 568.413324][T27575] hsr0: entered promiscuous mode [ 569.330688][T27612] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.9918'. [ 570.390783][T27660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9941'. [ 570.461972][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9942'. [ 570.665201][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9948'. [ 570.698802][T27678] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9950'. [ 571.210439][T27706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9964'. [ 571.788578][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9981'. [ 572.113272][T27758] netlink: 'syz.0.9989': attribute type 1 has an invalid length. [ 572.129126][T27758] netlink: 'syz.0.9989': attribute type 2 has an invalid length. [ 572.138648][T27758] netlink: 212 bytes leftover after parsing attributes in process `syz.0.9989'. [ 572.249736][T27767] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.9991'. [ 572.288534][T27769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9994'. [ 572.303033][T27763] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.9991'. [ 572.341369][T27771] netlink: 'syz.3.9995': attribute type 4 has an invalid length. [ 573.692232][T27833] erspan0: entered promiscuous mode [ 573.713179][T27833] erspan0: left promiscuous mode [ 574.112049][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 574.400970][T27866] nbd: must specify a size in bytes for the device [ 574.868594][T27895] bridge4: entered promiscuous mode [ 574.892119][T27895] bridge4: entered allmulticast mode [ 574.911901][T27895] team0: Device bridge4 is up. Set it down before adding it as a team port [ 576.238408][T27950] __nla_validate_parse: 2 callbacks suppressed [ 576.238442][T27950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10080'. [ 577.245869][T28002] netlink: 'syz.4.10105': attribute type 29 has an invalid length. [ 577.518128][T28014] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 578.130860][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10124'. [ 578.228167][T28042] netlink: 'syz.4.10125': attribute type 178 has an invalid length. [ 578.266652][T28044] netlink: 'syz.2.10126': attribute type 1 has an invalid length. [ 578.294091][T28044] netlink: 236 bytes leftover after parsing attributes in process `syz.2.10126'. [ 578.333013][T28044] NCSI netlink: No device for ifindex 813332851 [ 579.784825][T28088] tipc: Enabling of bearer rejected, failed to enable media [ 579.839498][T28090] netlink: 'syz.1.10148': attribute type 30 has an invalid length. [ 580.215173][T28102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10153'. [ 580.309559][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10154'. [ 580.342529][T28107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10154'. [ 580.475978][T28109] IPVS: Scheduler module ip_vs_ not found [ 580.603572][T28120] ipvlan3: entered allmulticast mode [ 580.637089][T28120] macsec0: entered allmulticast mode [ 580.650220][T28120] veth1_macvtap: entered allmulticast mode [ 581.442673][T28166] netlink: 'syz.3.10183': attribute type 1 has an invalid length. [ 581.467640][T28166] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10183'. [ 581.662910][T28178] netlink: 'syz.1.10189': attribute type 2 has an invalid length. [ 582.621996][T28231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10214'. [ 582.624677][T28230] netlink: 268 bytes leftover after parsing attributes in process `syz.0.10212'. [ 582.809924][T28239] tc_dump_action: action bad kind [ 583.499237][T28275] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10236'. [ 583.530225][T28275] netlink: zone id is out of range [ 583.535485][T28275] netlink: get zone limit has 8 unknown bytes [ 583.895268][T28295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10246'. [ 584.043230][T28303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10250'. [ 584.858035][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10271'. [ 585.237816][T28361] netlink: 'syz.1.10278': attribute type 25 has an invalid length. [ 587.642287][T28477] sctp: [Deprecated]: syz.2.10330 (pid 28477) Use of int in max_burst socket option deprecated. [ 587.642287][T28477] Use struct sctp_assoc_value instead [ 588.635740][T28503] netlink: 'syz.4.10345': attribute type 3 has an invalid length. [ 589.140604][T28524] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10355'. [ 589.405483][T28539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10362'. [ 589.523947][T28543] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 590.579168][T28589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10387'. [ 590.627719][T28589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10387'. [ 590.688374][T28589] tipc: Invalid UDP bearer configuration [ 590.688444][T28589] tipc: Enabling of bearer rejected, failed to enable media [ 590.890118][T28599] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10391'. [ 591.061298][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10394'. [ 591.449708][T28628] : entered promiscuous mode [ 591.607195][T28635] netlink: 277 bytes leftover after parsing attributes in process `syz.0.10408'. [ 591.707773][T28639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10410'. [ 591.948712][T28651] sctp: [Deprecated]: syz.1.10416 (pid 28651) Use of int in max_burst socket option. [ 591.948712][T28651] Use struct sctp_assoc_value instead [ 592.026978][T28653] lo: entered allmulticast mode [ 592.048870][T28653] lo: left allmulticast mode [ 592.573503][T28681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10431'. [ 592.610936][T28683] nbd: couldn't find a device at index 135 [ 592.613294][T28681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10431'. [ 592.650373][T28681] netlink: 'syz.2.10431': attribute type 7 has an invalid length. [ 592.723674][T28687] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 592.989756][T28699] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 593.142756][T28706] x_tables: duplicate entry at hook 3 [ 593.538464][T28725] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 594.253531][T28762] __nla_validate_parse: 1 callbacks suppressed [ 594.253555][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10471'. [ 594.316715][T28765] openvswitch: netlink: IPv6 tunnel dst address is zero [ 594.427977][T28769] netlink: 'syz.0.10474': attribute type 1 has an invalid length. [ 594.599113][T28780] pim6reg: entered allmulticast mode [ 594.646751][T28784] pim6reg: left allmulticast mode [ 594.652763][T28783] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 594.858422][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10486'. [ 594.874688][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10486'. [ 595.093269][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10492'. [ 595.142148][T28811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10493'. [ 595.541463][T28827] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 595.695021][T28831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10504'. [ 595.717816][T28831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10504'. [ 595.920295][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10508'. [ 595.929330][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10508'. [ 596.142867][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10514'. [ 598.859231][T28960] tun0: tun_chr_ioctl cmd 1074025677 [ 598.869210][T28960] tun0: linktype set to 823 [ 599.899332][T29009] lo: left allmulticast mode [ 600.142827][T29009] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 600.477393][T29026] __nla_validate_parse: 5 callbacks suppressed [ 600.477417][T29026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10594'. [ 600.540546][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10594'. [ 601.059357][T29055] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10609'. [ 601.771494][T29084] netlink: 37 bytes leftover after parsing attributes in process `syz.2.10620'. [ 601.970778][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10623'. [ 602.735979][T29127] netem: incorrect ge model size [ 602.747573][T29127] netem: change failed [ 603.218529][T29142] openvswitch: netlink: IP tunnel TTL not specified. [ 604.396607][T29194] netlink: 'syz.0.10658': attribute type 1 has an invalid length. [ 604.434642][T29194] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10658'. [ 604.696432][T29207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10663'. [ 604.760591][T29211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10664'. [ 604.855645][T29217] vcan0: entered allmulticast mode [ 605.008399][T29225] netlink: 'syz.0.10668': attribute type 1 has an invalid length. [ 606.223905][T29278] vxcan3: entered allmulticast mode [ 606.347804][T29284] netlink: 'syz.1.10689': attribute type 1 has an invalid length. [ 606.449122][T29294] syz.3.10694 uses old SIOCAX25GETINFO [ 606.673759][T29305] netlink: 160 bytes leftover after parsing attributes in process `syz.3.10698'. [ 606.799701][T29310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10701'. [ 609.133701][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10752'. [ 609.556382][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10760'. [ 609.867085][T29468] dummy0: entered promiscuous mode [ 609.877746][T29468] macsec1: entered promiscuous mode [ 609.886722][T29468] macsec1: entered allmulticast mode [ 609.902582][T29468] dummy0: entered allmulticast mode [ 609.941499][T29468] dummy0: left allmulticast mode [ 609.946872][T29468] dummy0: left promiscuous mode [ 610.231200][T29479] tap0: tun_chr_ioctl cmd 1074025677 [ 610.238218][T29479] tap0: linktype set to 778 [ 610.247353][T29483] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 611.017010][T29503] netlink: 'syz.0.10785': attribute type 7 has an invalid length. [ 611.224178][T29527] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 611.597768][T29544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10801'. [ 611.736877][T29552] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 611.984457][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10812'. [ 613.266388][T29619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10834'. [ 613.794178][T25599] Bluetooth: hci1: command 0x0406 tx timeout [ 614.322535][T29659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10851'. [ 615.101557][T29681] batman_adv: batadv0: Adding interface: ip6gretap1 [ 615.123249][T29681] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.187561][T29681] batman_adv: batadv0: Interface activated: ip6gretap1 [ 615.972005][T29711] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 618.840481][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10937'. [ 620.559011][T29921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10963'. [ 620.858979][T29941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10971'. [ 621.144483][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10977'. [ 621.391706][T29964] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10980'. [ 621.405588][T29964] netem: unknown loss type 13 [ 621.411862][T29964] netem: change failed [ 621.754998][T29977] netlink: 900 bytes leftover after parsing attributes in process `syz.2.10986'. [ 622.553281][T30015] trusted_key: syz.3.11005 sent an empty control message without MSG_MORE. [ 623.116245][T30044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11019'. [ 624.194225][ T30] audit: type=1804 audit(1744859997.449:10): pid=30090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11039" name="/newroot/2208/cgroup.controllers" dev="tmpfs" ino=11079 res=1 errno=0 [ 624.237295][ T30] audit: type=1800 audit(1744859997.489:11): pid=30090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11039" name="cgroup.controllers" dev="tmpfs" ino=11079 res=0 errno=0 [ 624.326606][T30094] IPv6: Can't replace route, no match found [ 624.901683][T30118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11052'. [ 624.940373][T30118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11052'. [ 625.426719][T30133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.611239][T30133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.656623][T30146] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.665543][T30146] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.674729][T30146] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.685275][T30146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.878872][T30133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.002582][T30133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.255609][T30133] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.324914][T30133] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.418661][T30133] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.493667][T30133] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.631038][T30187] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 627.281952][T30216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11098'. [ 627.294255][T30221] netlink: 'syz.3.11100': attribute type 21 has an invalid length. [ 627.313552][T30221] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11100'. [ 627.341036][T30221] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11100'. [ 627.548263][T30229] sch_tbf: burst 3631 is lower than device lo mtu (39799) ! [ 627.957407][T30251] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 628.167151][T30258] sctp: [Deprecated]: syz.3.11119 (pid 30258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.167151][T30258] Use struct sctp_sack_info instead [ 628.243504][T30266] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 628.977161][T30301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11136'. [ 629.419898][T30319] netlink: 'syz.1.11144': attribute type 4 has an invalid length. [ 629.644690][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11148'. [ 630.299738][T25599] Bluetooth: hci0: command tx timeout [ 631.592402][T30418] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11188'. [ 631.640482][T30418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11188'. [ 631.664063][T30418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11188'. [ 631.693084][T30418] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11188'. [ 632.284305][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11190'. [ 632.854686][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11214'. [ 633.462806][T30508] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.851718][T30525] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11238'. [ 634.012224][T30531] netem: unknown loss type 0 [ 634.017156][T30531] netem: change failed [ 634.147470][T30538] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 634.362583][T30547] macvtap1: entered promiscuous mode [ 634.368139][T30547] vlan0: entered promiscuous mode [ 634.400638][T30547] macvtap1: entered allmulticast mode [ 634.406096][T30547] vlan0: entered allmulticast mode [ 634.486806][T30547] vlan0: left allmulticast mode [ 634.500512][T30547] vlan0: left promiscuous mode [ 634.666055][T30563] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11254'. [ 634.805898][T30569] netlink: 'syz.0.11257': attribute type 1 has an invalid length. [ 634.814542][T30569] netlink: 'syz.0.11257': attribute type 4 has an invalid length. [ 634.834035][T30569] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11257'. [ 635.633158][T30608] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11274'. [ 636.733829][T30665] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 637.941889][T30730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11328'. [ 637.965828][T30730] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11328'. [ 638.135316][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11331'. [ 638.230099][T30741] batadv_slave_1: entered promiscuous mode [ 638.243614][T30740] batadv_slave_1: left promiscuous mode [ 639.522572][T30789] netlink: 47 bytes leftover after parsing attributes in process `syz.1.11354'. [ 640.700345][T30837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11375'. [ 640.784708][T30841] netlink: 'syz.3.11377': attribute type 19 has an invalid length. [ 643.851160][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11407'. [ 644.187066][T30929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11414'. [ 644.724109][T30949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 644.797596][T30947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11425'. [ 644.844289][T30949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 644.958070][T30949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 645.122551][T30949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 645.218156][T30949] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 645.260331][T30949] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 645.284270][T30949] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 645.306519][T30949] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 645.392745][T30978] sctp: [Deprecated]: syz.0.11439 (pid 30978) Use of int in max_burst socket option deprecated. [ 645.392745][T30978] Use struct sctp_assoc_value instead [ 645.540294][T30984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11442'. [ 646.414612][T31013] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11454'. [ 646.422201][T31014] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11455'. [ 646.435172][T31013] bridge_slave_0: entered allmulticast mode [ 647.124993][T31042] netlink: 'syz.1.11468': attribute type 3 has an invalid length. [ 647.459935][T31061] netlink: 'syz.4.11478': attribute type 11 has an invalid length. [ 647.756660][T31076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11484'. [ 647.798157][T31076] vlan3: entered allmulticast mode [ 647.870079][T31076] batadv0: entered allmulticast mode [ 648.827087][T31121] netlink: 264 bytes leftover after parsing attributes in process `syz.2.11504'. [ 650.601837][T31179] tap0: tun_chr_ioctl cmd 1074025678 [ 650.620923][T31179] tap0: group set to 0 [ 651.325816][T31202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11539'. [ 651.977291][T31222] blkio.reset_stats is deprecated [ 652.835331][T31267] netlink: 340 bytes leftover after parsing attributes in process `syz.3.11569'. [ 652.997634][T31274] netlink: 'syz.3.11573': attribute type 1 has an invalid length. [ 653.022859][T31274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11573'. [ 654.990618][T31351] netlink: 428 bytes leftover after parsing attributes in process `syz.0.11609'. [ 655.022227][T31351] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11609'. [ 655.166361][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11611'. [ 655.190488][T31355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11611'. [ 655.514521][T31372] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.523692][T31372] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.532198][T31372] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.540720][T31372] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 655.715620][T31379] team0: No ports can be present during mode change [ 657.579218][T31443] pimreg0: tun_chr_ioctl cmd 35108 [ 657.734818][T31447] bond0: entered promiscuous mode [ 657.760472][T31447] bond_slave_0: entered promiscuous mode [ 657.783904][T31447] bond_slave_1: entered promiscuous mode [ 657.807247][T31447] bridge0: entered promiscuous mode [ 657.824433][T31447] batadv0: entered promiscuous mode [ 657.864622][T31447] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 657.888648][T31447] bond0: left promiscuous mode [ 657.904951][T31447] bond_slave_0: left promiscuous mode [ 657.915782][T31447] bond_slave_1: left promiscuous mode [ 657.924704][T31447] bridge0: left promiscuous mode [ 657.936685][T31447] batadv0: left promiscuous mode [ 658.994301][T31510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.371804][T31522] wireguard0: entered promiscuous mode [ 659.378285][T31522] wireguard0: entered allmulticast mode [ 659.713050][T31537] openvswitch: netlink: Multiple metadata blocks provided [ 661.191795][T31604] 8021q: adding VLAN 0 to HW filter on device bond7 [ 661.201414][T31604] bond0: (slave bond7): Enslaving as an active interface with an up link [ 662.131769][T31621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11728'. [ 662.250253][T31627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11731'. [ 662.634978][T31639] veth1_macvtap (unregistering): left allmulticast mode [ 663.117779][T31657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11743'. [ 663.403264][T31668] tap0: tun_chr_ioctl cmd 2147767506 [ 665.918133][T31787] bond0: entered promiscuous mode [ 665.941328][T31787] bond_slave_0: entered promiscuous mode [ 665.947280][T31787] bond_slave_1: entered promiscuous mode [ 665.979128][T31787] bridge0: entered promiscuous mode [ 665.991266][T31787] bond0: left promiscuous mode [ 665.996335][T31787] bond_slave_0: left promiscuous mode [ 666.023169][T31787] bond_slave_1: left promiscuous mode [ 666.050665][T31787] bridge0: left promiscuous mode [ 666.724380][T31820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11816'. [ 666.749318][T31822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11817'. [ 666.770530][T31820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11816'. [ 666.780638][T31824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11818'. [ 667.083021][T31837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11823'. [ 668.165822][T31882] vlan1: entered promiscuous mode [ 668.191690][T31882] bond0: entered promiscuous mode [ 668.199881][T31882] bond_slave_0: entered promiscuous mode [ 668.215658][T31882] bond_slave_1: entered promiscuous mode [ 668.224966][T31882] bridge0: entered promiscuous mode [ 668.225379][T31886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11846'. [ 668.234781][T31882] vlan1: entered allmulticast mode [ 668.249828][T31882] bond0: entered allmulticast mode [ 668.264050][T31882] bond_slave_0: entered allmulticast mode [ 668.275148][T31882] bond_slave_1: entered allmulticast mode [ 668.300288][T31882] bridge0: entered allmulticast mode [ 668.305892][T31882] syz_tun: entered allmulticast mode [ 668.802457][T31904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11855'. [ 670.704243][T31971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11883'. [ 671.079636][T31985] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11891'. [ 671.256584][T31995] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 671.269424][T31995] syzkaller0: linktype set to 774 [ 673.111551][T32071] sch_fq: defrate 511 ignored. [ 674.013351][T32109] sch_fq: defrate 2048 ignored. [ 674.025604][T32108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11946'. [ 674.356268][T32125] vlan2: entered promiscuous mode [ 674.375980][T32125] gretap0: entered promiscuous mode [ 674.591365][T32137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11958'. [ 674.611569][T32137] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 676.431144][T32205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11989'. [ 678.214447][T32275] netlink: 'syz.3.12022': attribute type 1 has an invalid length. [ 678.238374][T32275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12022'. [ 678.297075][T32278] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 679.139344][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12040'. [ 679.265666][T32316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12043'. [ 680.742006][T32390] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 680.766432][T32390] bridge0: port 4(hsr0) entered disabled state [ 680.773142][T32390] bridge0: port 3(syz_tun) entered disabled state [ 680.780259][T32390] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.863921][T32394] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 681.456111][T32418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12088'. [ 682.241217][T32446] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 682.507144][T32461] netlink: 'syz.0.12107': attribute type 1 has an invalid length. [ 682.658174][T32466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12109'. [ 682.711767][T32466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12109'. [ 683.723745][T32505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12128'. [ 684.805584][T32560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12150'. [ 684.871885][T32563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12153'. [ 685.967398][T32619] bpq0: entered allmulticast mode [ 686.709903][T32645] tun0: tun_chr_ioctl cmd 1074025677 [ 686.720727][T32645] tun0: linktype set to 65534 [ 687.135213][T32668] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 687.483579][T32686] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 687.576414][T32692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 687.801628][T32702] tap0: tun_chr_ioctl cmd 1074025677 [ 687.807305][T32702] tap0: linktype set to 270 [ 687.831773][T32704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12218'. [ 687.947356][T32708] netlink: 'syz.2.12220': attribute type 1 has an invalid length. [ 688.384498][T32721] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 688.409825][T32721] syzkaller1: linktype set to 825 [ 688.979245][T32752] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 688.995914][T32750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12241'. [ 690.040906][ T339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12267'. [ 690.923821][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12285'. [ 690.933762][ T380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12285'. [ 690.975267][ T380] gretap2: entered promiscuous mode [ 690.991258][T25599] Bluetooth: hci0: command tx timeout [ 691.831366][ T429] tun0: tun_chr_ioctl cmd 1074025677 [ 691.837069][ T429] tun0: linktype set to 804 [ 692.629696][ T457] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12320'. [ 692.854307][ T468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12324'. [ 693.349057][ T482] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 693.366663][ T482] macsec0: entered promiscuous mode [ 693.370281][ T484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12329'. [ 693.375190][ T482] macsec0: entered allmulticast mode [ 693.391618][ T482] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 693.408420][ T484] netlink: 'syz.3.12329': attribute type 9 has an invalid length. [ 693.465200][ T484] macvlan0: entered allmulticast mode [ 693.476806][ T484] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 693.866059][ T500] tipc: New replicast peer: 255.255.255.255 [ 693.898616][ T500] tipc: Enabled bearer , priority 10 [ 693.921864][ T500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12336'. [ 693.942238][ T500] tipc: Disabling bearer [ 694.144889][ T502] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 694.183738][ T502] netlink: 'syz.3.12337': attribute type 1 has an invalid length. [ 694.214044][ T502] netlink: 'syz.3.12337': attribute type 2 has an invalid length. [ 695.132612][ T538] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.12355'. [ 695.401894][ T547] netlink: 'syz.1.12358': attribute type 3 has an invalid length. [ 695.409868][ T547] netlink: 'syz.1.12358': attribute type 3 has an invalid length. [ 697.531433][ T602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12381'. [ 698.131525][ T627] tipc: Started in network mode [ 698.147843][ T627] tipc: Node identity ac14140f, cluster identity 4711 [ 698.172498][ T627] tipc: Enabling of bearer rejected, failed to enable media [ 698.388034][ T644] netlink: 165 bytes leftover after parsing attributes in process `syz.3.12399'. [ 699.219376][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.234910][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.224667][ T688] hsr0: left promiscuous mode [ 700.493882][ T688] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 43649 - 0 [ 700.507158][ T688] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 43649 - 0 [ 700.515833][ T688] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 43649 - 0 [ 700.525061][ T688] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 43649 - 0 [ 700.535599][ T688] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 35157 - 0 [ 700.544215][ T688] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 35157 - 0 [ 700.552977][ T688] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 35157 - 0 [ 700.561615][ T688] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 35157 - 0 [ 700.598253][ T688] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 700.606797][ T688] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 700.615106][ T688] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 700.623605][ T688] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 700.638584][ T688] netdevsim netdevsim4 eth0: unset [1, 3] type 2 family 0 port 6081 - 0 [ 700.651850][ T688] netdevsim netdevsim4 eth1: unset [1, 3] type 2 family 0 port 6081 - 0 [ 700.660292][ T688] netdevsim netdevsim4 eth2: unset [1, 3] type 2 family 0 port 6081 - 0 [ 700.668628][ T688] netdevsim netdevsim4 eth3: unset [1, 3] type 2 family 0 port 6081 - 0 [ 700.699614][ T688] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 700.721783][ T688] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.730613][ T688] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.738972][ T688] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.747482][ T688] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.791196][ T688] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 700.953127][ T725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12434'. [ 701.070874][ T731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12436'. [ 701.251904][ T737] tun0: tun_chr_ioctl cmd 35111 [ 701.379902][ T745] bridge0: Device is already in use. [ 702.920574][ T816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12471'. [ 703.190811][ T827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12477'. [ 703.894551][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12489'. [ 704.213467][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12494'. [ 704.986703][ T899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12510'. [ 705.799711][ T923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.208793][ T959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12532'. [ 706.662373][ T978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12541'. [ 707.286287][ T1010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12553'. [ 708.103185][ T1051] netlink: 'syz.2.12568': attribute type 1 has an invalid length. [ 708.114221][ T1051] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.12568'. [ 708.206185][ T1062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12570'. [ 708.610761][ T1083] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 709.508015][ T1135] tipc: Resetting bearer [ 709.853416][ T1151] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12608'. [ 710.082619][ T1159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12610'. [ 710.094103][ T1159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12610'. [ 710.672499][T25599] Bluetooth: hci0: command tx timeout [ 711.901966][ T1240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12648'. [ 711.943697][ T1240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12648'. [ 712.246997][ T1256] netlink: 'syz.4.12656': attribute type 5 has an invalid length. [ 712.357756][ T1260] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 712.380465][ T1260] syzkaller1: linktype set to 821 [ 713.696970][ T1322] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 714.381763][ T1351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12694'. [ 714.939268][ T1373] bond0: entered promiscuous mode [ 714.990114][ T1373] bond7: entered promiscuous mode [ 714.997914][ T1373] batadv0: entered promiscuous mode [ 715.028945][ T1373] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 715.040150][ T1373] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 715.054103][ T1373] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 715.127650][T25599] block nbd0: Receive control failed (result -107) [ 715.200928][ T1380] nbd0: detected capacity change from 0 to 32 [ 715.733943][ T1407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12720'. [ 715.788821][ T1414] sctp: [Deprecated]: syz.1.12724 (pid 1414) Use of int in max_burst socket option. [ 715.788821][ T1414] Use struct sctp_assoc_value instead [ 716.357087][ T1443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12738'. [ 716.406610][ T1443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12738'. [ 716.417712][ T1449] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12739'. [ 716.465415][ T1449] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12739'. [ 716.517288][ T1452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12742'. [ 716.896183][ T1467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12749'. [ 717.367323][ T1488] sctp: [Deprecated]: syz.3.12757 (pid 1488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.367323][ T1488] Use struct sctp_sack_info instead [ 718.260297][ T1528] block nbd1: server does not support multiple connections per device. [ 718.300999][ T1528] block nbd1: shutting down sockets [ 718.506928][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12786'. [ 718.550201][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12784'. [ 719.032269][ T1578] netlink: 47 bytes leftover after parsing attributes in process `syz.3.12798'. [ 719.260529][ T30] audit: type=1804 audit(1744860092.519:12): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.12804" name="/newroot/2578/cgroup.controllers" dev="tmpfs" ino=12959 res=1 errno=0 [ 719.343829][ T30] audit: type=1800 audit(1744860092.539:13): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12804" name="cgroup.controllers" dev="tmpfs" ino=12959 res=0 errno=0 [ 719.425799][ T30] audit: type=1800 audit(1744860092.539:14): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12804" name="cgroup.controllers" dev="tmpfs" ino=12959 res=0 errno=0 [ 719.476058][ T1599] macsec2: entered promiscuous mode [ 719.496174][ T1599] ip6gretap0: entered promiscuous mode [ 719.514043][ T1599] macsec2: entered allmulticast mode [ 719.524004][ T1599] ip6gretap0: entered allmulticast mode [ 719.668920][ T1609] syz_tun: entered allmulticast mode [ 719.696892][ T1609] dvmrp8: entered allmulticast mode [ 719.727110][ T1607] syz_tun: left allmulticast mode [ 719.756244][ T1615] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12817'. [ 719.790930][ T1607] dvmrp8: left allmulticast mode [ 720.024152][ T1624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12822'. [ 720.845222][ T1656] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 721.071778][ T1661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12836'. [ 721.560686][ T1682] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12844'. [ 721.609450][ T1682] netem: invalid attributes len -16 [ 721.619318][ T1682] netem: change failed [ 721.684149][ T1688] tap0: tun_chr_ioctl cmd 2148553947 [ 721.745194][ T1692] netlink: 'syz.1.12850': attribute type 10 has an invalid length. [ 722.198041][ T1716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12862'. [ 722.272415][ T1722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12864'. [ 722.601517][ T1738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12873'. [ 723.146570][ T1764] macsec2: entered promiscuous mode [ 723.156032][ T1764] ip6gretap0: entered promiscuous mode [ 723.162253][ T1764] macsec2: entered allmulticast mode [ 723.167586][ T1764] ip6gretap0: entered allmulticast mode [ 723.274909][ T1768] netlink: 'syz.0.12886': attribute type 1 has an invalid length. [ 723.283560][ T1768] netlink: 'syz.0.12886': attribute type 2 has an invalid length. [ 723.285458][ T1770] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 724.148380][ T1809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12904'. [ 725.924068][ T1886] xt_bpf: check failed: parse error [ 726.489100][ T1914] tap0: tun_chr_ioctl cmd 1074812118 [ 726.506750][ T1918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12953'. [ 726.737153][ T1933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12958'. [ 726.892299][ T1939] netlink: 'syz.0.12960': attribute type 12 has an invalid length. [ 726.928718][ T1939] netlink: 'syz.0.12960': attribute type 29 has an invalid length. [ 726.964106][ T1939] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12960'. [ 726.977356][ T1939] netlink: 59 bytes leftover after parsing attributes in process `syz.0.12960'. [ 727.324376][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12972'. [ 727.355526][ T1965] veth0_to_bond: entered allmulticast mode [ 727.368471][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12972'. [ 727.510140][ T1975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12978'. [ 727.515164][ T1973] gretap1: entered promiscuous mode [ 727.542790][ T1977] tun0: tun_chr_ioctl cmd 2147767520 [ 727.848868][ T1992] netlink: 'syz.2.12985': attribute type 1 has an invalid length. [ 727.858572][ T1992] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12985'. [ 728.024303][ T1998] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12988'. [ 728.221891][ T2010] netlink: 'syz.1.12994': attribute type 14 has an invalid length. [ 730.997512][ T2148] bond0: entered promiscuous mode [ 731.039897][ T2148] bond_slave_0: entered promiscuous mode [ 731.057191][ T2148] bond_slave_1: entered promiscuous mode [ 731.076715][ T2148] bridge0: entered promiscuous mode [ 731.093604][ T2148] batadv0: entered promiscuous mode [ 731.125224][ T2148] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 731.140233][ T2148] Cannot create hsr debugfs directory [ 731.155568][ T2148] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 731.421349][ T2165] netlink: 'syz.0.13048': attribute type 5 has an invalid length. [ 732.483062][ T2197] sctp: [Deprecated]: syz.3.13060 (pid 2197) Use of int in maxseg socket option. [ 732.483062][ T2197] Use struct sctp_assoc_value instead [ 732.700814][ T700] [ 732.703216][ T700] ====================================================== [ 732.710257][ T700] WARNING: possible circular locking dependency detected [ 732.717285][ T700] 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 Not tainted [ 732.724399][ T700] ------------------------------------------------------ [ 732.731421][ T700] kworker/0:1/700 is trying to acquire lock: [ 732.737397][ T700] ffff8880622014c0 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_rcv+0x4015/0x7f60 [ 732.747244][ T700] [ 732.747244][ T700] but task is already holding lock: [ 732.754611][ T700] ffff8880330f0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 732.763674][ T700] [ 732.763674][ T700] which lock already depends on the new lock. [ 732.763674][ T700] [ 732.774074][ T700] [ 732.774074][ T700] the existing dependency chain (in reverse order) is: [ 732.783085][ T700] [ 732.783085][ T700] -> #1 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 732.790825][ T700] lock_acquire+0x116/0x2f0 [ 732.795852][ T700] _raw_spin_lock_bh+0x35/0x50 [ 732.801145][ T700] hsr_dev_xmit+0x18a/0x210 [ 732.806173][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 732.811809][ T700] __dev_queue_xmit+0x1b80/0x3f60 [ 732.817358][ T700] br_dev_queue_push_xmit+0x771/0x950 [ 732.823253][ T700] __br_multicast_send_query+0x2fcd/0x4830 [ 732.829585][ T700] br_multicast_send_query+0x4f2/0x6c0 [ 732.835576][ T700] br_multicast_port_query_expired+0x2d4/0x3b0 [ 732.842267][ T700] call_timer_fn+0x189/0x650 [ 732.847378][ T700] __run_timer_base+0x66e/0x8e0 [ 732.852758][ T700] run_timer_softirq+0xb7/0x170 [ 732.858135][ T700] handle_softirqs+0x2d6/0x9b0 [ 732.863419][ T700] __irq_exit_rcu+0xfb/0x220 [ 732.868531][ T700] irq_exit_rcu+0x9/0x30 [ 732.873291][ T700] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 732.879446][ T700] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.885948][ T700] console_flush_all+0x998/0xec0 [ 732.891414][ T700] console_unlock+0x151/0x3b0 [ 732.896641][ T700] vprintk_emit+0x761/0xa40 [ 732.901694][ T700] _printk+0xd5/0x120 [ 732.906219][ T700] br_multicast_set_startup_query_intvl+0xe2/0xf0 [ 732.913171][ T700] br_changelink+0xfff/0x1810 [ 732.918406][ T700] rtnl_newlink+0x1842/0x1fe0 [ 732.923608][ T700] rtnetlink_rcv_msg+0x80f/0xd70 [ 732.929066][ T700] netlink_rcv_skb+0x208/0x480 [ 732.934348][ T700] netlink_unicast+0x7f8/0x9a0 [ 732.939638][ T700] netlink_sendmsg+0x8c3/0xcd0 [ 732.944922][ T700] __sock_sendmsg+0x221/0x270 [ 732.950128][ T700] ____sys_sendmsg+0x523/0x860 [ 732.955415][ T700] __sys_sendmsg+0x271/0x360 [ 732.960531][ T700] do_syscall_64+0xf3/0x230 [ 732.965559][ T700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.971975][ T700] [ 732.971975][ T700] -> #0 (&br->multicast_lock){+.-.}-{3:3}: [ 732.979983][ T700] validate_chain+0xa69/0x24e0 [ 732.985293][ T700] __lock_acquire+0xad5/0xd80 [ 732.990495][ T700] lock_acquire+0x116/0x2f0 [ 732.995521][ T700] _raw_spin_lock+0x2e/0x40 [ 733.000552][ T700] br_multicast_rcv+0x4015/0x7f60 [ 733.006099][ T700] br_dev_xmit+0xbbc/0x1c00 [ 733.011208][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 733.016849][ T700] __dev_queue_xmit+0x1b80/0x3f60 [ 733.022402][ T700] bond_start_xmit+0x138e/0x1c50 [ 733.027875][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 733.033511][ T700] sch_direct_xmit+0x2b2/0x600 [ 733.038802][ T700] __qdisc_run+0xc0d/0x2180 [ 733.043836][ T700] __dev_queue_xmit+0x10e2/0x3f60 [ 733.049389][ T700] hsr_forward_skb+0x184c/0x2d20 [ 733.054851][ T700] hsr_dev_xmit+0x195/0x210 [ 733.059879][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 733.065513][ T700] __dev_queue_xmit+0x1b80/0x3f60 [ 733.071063][ T700] ip6_finish_output2+0x1296/0x1750 [ 733.076784][ T700] ip6_finish_output+0x421/0x840 [ 733.082253][ T700] NF_HOOK+0xa0/0x440 [ 733.086782][ T700] mld_sendpack+0x84a/0xdc0 [ 733.091827][ T700] mld_dad_work+0x44/0x500 [ 733.096784][ T700] process_scheduled_works+0xac3/0x18e0 [ 733.102860][ T700] worker_thread+0x870/0xd50 [ 733.107975][ T700] kthread+0x7b7/0x940 [ 733.112660][ T700] ret_from_fork+0x4b/0x80 [ 733.117598][ T700] ret_from_fork_asm+0x1a/0x30 [ 733.122885][ T700] [ 733.122885][ T700] other info that might help us debug this: [ 733.122885][ T700] [ 733.133113][ T700] Possible unsafe locking scenario: [ 733.133113][ T700] [ 733.140568][ T700] CPU0 CPU1 [ 733.145936][ T700] ---- ---- [ 733.151301][ T700] lock(&hsr->seqnr_lock); [ 733.155811][ T700] lock(&br->multicast_lock); [ 733.163100][ T700] lock(&hsr->seqnr_lock); [ 733.170127][ T700] lock(&br->multicast_lock); [ 733.174897][ T700] [ 733.174897][ T700] *** DEADLOCK *** [ 733.174897][ T700] [ 733.183039][ T700] 12 locks held by kworker/0:1/700: [ 733.188239][ T700] #0: ffff8880305fbd48 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 733.198952][ T700] #1: ffffc9000b67fc60 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 733.212096][ T700] #2: ffff888060325538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x3c/0x500 [ 733.221335][ T700] #3: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1ea/0xdc0 [ 733.230570][ T700] #4: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750 [ 733.240413][ T700] #5: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 733.250341][ T700] #6: ffff8880330f0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 733.259834][ T700] #7: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb8/0x2d20 [ 733.269327][ T700] #8: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 733.279254][ T700] #9: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0x12a/0x1c50 [ 733.288838][ T700] #10: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60 [ 733.298858][ T700] #11: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x220/0x1c00 [ 733.308173][ T700] [ 733.308173][ T700] stack backtrace: [ 733.314058][ T700] CPU: 0 UID: 0 PID: 700 Comm: kworker/0:1 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 733.314075][ T700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 733.314084][ T700] Workqueue: mld mld_dad_work [ 733.314101][ T700] Call Trace: [ 733.314106][ T700] [ 733.314112][ T700] dump_stack_lvl+0x241/0x360 [ 733.314128][ T700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.314143][ T700] ? __pfx__printk+0x10/0x10 [ 733.314159][ T700] print_circular_bug+0x2e1/0x300 [ 733.314174][ T700] check_noncircular+0x142/0x160 [ 733.314190][ T700] validate_chain+0xa69/0x24e0 [ 733.314204][ T700] ? kasan_quarantine_put+0xdc/0x230 [ 733.314216][ T700] ? lockdep_hardirqs_on+0x9d/0x150 [ 733.314228][ T700] ? ipv6_mc_check_mld+0x8b8/0x20b0 [ 733.314245][ T700] ? kmem_cache_free+0x197/0x410 [ 733.314259][ T700] ? ipv6_mc_check_mld+0x8b8/0x20b0 [ 733.314275][ T700] __lock_acquire+0xad5/0xd80 [ 733.314288][ T700] lock_acquire+0x116/0x2f0 [ 733.314298][ T700] ? br_multicast_rcv+0x4015/0x7f60 [ 733.314314][ T700] _raw_spin_lock+0x2e/0x40 [ 733.314329][ T700] ? br_multicast_rcv+0x4015/0x7f60 [ 733.314340][ T700] br_multicast_rcv+0x4015/0x7f60 [ 733.314361][ T700] ? __pfx_br_multicast_rcv+0x10/0x10 [ 733.314377][ T700] ? __bfs+0x14a/0x270 [ 733.314387][ T700] ? __pfx_hlock_conflict+0x10/0x10 [ 733.314400][ T700] ? check_path+0x21/0x40 [ 733.314412][ T700] ? check_noncircular+0xee/0x160 [ 733.314424][ T700] ? __bfs+0x131/0x270 [ 733.314435][ T700] ? validate_chain+0x8a7/0x24e0 [ 733.314454][ T700] ? __lock_acquire+0xad5/0xd80 [ 733.314465][ T700] ? do_raw_spin_lock+0x151/0x370 [ 733.314483][ T700] ? __lock_acquire+0xad5/0xd80 [ 733.314495][ T700] ? br_allowed_ingress+0xd0/0x1030 [ 733.314510][ T700] br_dev_xmit+0xbbc/0x1c00 [ 733.314521][ T700] ? br_dev_xmit+0x220/0x1c00 [ 733.314532][ T700] ? __pfx_br_dev_xmit+0x10/0x10 [ 733.314542][ T700] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 733.314556][ T700] ? netif_skb_features+0x8be/0xca0 [ 733.314578][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 733.314595][ T700] __dev_queue_xmit+0x1b80/0x3f60 [ 733.314613][ T700] ? __dev_queue_xmit+0x2f9/0x3f60 [ 733.314626][ T700] ? __pfx___dev_queue_xmit+0x10/0x10 [ 733.314641][ T700] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 733.314657][ T700] ? lockdep_hardirqs_on+0x9d/0x150 [ 733.314675][ T700] ? bond_xmit_roundrobin_slave_get+0x24e/0x420 [ 733.314691][ T700] bond_start_xmit+0x138e/0x1c50 [ 733.314704][ T700] ? bond_start_xmit+0x12a/0x1c50 [ 733.314715][ T700] ? __pfx_bond_start_xmit+0x10/0x10 [ 733.314727][ T700] ? lockdep_unlock+0x8d/0x120 [ 733.314742][ T700] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 733.314755][ T700] ? netif_skb_features+0x8be/0xca0 [ 733.314770][ T700] ? validate_xmit_skb+0xa89/0x1150 [ 733.314786][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 733.314802][ T700] sch_direct_xmit+0x2b2/0x600 [ 733.314819][ T700] ? __pfx_sch_direct_xmit+0x10/0x10 [ 733.314834][ T700] ? cbs_dequeue_soft+0x240/0x6e0 [ 733.314852][ T700] __qdisc_run+0xc0d/0x2180 [ 733.314872][ T700] __dev_queue_xmit+0x10e2/0x3f60 [ 733.314888][ T700] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 733.314904][ T700] ? __dev_queue_xmit+0x2f9/0x3f60 [ 733.314916][ T700] ? __build_skb_around+0x247/0x3d0 [ 733.314929][ T700] ? __pfx___dev_queue_xmit+0x10/0x10 [ 733.314941][ T700] ? __alloc_skb+0x298/0x480 [ 733.314953][ T700] ? skb_copy_bits+0xf8/0x890 [ 733.314964][ T700] ? __asan_memcpy+0x40/0x70 [ 733.314974][ T700] ? __copy_skb_header+0xa7/0x5a0 [ 733.314987][ T700] ? __asan_memcpy+0x40/0x70 [ 733.314997][ T700] ? skb_copy_expand+0x3ab/0xb70 [ 733.315011][ T700] ? __asan_memcpy+0x40/0x70 [ 733.315024][ T700] ? hsr_addr_subst_dest+0x30d/0xac0 [ 733.315038][ T700] ? prp_create_tagged_frame+0x667/0xcc0 [ 733.315050][ T700] hsr_forward_skb+0x184c/0x2d20 [ 733.315062][ T700] ? hsr_forward_skb+0xb8/0x2d20 [ 733.315075][ T700] ? __pfx_hsr_forward_skb+0x10/0x10 [ 733.315085][ T700] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 733.315099][ T700] ? lockdep_hardirqs_on+0x9d/0x150 [ 733.315110][ T700] ? hsr_dev_xmit+0x18a/0x210 [ 733.315125][ T700] hsr_dev_xmit+0x195/0x210 [ 733.315140][ T700] dev_hard_start_xmit+0x2d9/0x830 [ 733.315156][ T700] __dev_queue_xmit+0x1b80/0x3f60 [ 733.315171][ T700] ? __lock_acquire+0xad5/0xd80 [ 733.315182][ T700] ? __dev_queue_xmit+0x2f9/0x3f60 [ 733.315196][ T700] ? __pfx___dev_queue_xmit+0x10/0x10 [ 733.315210][ T700] ? neigh_connected_output+0x1d5/0x450 [ 733.315220][ T700] ? read_seqbegin+0x15c/0x2c0 [ 733.315235][ T700] ? lockdep_hardirqs_on+0x9d/0x150 [ 733.315246][ T700] ? read_seqbegin+0x202/0x2c0 [ 733.315261][ T700] ? __pfx_read_seqbegin+0x10/0x10 [ 733.315276][ T700] ? eth_header+0x11c/0x1f0 [ 733.315291][ T700] ? neigh_connected_output+0x3a7/0x450 [ 733.315304][ T700] ip6_finish_output2+0x1296/0x1750 [ 733.315317][ T700] ? ip6_finish_output2+0x701/0x1750 [ 733.315330][ T700] ? __pfx_ip6_finish_output2+0x10/0x10 [ 733.315341][ T700] ? ip6_mtu+0x81/0x3f0 [ 733.315356][ T700] ? ip6_mtu+0x81/0x3f0 [ 733.315371][ T700] ip6_finish_output+0x421/0x840 [ 733.315389][ T700] NF_HOOK+0xa0/0x440 [ 733.315398][ T700] ? NF_HOOK+0xfe/0x440 [ 733.315407][ T700] ? __pfx_NF_HOOK+0x10/0x10 [ 733.315417][ T700] ? __pfx_dst_output+0x10/0x10 [ 733.315427][ T700] ? icmp6_dst_alloc+0x3aa/0x420 [ 733.315443][ T700] mld_sendpack+0x84a/0xdc0 [ 733.315457][ T700] ? mld_sendpack+0x1ea/0xdc0 [ 733.315467][ T700] ? __pfx_mld_sendpack+0x10/0x10 [ 733.315482][ T700] mld_dad_work+0x44/0x500 [ 733.315497][ T700] ? process_scheduled_works+0x9cb/0x18e0 [ 733.315509][ T700] process_scheduled_works+0xac3/0x18e0 [ 733.315528][ T700] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.315542][ T700] ? assign_work+0x367/0x3d0 [ 733.315554][ T700] worker_thread+0x870/0xd50 [ 733.315573][ T700] ? __kthread_parkme+0x1a8/0x200 [ 733.315587][ T700] ? __pfx_worker_thread+0x10/0x10 [ 733.315599][ T700] kthread+0x7b7/0x940 [ 733.315616][ T700] ? __pfx_worker_thread+0x10/0x10 [ 733.315627][ T700] ? __pfx_kthread+0x10/0x10 [ 733.315640][ T700] ? __pfx_kthread+0x10/0x10 [ 733.315653][ T700] ? __pfx_kthread+0x10/0x10 [ 733.315665][ T700] ? __pfx_kthread+0x10/0x10 [ 733.315678][ T700] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.315693][ T700] ? lockdep_hardirqs_on+0x9d/0x150 [ 733.315703][ T700] ? __pfx_kthread+0x10/0x10 [ 733.315717][ T700] ret_from_fork+0x4b/0x80 [ 733.315728][ T700] ? __pfx_kthread+0x10/0x10 [ 733.315741][ T700] ret_from_fork_asm+0x1a/0x30 [ 733.315755][ T700] [ 734.474621][ T2213] bridge0: port 3(team0) entered disabled state [ 734.481109][ T2213] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.488241][ T2213] bridge0: port 1(1x9) entered disabled state [ 734.780152][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.824683][ T2213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.021573][ T2213] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.033815][ T2213] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.043973][ T2213] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.053092][ T2213] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.267720][ T2213] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.276416][ T2213] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.285341][ T2213] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.294493][ T2213] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0