last executing test programs: 1.229714201s ago: executing program 2 (id=10105): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x0, 0x0, 0x103, 0x1, 0x0, 0xda6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) 1.229283361s ago: executing program 3 (id=10106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd1, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) 1.192921465s ago: executing program 1 (id=10107): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x20008880}}], 0x2, 0x4c054) 1.110964932s ago: executing program 0 (id=10109): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x80000001) connect$phonet_pipe(r0, &(0x7f0000002040)={0x23, 0x4, 0x2d, 0x3}, 0x10) 1.02906576s ago: executing program 2 (id=10110): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c8d1}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0xaf) 966.191857ms ago: executing program 1 (id=10111): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001200375f3fbd", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 938.994431ms ago: executing program 4 (id=10112): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f00000000c0), 0x12) close(r0) 938.056801ms ago: executing program 3 (id=10113): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bdad, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) 867.278887ms ago: executing program 2 (id=10114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000ac0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 864.64793ms ago: executing program 0 (id=10115): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf4cf216791fa448f, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="183000000000000000000000030000001830000000000000000000000000000018000000000000000000000000000000000000000000000000000000080000001800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 768.832594ms ago: executing program 1 (id=10116): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e) 751.548908ms ago: executing program 3 (id=10117): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000000)=0x8000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 723.539123ms ago: executing program 4 (id=10118): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x1, 0x4) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x12, r0, 0x180000000) 634.853611ms ago: executing program 2 (id=10119): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xb0000000}) 599.700947ms ago: executing program 0 (id=10120): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 564.645833ms ago: executing program 4 (id=10121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 552.202985ms ago: executing program 1 (id=10122): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40004044, 0x0) 528.194973ms ago: executing program 3 (id=10123): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000001040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x38}, 0x0) 394.250834ms ago: executing program 4 (id=10124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) 393.523844ms ago: executing program 0 (id=10125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x58}}, 0x0) 362.086574ms ago: executing program 3 (id=10126): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) 291.928889ms ago: executing program 1 (id=10127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) 291.410036ms ago: executing program 2 (id=10128): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 151.944627ms ago: executing program 0 (id=10129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd29, 0xa5dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) 151.217137ms ago: executing program 4 (id=10130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x3, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 127.971265ms ago: executing program 2 (id=10131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r0, 0x0, 0x0, 0x2) 90.913787ms ago: executing program 1 (id=10132): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000005c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x80, @broadcast}}, 0x24) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @private0, 0x3}}, 0x24) 72.473897ms ago: executing program 3 (id=10133): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x4100}, 0x0) 31.857294ms ago: executing program 4 (id=10134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0x0) 0s ago: executing program 0 (id=10135): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20) kernel console output (not intermixed with test programs): 2624/8 [ 242.494457][T12138] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 45524 - 0 [ 242.511267][T12138] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 45524 - 0 [ 242.520218][T12138] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 45524 - 0 [ 242.536041][T12138] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 45524 - 0 [ 242.549053][T12138] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 48078 - 0 [ 242.582799][T12138] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 48078 - 0 [ 242.603517][T12138] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 48078 - 0 [ 242.648202][T12138] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 48078 - 0 [ 242.689337][T12138] geneve2: entered promiscuous mode [ 242.720550][T12138] geneve2: entered allmulticast mode [ 242.955353][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 242.975380][T12151] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 243.031635][T12151] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 243.521147][T12175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.534698][T12173] netlink: 'syz.3.3038': attribute type 1 has an invalid length. [ 243.549866][T12173] netlink: 'syz.3.3038': attribute type 1 has an invalid length. [ 243.801339][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3041'. [ 243.821114][T12183] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 244.033686][T12191] netlink: 'syz.0.3045': attribute type 1 has an invalid length. [ 244.061691][T12191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3045'. [ 244.287881][T12195] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3047'. [ 244.618127][T12213] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 244.979224][T12230] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3065'. [ 245.896957][T12269] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 246.195095][T12280] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 246.236282][T12280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 246.333520][T12289] netlink: 'syz.1.3094': attribute type 1 has an invalid length. [ 246.361661][T12289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3094'. [ 246.934871][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3105'. [ 246.969511][T12314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3106'. [ 247.012781][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3105'. [ 247.027689][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3105'. [ 247.206202][T12326] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 247.237496][T12326] netlink: 'syz.1.3112': attribute type 11 has an invalid length. [ 247.285019][T12326] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3112'. [ 247.601122][T12338] batadv1: entered promiscuous mode [ 247.725225][T12345] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3122'. [ 247.786557][T12345] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3122'. [ 247.804291][T12345] vlan0: entered promiscuous mode [ 248.029923][T12356] netlink: 'syz.4.3129': attribute type 15 has an invalid length. [ 248.149459][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 248.179487][T12364] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.906949][T12396] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 248.941063][T12402] netlink: 'syz.1.3149': attribute type 2 has an invalid length. [ 248.971120][T12402] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 248.989366][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 249.144597][T12409] tipc: Can't bind to reserved service type 1 [ 249.587712][T12430] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 249.628099][T12432] netlink: 'syz.1.3165': attribute type 1 has an invalid length. [ 249.877444][T12443] netlink: 'syz.2.3169': attribute type 30 has an invalid length. [ 250.057830][T12451] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 250.853751][T12495] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 250.907947][T12495] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 251.930976][T12542] __nla_validate_parse: 4 callbacks suppressed [ 251.930999][T12542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3208'. [ 252.312161][T12559] xt_l2tp: unknown flags: 10 [ 252.762886][T12581] wg1 speed is unknown, defaulting to 1000 [ 252.769161][T12581] wg1 speed is unknown, defaulting to 1000 [ 252.831663][T12581] wg1 speed is unknown, defaulting to 1000 [ 252.863296][T12581] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 252.928771][T12581] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 253.093495][T12581] wg1 speed is unknown, defaulting to 1000 [ 253.102241][T12581] wg1 speed is unknown, defaulting to 1000 [ 253.156498][T12581] wg1 speed is unknown, defaulting to 1000 [ 253.194604][T12581] wg1 speed is unknown, defaulting to 1000 [ 253.232221][T12581] wg1 speed is unknown, defaulting to 1000 [ 253.399835][ T30] audit: type=1107 audit(1742203868.655:2): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 254.459311][T12662] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 254.709306][T12671] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 254.741388][T12671] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 254.776359][T12674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.929553][T12679] netlink: 'syz.1.3266': attribute type 9 has an invalid length. [ 254.961412][T12679] netlink: 'syz.1.3266': attribute type 7 has an invalid length. [ 254.999255][T12679] netlink: 'syz.1.3266': attribute type 8 has an invalid length. [ 255.083028][T12687] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 255.090838][T12687] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3271'. [ 255.534403][T12707] netlink: 'syz.2.3280': attribute type 3 has an invalid length. [ 255.565491][T12707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3280'. [ 255.758578][T12717] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 255.780786][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3287'. [ 255.813999][T12723] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3288'. [ 255.818376][T12717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3285'. [ 256.070163][T12732] xt_ecn: cannot match TCP bits for non-tcp packets [ 258.141645][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'. [ 258.150609][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3334'. [ 258.178209][T12826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3336'. [ 258.201341][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3334'. [ 258.211568][T12827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3335'. [ 258.439585][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3342'. [ 258.487183][T12834] netlink: 'syz.4.3342': attribute type 1 has an invalid length. [ 258.517058][T12834] netlink: 'syz.4.3342': attribute type 2 has an invalid length. [ 258.556793][T12834] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3342'. [ 258.611587][T12843] tipc: Trying to set illegal importance in message [ 259.381450][T12874] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3359'. [ 259.390733][T12874] openvswitch: netlink: Missing key (keys=40, expected=80) [ 260.065823][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 260.112299][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 260.204012][T12914] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 261.327393][T12963] validate_nla: 1 callbacks suppressed [ 261.327414][T12963] netlink: 'syz.2.3403': attribute type 3 has an invalid length. [ 262.051547][T13000] netlink: 'syz.2.3417': attribute type 1 has an invalid length. [ 263.608028][T13076] x_tables: duplicate underflow at hook 1 [ 263.623704][T13072] veth0_macvtap: left promiscuous mode [ 263.806648][T13084] __nla_validate_parse: 5 callbacks suppressed [ 263.806669][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 263.833537][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 263.894381][T13089] netlink: 'syz.4.3452': attribute type 10 has an invalid length. [ 263.909870][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 263.984261][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.035238][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.075988][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.135996][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.196562][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.209061][T13101] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 264.232276][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.244669][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 264.279600][T13084] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.288254][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.420876][T13084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.442346][T13084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.608572][T13084] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.634042][T13084] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.651015][T13084] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.675300][T13084] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.707063][T13084] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 264.834400][T13089] team0: Device veth1_vlan failed to register rx_handler [ 265.371806][T13138] xt_NFQUEUE: number of total queues is 0 [ 265.904137][T13163] netlink: 'syz.1.3481': attribute type 13 has an invalid length. [ 268.021726][T13272] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 268.905364][T13316] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 269.016318][T13322] __nla_validate_parse: 76 callbacks suppressed [ 269.016338][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 269.071381][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 269.170700][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3550'. [ 269.712184][T13354] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 270.327091][T13378] netlink: 'syz.1.3573': attribute type 30 has an invalid length. [ 270.377491][T13378] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 270.424430][T13378] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 270.477182][T13382] netlink: 'syz.0.3576': attribute type 1 has an invalid length. [ 270.488030][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3576'. [ 270.700348][T13393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3581'. [ 270.738302][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3581'. [ 271.207530][T13420] netlink: 'syz.1.3593': attribute type 8 has an invalid length. [ 271.644612][T13437] SET target dimension over the limit! [ 271.650400][T13438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.983029][T13449] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 272.731503][T13481] netlink: 'syz.0.3624': attribute type 9 has an invalid length. [ 272.832612][T13483] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 273.085604][T13491] netlink: 'syz.0.3628': attribute type 1 has an invalid length. [ 273.381060][T13505] dummy0: entered promiscuous mode [ 273.393105][T13505] dummy0: entered allmulticast mode [ 273.666189][T13519] raw_sendmsg: syz.2.3643 forgot to set AF_INET. Fix it! [ 273.796401][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3645'. [ 273.811468][T13525] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3646'. [ 273.829080][T13523] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3645'. [ 274.044155][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3651'. [ 274.311408][T13548] netlink: 'syz.3.3657': attribute type 10 has an invalid length. [ 274.319295][T13548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3657'. [ 274.366708][T13550] openvswitch: netlink: IPv4 tun info is not correct [ 274.374856][T13548] batman_adv: batadv0: Adding interface: virt_wifi0 [ 274.400355][T13548] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.492520][T13548] batman_adv: batadv0: Interface activated: virt_wifi0 [ 274.761758][T13568] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 274.769648][T13568] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3667'. [ 274.851371][T13568] openvswitch: netlink: Flow key attr not present in new flow. [ 274.916660][T13576] netlink: 'syz.2.3671': attribute type 33 has an invalid length. [ 274.940021][T13574] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 274.950438][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'. [ 274.993955][T13576] gre0: entered promiscuous mode [ 274.998979][T13576] gre0: entered allmulticast mode [ 275.509503][T13600] netlink: 'syz.0.3683': attribute type 21 has an invalid length. [ 275.581721][T13600] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3683'. [ 275.906057][T13619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.076323][T13626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3696'. [ 276.332416][T13639] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 276.358375][T13639] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3702'. [ 276.760451][T13661] netlink: 'syz.0.3713': attribute type 5 has an invalid length. [ 276.934769][T13665] wg1: entered promiscuous mode [ 276.973536][T13665] wg1: entered allmulticast mode [ 277.221818][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 277.230763][T13675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.241765][T13677] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3719'. [ 277.329087][T13681] netlink: 'syz.1.3723': attribute type 21 has an invalid length. [ 277.739730][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3732'. [ 278.064801][T13713] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 278.244798][T13719] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.910016][T13750] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 279.310052][T13772] __nla_validate_parse: 4 callbacks suppressed [ 279.310073][T13772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3767'. [ 279.502498][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3771'. [ 279.746472][T13790] xt_TCPMSS: Only works on TCP SYN packets [ 280.360095][T13819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3791'. [ 280.411371][T13819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3791'. [ 280.496995][T13828] netlink: 'syz.1.3795': attribute type 11 has an invalid length. [ 281.106870][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3803'. [ 281.823508][T13882] netlink: 'syz.1.3814': attribute type 2 has an invalid length. [ 282.069206][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3820'. [ 282.084114][T13892] xt_TCPMSS: Only works on TCP SYN packets [ 282.320890][T13904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3825'. [ 282.618027][T13917] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3833'. [ 282.661109][T13922] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3835'. [ 282.678431][T13924] xfrm1: entered allmulticast mode [ 282.678497][T13917] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3833'. [ 284.583471][T14016] netlink: 'syz.4.3875': attribute type 4 has an invalid length. [ 284.596901][T14016] __nla_validate_parse: 3 callbacks suppressed [ 284.596919][T14016] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3875'. [ 285.017015][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'. [ 285.279925][T14045] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3886'. [ 285.309474][T14045] IPv6: Can't replace route, no match found [ 285.542092][T14057] xt_l2tp: wrong L2TP version: 0 [ 286.512182][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3904'. [ 286.680475][T14095] openvswitch: netlink: IP tunnel dst address not specified [ 286.926075][T14104] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 286.973907][T14109] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.009516][T14110] bridge_slave_0: left allmulticast mode [ 287.056523][T14110] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.137641][T14110] bridge_slave_1: left allmulticast mode [ 287.172259][T14110] bridge_slave_1: left promiscuous mode [ 287.180690][T14110] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.275088][T14110] bond0: (slave bond_slave_0): Releasing backup interface [ 287.313677][T14110] bond0: (slave bond_slave_1): Releasing backup interface [ 287.391159][T14110] team0: Port device team_slave_0 removed [ 287.435897][T14110] team0: Port device team_slave_1 removed [ 287.443006][T14110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.463956][T14110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.493012][T14110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.534084][T14110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.904816][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'. [ 288.041527][T14152] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 288.049411][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3929'. [ 288.208542][T14159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3930'. [ 289.147677][T14208] netlink: 'syz.2.3950': attribute type 10 has an invalid length. [ 289.172598][T14208] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3950'. [ 289.254964][T14208] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 289.333739][T14208] team0: Port device virt_wifi0 added [ 289.371538][T14215] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3952'. [ 289.617056][T14219] nbd: couldn't find device at index 1255035857 [ 290.175662][T14239] netlink: 'syz.1.3962': attribute type 21 has an invalid length. [ 290.211382][T14239] netlink: 'syz.1.3962': attribute type 6 has an invalid length. [ 290.239977][T14239] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3962'. [ 290.844481][T14269] netlink: 'syz.1.3978': attribute type 1 has an invalid length. [ 290.871475][T14269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.024300][T14272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.191700][T14281] netlink: 'syz.1.3983': attribute type 8 has an invalid length. [ 291.561614][T14298] x_tables: ip_tables: osf match: only valid for protocol 6 [ 291.692446][T14304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.617234][T14426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4041'. [ 295.216151][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4054'. [ 295.759291][T14480] netlink: 'syz.4.4067': attribute type 2 has an invalid length. [ 295.989454][T14494] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.147830][T14496] xt_ecn: cannot match TCP bits for non-tcp packets [ 296.791931][T14529] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 296.796409][T14530] netlink: 'syz.4.4092': attribute type 21 has an invalid length. [ 296.821917][T14530] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4092'. [ 296.851392][T14530] netlink: 'syz.4.4092': attribute type 4 has an invalid length. [ 296.878718][T14530] netlink: 'syz.4.4092': attribute type 5 has an invalid length. [ 296.920151][T14530] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4092'. [ 296.948062][T14534] netlink: 'syz.1.4094': attribute type 22 has an invalid length. [ 297.211491][T14547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4099'. [ 297.259221][T14551] netlink: 'syz.0.4102': attribute type 6 has an invalid length. [ 297.396842][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4104'. [ 297.490741][T14559] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 297.551392][T14559] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 297.654264][T14566] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4109'. [ 298.149728][T14591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4122'. [ 298.210170][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 298.220004][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4124'. [ 298.641953][T14615] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4132'. [ 298.670490][T14617] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 298.681268][T14615] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4132'. [ 298.690823][T14617] netlink: 'syz.2.4135': attribute type 1 has an invalid length. [ 298.888054][T14625] netlink: 'syz.2.4140': attribute type 14 has an invalid length. [ 298.970274][T14627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.413011][T14645] netlink: 'syz.2.4148': attribute type 21 has an invalid length. [ 301.588517][T14750] team0: left allmulticast mode [ 301.627813][T14750] team_slave_0: left allmulticast mode [ 301.647478][T14750] team_slave_1: left allmulticast mode [ 301.661625][T14750] bridge0: port 3(team0) entered disabled state [ 301.749418][T14750] bridge_slave_0: left allmulticast mode [ 301.778523][T14750] bridge_slave_0: left promiscuous mode [ 301.787062][T14750] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.797046][T14762] validate_nla: 3 callbacks suppressed [ 301.797062][T14762] netlink: 'syz.0.4205': attribute type 21 has an invalid length. [ 301.816471][T14750] bridge_slave_1: left allmulticast mode [ 301.823585][T14750] bridge_slave_1: left promiscuous mode [ 301.829539][T14750] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.846164][T14750] bond0: (slave bond_slave_0): Releasing backup interface [ 301.873657][T14750] bond0: (slave bond_slave_1): Releasing backup interface [ 301.900550][T14750] team_slave_0: left promiscuous mode [ 301.938963][T14750] team0: Port device team_slave_0 removed [ 301.952376][T14750] team_slave_1: left promiscuous mode [ 301.971430][T14750] team0: Port device team_slave_1 removed [ 301.978294][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.986129][T14750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.995088][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.003095][T14750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.034103][T14758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.088513][T14762] netlink: 'syz.0.4205': attribute type 4 has an invalid length. [ 302.090830][ T977] wg1 speed is unknown, defaulting to 1000 [ 302.101247][T14762] netlink: 'syz.0.4205': attribute type 3 has an invalid length. [ 302.130569][T14762] __nla_validate_parse: 8 callbacks suppressed [ 302.130589][T14762] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4205'. [ 303.320335][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 303.321038][T14822] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !آDUDw}zR3p(@O> [ 303.822590][T14843] netlink: 'syz.2.4238': attribute type 8 has an invalid length. [ 304.020676][T14856] bridge2: entered promiscuous mode [ 304.065550][T14856] bridge2: entered allmulticast mode [ 304.403050][T14876] netlink: 'syz.2.4250': attribute type 1 has an invalid length. [ 304.410857][T14876] netlink: 'syz.2.4250': attribute type 1 has an invalid length. [ 305.939010][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 306.395369][T14970] Cannot find add_set index 0 as target [ 306.716659][T14985] netlink: 'syz.4.4291': attribute type 15 has an invalid length. [ 306.753829][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4291'. [ 306.779928][T14990] delete_channel: no stack [ 307.177790][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'. [ 307.245417][T15016] vlan0: entered promiscuous mode [ 307.637207][T15029] Cannot find map_set index 0 as target [ 307.852634][T15043] openvswitch: netlink: EtherType 0 is less than min 600 [ 308.181550][T15061] openvswitch: netlink: IP tunnel dst address not specified [ 308.403438][T15071] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4322'. [ 308.922731][T15094] netlink: 'syz.2.4332': attribute type 21 has an invalid length. [ 308.930646][T15094] netlink: 'syz.2.4332': attribute type 6 has an invalid length. [ 308.988108][T15094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4332'. [ 309.004746][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4335'. [ 309.145563][T15105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4337'. [ 309.374592][T15116] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 309.556518][T15125] netlink: 'syz.1.4347': attribute type 10 has an invalid length. [ 309.600151][T15125] team0: Device veth1_macvtap failed to register rx_handler [ 309.786170][T15132] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4351'. [ 309.826132][T15132] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4351'. [ 309.921690][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 309.949085][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 310.022052][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 310.651148][T15173] : entered promiscuous mode [ 311.217175][T15195] xt_CT: No such helper "snmp" [ 311.424146][T15208] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 311.624492][T15215] geneve3: entered promiscuous mode [ 311.629761][T15215] geneve3: entered allmulticast mode [ 312.373439][T15254] netlink: 'syz.0.4411': attribute type 2 has an invalid length. [ 312.679841][T15268] netlink: 'syz.3.4418': attribute type 10 has an invalid length. [ 312.744561][T15268] team0: Port device macvlan0 added [ 313.611476][T15312] __nla_validate_parse: 2 callbacks suppressed [ 313.611496][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4440'. [ 313.721449][T15316] xt_hashlimit: overflow, try lower: 0/0 [ 314.391573][T15342] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 315.075891][T15362] openvswitch: netlink: Actions may not be safe on all matching packets [ 315.653940][T15383] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 315.795172][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4478'. [ 315.856590][T15396] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 315.921357][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4481'. [ 316.173560][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4489'. [ 316.502055][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'. [ 316.510988][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4494'. [ 316.567693][T15426] geneve2: entered promiscuous mode [ 316.582524][T15426] geneve2: entered allmulticast mode [ 316.991700][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4505'. [ 317.031338][T15449] netlink: 'syz.3.4505': attribute type 1 has an invalid length. [ 317.093821][T15453] netlink: 18128 bytes leftover after parsing attributes in process `syz.0.4508'. [ 317.165948][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4509'. [ 317.581125][T15476] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 318.441395][T15511] netlink: 'syz.3.4535': attribute type 10 has an invalid length. [ 318.687328][T15519] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 318.940647][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4544'. [ 319.393590][T15555] netlink: 'syz.4.4556': attribute type 1 has an invalid length. [ 319.410058][T15555] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4556'. [ 319.427226][T15557] netlink: 'syz.0.4557': attribute type 1 has an invalid length. [ 319.521273][T15557] netlink: 'syz.0.4557': attribute type 2 has an invalid length. [ 319.878288][T15577] x_tables: duplicate underflow at hook 2 [ 320.075167][T15587] xt_hashlimit: max too large, truncated to 1048576 [ 320.100027][T15587] No such timeout policy "syz1" [ 321.079158][T15579] syz.1.4568: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 321.100534][T15579] CPU: 1 UID: 0 PID: 15579 Comm: syz.1.4568 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 321.100562][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.100579][T15579] Call Trace: [ 321.100586][T15579] [ 321.100595][T15579] dump_stack_lvl+0x241/0x360 [ 321.100639][T15579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.100664][T15579] ? __pfx__printk+0x10/0x10 [ 321.100690][T15579] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 321.100719][T15579] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 321.100748][T15579] warn_alloc+0x278/0x410 [ 321.100768][T15579] ? __pfx_warn_alloc+0x10/0x10 [ 321.100790][T15579] ? veth_dev_init+0x35f/0x550 [ 321.100805][T15579] ? __get_vm_area_node+0x1c8/0x2d0 [ 321.100828][T15579] ? __get_vm_area_node+0x25c/0x2d0 [ 321.100856][T15579] __vmalloc_node_range_noprof+0x62f/0x1380 [ 321.100872][T15579] ? look_up_lock_class+0x77/0x170 [ 321.100908][T15579] ? rcu_is_watching+0x15/0xb0 [ 321.100924][T15579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 321.100940][T15579] ? rcu_is_watching+0x15/0xb0 [ 321.100957][T15579] ? trace_kmalloc+0x1f/0xd0 [ 321.100976][T15579] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 321.100998][T15579] ? __kvmalloc_node_noprof+0x72/0x190 [ 321.101025][T15579] __kvmalloc_node_noprof+0x142/0x190 [ 321.101057][T15579] ? veth_dev_init+0x35f/0x550 [ 321.101073][T15579] veth_dev_init+0x35f/0x550 [ 321.101092][T15579] register_netdevice+0x6d7/0x1b70 [ 321.101112][T15579] ? _get_random_bytes+0x25d/0x2c0 [ 321.101136][T15579] ? snprintf+0xda/0x120 [ 321.101152][T15579] ? __pfx_register_netdevice+0x10/0x10 [ 321.101176][T15579] ? __pfx_snprintf+0x10/0x10 [ 321.101199][T15579] ? __asan_memset+0x23/0x50 [ 321.101229][T15579] veth_newlink+0x66a/0xb70 [ 321.101256][T15579] ? __pfx_veth_newlink+0x10/0x10 [ 321.101344][T15579] ? alloc_netdev_mqs+0xe01/0x1210 [ 321.101379][T15579] ? rtnl_create_link+0x95b/0xc90 [ 321.101408][T15579] ? __pfx_veth_newlink+0x10/0x10 [ 321.101431][T15579] rtnl_newlink_create+0x37b/0xbd0 [ 321.101461][T15579] ? __pfx_aa_get_newest_label+0x10/0x10 [ 321.101499][T15579] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 321.101526][T15579] ? __pfx___mutex_lock+0x10/0x10 [ 321.101564][T15579] ? ns_capable+0x8a/0xf0 [ 321.101593][T15579] rtnl_newlink+0x167a/0x1d90 [ 321.101628][T15579] ? stack_depot_save_flags+0x37/0x940 [ 321.101677][T15579] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.101707][T15579] ? __netlink_deliver_tap+0x561/0x7f0 [ 321.101741][T15579] ? __pfx_validate_chain+0x10/0x10 [ 321.101778][T15579] ? __sock_sendmsg+0x221/0x270 [ 321.101826][T15579] ? ____sys_sendmsg+0x53a/0x860 [ 321.101850][T15579] ? __sys_sendmsg+0x269/0x350 [ 321.101873][T15579] ? do_syscall_64+0xf3/0x230 [ 321.101900][T15579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.102021][T15579] ? __pfx_lock_release+0x10/0x10 [ 321.102079][T15579] ? __pfx_rtnl_newlink+0x10/0x10 [ 321.102115][T15579] rtnetlink_rcv_msg+0x791/0xcf0 [ 321.102147][T15579] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 321.102186][T15579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.102229][T15579] ? ref_tracker_free+0x643/0x7e0 [ 321.102259][T15579] netlink_rcv_skb+0x206/0x480 [ 321.102292][T15579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.102329][T15579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.102389][T15579] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.102424][T15579] netlink_unicast+0x7f6/0x990 [ 321.102464][T15579] ? __pfx_netlink_unicast+0x10/0x10 [ 321.102491][T15579] ? __virt_addr_valid+0x45f/0x530 [ 321.102514][T15579] ? __phys_addr_symbol+0x2f/0x70 [ 321.102534][T15579] ? __check_object_size+0x47a/0x730 [ 321.102569][T15579] netlink_sendmsg+0x8de/0xcb0 [ 321.102616][T15579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.102656][T15579] ? aa_sock_msg_perm+0x91/0x160 [ 321.102697][T15579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.102730][T15579] __sock_sendmsg+0x221/0x270 [ 321.102766][T15579] ____sys_sendmsg+0x53a/0x860 [ 321.102802][T15579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.102826][T15579] ? __fget_files+0x2a/0x410 [ 321.102863][T15579] ? __fget_files+0x2a/0x410 [ 321.102905][T15579] __sys_sendmsg+0x269/0x350 [ 321.102938][T15579] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.103014][T15579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.103061][T15579] ? do_syscall_64+0x100/0x230 [ 321.103093][T15579] ? do_syscall_64+0xb6/0x230 [ 321.103125][T15579] do_syscall_64+0xf3/0x230 [ 321.103154][T15579] ? clear_bhb_loop+0x35/0x90 [ 321.103189][T15579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.103229][T15579] RIP: 0033:0x7fc6e0d8d169 [ 321.103253][T15579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.103271][T15579] RSP: 002b:00007fc6e1c98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.103298][T15579] RAX: ffffffffffffffda RBX: 00007fc6e0fa5fa0 RCX: 00007fc6e0d8d169 [ 321.103314][T15579] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 321.103327][T15579] RBP: 00007fc6e0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 321.103340][T15579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.103353][T15579] R13: 0000000000000000 R14: 00007fc6e0fa5fa0 R15: 00007ffc67a8d728 [ 321.103386][T15579] [ 321.609394][T15579] Mem-Info: [ 321.612691][T15579] active_anon:5000 inactive_anon:0 isolated_anon:0 [ 321.612691][T15579] active_file:1175 inactive_file:38390 isolated_file:0 [ 321.612691][T15579] unevictable:768 dirty:322 writeback:0 [ 321.612691][T15579] slab_reclaimable:10245 slab_unreclaimable:107396 [ 321.612691][T15579] mapped:28581 shmem:1414 pagetables:916 [ 321.612691][T15579] sec_pagetables:0 bounce:0 [ 321.612691][T15579] kernel_misc_reclaimable:0 [ 321.612691][T15579] free:1319863 free_pcp:515 free_cma:0 [ 321.659908][T15579] Node 0 active_anon:20000kB inactive_anon:0kB active_file:4700kB inactive_file:153488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114324kB dirty:1288kB writeback:0kB shmem:4120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no [ 321.693224][T15579] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 321.724698][T15579] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.752150][T15579] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 321.758118][T15579] Node 0 DMA32 free:1365568kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19960kB inactive_anon:0kB active_file:4700kB inactive_file:153184kB unevictable:1536kB writepending:1288kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:436kB local_pcp:312kB free_cma:0kB [ 321.788750][T15579] lowmem_reserve[]: 0 0 0 0 0 [ 321.794053][T15579] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 321.823389][T15579] lowmem_reserve[]: 0 0 0 0 0 [ 321.828189][T15579] Node 1 Normal free:3900812kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.858541][T15579] lowmem_reserve[]: 0 0 0 0 0 [ 321.863932][T15579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.877557][T15579] Node 0 DMA32: 8*4kB (UM) 5*8kB (UE) 99*16kB (UME) 277*32kB (UME) 1001*64kB (UME) 684*128kB (UME) 428*256kB (UME) 254*512kB (UM) 123*1024kB (UM) 11*2048kB (UM) 199*4096kB (UME) = 1365336kB [ 321.897218][T15579] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 321.909695][T15579] Node 1 Normal: 245*4kB (UME) 71*8kB (UME) 42*16kB (UME) 251*32kB (UME) 112*64kB (UME) 21*128kB (UME) 11*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3900812kB [ 321.929026][T15579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.938724][T15579] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.948382][T15579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.958012][T15579] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.967544][T15579] 40979 total pagecache pages [ 321.972301][T15579] 0 pages in swap cache [ 321.976472][T15579] Free swap = 124996kB [ 321.980632][T15579] Total swap = 124996kB [ 321.984858][T15579] 2097051 pages RAM [ 321.988675][T15579] 0 pages HighMem/MovableOnly [ 321.993443][T15579] 427900 pages reserved [ 321.997610][T15579] 0 pages cma reserved [ 323.778195][T15648] xt_time: unknown flags 0x4 [ 324.061941][T15662] netlink: 'syz.0.4601': attribute type 2 has an invalid length. [ 324.089050][T15662] netlink: 'syz.0.4601': attribute type 1 has an invalid length. [ 324.259077][T15666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.838331][T15698] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 324.881485][T15700] netlink: 'syz.4.4618': attribute type 21 has an invalid length. [ 324.927398][T15700] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4618'. [ 324.965155][T15700] netlink: 'syz.4.4618': attribute type 5 has an invalid length. [ 325.012521][T15700] netlink: 'syz.4.4618': attribute type 6 has an invalid length. [ 325.035918][T15700] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4618'. [ 325.132387][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4622'. [ 325.940076][T15748] openvswitch: netlink: IPv4 tun info is not correct [ 326.029083][T15755] openvswitch: netlink: Unknown nsh attribute 0 [ 326.685319][T15786] netlink: 'syz.4.4651': attribute type 5 has an invalid length. [ 326.730446][T15786] netlink: 'syz.4.4651': attribute type 11 has an invalid length. [ 327.314711][T15814] xt_TCPMSS: Only works on TCP SYN packets [ 327.326105][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4664'. [ 327.357057][T15816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4663'. [ 327.373904][T15815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4664'. [ 327.395217][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4664'. [ 327.413054][T15815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4664'. [ 327.442737][T15822] netlink: 'syz.1.4666': attribute type 1 has an invalid length. [ 327.477198][T15815] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4664'. [ 328.198695][T15860] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4678'. [ 329.112984][T15904] bridge0: port 3(netdevsim2) entered blocking state [ 329.149521][T15904] bridge0: port 3(netdevsim2) entered disabled state [ 329.202492][T15904] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 329.258485][T15904] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 329.630406][T15925] @: renamed from bond_slave_0 [ 330.494485][T15962] __nla_validate_parse: 3 callbacks suppressed [ 330.494506][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4723'. [ 330.747404][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4728'. [ 330.761399][T15972] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4727'. [ 330.793822][T15972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.061084][T15981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4732'. [ 331.082516][T15981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4732'. [ 331.605567][T16006] netlink: 'syz.1.4744': attribute type 1 has an invalid length. [ 331.689474][T16006] NCSI netlink: No device for ifindex 0 [ 332.001308][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4752'. [ 332.023809][T16027] xt_cgroup: path and classid specified [ 332.843781][T16071] netlink: 'syz.4.4768': attribute type 32 has an invalid length. [ 333.731021][T16104] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 334.201394][T16125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4790'. [ 334.381479][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4791'. [ 334.390491][T16133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4791'. [ 334.452072][T16133] netlink: 'syz.2.4791': attribute type 6 has an invalid length. [ 334.483746][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4793'. [ 334.764512][T16151] netlink: 'syz.2.4798': attribute type 29 has an invalid length. [ 335.281354][T16176] netlink: 'syz.3.4809': attribute type 9 has an invalid length. [ 335.323468][T16176] netlink: 'syz.3.4809': attribute type 6 has an invalid length. [ 336.024004][T16215] sctp: [Deprecated]: syz.1.4823 (pid 16215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.024004][T16215] Use struct sctp_sack_info instead [ 336.472137][T16238] __nla_validate_parse: 1 callbacks suppressed [ 336.472157][T16238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4831'. [ 336.612268][T16245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.717318][T16298] netlink: 'syz.4.4858': attribute type 30 has an invalid length. [ 338.093968][T16314] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4866'. [ 338.604234][T16338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4877'. [ 339.077219][T16355] netlink: 'syz.4.4885': attribute type 8 has an invalid length. [ 339.291399][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'. [ 339.670884][T16371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.079687][T16389] x_tables: duplicate underflow at hook 3 [ 340.098652][T16393] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4905'. [ 340.171693][T16393] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 340.421705][T16405] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 341.150858][T16442] xt_limit: Overflow, try lower: 262144/524288 [ 341.555156][T16462] xt_ipcomp: unknown flags F7 [ 342.232043][T16494] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 342.419267][T16503] netlink: 'syz.0.4959': attribute type 15 has an invalid length. [ 342.488213][T16506] netlink: 'syz.1.4960': attribute type 12 has an invalid length. [ 342.951411][T16529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4969'. [ 343.126657][T16536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4970'. [ 343.911521][T16574] netlink: 'syz.3.4985': attribute type 3 has an invalid length. [ 343.942538][T16574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4985'. [ 344.559548][T16605] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5001'. [ 344.630634][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 344.786209][T16616] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5005'. [ 345.010459][T16628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5012'. [ 345.023554][T16628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5012'. [ 345.089706][T16630] IPv6: sit2: Disabled Multicast RS [ 345.664992][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5026'. [ 345.704866][T16656] netlink: 'syz.1.5026': attribute type 2 has an invalid length. [ 345.713369][T16660] sctp: [Deprecated]: syz.0.5028 (pid 16660) Use of int in max_burst socket option. [ 345.713369][T16660] Use struct sctp_assoc_value instead [ 346.232895][T16683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.761545][T16706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.768813][T16706] IPv6: NLM_F_CREATE should be set when creating new route [ 346.776169][T16706] IPv6: NLM_F_CREATE should be set when creating new route [ 346.809294][T16710] netlink: 'syz.0.5053': attribute type 1 has an invalid length. [ 347.036081][T16717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5057'. [ 347.226716][T16724] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 347.348720][T16727] xt_hashlimit: invalid interval [ 348.896306][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5083'. [ 349.616876][T16816] netlink: 'syz.3.5097': attribute type 10 has an invalid length. [ 349.651392][T16816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5097'. [ 349.661072][T16816] veth0_vlan: entered allmulticast mode [ 349.693255][T16816] bridge0: port 3(veth0_vlan) entered blocking state [ 349.700138][T16816] bridge0: port 3(veth0_vlan) entered disabled state [ 349.748422][T16816] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 350.415028][T16842] xt_HMARK: proto mask must be zero with L3 mode [ 350.458175][T16846] netlink: 'syz.3.5112': attribute type 16 has an invalid length. [ 350.481345][T16846] netlink: 'syz.3.5112': attribute type 17 has an invalid length. [ 351.221389][T16870] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5124'. [ 351.754220][T16891] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 351.771812][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5134'. [ 351.970352][T16899] veth2: entered promiscuous mode [ 351.988566][T16899] veth2: entered allmulticast mode [ 353.111587][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5150'. [ 353.272024][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5151'. [ 353.341829][T16932] netlink: 'syz.4.5154': attribute type 10 has an invalid length. [ 353.366720][T16932] team0: Device ipvlan1 failed to register rx_handler [ 353.803477][T16948] netlink: 'syz.3.5162': attribute type 2 has an invalid length. [ 353.833699][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5162'. [ 353.867130][T16950] SET target dimension over the limit! [ 353.917643][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5165'. [ 353.941671][T16955] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 354.097534][T16961] netlink: 'syz.3.5168': attribute type 2 has an invalid length. [ 354.125311][T16961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5168'. [ 354.214270][T16968] netlink: 'syz.2.5171': attribute type 4 has an invalid length. [ 354.260839][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5171'. [ 354.376090][T16970] x_tables: unsorted entry at hook 3 [ 355.029668][T17004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5190'. [ 355.062096][T17007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.160554][T17010] netlink: del zone limit has 4 unknown bytes [ 355.569118][T17027] netlink: 'syz.3.5202': attribute type 6 has an invalid length. [ 355.664860][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5203'. [ 355.717543][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5205'. [ 356.611883][T17076] openvswitch: netlink: IPv4 tunnel dst address is zero [ 356.749084][T17081] : renamed from vlan0 [ 357.021725][T17096] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5235'. [ 357.070974][T17098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5236'. [ 357.080787][T17096] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.5235'. [ 357.101631][T17098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5236'. [ 357.267733][T17106] netlink: 'syz.3.5240': attribute type 4 has an invalid length. [ 357.993877][T17138] xt_hashlimit: size too large, truncated to 1048576 [ 358.382164][T17154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 359.190048][T17194] __nla_validate_parse: 4 callbacks suppressed [ 359.190067][T17194] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.5282'. [ 359.277014][T17194] netlink: 1672 bytes leftover after parsing attributes in process `syz.3.5282'. [ 359.811424][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5298'. [ 360.707556][ T47] IPVS: starting estimator thread 0... [ 360.736909][T17266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.805677][T17271] netlink: 'syz.2.5322': attribute type 1 has an invalid length. [ 360.831359][T17264] IPVS: using max 19 ests per chain, 45600 per kthread [ 360.851345][T17269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5319'. [ 361.056176][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5326'. [ 361.344852][T17297] netlink: 'syz.1.5333': attribute type 1 has an invalid length. [ 361.357338][T17300] netlink: 'syz.0.5334': attribute type 26 has an invalid length. [ 361.381389][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5333'. [ 361.699594][T17315] xt_ecn: cannot match TCP bits for non-tcp packets [ 361.843848][T17322] netlink: 'syz.1.5345': attribute type 5 has an invalid length. [ 361.906000][T17325] netlink: 'syz.0.5347': attribute type 1 has an invalid length. [ 361.928925][T17325] netlink: 'syz.0.5347': attribute type 11 has an invalid length. [ 361.960827][T17325] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5347'. [ 362.054408][T17331] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5350'. [ 362.175116][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5354'. [ 362.201366][T17338] netlink: 'syz.0.5354': attribute type 1 has an invalid length. [ 362.515046][T17355] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5362'. [ 362.572355][T17358] xt_limit: Overflow, try lower: 0/0 [ 362.655787][T17361] bond0: option xmit_hash_policy: invalid value (71) [ 362.906943][T17374] netlink: 'syz.4.5371': attribute type 21 has an invalid length. [ 363.001832][T17379] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.171760][T17385] Cannot find del_set index 4 as target [ 363.241337][T17390] x_tables: unsorted entry at hook 2 [ 363.257723][T17391] syz.2.5379 uses old SIOCAX25GETINFO [ 364.007300][T17430] netlink: 'syz.3.5398': attribute type 4 has an invalid length. [ 364.015330][T17430] netlink: 'syz.3.5398': attribute type 11 has an invalid length. [ 364.645878][ T47] IPVS: starting estimator thread 0... [ 364.664741][T17459] __nla_validate_parse: 5 callbacks suppressed [ 364.664761][T17459] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5412'. [ 364.751419][T17460] IPVS: using max 19 ests per chain, 45600 per kthread [ 365.427547][T17501] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5434'. [ 365.680423][T17510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.191378][T17538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.270657][T17543] netlink: 'syz.0.5454': attribute type 1 has an invalid length. [ 366.300903][T17543] netlink: 'syz.0.5454': attribute type 3 has an invalid length. [ 366.317803][T17543] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5454'. [ 366.467782][T17551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5458'. [ 366.572208][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5462'. [ 366.601351][T17556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5462'. [ 367.076863][T17582] openvswitch: netlink: Key type 29 is not supported [ 367.624513][T17609] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 367.990951][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5497'. [ 368.181102][T17640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5501'. [ 368.200663][T17640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5501'. [ 368.220861][T17640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5501'. [ 368.274861][T17642] netlink: 'syz.2.5502': attribute type 1 has an invalid length. [ 368.301319][T17642] netlink: 'syz.2.5502': attribute type 3 has an invalid length. [ 368.822433][T17667] xt_hashlimit: max too large, truncated to 1048576 [ 369.034482][T17680] netlink: 'syz.4.5521': attribute type 2 has an invalid length. [ 369.276967][T17691] nftables ruleset with unbound chain [ 369.444147][T17700] xt_recent: hitcount (486539264) is larger than allowed maximum (65535) [ 369.708940][T17717] lo: entered allmulticast mode [ 369.743701][T17717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.171925][T17740] netlink: 'syz.1.5548': attribute type 30 has an invalid length. [ 370.201105][T17743] netlink: 'syz.2.5552': attribute type 1 has an invalid length. [ 370.241421][T17743] __nla_validate_parse: 2 callbacks suppressed [ 370.241447][T17743] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5552'. [ 370.254763][T17746] netlink: 'syz.3.5553': attribute type 5 has an invalid length. [ 370.268736][T17746] : entered promiscuous mode [ 370.636649][T17764] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5563'. [ 370.668753][T17764] 0: renamed from hsr_slave_1 (while UP) [ 370.710768][T17764] 0: entered allmulticast mode [ 370.741959][T17764] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 371.280505][T17796] netlink: 'syz.0.5578': attribute type 10 has an invalid length. [ 371.320104][T17796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.342616][T17796] team0: Port device batadv0 added [ 371.419363][T17801] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5580'. [ 371.537884][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5584'. [ 371.557597][T17810] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5585'. [ 371.577682][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5584'. [ 371.588109][T17810] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5585'. [ 372.022456][T17832] x_tables: duplicate underflow at hook 3 [ 372.238712][T17843] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.5602'. [ 372.244466][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5601'. [ 372.561806][T17861] tc_dump_action: action bad kind [ 372.673398][T17865] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5611'. [ 372.837761][T17873] xt_hashlimit: invalid rate [ 374.451780][T17959] xt_policy: output policy not valid in PREROUTING and INPUT [ 375.045072][T17991] netlink: 'syz.0.5667': attribute type 1 has an invalid length. [ 375.328362][T18004] lo: entered allmulticast mode [ 375.362029][T18004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.473784][T18013] __nla_validate_parse: 4 callbacks suppressed [ 375.473805][T18013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5677'. [ 375.547770][T18013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5677'. [ 375.582925][T18020] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 375.788873][T18029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5685'. [ 376.632209][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5701'. [ 376.912894][T18090] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5708'. [ 377.147929][T18105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5713'. [ 377.419661][T18121] bond4: entered promiscuous mode [ 377.438743][T18121] bond4: entered allmulticast mode [ 377.445127][T18121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 377.977589][ T974] IPVS: starting estimator thread 0... [ 378.071619][T18150] IPVS: using max 19 ests per chain, 45600 per kthread [ 378.224334][T14372] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.299695][T18167] openvswitch: netlink: Missing key (keys=40, expected=100) [ 378.852927][T18191] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5750'. [ 379.235812][T18212] netlink: 'syz.4.5760': attribute type 1 has an invalid length. [ 379.251720][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5759'. [ 379.470092][T18224] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5766'. [ 379.776967][T18232] xt_CT: No such helper "netbios-ns" [ 380.105856][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 380.673504][T18285] netlink: 30 bytes leftover after parsing attributes in process `syz.1.5794'. [ 381.259322][T18314] netlink: 'syz.2.5808': attribute type 1 has an invalid length. [ 381.296724][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5808'. [ 381.324312][T18318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 382.471326][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 382.568238][T18363] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.404257][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5850'. [ 383.834307][T18431] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 384.105306][T18442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5868'. [ 384.242383][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 384.258933][T18450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 384.270562][T18450] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5871'. [ 384.343552][T18456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5874'. [ 384.922636][T18483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5887'. [ 385.018416][T18489] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5892'. [ 385.129396][T18492] ip6tnl2: entered promiscuous mode [ 385.146198][T18492] ip6tnl2: entered allmulticast mode [ 385.866530][T18534] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 386.180772][T18547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.411425][T18557] netlink: 'syz.2.5924': attribute type 1 has an invalid length. [ 386.437058][T18557] __nla_validate_parse: 4 callbacks suppressed [ 386.437078][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5924'. [ 386.886512][T18584] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5936'. [ 386.918719][T18584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5936'. [ 387.258514][T18603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5947'. [ 387.289054][T18603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5947'. [ 387.298735][T18603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5947'. [ 387.484853][T18612] netlink: 'syz.4.5953': attribute type 1 has an invalid length. [ 387.907518][T18633] pim6reg: entered allmulticast mode [ 387.989262][T18638] netlink: 'syz.4.5962': attribute type 3 has an invalid length. [ 388.259494][T18651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5968'. [ 388.286868][T18653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5969'. [ 388.432005][T18659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5971'. [ 388.498381][T18663] netlink: 'syz.2.5974': attribute type 1 has an invalid length. [ 388.531506][T18663] nbd: couldn't find a device at index 20 [ 388.547101][T18665] xt_cgroup: invalid path, errno=-2 [ 388.634990][T18669] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5977'. [ 389.011900][T18689] netlink: 'syz.1.5987': attribute type 2 has an invalid length. [ 389.809424][T18715] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 390.243817][T18735] netlink: 'syz.3.6004': attribute type 3 has an invalid length. [ 390.574264][T18752] netlink: 'syz.0.6011': attribute type 1 has an invalid length. [ 391.111384][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 391.549534][T18800] __nla_validate_parse: 5 callbacks suppressed [ 391.549554][T18800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6033'. [ 391.770111][T18812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6039'. [ 392.014633][T18825] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 392.178592][T18833] netlink: 'syz.1.6051': attribute type 1 has an invalid length. [ 392.190083][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6050'. [ 392.201302][T18833] netlink: 'syz.1.6051': attribute type 2 has an invalid length. [ 392.241540][T18836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6052'. [ 392.301730][T18836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6052'. [ 392.419329][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6057'. [ 392.637825][T18858] xt_socket: unknown flags 0x8 [ 392.945701][T18874] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6070'. [ 392.991463][T18874] netlink: zone id is out of range [ 392.996741][T18874] netlink: zone id is out of range [ 393.048296][T18874] netlink: zone id is out of range [ 393.079442][T18874] netlink: zone id is out of range [ 393.092113][T18874] netlink: zone id is out of range [ 393.097276][T18874] netlink: zone id is out of range [ 393.106948][T18874] netlink: zone id is out of range [ 393.116184][T18874] netlink: zone id is out of range [ 393.210708][T18886] ip6t_REJECT: ECHOREPLY is not supported [ 393.440171][T18899] netlink: 'syz.0.6082': attribute type 2 has an invalid length. [ 393.469116][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6082'. [ 393.559423][T18902] netlink: 'syz.1.6083': attribute type 1 has an invalid length. [ 393.730356][T18912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.303563][T18983] gre2: entered allmulticast mode [ 395.793489][T19007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6134'. [ 395.901551][T19012] netlink: 'syz.4.6137': attribute type 10 has an invalid length. [ 395.952281][T19012] team0: left promiscuous mode [ 395.976559][T19012] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.020543][T19012] bond0: (slave team0): Enslaving as an active interface with an up link [ 396.569699][T19042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6151'. [ 396.589176][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6151'. [ 396.964475][T19064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6162'. [ 397.427364][T19089] netlink: 'syz.1.6175': attribute type 5 has an invalid length. [ 397.638953][T19098] net_ratelimit: 77 callbacks suppressed [ 397.638974][T19098] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 397.723289][T19103] bridge4: entered promiscuous mode [ 397.731854][T19103] bridge4: entered allmulticast mode [ 397.871797][T19110] delete_channel: no stack [ 398.049385][T19117] netlink: 'syz.1.6189': attribute type 1 has an invalid length. [ 398.079172][T19117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6189'. [ 399.144092][T19176] xt_l2tp: v2 doesn't support IP mode [ 399.388951][T19188] netlink: 'syz.3.6219': attribute type 2 has an invalid length. [ 399.442681][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6219'. [ 399.500418][T19191] batadv0: entered promiscuous mode [ 399.530263][T19191] batadv0: entered allmulticast mode [ 399.559215][T19191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.582792][T19194] sctp: [Deprecated]: syz.0.6224 (pid 19194) Use of int in maxseg socket option. [ 399.582792][T19194] Use struct sctp_assoc_value instead [ 400.204129][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6239'. [ 400.257108][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 400.296573][T19227] netlink: 'syz.3.6240': attribute type 1 has an invalid length. [ 400.322198][T19227] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6240'. [ 401.404205][T19275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.446838][T19277] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 401.821477][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 402.373092][T19319] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6286'. [ 402.716351][T19336] netlink: 'syz.4.6294': attribute type 2 has an invalid length. [ 402.771478][T19336] netlink: 'syz.4.6294': attribute type 1 has an invalid length. [ 403.109724][T19356] netlink: 'syz.3.6304': attribute type 3 has an invalid length. [ 403.680559][T19383] openvswitch: netlink: Actions may not be safe on all matching packets [ 404.457339][T19420] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6335'. [ 404.691447][T19429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.698740][T19429] IPv6: NLM_F_CREATE should be set when creating new route [ 404.706074][T19429] IPv6: NLM_F_CREATE should be set when creating new route [ 405.108851][T19449] netlink: 'syz.0.6349': attribute type 9 has an invalid length. [ 405.899632][T19464] IPv6: addrconf: prefix option has invalid lifetime [ 406.248427][T19461] wg1 speed is unknown, defaulting to 1000 [ 407.244913][T19496] netlink: 'syz.2.6371': attribute type 6 has an invalid length. [ 407.287131][T19496] netlink: 'syz.2.6371': attribute type 7 has an invalid length. [ 407.301339][T19496] netlink: 'syz.2.6371': attribute type 8 has an invalid length. [ 407.555004][T19500] netlink: 'syz.0.6373': attribute type 7 has an invalid length. [ 407.751308][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 408.010067][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'. [ 408.250107][T19522] netlink: 'syz.0.6384': attribute type 1 has an invalid length. [ 408.289043][T19528] netlink: 'syz.4.6385': attribute type 1 has an invalid length. [ 408.300584][T19528] netlink: 'syz.4.6385': attribute type 2 has an invalid length. [ 408.331626][T19528] netlink: 'syz.4.6385': attribute type 1 has an invalid length. [ 408.808019][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6398'. [ 409.191548][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6405'. [ 409.339556][T19574] netlink: 'syz.0.6410': attribute type 41 has an invalid length. [ 409.394684][T19576] netlink: 'syz.2.6411': attribute type 16 has an invalid length. [ 409.437939][T19580] xt_TCPMSS: Only works on TCP SYN packets [ 409.452017][T19576] netlink: 'syz.2.6411': attribute type 3 has an invalid length. [ 409.485199][T19576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6411'. [ 409.894766][T19598] bond0: entered promiscuous mode [ 409.899867][T19598] team0: entered promiscuous mode [ 410.054904][T19606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6426'. [ 410.112391][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6426'. [ 410.510273][T19628] netlink: 'syz.2.6437': attribute type 3 has an invalid length. [ 411.071626][T19658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6451'. [ 411.472877][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6463'. [ 411.517319][T19682] sctp: [Deprecated]: syz.4.6464 (pid 19682) Use of int in max_burst socket option. [ 411.517319][T19682] Use struct sctp_assoc_value instead [ 411.590006][T19680] veth5: entered promiscuous mode [ 411.602365][T19680] veth5: entered allmulticast mode [ 411.639022][T19687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6465'. [ 411.713429][T19687] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 411.819711][T19692] netlink: 'syz.2.6469': attribute type 30 has an invalid length. [ 412.043992][T19705] xt_hashlimit: size too large, truncated to 1048576 [ 412.071376][T19708] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6476'. [ 412.090654][T19705] xt_hashlimit: max too large, truncated to 1048576 [ 412.448442][T19724] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 412.515236][T19726] netlink: 'syz.2.6486': attribute type 12 has an invalid length. [ 413.060228][T19756] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 413.286174][T19768] __nla_validate_parse: 5 callbacks suppressed [ 413.286194][T19768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6507'. [ 413.818200][T19792] validate_nla: 1 callbacks suppressed [ 413.818220][T19792] netlink: 'syz.3.6519': attribute type 10 has an invalid length. [ 413.898522][T19792] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 414.222407][T19814] SET target dimension over the limit! [ 414.768045][T19844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6536'. [ 414.814893][T19844] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6536'. [ 415.057398][T19854] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 415.662633][T19890] netlink: 'syz.2.6555': attribute type 4 has an invalid length. [ 415.670430][T19890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6555'. [ 415.767090][T19890] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 416.164493][T19911] bond4: entered promiscuous mode [ 416.202717][T19911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.321017][T19924] xt_hashlimit: max too large, truncated to 1048576 [ 416.657740][T19943] netlink: 'syz.2.6574': attribute type 3 has an invalid length. [ 416.691382][T19943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6574'. [ 416.785551][T19948] netlink: 'syz.3.6577': attribute type 1 has an invalid length. [ 417.260079][T19971] netlink: 'syz.3.6585': attribute type 16 has an invalid length. [ 417.291370][T19971] netlink: 'syz.3.6585': attribute type 3 has an invalid length. [ 417.333303][T19971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6585'. [ 417.881536][T20001] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6599'. [ 417.907353][T20001] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6599'. [ 417.999912][T20005] netlink: 'syz.4.6602': attribute type 1 has an invalid length. [ 418.181526][T20016] openvswitch: netlink: Message has 13 unknown bytes. [ 418.224692][T20016] openvswitch: netlink: Actions may not be safe on all matching packets [ 418.407179][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6611'. [ 418.439843][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6611'. [ 418.652595][T20038] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 418.693962][T20038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6617'. [ 418.704508][T20043] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 418.975450][T20055] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 419.206599][T20066] openvswitch: netlink: Message has 1 unknown bytes. [ 419.259688][T20066] openvswitch: netlink: Actions may not be safe on all matching packets [ 419.506972][T20084] netlink: 'syz.2.6638': attribute type 5 has an invalid length. [ 419.868427][T20102] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6648'. [ 420.342194][T20121] netlink: 'syz.2.6658': attribute type 3 has an invalid length. [ 420.367480][T20121] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6658'. [ 420.633956][T20135] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.6665'. [ 420.671371][T20135] netlink: zone id is out of range [ 420.817863][T20142] netlink: 'syz.2.6667': attribute type 1 has an invalid length. [ 420.901619][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6670'. [ 421.089038][T20155] netlink: 'syz.1.6675': attribute type 21 has an invalid length. [ 421.121564][T20155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6675'. [ 421.914468][T20197] netlink: 'syz.0.6696': attribute type 32 has an invalid length. [ 421.941605][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6696'. [ 421.967339][T20197] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 422.865672][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6718'. [ 423.108398][T20264] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 423.857907][T20308] __nla_validate_parse: 1 callbacks suppressed [ 423.857930][T20308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6745'. [ 423.949169][T20310] net veth1_virt_wifi : renamed from virt_wifi0 (while UP) [ 424.437029][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6757'. [ 424.624342][T20347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6762'. [ 424.757419][T20354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6761'. [ 424.832468][T20360] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6766'. [ 424.895700][T20360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6766'. [ 425.108897][T20373] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6770'. [ 425.138130][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6770'. [ 425.181442][T20373] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6770'. [ 425.199124][T20373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6770'. [ 426.377970][T20438] netlink: 'syz.0.6796': attribute type 1 has an invalid length. [ 426.414610][T20438] netlink: 'syz.0.6796': attribute type 3 has an invalid length. [ 426.447506][T20438] NCSI netlink: No device for ifindex 246 [ 426.462411][T20444] netlink: 'syz.3.6800': attribute type 10 has an invalid length. [ 426.574702][T20444] team0: Device hsr_slave_0 failed to register rx_handler [ 428.892213][T20571] __nla_validate_parse: 7 callbacks suppressed [ 428.892235][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6848'. [ 428.898821][T20569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6847'. [ 429.349032][T20594] xt_l2tp: invalid flags combination: c [ 429.592951][T20609] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 429.647060][T20609] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6861'. [ 430.293625][T20646] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 430.527138][T20661] openvswitch: netlink: VXLAN extension 26 out of range max 1 [ 431.009806][T20688] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6894'. [ 431.508277][T20711] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 431.951542][T20736] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6913'. [ 432.247720][T20753] openvswitch: netlink: Multiple metadata blocks provided [ 433.836087][T20836] netlink: 'syz.0.6957': attribute type 75 has an invalid length. [ 434.075865][T20850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6964'. [ 434.112635][T20850] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 434.397726][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6974'. [ 434.761539][T20884] openvswitch: netlink: Actions may not be safe on all matching packets [ 434.921550][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6985'. [ 434.930564][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6985'. [ 434.985373][T20895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6987'. [ 435.431617][T20916] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.6997'. [ 435.519199][T20923] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 435.542076][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7001'. [ 435.550974][T20923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7001'. [ 435.660969][T20932] xt_hashlimit: invalid rate [ 435.990070][T20947] netlink: 'syz.4.7012': attribute type 3 has an invalid length. [ 436.014957][T20947] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7012'. [ 436.039538][T20950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7014'. [ 436.863690][T20995] netlink: 'syz.1.7035': attribute type 6 has an invalid length. [ 436.930773][T20997] netlink: 'syz.0.7037': attribute type 1 has an invalid length. [ 437.051580][T21003] netlink: 'syz.2.7039': attribute type 14 has an invalid length. [ 437.799569][T21042] Zero length message leads to an empty skb [ 438.416460][T21073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.046177][T21103] netlink: 'syz.4.7089': attribute type 1 has an invalid length. [ 439.119061][T21103] __nla_validate_parse: 6 callbacks suppressed [ 439.119081][T21103] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.7089'. [ 439.184452][T21096] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.191991][T21096] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.379841][T21114] openvswitch: netlink: Actions may not be safe on all matching packets [ 439.472653][T21096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.500315][T21096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.524029][T21096] batadv_slave_1: left promiscuous mode [ 439.561752][T21096] 0: left allmulticast mode [ 439.587702][T21096] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 439.620828][T21096] veth0_vlan: left allmulticast mode [ 439.644782][T21096] vlan0: left promiscuous mode [ 439.702970][T21096] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 439.833081][T21096] ip6erspan0: left promiscuous mode [ 439.898687][T21096] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.918069][T21096] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.941321][T21096] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.950250][T21096] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.307192][T21150] netlink: 'syz.0.7110': attribute type 1 has an invalid length. [ 440.524458][T21159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7116'. [ 440.814913][T21172] Bluetooth: MGMT ver 1.23 [ 441.232595][T21195] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7133'. [ 441.522694][T21210] openvswitch: netlink: Actions may not be safe on all matching packets [ 441.683986][T21216] geneve1: entered promiscuous mode [ 441.876488][T21230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7150'. [ 441.911302][T21230] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7150'. [ 441.951220][T21230] netlink: 'syz.3.7150': attribute type 5 has an invalid length. [ 441.958992][T21230] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7150'. [ 442.311331][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 442.643932][T21264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7167'. [ 443.160847][T21290] netlink: 'syz.1.7180': attribute type 1 has an invalid length. [ 444.206402][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7203'. [ 444.235173][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7203'. [ 444.253510][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'. [ 444.280569][T21342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7204'. [ 444.605262][T21358] sit0: entered promiscuous mode [ 444.633375][T21358] netlink: 'syz.1.7213': attribute type 1 has an invalid length. [ 444.661399][T21358] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7213'. [ 444.685542][T21360] netlink: 'syz.2.7214': attribute type 3 has an invalid length. [ 444.955576][T21368] netlink: 'syz.3.7219': attribute type 10 has an invalid length. [ 445.525024][T21392] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7227'. [ 445.591990][T21392] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 445.626716][T21398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7228'. [ 445.682048][T21398] smc: net device bond0 applied user defined pnetid S [ 445.811774][T21402] netlink: 'syz.2.7229': attribute type 58 has an invalid length. [ 445.832411][T21402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7229'. [ 446.621653][T21430] bond0: option arp_interval: invalid value (18446744072034198015) [ 446.630325][T21430] bond0: option arp_interval: allowed values 0 - 2147483647 [ 447.551761][ T977] IPVS: starting estimator thread 0... [ 447.618437][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7258'. [ 447.639595][T21469] vlan2: entered promiscuous mode [ 447.645731][T21467] IPVS: using max 17 ests per chain, 40800 per kthread [ 447.690779][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7259'. [ 447.721349][T21472] netlink: 'syz.1.7260': attribute type 1 has an invalid length. [ 448.852837][T21521] tipc: Started in network mode [ 448.863926][T21521] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 448.881878][T21521] tipc: Enabled bearer , priority 10 [ 449.879279][T21559] __nla_validate_parse: 5 callbacks suppressed [ 449.879310][T21559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7299'. [ 450.002655][ T977] tipc: Node number set to 43690 [ 450.587205][T21575] wg1 speed is unknown, defaulting to 1000 [ 451.725730][T21626] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7329'. [ 451.781856][T21628] netlink: 120 bytes leftover after parsing attributes in process `syz.1.7330'. [ 451.801264][T21628] netlink: 'syz.1.7330': attribute type 1 has an invalid length. [ 451.809043][T21628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7330'. [ 451.991356][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 452.116983][T21644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.204125][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7340'. [ 452.213704][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7340'. [ 453.071555][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7355'. [ 453.091319][T21679] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 453.402120][T21695] Bluetooth: MGMT ver 1.23 [ 453.610648][T21703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7367'. [ 455.441427][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 455.447632][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 455.930172][T21789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7408'. [ 455.966935][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7408'. [ 456.460158][T21791] wg1 speed is unknown, defaulting to 1000 [ 456.711313][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 457.673469][T21836] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7431'. [ 458.079462][T21858] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7442'. [ 458.234770][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7446'. [ 458.256144][T21862] netlink: 'syz.2.7446': attribute type 1 has an invalid length. [ 458.268075][T21862] netlink: 'syz.2.7446': attribute type 2 has an invalid length. [ 458.301399][T21868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.623812][T21931] netlink: 'syz.4.7478': attribute type 3 has an invalid length. [ 460.030413][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7486'. [ 460.631588][T21980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7500'. [ 460.665453][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7500'. [ 460.682598][T21980] netlink: 'syz.1.7500': attribute type 18 has an invalid length. [ 460.690460][T21980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7500'. [ 460.965199][T21993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7509'. [ 461.492258][T22016] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7520'. [ 461.535962][T22016] netlink: 'syz.2.7520': attribute type 1 has an invalid length. [ 461.553195][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7521'. [ 461.596157][T22025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7524'. [ 462.140244][T22051] IPVS: ip_vs_add_dest(): server weight less than zero [ 462.149310][T22052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7536'. [ 462.650052][T22076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7549'. [ 463.042359][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7559'. [ 463.347126][T22109] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7565'. [ 463.382519][T22109] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 463.410561][T22115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7566'. [ 463.426828][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7566'. [ 463.968701][T22143] netlink: 'syz.3.7582': attribute type 9 has an invalid length. [ 464.536558][T22171] netlink: 'syz.4.7596': attribute type 322 has an invalid length. [ 465.092360][T22200] netlink: 'syz.4.7610': attribute type 5 has an invalid length. [ 465.209377][T22202] Bluetooth: MGMT ver 1.23 [ 465.681385][T22228] tipc: Started in network mode [ 465.686312][T22228] tipc: Node identity 7, cluster identity 4711 [ 465.712373][T22228] tipc: Node number set to 7 [ 465.727527][T22228] tipc: Cannot configure node identity twice [ 465.960072][T22240] netlink: 'syz.1.7629': attribute type 10 has an invalid length. [ 465.979746][T22240] __nla_validate_parse: 6 callbacks suppressed [ 465.979765][T22240] netlink: 1252 bytes leftover after parsing attributes in process `syz.1.7629'. [ 466.004888][T22240] openvswitch: netlink: Message has 5 unknown bytes. [ 466.603640][T22276] xt_CT: No such helper "snmp" [ 467.220769][T22305] sctp: [Deprecated]: syz.2.7658 (pid 22305) Use of int in max_burst socket option deprecated. [ 467.220769][T22305] Use struct sctp_assoc_value instead [ 467.565863][T22323] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 467.582762][T22323] gre2: left allmulticast mode [ 467.604142][T22323] bridge4: left promiscuous mode [ 467.615870][T22323] bridge4: left allmulticast mode [ 468.019743][T22341] nbd: must specify at least one socket [ 468.111711][T22346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7678'. [ 468.235482][T22353] lo: left allmulticast mode [ 468.312927][T22353] gretap0: left promiscuous mode [ 468.384089][T22357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7684'. [ 468.889673][T22353] bond0: left promiscuous mode [ 468.895988][T22353] team0: left promiscuous mode [ 469.911446][T22353] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.927493][T22353] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.937636][T22353] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.947821][T22353] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.968340][T22353] geneve1: left promiscuous mode [ 469.986833][T22353] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 470.147469][T22353] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 48078 - 0 [ 470.175747][T22353] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 48078 - 0 [ 470.193941][T22353] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 48078 - 0 [ 470.208307][T22353] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 48078 - 0 [ 470.222024][T22353] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 45524 - 0 [ 470.231604][T22353] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 45524 - 0 [ 470.240682][T22353] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 45524 - 0 [ 470.250991][T22353] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 45524 - 0 [ 470.260794][T22353] geneve2: left promiscuous mode [ 470.266606][T22353] geneve2: left allmulticast mode [ 470.391344][ T26] wg1 speed is unknown, defaulting to 1000 [ 470.860693][T22412] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7705'. [ 470.882968][T22408] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7705'. [ 471.270728][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7719'. [ 471.516425][T22446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7725'. [ 473.365780][T22528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7764'. [ 473.776518][T22546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7773'. [ 474.721708][T22591] tipc: MTU too low for tipc bearer [ 475.831407][T22637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.809001][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7838'. [ 477.064371][T22689] dvmrp5: entered allmulticast mode [ 477.081089][T22689] dvmrp0: left allmulticast mode [ 477.086195][T22689] dvmrp5: left allmulticast mode [ 477.921588][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 479.158111][T22774] netlink: 'syz.0.7882': attribute type 1 has an invalid length. [ 479.189295][T22774] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7882'. [ 479.760831][T22786] wg1 speed is unknown, defaulting to 1000 [ 480.378001][T22824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7907'. [ 481.075569][T22847] netlink: 'syz.0.7918': attribute type 3 has an invalid length. [ 481.136115][T22841] wg1 speed is unknown, defaulting to 1000 [ 484.212100][T22989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7981'. [ 484.251716][T22989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7981'. [ 484.260679][T22989] netlink: 'syz.4.7981': attribute type 12 has an invalid length. [ 484.321029][T22989] netlink: 'syz.4.7981': attribute type 11 has an invalid length. [ 484.554942][T23002] netlink: 'syz.4.7987': attribute type 4 has an invalid length. [ 487.137149][T23127] netlink: 'syz.4.8049': attribute type 10 has an invalid length. [ 487.161025][T23127] batman_adv: batadv0: Adding interface: macvtap0 [ 487.183688][T23127] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.230968][T23127] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 487.263687][T23132] netlink: 'syz.0.8051': attribute type 3 has an invalid length. [ 487.801404][T23156] netlink: 'syz.4.8063': attribute type 1 has an invalid length. [ 487.988828][T23162] netlink: 'syz.1.8065': attribute type 27 has an invalid length. [ 488.251564][T23168] wg1 speed is unknown, defaulting to 1000 [ 488.568219][T23187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.788199][T23199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8083'. [ 489.214102][T23214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.517906][T23228] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.527163][T23228] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.536699][T23228] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.546182][T23228] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.023050][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8110'. [ 490.160317][T23263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8114'. [ 491.002490][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8135'. [ 491.365328][T23322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8143'. [ 491.475457][T23328] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8145'. [ 491.573588][T23333] lo: left allmulticast mode [ 491.930857][T23333] sit0: left promiscuous mode [ 492.118358][T23333] dummy0: left promiscuous mode [ 492.141444][T23333] dummy0: left allmulticast mode [ 492.310550][T23333] bridge_slave_0: left promiscuous mode [ 492.778534][T23333] : left promiscuous mode [ 493.165855][T23333] xfrm1: left allmulticast mode [ 493.183609][T23333] bridge2: left promiscuous mode [ 493.188695][T23333] bridge2: left allmulticast mode [ 493.229059][T23333] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.245412][T23333] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.259945][T23333] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.271518][T23333] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.280928][T23333] geneve2: left promiscuous mode [ 493.286103][T23333] geneve2: left allmulticast mode [ 493.340604][T23333] ip6tnl2: left promiscuous mode [ 493.360438][T23333] ip6tnl2: left allmulticast mode [ 493.381010][T23333] batadv0: left promiscuous mode [ 493.401302][T23333] batadv0: left allmulticast mode [ 493.422999][T23333] bond4: left promiscuous mode [ 493.483579][T23333] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.493052][T23333] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.502047][T23333] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.510942][T23333] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.039094][T23380] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 494.061283][T23380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.209658][T23386] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8171'. [ 494.505710][T23402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.548058][T23402] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.624395][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8180'. [ 494.634031][T23402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.097923][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8191'. [ 495.871759][T23471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.259902][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8236'. [ 498.220244][T23567] netlink: 216 bytes leftover after parsing attributes in process `syz.3.8254'. [ 498.270153][T23567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8254'. [ 498.320281][T23567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8254'. [ 498.394737][T23570] openvswitch: netlink: Actions may not be safe on all matching packets [ 498.459294][T23576] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 499.001401][T23604] veth0_to_batadv: entered promiscuous mode [ 499.027758][T23604] veth0_to_batadv: entered allmulticast mode [ 499.406120][T23624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8281'. [ 499.725679][T23638] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.734112][T23638] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.742628][T23638] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.750833][T23638] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.292705][T23771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8351'. [ 502.498402][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8355'. [ 502.537841][T23784] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8357'. [ 502.550376][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8355'. [ 502.605855][T23781] netlink: 'syz.3.8355': attribute type 29 has an invalid length. [ 502.930514][T23803] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 503.092540][T23808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.113739][T23808] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.156114][T23808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 503.174297][T23815] openvswitch: netlink: Actions may not be safe on all matching packets [ 503.796738][T23839] netlink: 'syz.1.8384': attribute type 3 has an invalid length. [ 503.966167][T23846] netlink: 'syz.3.8387': attribute type 1 has an invalid length. [ 504.231614][T23858] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 504.245319][T23856] netlink: 'syz.1.8392': attribute type 1 has an invalid length. [ 504.274931][T23858] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 504.281261][T23856] netlink: 'syz.1.8392': attribute type 3 has an invalid length. [ 504.321783][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8393'. [ 504.330966][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8393'. [ 504.331250][T23856] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8392'. [ 504.359498][T23858] netlink: 'syz.0.8393': attribute type 19 has an invalid length. [ 504.374056][T23856] NCSI netlink: No device for ifindex 2214592512 [ 504.660954][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8401'. [ 504.900725][T23882] macsec1: entered promiscuous mode [ 504.918033][T23882] gretap0: entered promiscuous mode [ 505.014147][T23882] gretap0: left promiscuous mode [ 506.238662][T23952] netlink: 'syz.3.8436': attribute type 4 has an invalid length. [ 506.323155][T23955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8437'. [ 506.371253][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8436'. [ 506.565853][T23965] gre0: left promiscuous mode [ 506.570614][T23965] gre0: left allmulticast mode [ 506.617720][T23965] team0: left allmulticast mode [ 506.623039][T23965] team_slave_0: left allmulticast mode [ 506.628640][T23965] team_slave_1: left allmulticast mode [ 506.660997][T23965] geneve0: left allmulticast mode [ 506.666717][T23965] net veth1_virt_wifi : left allmulticast mode [ 506.694189][T23965] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.731270][T23965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.163394][T23990] macvlan2: entered promiscuous mode [ 507.199880][T23990] macvlan2: entered allmulticast mode [ 507.241291][T23990] erspan0: entered allmulticast mode [ 507.268674][T23994] openvswitch: netlink: Actions may not be safe on all matching packets [ 507.927324][T24027] __nla_validate_parse: 5 callbacks suppressed [ 507.927346][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8472'. [ 508.454276][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8480'. [ 508.463273][T24043] netlink: 'syz.4.8479': attribute type 11 has an invalid length. [ 509.124459][T24071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8493'. [ 509.308828][T24084] nbd: must specify an index to disconnect [ 509.556164][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8501'. [ 509.975549][T24113] netlink: 'syz.1.8512': attribute type 8 has an invalid length. [ 510.118916][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8515'. [ 510.645936][T24143] openvswitch: netlink: Actions may not be safe on all matching packets [ 511.208171][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8543'. [ 511.257126][T24176] smc: net device bond0 applied user defined pnetid SYZ [ 511.905153][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8558'. [ 512.155233][T24218] xt_CT: No such helper "snmp" [ 512.290456][T24228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8568'. [ 512.462814][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8572'. [ 512.958441][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8583'. [ 513.314247][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8591'. [ 513.341336][T24278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8591'. [ 513.459878][T24286] netlink: 'syz.2.8594': attribute type 1 has an invalid length. [ 513.501173][T24286] netlink: 'syz.2.8594': attribute type 3 has an invalid length. [ 513.548888][T24286] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8594'. [ 513.660962][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8601'. [ 514.155473][T24317] lo: entered allmulticast mode [ 514.198127][T24317] lo: left allmulticast mode [ 514.221554][T24321] tipc: Started in network mode [ 514.226482][T24321] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 514.287662][T24321] tipc: Enabling of bearer rejected, failed to enable media [ 514.341305][T24323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8614'. [ 514.410598][T24327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8615'. [ 514.871788][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 516.186608][T24411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.248980][T24417] gtp0: entered promiscuous mode [ 516.254358][T24417] gtp0: entered allmulticast mode [ 516.432263][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8663'. [ 517.438188][T24473] netlink: 'syz.0.8686': attribute type 6 has an invalid length. [ 517.456998][T24473] netlink: 'syz.0.8686': attribute type 7 has an invalid length. [ 517.488179][T24473] netlink: 'syz.0.8686': attribute type 8 has an invalid length. [ 518.248581][T24510] netlink: 'syz.1.8704': attribute type 1 has an invalid length. [ 518.266264][T24510] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8704'. [ 518.305908][T24510] netlink: 'syz.1.8704': attribute type 1 has an invalid length. [ 518.318744][T24510] netlink: 'syz.1.8704': attribute type 2 has an invalid length. [ 518.828483][T24531] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.8714'. [ 518.901200][T24533] lo: entered promiscuous mode [ 518.920270][T24532] lo: left promiscuous mode [ 519.754979][T24579] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8737'. [ 519.773295][T24579] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8737'. [ 519.783416][T24579] netlink: 'syz.2.8737': attribute type 5 has an invalid length. [ 519.799110][T24579] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8737'. [ 519.810396][T24581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8738'. [ 520.320014][T24605] netlink: 'syz.2.8749': attribute type 1 has an invalid length. [ 521.725506][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8784'. [ 522.336445][T24705] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 522.662171][T24724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8807'. [ 523.018933][T24742] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8816'. [ 523.042400][T24742] netlink: 'syz.2.8816': attribute type 1 has an invalid length. [ 523.820820][T24783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8836'. [ 523.851238][T24550] Bluetooth: hci3: command 0x0406 tx timeout [ 523.935363][T24789] sock: sock_timestamping_bind_phc: sock not bind to device [ 524.652828][T24819] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8853'. [ 524.860306][T24828] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8856'. [ 524.889362][T24825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8856'. [ 524.951787][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8860'. [ 525.593562][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8874'. [ 525.962652][T24883] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 527.649649][T24967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8924'. [ 527.964527][T24981] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1280) ! [ 528.215543][T24994] tipc: Started in network mode [ 528.240574][T24994] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 528.267355][T24994] tipc: Enabling of bearer rejected, failed to enable media [ 528.610147][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8948'. [ 528.638149][T25014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8948'. [ 528.661253][T25014] netlink: 'syz.0.8948': attribute type 5 has an invalid length. [ 528.681053][T25014] netlink: 'syz.0.8948': attribute type 6 has an invalid length. [ 528.706986][T25018] netlink: 'syz.2.8950': attribute type 1 has an invalid length. [ 529.596769][T25068] netlink: 'syz.1.8975': attribute type 27 has an invalid length. [ 529.981026][T25087] netlink: 'syz.2.8984': attribute type 142 has an invalid length. [ 530.043415][T25091] netlink: 'syz.4.8986': attribute type 1 has an invalid length. [ 530.403164][T25109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8995'. [ 533.157850][T25244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9062'. [ 533.201231][T25244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9062'. [ 533.600372][T25265] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.9072'. [ 533.607089][T25266] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9073'. [ 533.624280][T25265] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 533.891410][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9080'. [ 534.416915][T25309] tc_dump_action: action bad kind [ 534.757916][T25326] "syz.0.9102" (25326) uses obsolete ecb(arc4) skcipher [ 534.892761][T25333] netlink: 'syz.1.9106': attribute type 1 has an invalid length. [ 535.592909][T25363] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 535.618538][T25363] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 535.644819][T25367] netlink: 304 bytes leftover after parsing attributes in process `syz.3.9120'. [ 536.308043][T25403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9138'. [ 537.034581][T25439] netlink: 'syz.4.9155': attribute type 32 has an invalid length. [ 537.048072][T25441] netlink: 'syz.3.9156': attribute type 1 has an invalid length. [ 537.292483][T25454] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9160'. [ 537.675790][T25473] netlink: 'syz.0.9172': attribute type 3 has an invalid length. [ 537.873799][T25486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9179'. [ 538.492545][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9193'. [ 539.319947][T25551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9210'. [ 539.641738][T25568] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9217'. [ 539.677524][T25568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9217'. [ 539.711217][T25568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9217'. [ 539.748450][T25568] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9217'. [ 540.322924][T25600] ipvlan2: entered allmulticast mode [ 540.328282][T25600] macsec0: entered allmulticast mode [ 541.720483][T25660] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 541.761549][T25660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.297817][T25687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9273'. [ 542.410606][T25693] netlink: 'syz.0.9276': attribute type 5 has an invalid length. [ 542.581683][T25701] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9280'. [ 543.593662][T25751] netlink: 'syz.4.9302': attribute type 5 has an invalid length. [ 544.214302][T25780] ax25_connect(): syz.4.9318 uses autobind, please contact jreuter@yaina.de [ 544.741537][T25806] netlink: 'syz.0.9331': attribute type 11 has an invalid length. [ 544.813910][T25809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9332'. [ 544.831653][T25811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9333'. [ 545.341167][T25834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.635780][T25847] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.9350'. [ 546.205994][T25876] netlink: 'syz.2.9366': attribute type 1 has an invalid length. [ 547.897139][T25956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9404'. [ 548.254716][T25974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9414'. [ 548.822212][T25998] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 549.035112][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9432'. [ 549.233429][T26015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9435'. [ 549.263651][T26015] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9435'. [ 549.293145][T26018] IPVS: Error connecting to the multicast addr [ 549.317582][T26020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 551.127503][T26087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9470'. [ 551.139962][T26089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9471'. [ 551.158775][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9471'. [ 551.653262][T26115] nbd: must specify a device to reconfigure [ 551.773928][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9486'. [ 552.823753][T26168] openvswitch: netlink: Unknown key attributes 20 [ 552.833977][T26167] netlink: 'syz.4.9510': attribute type 10 has an invalid length. [ 552.871913][T26167] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 553.547722][T26195] netlink: 'syz.4.9523': attribute type 3 has an invalid length. [ 554.085439][T26226] __nla_validate_parse: 2 callbacks suppressed [ 554.085460][T26226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9539'. [ 554.762227][T26258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9552'. [ 555.831570][T24550] Bluetooth: hci3: command 0x0406 tx timeout [ 555.935063][T26304] netlink: 252 bytes leftover after parsing attributes in process `syz.4.9575'. [ 556.447557][T26330] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.9588'. [ 556.879654][T26333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9590'. [ 557.115617][T26357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9600'. [ 557.206572][T26362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9601'. [ 557.208974][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9603'. [ 557.400361][T26369] netlink: 'syz.1.9605': attribute type 93 has an invalid length. [ 557.863293][T26395] RDS: rds_bind could not find a transport for ::4000:0:40:0, load rds_tcp or rds_rdma? [ 558.605760][T26434] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9639'. [ 559.383126][T26472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9657'. [ 559.657290][T26486] IPVS: Error joining to the multicast group [ 559.897876][T26496] netlink: 'syz.0.9669': attribute type 3 has an invalid length. [ 560.147496][T26510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9676'. [ 560.167660][T26510] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9676'. [ 560.532434][T26529] vxcan1: entered allmulticast mode [ 560.596420][T26533] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9687'. [ 561.481944][T26582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9711'. [ 561.728247][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9715'. [ 562.467738][T26622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9731'. [ 562.630405][T26626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9733'. [ 562.841307][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9738'. [ 563.409243][T26659] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9749'. [ 565.899565][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9800'. [ 566.198490][T26785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9809'. [ 566.339525][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9813'. [ 566.680484][T26810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9821'. [ 566.788995][T26817] tipc: Enabling of bearer rejected, failed to enable media [ 567.117503][T26830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9831'. [ 567.994688][ T30] audit: type=1800 audit(1742204183.265:3): pid=26879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9855" name="memory.events" dev="tmpfs" ino=9818 res=0 errno=0 [ 568.067449][ T30] audit: type=1800 audit(1742204183.295:4): pid=26879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9855" name="memory.events" dev="tmpfs" ino=9818 res=0 errno=0 [ 568.088345][T26885] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.9858'. [ 568.189660][T26889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9860'. [ 568.356440][T23350] IPVS: starting estimator thread 0... [ 568.376619][T26895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9862'. [ 568.468053][T26897] IPVS: using max 18 ests per chain, 43200 per kthread [ 569.122905][T26934] netlink: 368 bytes leftover after parsing attributes in process `syz.0.9883'. [ 569.123140][T26937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9884'. [ 569.639913][T26962] netlink: 'syz.2.9893': attribute type 1 has an invalid length. [ 569.899107][T26975] netlink: 'syz.4.9899': attribute type 1 has an invalid length. [ 570.002877][T26979] netlink: 'syz.2.9900': attribute type 14 has an invalid length. [ 570.010943][T26979] netlink: 'syz.2.9900': attribute type 11 has an invalid length. [ 570.992551][T27023] __nla_validate_parse: 10 callbacks suppressed [ 570.992574][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9921'. [ 571.039424][T27027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9924'. [ 571.240360][T27037] block nbd4: not configured, cannot reconfigure [ 571.461675][T27046] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9933'. [ 571.478545][T27046] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9933'. [ 572.370610][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9953'. [ 573.097336][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9973'. [ 573.137206][T27134] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9973'. [ 573.960334][T27180] netlink: 'syz.0.9994': attribute type 30 has an invalid length. [ 574.151566][T27187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9998'. [ 574.190861][T27189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9999'. [ 574.329121][T27195] netlink: 'syz.3.10003': attribute type 27 has an invalid length. [ 574.363154][T27199] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10004'. [ 574.534704][T27204] netlink: 'syz.3.10005': attribute type 3 has an invalid length. [ 574.793515][T27211] atomic_op ffff888035b52998 conn xmit_atomic 0000000000000000 [ 575.323110][T27244] tipc: Enabling of bearer rejected, failed to enable media [ 576.770713][T27310] netlink: 'syz.2.10055': attribute type 1 has an invalid length. [ 576.781223][T27310] __nla_validate_parse: 3 callbacks suppressed [ 576.781242][T27310] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10055'. [ 577.680858][T27347] bridge0: entered promiscuous mode [ 577.696258][T27347] bridge0: entered allmulticast mode [ 577.731440][T27347] team0: Port device bridge0 added [ 577.903587][T27359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10079'. [ 577.936584][T27359] gretap0: entered promiscuous mode [ 577.954688][T27359] gretap0: left promiscuous mode [ 578.483059][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10092'. [ 579.001361][T27404] netlink: 'syz.2.10102': attribute type 1 has an invalid length. [ 579.018719][T27404] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10102'. [ 579.300903][T27414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10106'. [ 580.413962][T27469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10133'. [ 580.446444][T27468] [ 580.448827][T27468] ====================================================== [ 580.455872][T27468] WARNING: possible circular locking dependency detected [ 580.462895][T27468] 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 Not tainted [ 580.470000][T27468] ------------------------------------------------------ [ 580.477020][T27468] syz.4.10134/27468 is trying to acquire lock: [ 580.483200][T27468] ffff88805f9f0d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 580.492814][T27468] [ 580.492814][T27468] but task is already holding lock: [ 580.500177][T27468] ffff888061a98e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 580.509889][T27468] [ 580.509889][T27468] which lock already depends on the new lock. [ 580.509889][T27468] [ 580.520295][T27468] [ 580.520295][T27468] the existing dependency chain (in reverse order) is: [ 580.529307][T27468] [ 580.529307][T27468] -> #2 (team->team_lock_key#5){+.+.}-{4:4}: [ 580.537584][T27468] lock_acquire+0x1ed/0x550 [ 580.542623][T27468] __mutex_lock+0x19c/0x1010 [ 580.547740][T27468] team_set_mac_address+0x122/0x280 [ 580.553470][T27468] netif_set_mac_address+0x327/0x510 [ 580.559282][T27468] do_setlink+0xaa6/0x40f0 [ 580.564227][T27468] rtnl_newlink+0x15a6/0x1d90 [ 580.569434][T27468] rtnetlink_rcv_msg+0x791/0xcf0 [ 580.574899][T27468] netlink_rcv_skb+0x206/0x480 [ 580.580197][T27468] netlink_unicast+0x7f6/0x990 [ 580.585506][T27468] netlink_sendmsg+0x8de/0xcb0 [ 580.590806][T27468] __sock_sendmsg+0x221/0x270 [ 580.596008][T27468] __sys_sendto+0x363/0x4c0 [ 580.601040][T27468] __x64_sys_sendto+0xde/0x100 [ 580.606327][T27468] do_syscall_64+0xf3/0x230 [ 580.611356][T27468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.617778][T27468] [ 580.617778][T27468] -> #1 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 580.626309][T27468] lock_acquire+0x1ed/0x550 [ 580.631345][T27468] __mutex_lock+0x19c/0x1010 [ 580.636462][T27468] dev_set_mac_address+0x2a/0x50 [ 580.641927][T27468] bond_set_mac_address+0x28e/0x830 [ 580.647680][T27468] netif_set_mac_address+0x327/0x510 [ 580.653506][T27468] do_setlink+0xaa6/0x40f0 [ 580.658442][T27468] rtnl_newlink+0x15a6/0x1d90 [ 580.663649][T27468] rtnetlink_rcv_msg+0x791/0xcf0 [ 580.669121][T27468] netlink_rcv_skb+0x206/0x480 [ 580.674424][T27468] netlink_unicast+0x7f6/0x990 [ 580.679716][T27468] netlink_sendmsg+0x8de/0xcb0 [ 580.685012][T27468] __sock_sendmsg+0x221/0x270 [ 580.690228][T27468] ____sys_sendmsg+0x53a/0x860 [ 580.695515][T27468] __sys_sendmsg+0x269/0x350 [ 580.700629][T27468] do_syscall_64+0xf3/0x230 [ 580.705669][T27468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.712095][T27468] [ 580.712095][T27468] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 580.720541][T27468] validate_chain+0x18ef/0x5920 [ 580.725916][T27468] __lock_acquire+0x1397/0x2100 [ 580.731300][T27468] lock_acquire+0x1ed/0x550 [ 580.736331][T27468] __mutex_lock+0x19c/0x1010 [ 580.741451][T27468] __dev_open+0x5cb/0x8a0 [ 580.746311][T27468] netif_open+0xae/0x1b0 [ 580.751086][T27468] dev_open+0x13e/0x260 [ 580.755764][T27468] team_add_slave+0xabe/0x28a0 [ 580.761050][T27468] do_set_master+0x579/0x730 [ 580.766173][T27468] rtnl_newlink_create+0x6e6/0xbd0 [ 580.771816][T27468] rtnl_newlink+0x167a/0x1d90 [ 580.777024][T27468] rtnetlink_rcv_msg+0x791/0xcf0 [ 580.782495][T27468] netlink_rcv_skb+0x206/0x480 [ 580.787787][T27468] netlink_unicast+0x7f6/0x990 [ 580.793076][T27468] netlink_sendmsg+0x8de/0xcb0 [ 580.798367][T27468] __sock_sendmsg+0x221/0x270 [ 580.803571][T27468] ____sys_sendmsg+0x53a/0x860 [ 580.808863][T27468] __sys_sendmsg+0x269/0x350 [ 580.813979][T27468] do_syscall_64+0xf3/0x230 [ 580.819014][T27468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.825441][T27468] [ 580.825441][T27468] other info that might help us debug this: [ 580.825441][T27468] [ 580.835674][T27468] Chain exists of: [ 580.835674][T27468] &dev_instance_lock_key#2 --> &dev_instance_lock_key#12 --> team->team_lock_key#5 [ 580.835674][T27468] [ 580.850917][T27468] Possible unsafe locking scenario: [ 580.850917][T27468] [ 580.858362][T27468] CPU0 CPU1 [ 580.863738][T27468] ---- ---- [ 580.869107][T27468] lock(team->team_lock_key#5); [ 580.874065][T27468] lock(&dev_instance_lock_key#12); [ 580.881902][T27468] lock(team->team_lock_key#5); [ 580.889387][T27468] lock(&dev_instance_lock_key#2); [ 580.894607][T27468] [ 580.894607][T27468] *** DEADLOCK *** [ 580.894607][T27468] [ 580.902751][T27468] 3 locks held by syz.4.10134/27468: [ 580.908031][T27468] #0: ffffffff903d4aa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 580.917552][T27468] #1: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 580.926648][T27468] #2: ffff888061a98e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 580.936784][T27468] [ 580.936784][T27468] stack backtrace: [ 580.942701][T27468] CPU: 1 UID: 0 PID: 27468 Comm: syz.4.10134 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 580.942722][T27468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 580.942737][T27468] Call Trace: [ 580.942746][T27468] [ 580.942754][T27468] dump_stack_lvl+0x241/0x360 [ 580.942777][T27468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.942794][T27468] ? __pfx__printk+0x10/0x10 [ 580.942814][T27468] print_circular_bug+0x13a/0x1b0 [ 580.942836][T27468] check_noncircular+0x36a/0x4a0 [ 580.942856][T27468] ? __pfx_check_noncircular+0x10/0x10 [ 580.942875][T27468] ? queued_spin_lock_slowpath+0x42/0x50 [ 580.942892][T27468] ? lockdep_lock+0x1b0/0x2b0 [ 580.942921][T27468] validate_chain+0x18ef/0x5920 [ 580.942945][T27468] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 580.942965][T27468] ? __pfx_validate_chain+0x10/0x10 [ 580.942986][T27468] ? stack_depot_save_flags+0x7b4/0x940 [ 580.943016][T27468] ? kasan_save_track+0x51/0x80 [ 580.943034][T27468] ? kasan_save_track+0x3f/0x80 [ 580.943051][T27468] ? __kasan_kmalloc+0x98/0xb0 [ 580.943069][T27468] ? __kmalloc_noprof+0x285/0x4c0 [ 580.943092][T27468] ? bond_update_slave_arr+0x150/0xd50 [ 580.943109][T27468] ? bond_open+0xe36/0xfa0 [ 580.943128][T27468] ? __dev_open+0x45a/0x8a0 [ 580.943151][T27468] ? netif_open+0xae/0x1b0 [ 580.943174][T27468] ? dev_open+0x13e/0x260 [ 580.943188][T27468] ? team_add_slave+0xabe/0x28a0 [ 580.943209][T27468] ? do_set_master+0x579/0x730 [ 580.943243][T27468] ? rtnl_newlink_create+0x6e6/0xbd0 [ 580.943260][T27468] ? rtnl_newlink+0x167a/0x1d90 [ 580.943285][T27468] ? rtnetlink_rcv_msg+0x791/0xcf0 [ 580.943310][T27468] ? netlink_rcv_skb+0x206/0x480 [ 580.943334][T27468] ? netlink_unicast+0x7f6/0x990 [ 580.943355][T27468] ? netlink_sendmsg+0x8de/0xcb0 [ 580.943380][T27468] ? ____sys_sendmsg+0x53a/0x860 [ 580.943399][T27468] ? __sys_sendmsg+0x269/0x350 [ 580.943419][T27468] ? mark_lock+0x9a/0x360 [ 580.943436][T27468] __lock_acquire+0x1397/0x2100 [ 580.943468][T27468] lock_acquire+0x1ed/0x550 [ 580.943493][T27468] ? __dev_open+0x5cb/0x8a0 [ 580.943520][T27468] ? __pfx_lock_acquire+0x10/0x10 [ 580.943546][T27468] ? lockdep_rtnl_is_held+0x26/0x40 [ 580.943566][T27468] ? __pfx___might_resched+0x10/0x10 [ 580.943589][T27468] ? bond_update_slave_arr+0x844/0xd50 [ 580.943612][T27468] __mutex_lock+0x19c/0x1010 [ 580.943639][T27468] ? __dev_open+0x5cb/0x8a0 [ 580.943664][T27468] ? bond_alb_initialize+0x4c3/0x5f0 [ 580.943684][T27468] ? __dev_open+0x5cb/0x8a0 [ 580.943708][T27468] ? __pfx___mutex_lock+0x10/0x10 [ 580.943737][T27468] __dev_open+0x5cb/0x8a0 [ 580.943764][T27468] ? __pfx___dev_open+0x10/0x10 [ 580.943790][T27468] ? ref_tracker_alloc+0x332/0x490 [ 580.943808][T27468] netif_open+0xae/0x1b0 [ 580.943838][T27468] ? __pfx_netif_open+0x10/0x10 [ 580.943867][T27468] dev_open+0x13e/0x260 [ 580.943886][T27468] team_add_slave+0xabe/0x28a0 [ 580.943915][T27468] ? __pfx_team_add_slave+0x10/0x10 [ 580.943938][T27468] ? nlmsg_notify+0x14c/0x1c0 [ 580.943964][T27468] ? __dev_notify_flags+0x316/0x400 [ 580.943981][T27468] ? dev_set_rx_mode+0xb8/0x2e0 [ 580.943999][T27468] ? __pfx___dev_notify_flags+0x10/0x10 [ 580.944017][T27468] ? __dev_change_flags+0x515/0x6f0 [ 580.944036][T27468] ? mutex_is_locked+0x17/0x50 [ 580.944055][T27468] do_set_master+0x579/0x730 [ 580.944074][T27468] rtnl_newlink_create+0x6e6/0xbd0 [ 580.944097][T27468] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 580.944116][T27468] ? __pfx___mutex_lock+0x10/0x10 [ 580.944141][T27468] ? ns_capable+0x8a/0xf0 [ 580.944162][T27468] rtnl_newlink+0x167a/0x1d90 [ 580.944189][T27468] ? is_bpf_text_address+0x285/0x2a0 [ 580.944205][T27468] ? is_bpf_text_address+0x26/0x2a0 [ 580.944225][T27468] ? __pfx_rtnl_newlink+0x10/0x10 [ 580.944251][T27468] ? __pfx_validate_chain+0x10/0x10 [ 580.944282][T27468] ? validate_chain+0x11e/0x5920 [ 580.944300][T27468] ? __pfx_lock_acquire+0x10/0x10 [ 580.944327][T27468] ? __pfx_lock_release+0x10/0x10 [ 580.944353][T27468] ? __pfx_validate_chain+0x10/0x10 [ 580.944373][T27468] ? mark_lock+0x9a/0x360 [ 580.944390][T27468] ? __lock_acquire+0x1397/0x2100 [ 580.944433][T27468] ? __pfx_lock_release+0x10/0x10 [ 580.944464][T27468] ? __pfx_rtnl_newlink+0x10/0x10 [ 580.944490][T27468] rtnetlink_rcv_msg+0x791/0xcf0 [ 580.944516][T27468] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 580.944542][T27468] ? __lock_acquire+0x1397/0x2100 [ 580.944567][T27468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.944600][T27468] netlink_rcv_skb+0x206/0x480 [ 580.944642][T27468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.944668][T27468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.944700][T27468] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.944725][T27468] netlink_unicast+0x7f6/0x990 [ 580.944750][T27468] ? __pfx_netlink_unicast+0x10/0x10 [ 580.944771][T27468] ? __virt_addr_valid+0x45f/0x530 [ 580.944787][T27468] ? __phys_addr_symbol+0x2f/0x70 [ 580.944802][T27468] ? __check_object_size+0x47a/0x730 [ 580.944826][T27468] netlink_sendmsg+0x8de/0xcb0 [ 580.944856][T27468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.944884][T27468] ? aa_sock_msg_perm+0x91/0x160 [ 580.944912][T27468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.944936][T27468] __sock_sendmsg+0x221/0x270 [ 580.944961][T27468] ____sys_sendmsg+0x53a/0x860 [ 580.944983][T27468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.945001][T27468] ? __fget_files+0x2a/0x410 [ 580.945026][T27468] ? __fget_files+0x2a/0x410 [ 580.945053][T27468] __sys_sendmsg+0x269/0x350 [ 580.945074][T27468] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.945108][T27468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 580.945134][T27468] ? do_syscall_64+0x100/0x230 [ 580.945157][T27468] ? do_syscall_64+0xb6/0x230 [ 580.945178][T27468] do_syscall_64+0xf3/0x230 [ 580.945199][T27468] ? clear_bhb_loop+0x35/0x90 [ 580.945224][T27468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.945254][T27468] RIP: 0033:0x7f9ea738d169 [ 580.945268][T27468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.945283][T27468] RSP: 002b:00007f9ea8193038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.945300][T27468] RAX: ffffffffffffffda RBX: 00007f9ea75a5fa0 RCX: 00007f9ea738d169 [ 580.945314][T27468] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 580.945324][T27468] RBP: 00007f9ea740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 580.945335][T27468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.945345][T27468] R13: 0000000000000000 R14: 00007f9ea75a5fa0 R15: 00007fffc5018ca8 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 580.945362][T27468] [ 581.580615][T27468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.633992][T27468] team0: Port device bond2 added [ 582.116349][ T5835] tipc: Resetting bearer [ 582.140201][ T5835] tipc: Disabling bearer [ 582.169868][T14372] netdevsim netdevsim0 netdevsim2 (unregistering): left allmulticast mode [ 582.178669][T14372] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 582.187594][T14372] bridge0: port 3(netdevsim2) entered disabled state [ 582.424984][T14372] bridge_slave_1: left allmulticast mode [ 582.430678][T14372] bridge_slave_1: left promiscuous mode [ 582.444230][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.452975][T14372] bridge_slave_0: left allmulticast mode [ 582.458642][T14372] bridge_slave_0: left promiscuous mode [ 582.464451][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.134724][T14372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.144239][T14372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.154088][T14372] bond0 (unregistering): Released all slaves [ 583.162922][T14372] bond1 (unregistering): Released all slaves [ 583.172309][T14372] bond2 (unregistering): Released all slaves [ 583.181023][T14372] bond3 (unregistering): Released all slaves [ 583.191996][T14372] bond4 (unregistering): Released all slaves [ 583.238376][T14372] tipc: Left network mode [ 583.612929][T14372] hsr_slave_0: left promiscuous mode [ 583.619058][T14372] hsr_slave_1: left promiscuous mode [ 583.626559][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.638462][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.914321][T14372] team0 (unregistering): Port device team_slave_1 removed [ 583.944404][T14372] team0 (unregistering): Port device team_slave_0 removed [ 584.111498][T14372] team0 (unregistering): Port device batadv0 removed [ 585.759822][T14372] IPVS: stop unused estimator thread 0... [ 585.829102][T14372] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.877933][T14372] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.915246][T14372] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.955216][T14372] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.173358][T14372] bond0: (slave netdevsim0): Releasing backup interface [ 586.255042][T14372] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.304198][T14372] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.364544][T14372] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.438653][T14372] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.730120][T14372] bridge_slave_1: left allmulticast mode [ 586.737410][T14372] bridge_slave_1: left promiscuous mode [ 586.745979][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.754927][T14372] bridge_slave_0: left allmulticast mode [ 586.760596][T14372] bridge_slave_0: left promiscuous mode [ 586.768180][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.785801][T14372] bridge_slave_1: left allmulticast mode [ 586.796229][T14372] bridge_slave_1: left promiscuous mode [ 586.802417][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.810572][T14372] bridge_slave_0: left allmulticast mode [ 586.821003][T14372] bridge_slave_0: left promiscuous mode [ 586.827184][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.274220][T14372] dvmrp0 (unregistering): left allmulticast mode [ 587.320818][T14372] team0: Port device geneve0 removed [ 588.270543][T14372] team0: Port device bridge0 removed [ 588.307275][T14372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.317256][T14372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.326953][T14372] bond0 (unregistering): Released all slaves [ 588.414029][T14372] bond1 (unregistering): Released all slaves [ 588.423036][T14372] bond2 (unregistering): Released all slaves [ 588.505658][T14372] bond3 (unregistering): Released all slaves [ 588.588971][T14372] bond4 (unregistering): Released all slaves [ 588.672690][T14372] bond0 (unregistering): (slave team0): Releasing backup interface [ 588.681674][T14372] bond0 (unregistering): Released all slaves [ 588.761442][T14372] bond1 (unregistering): Released all slaves [ 588.771448][T14372] team0: Port device bond2 removed [ 588.777162][T14372] bond2 (unregistering): Released all slaves [ 588.859381][T14372] smc: removing net device bond0 with user defined pnetid S [ 588.867395][T14372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.878394][T14372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.887950][T14372] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 588.896841][T14372] bond0 (unregistering): Released all slaves [ 588.906306][T14372] bond1 (unregistering): Released all slaves [ 588.989081][T14372] bond2 (unregistering): Released all slaves [ 588.997883][T14372] bond3 (unregistering): Released all slaves [ 589.006941][T14372] bond4 (unregistering): Released all slaves [ 589.088310][T14372] bond0 (unregistering): Released all slaves [ 589.097836][T14372] bond1 (unregistering): Released all slaves [ 589.106545][T14372] bond2 (unregistering): Released all slaves [ 589.116049][T14372] bond3 (unregistering): Released all slaves [ 589.201838][T14372] bond4 (unregistering): Released all slaves [ 589.210649][T14372] bond5 (unregistering): Released all slaves [ 589.219711][T14372] bond6 (unregistering): Released all slaves [ 589.227690][T14372] bond7 (unregistering): Released all slaves