last executing test programs: 3m42.659568246s ago: executing program 0 (id=3525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff080012400041e54a050005000a00000005000100060000000c000300686173683a6970"], 0x58}}, 0x80) 3m40.657886727s ago: executing program 0 (id=3567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x10, 0x8, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4, 0x0, 0x0, 0xb}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3m40.528575958s ago: executing program 0 (id=3571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000800000000001000000180100002020702b00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000009b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m39.982125773s ago: executing program 0 (id=3583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002820207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m39.861313958s ago: executing program 0 (id=3587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 3m39.674683726s ago: executing program 0 (id=3594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 3m24.633924313s ago: executing program 32 (id=3594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000) 2m26.88913123s ago: executing program 1 (id=5522): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ff}, 0x94) 2m26.707893118s ago: executing program 1 (id=5527): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010086ddef"], 0x38}}, 0x0) 2m26.653900611s ago: executing program 1 (id=5529): r0 = socket(0x1, 0x80802, 0x0) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) 2m26.572402495s ago: executing program 1 (id=5530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 2m26.511951593s ago: executing program 1 (id=5533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbfb, {0x20}, [@typed={0x8, 0x117, 0x0, 0x0, @ipv4=@local}]}, 0x1c}}, 0x20000054) 2m26.397183102s ago: executing program 1 (id=5536): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000029000500000000000000000007000000"], 0x14}}, 0x0) 2m11.319354777s ago: executing program 33 (id=5536): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000029000500000000000000000007000000"], 0x14}}, 0x0) 1m0.590268916s ago: executing program 4 (id=7449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) 1m0.062410208s ago: executing program 4 (id=7460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="5fd63edbfd8a4a1bfebc74607795", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 59.800461967s ago: executing program 4 (id=7465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, 0x0, 0x0, 0x12}, 0x20) 59.531160912s ago: executing program 4 (id=7471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="0000000000000000000000000000fbfff0e5", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.357593964s ago: executing program 4 (id=7475): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000020c0), 0x4) 59.267309573s ago: executing program 4 (id=7476): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20000040) 44.078856455s ago: executing program 34 (id=7476): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20000040) 17.620790869s ago: executing program 2 (id=8165): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) 17.458357568s ago: executing program 2 (id=8168): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000004c0)=@ethtool_cmd={0x4c, 0x8, 0x0, 0x400, 0x0, 0x0, 0xe7, 0x0, 0x87, 0x0, 0x1000, 0x0, 0xfffd, 0x8, 0x0, 0x82000045, [0x2, 0x89ff]}}) 17.287029315s ago: executing program 2 (id=8173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x8, 0x167, 0x0, 0x0, @u32=0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 17.111098066s ago: executing program 2 (id=8178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x19, 0x1001}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1d61}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 16.618943176s ago: executing program 2 (id=8185): unshare(0x20400) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c}, 0x90) 16.546947435s ago: executing program 2 (id=8186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000002900050000000000000000200c"], 0x14}}, 0x20040000) 3.958326303s ago: executing program 6 (id=8357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}]}, 0x38}}, 0x0) 3.762234797s ago: executing program 7 (id=8358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 3.308294319s ago: executing program 6 (id=8361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.22274652s ago: executing program 7 (id=8362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) 3.038307219s ago: executing program 5 (id=8363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, r1, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}]}, 0x3c}}, 0x4) 2.896717123s ago: executing program 6 (id=8364): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2a, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0x92, 0x3}}, 0x1c}}, 0x4004000) 2.879674201s ago: executing program 3 (id=8365): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x60}, 0x2, 0x34005}, 0x0) 2.736219281s ago: executing program 5 (id=8366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(r0) 2.694829158s ago: executing program 7 (id=8367): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 2.317700018s ago: executing program 6 (id=8368): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d, 0x1}}) 2.274644551s ago: executing program 3 (id=8369): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1=0xe0000300, @multicast1}, 0x9) 2.126436466s ago: executing program 5 (id=8370): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000005f80)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000005fc0)={@remote}, 0x14) 1.986665167s ago: executing program 6 (id=8371): bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000700)='./cgroup/cgroup.procs\x00', &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 1.97879068s ago: executing program 7 (id=8372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0xfffffffa, r1, 0x4}, 0x38) 1.772806607s ago: executing program 3 (id=8373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 1.655656673s ago: executing program 5 (id=8374): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x20040804) 1.635040653s ago: executing program 7 (id=8375): syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 1.232026989s ago: executing program 35 (id=8186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000002900050000000000000000200c"], 0x14}}, 0x20040000) 1.17026902s ago: executing program 3 (id=8377): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x6990a000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000002080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) 954.798425ms ago: executing program 5 (id=8378): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r1, @ANYBLOB="840072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 921.303278ms ago: executing program 6 (id=8379): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6100000000107afffe8000000000000000000000000000aaffff"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 800.275852ms ago: executing program 7 (id=8380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28, 0x0, 0x1, 0x2403}]}) 511.657926ms ago: executing program 3 (id=8381): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 200.979944ms ago: executing program 5 (id=8382): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$tipc(r0, &(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{0x41, 0x4}, 0x4}}, 0x10) 0s ago: executing program 3 (id=8383): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40, 0x69, 0xa}, [@NDA_LLADDR={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d1}, 0x8000) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.4103'. [ 235.878196][T14398] dummy0: entered promiscuous mode [ 235.909869][T14398] bridge0: port 1(dummy0) entered blocking state [ 235.910035][T14398] bridge0: port 1(dummy0) entered disabled state [ 235.910202][T14398] dummy0: entered allmulticast mode [ 235.931324][T14398] bridge0: port 1(dummy0) entered blocking state [ 235.931583][T14398] bridge0: port 1(dummy0) entered forwarding state [ 235.931921][T14398] bridge0: mtu less than device minimum [ 235.996771][T14402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4104'. [ 236.037159][T14122] veth0_macvtap: entered promiscuous mode [ 236.054705][T14122] veth1_macvtap: entered promiscuous mode [ 236.102340][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.121144][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.179827][ T986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.199409][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.200770][ T986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.201101][ T986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.228709][ T5642] Bluetooth: hci5: command tx timeout [ 236.256401][T14410] netlink: 'syz.2.4108': attribute type 21 has an invalid length. [ 236.327901][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.327922][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.434858][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.434878][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.651162][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4114'. [ 236.774614][T14433] smc: removing ib device syz2 [ 236.872308][T14433] smbdirect: ib_dev[syz2] removed [ 236.954057][T14440] netlink: 'syz.3.4120': attribute type 2 has an invalid length. [ 237.345854][T14454] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 238.073604][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4142'. [ 238.147901][T14484] batadv0: entered promiscuous mode [ 238.147924][T14484] batadv0: entered allmulticast mode [ 238.148597][T14484] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4142'. [ 238.149147][T14484] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.298504][ T5642] Bluetooth: hci5: command tx timeout [ 238.378900][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 239.105535][T14515] veth0_macvtap: left promiscuous mode [ 239.173844][T14512] xt_ipvs: protocol family 7 not supported [ 239.371029][T14521] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.658618][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 240.013864][T14550] netlink: 'syz.5.4171': attribute type 8 has an invalid length. [ 240.860341][T14583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4183'. [ 240.860369][T14583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4183'. [ 240.860438][T14583] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4183'. [ 241.182134][T14581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4182'. [ 241.184362][ T5296] veth0_macvtap: entered promiscuous mode [ 241.444974][T14593] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 241.738698][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4195'. [ 241.970348][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4201'. [ 241.985264][T14628] workqueue: name exceeds WQ_NAME_LEN. Truncating to: )7\9h|:}y=*X@rFW [ 242.525883][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4207'. [ 243.063861][T14661] bond3: option min_links: invalid value (18446744073709551612) [ 243.063890][T14661] bond3: option min_links: allowed values 0 - 2147483647 [ 243.090879][T14661] bond3 (unregistering): Released all slaves [ 243.156941][T14666] : renamed from erspan0 (while UP) [ 243.174491][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4213'. [ 243.174522][T14666] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 243.277148][T14672] netlink: 'syz.5.4217': attribute type 1 has an invalid length. [ 243.277170][T14672] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4217'. [ 243.668070][T14700] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4233'. [ 243.821552][T14709] netlink: 'syz.2.4236': attribute type 10 has an invalid length. [ 244.015197][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.016052][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.432098][T14704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.463984][T14704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.897675][T14709] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 244.910997][ T43] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.911029][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.911068][ T43] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.911090][ T43] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.911122][ T43] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.911144][ T43] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.911175][ T43] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.911197][ T43] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.006747][T14725] lo speed is unknown, defaulting to 1000 [ 245.232083][ T30] audit: type=1800 audit(1793027590.325:3): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4251" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4673 res=0 errno=-22 [ 245.310407][T14746] netlink: 'syz.1.4253': attribute type 7 has an invalid length. [ 245.310428][T14746] netlink: 'syz.1.4253': attribute type 3 has an invalid length. [ 246.222125][T14805] __nla_validate_parse: 3 callbacks suppressed [ 246.222144][T14805] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4280'. [ 246.415468][T14817] IPv6: NLM_F_REPLACE set, but no existing node found! [ 246.534632][T14829] netlink: 'syz.5.4292': attribute type 8 has an invalid length. [ 246.725314][T14841] netlink: 'syz.3.4298': attribute type 1 has an invalid length. [ 246.725338][T14841] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4298'. [ 246.913146][T14855] netlink: 'syz.4.4305': attribute type 34 has an invalid length. [ 246.913167][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4305'. [ 246.944603][T14854] bond0: (slave bond_slave_1): Releasing backup interface [ 246.964091][T14857] netlink: 'syz.2.4306': attribute type 2 has an invalid length. [ 247.139975][T14869] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 247.227509][T14872] netlink: zone id is out of range [ 247.227526][T14872] netlink: zone id is out of range [ 247.227534][T14872] netlink: zone id is out of range [ 247.227542][T14872] netlink: zone id is out of range [ 247.227549][T14872] netlink: zone id is out of range [ 247.227556][T14872] netlink: zone id is out of range [ 247.270324][T14876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4314'. [ 247.287777][T14875] bond1: option min_links: invalid value (18446744073709551612) [ 247.287799][T14875] bond1: option min_links: allowed values 0 - 2147483647 [ 247.301929][T14875] bond1 (unregistering): Released all slaves [ 247.817475][T14914] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4334'. [ 247.817654][T14914] 0: renamed from hsr0 (while UP) [ 247.836645][T14914] 0: entered allmulticast mode [ 247.836666][T14914] hsr_slave_0: entered allmulticast mode [ 247.836682][T14914] hsr_slave_1: entered allmulticast mode [ 247.837143][T14914] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 247.941487][T14921] netlink: 'syz.4.4337': attribute type 32 has an invalid length. [ 248.234703][T14934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4342'. [ 248.398630][T14940] bond3: Unable to set down delay as MII monitoring is disabled [ 248.402530][T14940] bond3 (unregistering): Released all slaves [ 248.567051][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4354'. [ 248.567088][T14956] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4354'. [ 248.938336][T14979] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 249.090193][T14986] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 250.026968][T15039] netlink: 'syz.4.4394': attribute type 5 has an invalid length. [ 250.026990][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4394'. [ 250.790289][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4406'. [ 250.887488][T15069] netlink: 'syz.4.4405': attribute type 2 has an invalid length. [ 250.887510][T15069] netlink: 'syz.4.4405': attribute type 1 has an invalid length. [ 251.182058][T15090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.224650][T15095] openvswitch: netlink: IPv6 tunnel dst address is zero [ 251.386099][T15102] netlink: 'syz.3.4426': attribute type 13 has an invalid length. [ 251.463547][T15106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.323691][T15172] __nla_validate_parse: 1 callbacks suppressed [ 252.323710][T15172] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4457'. [ 252.517345][T15184] netlink: 'syz.2.4464': attribute type 2 has an invalid length. [ 254.875181][T15327] netlink: 'syz.3.4523': attribute type 2 has an invalid length. [ 255.052613][T15339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4532'. [ 255.125018][T15346] netlink: 'syz.3.4529': attribute type 4 has an invalid length. [ 255.125039][T15346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4529'. [ 255.125694][T15346] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 255.411073][T15360] xt_cgroup: no path or classid specified [ 255.423861][T15363] netlink: 'syz.5.4538': attribute type 2 has an invalid length. [ 255.423883][T15363] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4538'. [ 255.575737][T15374] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.4545'. [ 255.661174][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.207488][T15408] netlink: 'syz.3.4560': attribute type 2 has an invalid length. [ 256.244580][T15408] : entered promiscuous mode [ 256.496344][T15422] netlink: 824 bytes leftover after parsing attributes in process `syz.3.4569'. [ 256.850141][T15447] netlink: 'syz.5.4580': attribute type 1 has an invalid length. [ 256.850164][T15447] netlink: 'syz.5.4580': attribute type 3 has an invalid length. [ 256.850182][T15447] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4580'. [ 257.232950][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4589'. [ 257.232974][T15465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4589'. [ 257.524463][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4595'. [ 257.632461][T15486] xt_hashlimit: overflow, try lower: 8/0 [ 257.935088][T15506] netlink: 'syz.5.4608': attribute type 1 has an invalid length. [ 257.971276][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4609'. [ 258.041308][T15513] gretap1: entered allmulticast mode [ 258.146904][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4614'. [ 258.259612][T15528] netlink: 'syz.2.4618': attribute type 21 has an invalid length. [ 258.444834][T15540] netlink: 'syz.4.4624': attribute type 1 has an invalid length. [ 259.139694][T15584] netlink: 'syz.3.4647': attribute type 8 has an invalid length. [ 259.392514][T15597] netlink: 'syz.2.4653': attribute type 10 has an invalid length. [ 259.437879][T15599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.084587][T15629] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4669'. [ 260.494839][T15658] netlink: 'syz.5.4682': attribute type 5 has an invalid length. [ 260.826639][T15681] pim6reg: entered allmulticast mode [ 260.896585][T15686] nft_compat: unsupported protocol 1 [ 261.182539][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4704'. [ 261.182562][T15703] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4704'. [ 261.220090][T15700] bond3 (unregistering): Released all slaves [ 261.309555][T15705] bond0: entered allmulticast mode [ 261.426245][T15712] netlink: ct family unspecified [ 262.694245][T15787] bond3 (unregistering): Released all slaves [ 263.069320][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4758'. [ 263.258095][T15825] netlink: 'syz.4.4763': attribute type 1 has an invalid length. [ 263.258117][T15825] netlink: 'syz.4.4763': attribute type 2 has an invalid length. [ 263.258129][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4763'. [ 263.727961][T15855] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.4778'. [ 263.945872][T15870] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 263.991385][T15874] bond0: option miimon: invalid value (18446744073709551614) [ 263.991411][T15874] bond0: option miimon: allowed values 0 - 2147483647 [ 264.362757][T15893] bond3: Removing last arp target with arp_interval on [ 264.548700][T15909] ip6erspan0: entered allmulticast mode [ 265.105485][T15953] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4825'. [ 265.138203][T15954] xt_cluster: you have exceeded the maximum number of cluster nodes (167 > 32) [ 266.255650][T16023] netlink: 'syz.2.4862': attribute type 11 has an invalid length. [ 266.290998][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4861'. [ 266.702107][T16047] netlink: 'syz.1.4872': attribute type 21 has an invalid length. [ 267.108183][T16077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.159399][T16080] netlink: 'syz.5.4889': attribute type 8 has an invalid length. [ 267.296129][T16091] netlink: 'syz.4.4894': attribute type 2 has an invalid length. [ 267.296171][T16091] nbd: illegal input index -2130444284 [ 267.721089][T16119] netlink: 440 bytes leftover after parsing attributes in process `syz.4.4907'. [ 267.866924][T16130] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4915'. [ 267.906563][T16132] netlink: 'syz.2.4914': attribute type 10 has an invalid length. [ 267.925049][T16132] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.944113][T16132] bond0: (slave team0): Enslaving as an active interface with an up link [ 268.149634][T16145] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 268.149662][T16145] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 268.149878][T16145] bond1: entered allmulticast mode [ 268.166434][T16147] ip6gre1: entered promiscuous mode [ 268.255475][T16155] openvswitch: netlink: VXLAN extension message has 20 unknown bytes. [ 268.319733][T16159] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 268.320122][T16159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.323510][T16159] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.432061][T16165] netlink: 'syz.1.4933': attribute type 2 has an invalid length. [ 268.539829][T16118] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 268.542480][T16171] bond1: Unable to set down delay as MII monitoring is disabled [ 268.570856][T16171] bond1 (unregistering): Released all slaves [ 268.820554][T16189] netlink: 'syz.2.4942': attribute type 1 has an invalid length. [ 269.218918][T16216] netlink: ct family unspecified [ 269.292746][T16220] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4957'. [ 269.316893][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4959'. [ 269.316932][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4959'. [ 269.645797][T16242] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 269.847907][T16257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4975'. [ 269.872953][T16252] bond2 (unregistering): Released all slaves [ 270.190386][T16279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.285111][T16285] netlink: 'syz.2.4991': attribute type 1 has an invalid length. [ 270.285133][T16285] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4991'. [ 270.943797][T16333] x_tables: unsorted entry at hook 2 [ 271.523159][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5033'. [ 271.597701][T16374] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 271.616498][T16374] bond1 (unregistering): Released all slaves [ 271.647972][T16381] mac80211_hwsim hwsim8 ..c: renamed from wlan1 [ 271.660843][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 271.797711][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5043'. [ 271.797921][T16389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5043'. [ 271.943035][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5045'. [ 272.461905][T16411] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 272.503603][T16411] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 272.916053][T16458] ebt_among: dst integrity fail: 300 [ 272.944691][T16459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.337443][T16486] bridge0: port 3(bond0) entered blocking state [ 273.348648][T16486] bridge0: port 3(bond0) entered disabled state [ 273.348819][T16486] bond0: entered allmulticast mode [ 273.348840][T16486] bond_slave_0: entered allmulticast mode [ 273.348904][T16486] bond_slave_1: entered allmulticast mode [ 273.353278][T16486] bond0: entered promiscuous mode [ 273.353298][T16486] bond_slave_0: entered promiscuous mode [ 273.353473][T16486] bond_slave_1: entered promiscuous mode [ 273.672639][T16509] netlink: 'syz.2.5095': attribute type 5 has an invalid length. [ 273.766137][T16512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.833042][T16521] ip_tables: iptables: counters copy to user failed while replacing table [ 274.095498][T16538] netlink: 'syz.3.5112': attribute type 26 has an invalid length. [ 274.159008][T16540] bond3: option arp_interval: invalid value (18446744073709551615) [ 274.159034][T16540] bond3: option arp_interval: allowed values 0 - 2147483647 [ 274.176678][T16540] bond3 (unregistering): Released all slaves [ 274.744391][T16581] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 275.014143][T16602] batadv1: entered promiscuous mode [ 275.014166][T16602] batadv1: entered allmulticast mode [ 275.422787][T16627] veth2: entered allmulticast mode [ 275.521514][T16637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.696070][T16650] netlink: 'syz.5.5165': attribute type 1 has an invalid length. [ 275.696093][T16650] __nla_validate_parse: 10 callbacks suppressed [ 275.696105][T16650] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5165'. [ 275.701660][T16649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5164'. [ 275.754531][T16656] IPv6: NLM_F_REPLACE set, but no existing node found! [ 275.795663][T16653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.880235][T16662] sctp: [Deprecated]: syz.4.5170 (pid 16662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.880235][T16662] Use struct sctp_sack_info instead [ 275.938185][T16666] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 276.668705][T16721] sock: sock_timestamping_bind_phc: sock not bind to device [ 276.961887][T16737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5209'. [ 277.214370][T16761] xt_hashlimit: max too large, truncated to 1048576 [ 277.332164][T16767] netlink: 'syz.1.5225': attribute type 1 has an invalid length. [ 277.603905][T16788] netlink: 'syz.5.5232': attribute type 29 has an invalid length. [ 277.631350][T16789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5233'. [ 277.746843][T16792] ip6gre1: entered allmulticast mode [ 278.236396][T16831] netlink: 'syz.3.5253': attribute type 1 has an invalid length. [ 278.555148][T16855] batadv1: entered promiscuous mode [ 278.555171][T16855] batadv1: entered allmulticast mode [ 278.872619][T16877] xt_REDIRECT: bad rangesize 26624. [ 279.309199][T16909] netlink: 'syz.1.5292': attribute type 2 has an invalid length. [ 279.404403][T16913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5293'. [ 279.684036][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5301'. [ 279.868005][T16947] netlink: 'syz.3.5307': attribute type 15 has an invalid length. [ 279.868026][T16947] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5307'. [ 279.896414][T16948] netlink: 'syz.1.5309': attribute type 2 has an invalid length. [ 279.896437][T16948] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5309'. [ 280.017703][T16956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5314'. [ 280.077830][T16960] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up [ 280.224705][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 280.243795][T16971] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 280.287627][T16974] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 280.797065][T17008] __nla_validate_parse: 3 callbacks suppressed [ 280.797086][T17008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5337'. [ 280.819908][T17013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5338'. [ 280.819934][T17013] netlink: 'syz.5.5338': attribute type 1 has an invalid length. [ 280.819947][T17013] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5338'. [ 281.005987][T17019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5342'. [ 281.355920][T17035] netlink: 'syz.2.5349': attribute type 1 has an invalid length. [ 281.355943][T17035] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5349'. [ 281.462103][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5352'. [ 281.621402][T17043] ipip1: entered promiscuous mode [ 281.742724][T17050] bond2: Unable to set up delay as MII monitoring is disabled [ 281.747015][T17056] netlink: 'syz.1.5358': attribute type 32 has an invalid length. [ 281.769135][T17050] bond2 (unregistering): Released all slaves [ 281.944919][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5365'. [ 282.428308][T17102] syz.4.5381: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.432751][T17102] CPU: 1 UID: 0 PID: 17102 Comm: syz.4.5381 Not tainted syzkaller #0 PREEMPT(full) [ 282.432774][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 282.432790][T17102] Call Trace: [ 282.432799][T17102] [ 282.432808][T17102] dump_stack_lvl+0xe8/0x150 [ 282.432852][T17102] warn_alloc+0x24d/0x270 [ 282.432877][T17102] ? kasan_save_track+0x4f/0x80 [ 282.432900][T17102] ? kasan_save_track+0x3e/0x80 [ 282.432927][T17102] ? __pfx_warn_alloc+0x10/0x10 [ 282.432947][T17102] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 282.432975][T17102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.433016][T17102] __vmalloc_node_range_noprof+0x127/0x1540 [ 282.433063][T17102] ? rcu_is_watching+0x16/0xb0 [ 282.433095][T17102] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.433117][T17102] ? __kmalloc_cache_noprof+0x31c/0x600 [ 282.433141][T17102] ? __kmalloc_cache_noprof+0x148/0x600 [ 282.433164][T17102] ? xskq_create+0x56/0x220 [ 282.433198][T17102] xskq_create+0x148/0x220 [ 282.433226][T17102] ? xsk_init_queue+0x8a/0xe0 [ 282.433255][T17102] xsk_init_queue+0x8a/0xe0 [ 282.433285][T17102] xsk_setsockopt+0x52a/0x960 [ 282.433315][T17102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.433342][T17102] ? __pfx_aa_sk_perm+0x10/0x10 [ 282.433376][T17102] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 282.433394][T17102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.433429][T17102] do_sock_setsockopt+0x17c/0x1b0 [ 282.433462][T17102] __x64_sys_setsockopt+0x13d/0x1b0 [ 282.433498][T17102] do_syscall_64+0x166/0x520 [ 282.433516][T17102] ? trace_irq_disable+0x3b/0x140 [ 282.433538][T17102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.433557][T17102] ? clear_bhb_loop+0x70/0xc0 [ 282.433581][T17102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.433600][T17102] RIP: 0033:0x7ff4fdb9f559 [ 282.433622][T17102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.433638][T17102] RSP: 002b:00007ff4fea0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.433657][T17102] RAX: ffffffffffffffda RBX: 00007ff4fde25fa0 RCX: 00007ff4fdb9f559 [ 282.433671][T17102] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 282.433683][T17102] RBP: 00007ff4fdc36b20 R08: 0000000000000004 R09: 0000000000000000 [ 282.433695][T17102] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.433707][T17102] R13: 00007ff4fde26038 R14: 00007ff4fde25fa0 R15: 00007ffcf6585d68 [ 282.433742][T17102] [ 282.433754][T17102] Mem-Info: [ 282.433764][T17102] active_anon:5680 inactive_anon:6 isolated_anon:0 [ 282.433764][T17102] active_file:34 inactive_file:43045 isolated_file:0 [ 282.433764][T17102] unevictable:0 dirty:369 writeback:0 [ 282.433764][T17102] slab_reclaimable:12092 slab_unreclaimable:107613 [ 282.433764][T17102] mapped:34300 shmem:525 pagetables:3411 [ 282.433764][T17102] sec_pagetables:0 bounce:0 [ 282.433764][T17102] kernel_misc_reclaimable:0 [ 282.433764][T17102] free:1261857 free_pcp:9785 free_cma:0 [ 282.433817][T17102] Node 0 active_anon:22720kB inactive_anon:24kB active_file:136kB inactive_file:171968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137200kB dirty:1472kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12764kB pagetables:13532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.433870][T17102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.435556][T17102] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.435616][T17102] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 282.435653][T17102] Node 0 DMA32 free:1089772kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22720kB inactive_anon:24kB active_file:136kB inactive_file:171968kB unevictable:0kB writepending:1472kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:39116kB local_pcp:20476kB free_cma:0kB [ 282.435711][T17102] lowmem_reserve[]: 0 0 0 0 0 [ 282.435746][T17102] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.435798][T17102] lowmem_reserve[]: 0 0 0 0 0 [ 282.435833][T17102] Node 1 Normal free:3942296kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.435885][T17102] lowmem_reserve[]: 0 0 0 0 0 [ 282.435918][T17102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.436070][T17102] Node 0 DMA32: 451*4kB (UM) 446*8kB (UM) 579*16kB (UME) 878*32kB (UME) 897*64kB (UM) 608*128kB (UM) 434*256kB (UME) 196*512kB (UME) 82*1024kB (UME) 5*2048kB (ME) 148*4096kB (UM) = 1089836kB [ 282.436223][T17102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 282.436315][T17102] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 7*16kB (UM) 9*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942296kB [ 282.436478][T17102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.436493][T17102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.436509][T17102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.436524][T17102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.436540][T17102] 43600 total pagecache pages [ 282.436551][T17102] 0 pages in swap cache [ 282.436558][T17102] Free swap = 124996kB [ 282.436565][T17102] Total swap = 124996kB [ 282.436573][T17102] 2097051 pages RAM [ 282.436580][T17102] 0 pages HighMem/MovableOnly [ 282.436587][T17102] 433831 pages reserved [ 282.436594][T17102] 0 pages cma reserved [ 282.483510][T17105] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5384'. [ 282.817734][T17113] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 283.419256][T17140] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5399'. [ 283.618066][T17142] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.643512][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5407'. [ 283.845341][T17142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.852859][T17142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.078481][ T89] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.078523][ T89] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.078552][ T89] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.078581][ T89] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.240189][T17180] netlink: 'syz.1.5421': attribute type 2 has an invalid length. [ 284.407443][T17194] netlink: 'syz.3.5429': attribute type 1 has an invalid length. [ 284.455501][T17198] Cannot find add_set index 34 as target [ 285.047523][T17242] ebt_limit: overflow, try lower: 4294901760/65535 [ 285.935861][T17301] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 286.085825][T17303] xt_CT: No such helper "snmp_trap" [ 286.087468][T17310] __nla_validate_parse: 10 callbacks suppressed [ 286.087486][T17310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5481'. [ 286.280663][T17324] netlink: 'syz.4.5486': attribute type 3 has an invalid length. [ 286.430424][T17330] netlink: 'syz.4.5490': attribute type 1 has an invalid length. [ 286.730899][T17353] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096 [ 287.405696][T17399] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 287.585584][T17410] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.635362][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5554'. [ 289.199140][T17512] netlink: 'syz.3.5566': attribute type 1 has an invalid length. [ 289.328094][T17521] netlink: 'syz.3.5570': attribute type 30 has an invalid length. [ 289.465627][T17528] netlink: 'syz.3.5574': attribute type 1 has an invalid length. [ 289.542618][T17533] netlink: 'syz.3.5575': attribute type 16 has an invalid length. [ 289.542640][T17533] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5575'. [ 290.045374][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5583'. [ 290.358046][T17567] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5588'. [ 290.358082][T17567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.518827][T17578] netlink: 'syz.4.5593': attribute type 1 has an invalid length. [ 290.518850][T17578] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5593'. [ 290.535636][T17581] netlink: 'syz.5.5595': attribute type 61 has an invalid length. [ 290.661677][T17587] xt_addrtype: ipv6 does not support BROADCAST matching [ 290.930553][T17601] netlink: 'syz.5.5605': attribute type 3 has an invalid length. [ 290.986997][T17604] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5607'. [ 291.134006][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 291.354641][T17616] netlink: 'syz.2.5613': attribute type 8 has an invalid length. [ 291.464073][T17622] netlink: 'syz.2.5616': attribute type 30 has an invalid length. [ 291.686719][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5625'. [ 291.686749][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5625'. [ 291.897443][T17654] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5632'. [ 292.052043][T17668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 292.164092][T17673] netlink: 'syz.4.5640': attribute type 21 has an invalid length. [ 292.164184][T17673] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5640'. [ 292.206212][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5641'. [ 292.361273][T17688] netlink: 'syz.5.5646': attribute type 30 has an invalid length. [ 292.625466][T17708] x_tables: duplicate entry at hook 2 [ 292.738593][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5663'. [ 292.852443][T17723] macsec0: entered promiscuous mode [ 292.853814][T17723] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 292.974512][T17733] netlink: 'syz.5.5671': attribute type 1 has an invalid length. [ 293.077110][T17742] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.184198][T17745] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 293.252192][T17749] bridge0: port 3(bond0) entered blocking state [ 293.252329][T17749] bridge0: port 3(bond0) entered forwarding state [ 293.252639][T17749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.254300][T17749] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.287583][T17749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.331470][T17755] xt_HMARK: spi-set and port-set can't be combined [ 293.361153][T17749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.363395][T17749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.367781][T17749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.367801][T17749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.412147][T17749] veth1_vlan: left promiscuous mode [ 293.424794][T17749] veth1_vlan: entered promiscuous mode [ 293.435494][T17749] veth1_macvtap: left promiscuous mode [ 293.436594][T17749] veth0_macvtap: left promiscuous mode [ 293.437770][T17749] veth0_macvtap: entered promiscuous mode [ 293.450441][T17749] veth1_macvtap: entered promiscuous mode [ 293.469582][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.470681][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.471743][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.547708][T17749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.560029][T17749] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.566663][ T4963] lo speed is unknown, defaulting to 1000 [ 293.567397][ T4963] syz0: Port: 1 Link ACTIVE [ 293.568351][ T5728] lo speed is unknown, defaulting to 1000 [ 293.580248][ T89] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.580278][ T89] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.581264][ T89] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.581287][ T89] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.581527][ T89] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.581548][ T89] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.586105][ T89] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.586132][ T89] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.621272][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.621389][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.626707][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.626822][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.782761][ T89] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 293.783006][ T89] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 293.809661][ T5728] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 293.930143][T17777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5691'. [ 293.983693][T17780] netlink: 8852 bytes leftover after parsing attributes in process `syz.2.5690'. [ 294.016350][T17781] xt_policy: too many policy elements [ 294.046869][T17783] sctp: [Deprecated]: syz.4.5694 (pid 17783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.046869][T17783] Use struct sctp_sack_info instead [ 294.135545][T17789] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 294.620160][ T4963] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 294.620333][ T4963] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 294.899455][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5718'. [ 295.067518][T17849] validate_nla: 2 callbacks suppressed [ 295.067537][T17849] netlink: 'syz.5.5724': attribute type 21 has an invalid length. [ 295.159217][T17853] SET target dimension over the limit! [ 295.177997][T17855] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 295.487026][T17875] gre1: entered promiscuous mode [ 295.847224][T17900] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 295.992205][T17912] IPv6: Can't replace route, no match found [ 296.008272][T17911] netlink: 'syz.4.5754': attribute type 10 has an invalid length. [ 296.039956][T17911] dummy0: entered promiscuous mode [ 296.041784][T17911] dummy0: entered allmulticast mode [ 296.042578][T17911] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 296.246624][T17931] netlink: zone id is out of range [ 296.246645][T17931] netlink: del zone limit has 4 unknown bytes [ 296.246658][T17930] __nla_validate_parse: 1 callbacks suppressed [ 296.246670][T17930] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5765'. [ 296.403334][T17943] x_tables: unsorted underflow at hook 3 [ 296.534720][T17950] netlink: 'syz.3.5772': attribute type 2 has an invalid length. [ 296.534743][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5772'. [ 296.706899][T17962] xt_socket: unknown flags 0x8 [ 297.250304][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5789'. [ 297.250349][T17996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5789'. [ 297.486021][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5794'. [ 297.486056][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5794'. [ 297.818667][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 298.146793][T18044] netlink: 'syz.2.5812': attribute type 21 has an invalid length. [ 298.306348][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5814'. [ 298.306377][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5814'. [ 298.306394][T18053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5814'. [ 298.378048][T18055] openvswitch: netlink: Message has 70 unknown bytes. [ 298.378085][T18055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.555100][T18062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5821'. [ 298.646351][T18072] netlink: 'syz.3.5826': attribute type 4 has an invalid length. [ 298.662050][T18072] .`: renamed from bond0 (while UP) [ 298.712503][T18074] netlink: 'syz.2.5827': attribute type 1 has an invalid length. [ 299.231702][T18112] netlink: 'syz.2.5844': attribute type 11 has an invalid length. [ 299.353220][T18115] bond0: option fail_over_mac: invalid value (127) [ 299.357249][T18115] bond0 (unregistering): Released all slaves [ 299.847066][T18147] bond2: option updelay: invalid value (18446744073709518847) [ 299.847091][T18147] bond2: option updelay: allowed values 0 - 2147483647 [ 299.857329][T18147] bond2 (unregistering): Released all slaves [ 299.942744][T18154] openvswitch: netlink: Key type 16131 is out of range max 32 [ 300.695093][T18173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.698814][T18173] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.708341][T18173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.955089][T18173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.957307][T18173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.963240][T18173] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.963263][T18173] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.969280][T18173] veth1_vlan: left promiscuous mode [ 300.970352][T18173] veth0_vlan: left promiscuous mode [ 300.972255][T18173] veth0_vlan: entered promiscuous mode [ 300.974577][T18173] veth1_vlan: entered promiscuous mode [ 300.980369][T18173] veth1_macvtap: left promiscuous mode [ 300.981492][T18173] veth0_macvtap: left promiscuous mode [ 300.982577][T18173] veth0_macvtap: entered promiscuous mode [ 300.983735][T18173] veth1_macvtap: entered promiscuous mode [ 300.996406][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.997530][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.000934][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.002093][T18173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.036806][T18173] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 301.039551][ T1014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.039882][ T1014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.039919][ T1014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.039951][ T1014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.048963][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.049106][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.056244][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.056362][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.292996][T18187] __nla_validate_parse: 4 callbacks suppressed [ 301.293016][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5883'. [ 301.458706][T18197] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 301.644933][T18211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5893'. [ 301.787446][T18218] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 301.787472][T18218] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.824119][T18265] netlink: 'syz.5.5913': attribute type 4 has an invalid length. [ 303.141967][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.154910][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.155876][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.165785][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.184765][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.760339][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5932'. [ 304.022736][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.025654][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.026425][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.197125][T18336] hsr0: entered promiscuous mode [ 304.291000][T18280] infiniband rxe0: set active [ 304.291050][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.291106][T18280] infiniband rxe0: added rxe_eth0 [ 304.336732][T18280] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 304.336775][T18280] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 304.336812][T18280] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 304.417048][T18280] RDS/IB: rxe0: added [ 304.424621][T18280] smc: adding ib device rxe0 with port count 1 [ 304.424646][T18280] smc: ib device rxe0 port 1 has no pnetid [ 304.424717][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.426230][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.507490][T18347] netlink: 'syz.2.5946': attribute type 1 has an invalid length. [ 304.691592][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5951'. [ 304.691617][T18358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5951'. [ 304.691633][T18358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5951'. [ 304.847869][T18366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5954'. [ 304.847896][T18366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5954'. [ 305.164950][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.225607][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5966'. [ 305.259622][ T5642] Bluetooth: hci6: command tx timeout [ 305.265490][T18389] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 305.265514][T18389] bridge4: entered allmulticast mode [ 305.447984][T18393] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 305.450000][T18393] bond3 (unregistering): Released all slaves [ 305.579761][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 305.674131][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.835035][T18420] netlink: 'syz.3.5980': attribute type 1 has an invalid length. [ 305.975892][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5984'. [ 306.070673][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.336303][T18444] netlink: 'syz.5.5992': attribute type 1 has an invalid length. [ 306.336324][T18444] __nla_validate_parse: 1 callbacks suppressed [ 306.336335][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5992'. [ 306.537818][T18445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.560058][T18445] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.582048][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.865044][T18466] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6003'. [ 306.881353][T18466] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6003'. [ 306.924986][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 307.031428][T18470] netlink: 'syz.4.6005': attribute type 13 has an invalid length. [ 307.241718][T18479] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 307.244135][T18481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6011'. [ 307.294438][T18280] lo speed is unknown, defaulting to 1000 [ 307.349793][ T5642] Bluetooth: hci6: command tx timeout [ 307.426760][T18487] pimreg: entered allmulticast mode [ 307.523707][T18491] 8021q: adding VLAN 0 to HW filter on device .` [ 307.586312][T18491] A link change request failed with some changes committed already. Interface ..c may have been left with an inconsistent configuration, please check. [ 307.729637][T18280] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.098729][T18516] netlink: 'syz.4.6028': attribute type 1 has an invalid length. [ 308.098752][T18516] netlink: 'syz.4.6028': attribute type 1 has an invalid length. [ 308.285287][T18526] bridge1: entered allmulticast mode [ 308.452096][T18537] netlink: 'syz.5.6036': attribute type 16 has an invalid length. [ 308.452121][T18537] netlink: 'syz.5.6036': attribute type 17 has an invalid length. [ 308.501061][T18540] netlink: 'syz.4.6039': attribute type 21 has an invalid length. [ 308.503788][T18539] netlink: 'syz.3.6037': attribute type 1 has an invalid length. [ 308.546042][T18537] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.546535][T18537] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.615999][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 308.616025][T18546] netlink: 'syz.2.6041': attribute type 1 has an invalid length. [ 308.672170][T18537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.687551][T18537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.889648][T18540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6039'. [ 308.971117][T18560] netlink: 'syz.2.6048': attribute type 5 has an invalid length. [ 309.090210][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.092107][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.092148][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.092182][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.188143][T18280] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.188316][T18280] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.204700][T18280] bridge_slave_0: entered allmulticast mode [ 309.206445][T18280] bridge_slave_0: entered promiscuous mode [ 309.248276][T18280] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.249871][T18280] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.250025][T18280] bridge_slave_1: entered allmulticast mode [ 309.255189][T18280] bridge_slave_1: entered promiscuous mode [ 309.299656][T18575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.354918][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.354939][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.367848][T18280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.380041][T18280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.418856][ T5642] Bluetooth: hci6: command tx timeout [ 309.436543][T18280] team0: Port device team_slave_0 added [ 309.450340][T18280] team0: Port device team_slave_1 added [ 309.522653][T18280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.522672][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.522695][T18280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.526679][T18280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.526694][T18280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.526714][T18280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.650884][T18280] hsr_slave_0: entered promiscuous mode [ 309.652721][T18280] hsr_slave_1: entered promiscuous mode [ 309.653909][T18280] debugfs: 'hsr0' already exists in 'hsr' [ 309.653939][T18280] Cannot create hsr debugfs directory [ 309.708008][T18593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.708056][T18593] IPv6: NLM_F_CREATE should be set when creating new route [ 309.708099][T18593] IPv6: NLM_F_CREATE should be set when creating new route [ 310.702914][T18280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.716357][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.722107][T18280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.740907][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.742651][T18280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.773676][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.774527][T18280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.795753][T18280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.928022][T18647] netlink: 'syz.2.6085': attribute type 70 has an invalid length. [ 311.067550][T18280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.140076][T18280] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.162479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.162577][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.180599][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.180728][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.499247][ T5642] Bluetooth: hci6: command tx timeout [ 312.283164][T18280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.575373][T18749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6128'. [ 312.575406][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6128'. [ 312.812394][T18280] veth0_vlan: entered promiscuous mode [ 312.835041][T18280] veth1_vlan: entered promiscuous mode [ 312.896749][T18280] veth0_macvtap: entered promiscuous mode [ 312.918948][T18280] veth1_macvtap: entered promiscuous mode [ 312.961241][T18280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.980647][T18280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.020794][ T1014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.160667][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.161614][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.161648][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.271892][ T986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.271923][ T986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.363022][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.363043][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.435829][T18787] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 313.807897][T18809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.925301][T18815] bond0: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 313.925332][T18815] bond0: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 313.927048][T18815] bond0: entered allmulticast mode [ 313.927524][T18815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.214953][T18837] x_tables: unsorted entry at hook 3 [ 314.353684][T18846] netlink: 'syz.2.6171': attribute type 16 has an invalid length. [ 314.353708][T18846] netlink: 'syz.2.6171': attribute type 17 has an invalid length. [ 314.800139][T18864] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.490609][T18846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.532603][T18846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.201956][ T43] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.201999][ T43] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.202030][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.202060][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.352707][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6193'. [ 317.051723][T18936] xt_l2tp: missing protocol rule (udp|l2tpip) [ 317.100829][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 317.112773][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.146092][T18939] netlink: 'syz.3.6228': attribute type 1 has an invalid length. [ 317.146115][T18939] netlink: 'syz.3.6228': attribute type 2 has an invalid length. [ 317.381610][T18951] gtp0: entered promiscuous mode [ 317.381632][T18951] gtp0: entered allmulticast mode [ 317.462764][T18957] ip6t_REJECT: ECHOREPLY is not supported [ 317.707063][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6234'. [ 317.882285][T18977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.882302][T18977] IPv6: NLM_F_CREATE should be set when creating new route [ 317.882353][T18977] IPv6: NLM_F_CREATE should be set when creating new route [ 318.082231][T18982] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 318.137349][T18982] bond1 (unregistering): Released all slaves [ 318.565547][T19003] netlink: 'syz.5.6258': attribute type 1 has an invalid length. [ 318.752376][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6254'. [ 318.752491][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6257'. [ 318.912524][T19025] netlink: 'syz.3.6260': attribute type 61 has an invalid length. [ 318.912550][T19025] netlink: 'syz.3.6260': attribute type 105 has an invalid length. [ 319.346195][T19059] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 319.534764][T19071] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6284'. [ 319.904585][T19096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6297'. [ 319.942558][T19099] netlink: 'syz.5.6298': attribute type 29 has an invalid length. [ 319.956997][T19043] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 320.073040][T19104] netlink: 'syz.3.6299': attribute type 1 has an invalid length. [ 320.208503][T19119] netlink: 'syz.2.6307': attribute type 1 has an invalid length. [ 320.208523][T19119] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6307'. [ 320.298744][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 320.556955][T19142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6318'. [ 320.557000][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6318'. [ 320.823177][T19161] netlink: 'syz.4.6328': attribute type 1 has an invalid length. [ 320.823198][T19161] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6328'. [ 321.158260][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6338'. [ 321.178646][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 321.298630][T19191] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 321.966929][T19238] sit0: left promiscuous mode [ 322.102551][T19238] hsr0: left promiscuous mode [ 322.134198][T19238] vlan1: left promiscuous mode [ 322.165550][T19238] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 322.253720][T19238] geneve3: left promiscuous mode [ 322.268786][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.535888][T19273] netlink: 'syz.5.6384': attribute type 4 has an invalid length. [ 322.839979][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.959636][T19302] netlink: 'syz.6.6398': attribute type 1 has an invalid length. [ 323.374208][T19333] geneve1: entered promiscuous mode [ 323.488328][T19341] x_tables: duplicate entry at hook 1 [ 323.651115][T19351] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 323.709219][T19357] netlink: 'syz.3.6426': attribute type 15 has an invalid length. [ 323.866693][T19368] netlink: 'syz.6.6430': attribute type 21 has an invalid length. [ 323.866719][T19368] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.866795][T19368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.866804][T19368] IPv6: NLM_F_CREATE should be set when creating new route [ 323.867006][T19368] IPv6: NLM_F_CREATE should be set when creating new route [ 323.867033][T19368] IPv6: NLM_F_CREATE should be set when creating new route [ 324.457277][T19410] netlink: 'syz.2.6451': attribute type 4 has an invalid length. [ 324.457299][T19410] __nla_validate_parse: 7 callbacks suppressed [ 324.457310][T19410] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6451'. [ 324.812793][T19430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.846447][T19435] netlink: 'syz.6.6465': attribute type 7 has an invalid length. [ 325.071220][T19450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6471'. [ 325.298079][T19469] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.6482'. [ 325.298187][T19469] 0XD: renamed from gretap0 (while UP) [ 325.334478][T19469] 0XD: entered allmulticast mode [ 325.589827][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.589895][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.615773][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.625435][T19486] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 325.625471][T19486] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 325.625509][T19486] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 325.691230][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.693028][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.694796][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.696518][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.698237][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.731129][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.733006][T19486] wg2 speed is unknown, defaulting to 1000 [ 325.748245][T19494] netlink: 'syz.5.6492': attribute type 11 has an invalid length. [ 326.006908][T19511] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 326.008794][T19511] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 326.214251][T19526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6508'. [ 326.268115][T19526] sit0: left promiscuous mode [ 326.333880][T19526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.335680][T19526] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.360271][T19526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.429481][T19526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.433131][T19526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.452057][T19526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.452082][T19526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.480699][T19526] veth1_vlan: left promiscuous mode [ 326.485757][T19526] vlan0: left promiscuous mode [ 326.487354][T19526] vlan1: left promiscuous mode [ 326.491359][T19526] veth1_vlan: entered promiscuous mode [ 326.507989][T19526] veth1_macvtap: left promiscuous mode [ 326.515795][T19526] veth0_macvtap: left promiscuous mode [ 326.516705][T19526] veth0_macvtap: entered promiscuous mode [ 326.517908][T19526] veth1_macvtap: entered promiscuous mode [ 326.540946][T19526] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 326.541197][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.542257][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.543596][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.544652][T19526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.591384][T19526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.597396][T19526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.612572][T19526] ip6erspan0: left promiscuous mode [ 326.624622][T19526] ip6gre1: left promiscuous mode [ 326.702394][ T89] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.750409][ T1014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.752353][ T1014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.777344][ T3356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.956292][T19553] netlink: 'syz.6.6521': attribute type 16 has an invalid length. [ 326.956328][T19553] netlink: 'syz.6.6521': attribute type 17 has an invalid length. [ 327.071690][T19553] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.072278][T19553] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.254317][T19553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.269222][T19553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.620630][ T89] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.623207][ T43] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.654193][T19582] set match dimension is over the limit! [ 327.730327][ T89] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.734048][ T43] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.745342][T19584] xt_connbytes: Forcing CT accounting to be enabled [ 328.143178][T19605] netlink: 'syz.4.6548': attribute type 29 has an invalid length. [ 328.802890][T19637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6564'. [ 328.802915][T19637] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6564'. [ 328.802930][T19637] netlink: 'syz.3.6564': attribute type 6 has an invalid length. [ 328.802942][T19637] netlink: 'syz.3.6564': attribute type 5 has an invalid length. [ 328.802954][T19637] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6564'. [ 329.094109][T19644] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 329.094109][T19644] Please contact the netfilter-devel mailing list or update your nftables rules. [ 329.702659][T19685] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6588'. [ 329.784126][T19687] netlink: 'syz.2.6590': attribute type 10 has an invalid length. [ 329.987405][T19697] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 330.198915][T19685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.202677][T19685] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.213609][T19685] batadv0: left promiscuous mode [ 330.216707][T19685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.257772][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6599'. [ 330.257817][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6599'. [ 330.342195][T19685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.357792][T19685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.381334][T19685] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.381361][T19685] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.415682][T19685] veth1_vlan: left promiscuous mode [ 330.419803][T19685] veth0_vlan: left promiscuous mode [ 330.438032][T19685] veth0_vlan: entered promiscuous mode [ 330.450919][T19685] veth1_vlan: entered promiscuous mode [ 330.474199][T19685] veth1_macvtap: left promiscuous mode [ 330.478045][T19685] veth0_macvtap: left promiscuous mode [ 330.492605][T19685] veth0_macvtap: entered promiscuous mode [ 330.494727][T19685] veth1_macvtap: entered promiscuous mode [ 330.494960][T19685] macsec0: left promiscuous mode [ 330.516787][T19685] geneve1: left promiscuous mode [ 330.527038][T19685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.531096][T19685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.539590][T19685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.546044][T19685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.558233][T19685] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 330.576602][T19685] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 330.603455][T19687] bond0: (slave team0): Releasing backup interface [ 330.627154][T19687] team0 (unregistering): Port device team_slave_0 removed [ 330.653999][T19687] team0 (unregistering): Port device team_slave_1 removed [ 330.683185][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.683309][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.700864][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.700962][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.832034][T19726] netlink: 'syz.4.6609': attribute type 1 has an invalid length. [ 330.870411][ T3356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.871308][ T3356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.871345][ T3356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.871374][ T3356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.230903][T19754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6619'. [ 331.333921][T19759] netlink: 'syz.2.6626': attribute type 8 has an invalid length. [ 331.458272][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6627'. [ 331.780255][T19787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.852064][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6642'. [ 331.852095][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6642'. [ 332.137413][T19814] netlink: 'syz.4.6651': attribute type 21 has an invalid length. [ 332.137438][T19814] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6651'. [ 332.137522][T19814] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6651'. [ 332.174440][T19816] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6652'. [ 332.313360][T19826] openvswitch: netlink: IP tunnel dst address not specified [ 332.442777][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.442847][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.442887][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.442925][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.442963][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.443000][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.443040][T19836] netlink: 'syz.2.6661': attribute type 3 has an invalid length. [ 332.650755][T19850] xt_NETMAP: bad MAP_IPS. [ 333.036054][T19876] ksmbd: Unknown IPC event: 8, ignore. [ 333.777695][T19867] vlan1: left promiscuous mode [ 333.825727][T19867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.832527][T19867] ip6tnl2: left promiscuous mode [ 333.862311][T19867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 333.867321][T19867] ipip1: left promiscuous mode [ 334.045145][T19888] bond3: option arp_missed_max: invalid value (0) [ 334.045168][T19888] bond3: option arp_missed_max: allowed values 1 - 255 [ 334.071537][T19888] bond3 (unregistering): Released all slaves [ 334.116680][ T4963] wg2 speed is unknown, defaulting to 1000 [ 334.855836][T19945] x_tables: duplicate underflow at hook 2 [ 335.021310][T19951] __nla_validate_parse: 5 callbacks suppressed [ 335.021330][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.021784][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.022107][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.022420][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.022666][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.028036][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.028324][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.029257][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.029500][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.029724][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 335.751588][T19983] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 336.428720][ T4963] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.686396][T20046] netlink: 'syz.4.6766': attribute type 11 has an invalid length. [ 336.729735][ T4963] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.757482][T20048] netlink: 'syz.5.6765': attribute type 11 has an invalid length. [ 336.872860][ T986] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.027291][T20069] xt_hashlimit: invalid rate [ 337.561437][T20106] ip6t_srh: unknown srh match flags 4000 [ 337.627926][T20109] bridge1: entered allmulticast mode [ 337.899991][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.900254][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.925973][T20128] validate_nla: 53 callbacks suppressed [ 337.925991][T20128] netlink: 'syz.5.6805': attribute type 2 has an invalid length. [ 337.926003][T20128] netlink: 'syz.5.6805': attribute type 1 has an invalid length. [ 337.999794][ T4963] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.640334][T20180] netlink: ct family unspecified [ 339.010327][T20205] ip6tnl1: entered promiscuous mode [ 339.957539][T20273] netlink: 'syz.2.6877': attribute type 21 has an invalid length. [ 341.204276][T20312] netlink: 'syz.2.6894': attribute type 1 has an invalid length. [ 341.578640][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.921148][T20341] __nla_validate_parse: 105 callbacks suppressed [ 341.921169][T20341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6911'. [ 342.860076][T20379] ipt_REJECT: TCP_RESET invalid for non-tcp [ 343.192612][T20391] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 343.652240][T20413] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6947'. [ 344.463041][T20449] sctp: [Deprecated]: syz.3.6965 (pid 20449) Use of int in max_burst socket option. [ 344.463041][T20449] Use struct sctp_assoc_value instead [ 344.573297][T20453] netlink: 'syz.3.6967': attribute type 1 has an invalid length. [ 344.689877][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.689939][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.690994][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.692425][T20457] smbdirect: ib_dev[]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 344.692457][T20457] smbdirect: ib_dev[]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 344.692502][T20457] smbdirect: ib_dev[]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 344.787576][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.800502][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.805553][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.828677][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.835993][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.854927][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.876823][T20457] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.201191][T20470] ipt_ah: unknown flags FF [ 345.787079][T20497] xt_nat: multiple ranges no longer supported [ 346.854526][T20533] bridge_slave_0: left allmulticast mode [ 346.854553][T20533] bridge_slave_0: left promiscuous mode [ 346.856079][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.816465][T20563] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7018'. [ 348.313915][T20579] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 348.443868][T20549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.443892][T20549] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 348.668188][T20590] No such timeout policy "syz1" [ 348.793256][T20549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.793280][T20549] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 348.870264][T20549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.870288][T20549] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 349.098640][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.158612][T20594] 0: renamed from bond_slave_1 (while UP) [ 349.235499][T20606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.739577][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 350.133948][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7039'. [ 350.133980][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7039'. [ 350.232718][T20619] netlink: 'syz.4.7040': attribute type 5 has an invalid length. [ 350.702863][T20636] IPv6: Can't replace route, no match found [ 351.187635][T20654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7054'. [ 351.362266][T20549] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 351.362289][T20549] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 351.880131][T20678] netlink: 'syz.4.7065': attribute type 1 has an invalid length. [ 351.880155][T20678] netlink: 1368 bytes leftover after parsing attributes in process `syz.4.7065'. [ 352.351841][T20690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7069'. [ 352.352367][T20694] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7071'. [ 352.615502][T20549] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 352.615524][T20549] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 352.911936][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7078'. [ 352.985512][T20717] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7078'. [ 353.341192][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7085'. [ 353.648209][T20741] netlink: get zone limit has 4 unknown bytes [ 353.695328][T20739] netlink: 988 bytes leftover after parsing attributes in process `syz.2.7087'. [ 354.080153][T20755] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7096'. [ 354.080190][T20755] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 354.652816][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7105'. [ 355.030860][T20796] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.136539][T20806] gre1: entered promiscuous mode [ 355.136563][T20806] gre1: entered allmulticast mode [ 355.761126][T20833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7128'. [ 355.761154][T20833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7128'. [ 355.761169][T20833] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7128'. [ 355.951312][T20842] netlink: 'syz.4.7133': attribute type 12 has an invalid length. [ 356.207479][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7135'. [ 357.116491][T20894] openvswitch: netlink: IPv6 tunnel dst address is zero [ 357.466818][T20904] ip6t_hbh: too many supported opts specified [ 358.303709][T20927] __nla_validate_parse: 1 callbacks suppressed [ 358.303728][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7167'. [ 358.540830][T20937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7169'. [ 360.025378][T20987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7191'. [ 360.027265][T20988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7190'. [ 360.027288][T20988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7190'. [ 360.167601][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7193'. [ 360.353126][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7200'. [ 360.621194][T21018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7205'. [ 360.621218][T21018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7205'. [ 360.621234][T21018] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7205'. [ 360.889633][T21029] x_tables: ip_tables: osf match: only valid for protocol 6 [ 361.107286][T21041] netlink: 'syz.5.7216': attribute type 1 has an invalid length. [ 361.536233][T21063] xt_l2tp: invalid flags combination: 8 [ 361.773357][T21076] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 361.775593][T21076] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 361.775945][T21076] veth1_virt_wifi: entered allmulticast mode [ 361.785066][T21076] veth1_virt_wifi: left allmulticast mode [ 362.925464][T21109] netlink: 'syz.3.7250': attribute type 1 has an invalid length. [ 363.010113][T21104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.818581][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.674406][T21174] __nla_validate_parse: 3 callbacks suppressed [ 364.674428][T21174] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.7278'. [ 364.989167][T21186] netlink: 176 bytes leftover after parsing attributes in process `syz.6.7283'. [ 364.995797][T21189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.307848][T21199] xt_hashlimit: size too large, truncated to 1048576 [ 365.307870][T21199] xt_hashlimit: max too large, truncated to 1048576 [ 365.779057][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7301'. [ 366.117824][T21239] netlink: 'syz.3.7310': attribute type 7 has an invalid length. [ 366.117847][T21239] netlink: 'syz.3.7310': attribute type 5 has an invalid length. [ 366.117860][T21239] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7310'. [ 366.346961][T21248] x_tables: duplicate entry at hook 3 [ 366.582551][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7318'. [ 366.627084][T21261] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7321'. [ 366.997491][T21269] x_tables: eb_tables: u32.0 match: invalid size 1984 (kernel) != (user) 2032 [ 367.022779][T21277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 367.273647][T21284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7332'. [ 367.665916][T21305] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7342'. [ 367.680512][T21305] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7342'. [ 367.680542][T21305] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7342'. [ 367.868885][ T4963] lo speed is unknown, defaulting to 1000 [ 367.868928][ T4963] syz0: Port: 1 Link DOWN [ 367.869028][ T4963] lo speed is unknown, defaulting to 1000 [ 368.460419][T21334] xt_socket: unknown flags 0x4 [ 368.543206][T21339] netlink: 'syz.2.7358': attribute type 13 has an invalid length. [ 369.357909][T21378] set match dimension is over the limit! [ 369.760801][T21398] netlink: 'syz.2.7388': attribute type 33 has an invalid length. [ 370.038081][T21411] __nla_validate_parse: 21 callbacks suppressed [ 370.038101][T21411] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7393'. [ 370.080308][T21405] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 370.400110][T21405] bond6 (unregistering): Released all slaves [ 370.634034][T21424] netlink: 'syz.2.7400': attribute type 3 has an invalid length. [ 371.277817][T21456] netlink: ct family unspecified [ 371.942360][T21476] netlink: 'syz.2.7423': attribute type 1 has an invalid length. [ 371.942384][T21476] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7423'. [ 372.710758][T21502] lo: entered promiscuous mode [ 372.710779][T21502] lo: entered allmulticast mode [ 372.734047][T21502] tunl0: entered promiscuous mode [ 372.734069][T21502] tunl0: entered allmulticast mode [ 372.734726][T21502] gre0: entered promiscuous mode [ 372.734741][T21502] gre0: entered allmulticast mode [ 372.919327][T21502] gretap0: entered promiscuous mode [ 372.919349][T21502] gretap0: entered allmulticast mode [ 372.921377][T21502] erspan0: entered promiscuous mode [ 372.921396][T21502] erspan0: entered allmulticast mode [ 372.922351][T21502] ip_vti0: entered promiscuous mode [ 372.922367][T21502] ip_vti0: entered allmulticast mode [ 372.925442][T21502] ip6_vti0: entered promiscuous mode [ 372.925458][T21502] ip6_vti0: entered allmulticast mode [ 372.925993][T21502] sit0: entered promiscuous mode [ 372.926009][T21502] sit0: entered allmulticast mode [ 372.931368][T21502] ip6tnl0: entered promiscuous mode [ 372.931386][T21502] ip6tnl0: entered allmulticast mode [ 372.931895][T21502] ip6gre0: entered promiscuous mode [ 372.931908][T21502] ip6gre0: entered allmulticast mode [ 372.934838][T21502] syz_tun: entered promiscuous mode [ 372.934854][T21502] syz_tun: entered allmulticast mode [ 372.936346][T21502] ip6gretap0: entered promiscuous mode [ 372.936363][T21502] ip6gretap0: entered allmulticast mode [ 372.941699][T21502] vcan0: entered promiscuous mode [ 372.941716][T21502] vcan0: entered allmulticast mode [ 372.942307][T21502] bond0: entered promiscuous mode [ 372.942321][T21502] bond_slave_0: entered promiscuous mode [ 372.943778][T21502] bond_slave_1: entered promiscuous mode [ 372.947140][T21502] bond0: entered allmulticast mode [ 372.947158][T21502] bond_slave_0: entered allmulticast mode [ 372.947171][T21502] bond_slave_1: entered allmulticast mode [ 372.951212][T21502] dummy0: entered promiscuous mode [ 372.951231][T21502] dummy0: entered allmulticast mode [ 372.953992][T21502] nlmon0: entered promiscuous mode [ 372.954008][T21502] nlmon0: entered allmulticast mode [ 372.955492][T21502] batadv0: entered promiscuous mode [ 372.955506][T21502] batadv0: entered allmulticast mode [ 372.962736][T21502] vxcan0: entered promiscuous mode [ 372.962753][T21502] vxcan0: entered allmulticast mode [ 372.964549][T21502] vxcan1: entered promiscuous mode [ 372.964565][T21502] vxcan1: entered allmulticast mode [ 372.965114][T21502] veth0: entered promiscuous mode [ 372.965127][T21502] veth0: entered allmulticast mode [ 372.972789][T21502] veth1: entered promiscuous mode [ 372.972806][T21502] veth1: entered allmulticast mode [ 372.977839][T21502] wg0: entered promiscuous mode [ 372.977856][T21502] wg0: entered allmulticast mode [ 372.982032][T21502] wg1: entered promiscuous mode [ 372.982049][T21502] wg1: entered allmulticast mode [ 372.986181][T21502] wg2: entered promiscuous mode [ 372.986197][T21502] wg2: entered allmulticast mode [ 372.989102][T21502] veth0_to_bridge: entered promiscuous mode [ 372.989118][T21502] veth0_to_bridge: entered allmulticast mode [ 372.993825][T21502] bridge_slave_0: entered promiscuous mode [ 372.993842][T21502] bridge_slave_0: entered allmulticast mode [ 372.998238][T21502] veth1_to_bridge: entered promiscuous mode [ 372.998255][T21502] veth1_to_bridge: entered allmulticast mode [ 373.002807][T21502] bridge_slave_1: entered promiscuous mode [ 373.002825][T21502] bridge_slave_1: entered allmulticast mode [ 373.006959][T21502] veth0_to_bond: entered promiscuous mode [ 373.006976][T21502] veth0_to_bond: entered allmulticast mode [ 373.015482][T21502] veth1_to_bond: entered promiscuous mode [ 373.016005][T21502] veth1_to_bond: entered allmulticast mode [ 373.025750][T21502] veth0_to_team: entered promiscuous mode [ 373.025769][T21502] veth0_to_team: entered allmulticast mode [ 373.030428][T21502] team_slave_0: entered promiscuous mode [ 373.030445][T21502] team_slave_0: entered allmulticast mode [ 373.034722][T21502] veth1_to_team: entered promiscuous mode [ 373.034740][T21502] veth1_to_team: entered allmulticast mode [ 373.035536][T21502] team_slave_1: entered promiscuous mode [ 373.035551][T21502] team_slave_1: entered allmulticast mode [ 373.045193][T21502] veth0_to_batadv: entered promiscuous mode [ 373.045213][T21502] veth0_to_batadv: entered allmulticast mode [ 373.055666][T21502] batadv_slave_0: entered promiscuous mode [ 373.055687][T21502] batadv_slave_0: entered allmulticast mode [ 373.058942][T21502] veth1_to_batadv: entered promiscuous mode [ 373.058960][T21502] veth1_to_batadv: entered allmulticast mode [ 373.062468][T21502] batadv_slave_1: entered promiscuous mode [ 373.062486][T21502] batadv_slave_1: entered allmulticast mode [ 373.065919][T21502] xfrm0: entered promiscuous mode [ 373.065936][T21502] xfrm0: entered allmulticast mode [ 373.083165][T21502] veth0_to_hsr: entered promiscuous mode [ 373.083185][T21502] veth0_to_hsr: entered allmulticast mode [ 373.084543][T21502] hsr_slave_0: entered allmulticast mode [ 373.087962][T21502] veth1_to_hsr: entered promiscuous mode [ 373.087980][T21502] veth1_to_hsr: entered allmulticast mode [ 373.102170][T21502] hsr_slave_1: entered allmulticast mode [ 373.116655][T21502] hsr0: entered promiscuous mode [ 373.116677][T21502] hsr0: entered allmulticast mode [ 373.118198][T21502] veth1_virt_wifi: entered promiscuous mode [ 373.121443][T21502] veth1_virt_wifi: entered allmulticast mode [ 373.124179][T21502] veth0_virt_wifi: entered promiscuous mode [ 373.124195][T21502] veth0_virt_wifi: entered allmulticast mode [ 373.127695][T21502] virt_wifi0: entered promiscuous mode [ 373.127712][T21502] virt_wifi0: entered allmulticast mode [ 373.127726][T21502] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 373.247436][T21510] bond4: option packets_per_slave: invalid value (134217728) [ 373.247471][T21510] bond4: option packets_per_slave: allowed values 0 - 65535 [ 373.257921][T21510] bond4 (unregistering): Released all slaves [ 373.833106][T21529] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 373.896331][T21529] bond4 (unregistering): Released all slaves [ 374.017056][T21542] gretap0: entered allmulticast mode [ 374.513771][T21559] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7462'. [ 374.929841][T21583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7474'. [ 375.397133][T21605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7486'. [ 375.756915][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7493'. [ 376.028493][T21631] netlink: 'syz.3.7500': attribute type 1 has an invalid length. [ 376.167390][T21637] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7502'. [ 376.179007][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7502'. [ 377.378632][T21675] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7520'. [ 377.432332][T21677] netlink: 3136 bytes leftover after parsing attributes in process `syz.5.7522'. [ 377.576026][T21681] openvswitch: netlink: Flow key attr not present in new flow. [ 378.319251][T21699] xt_TCPMSS: Only works on TCP SYN packets [ 378.482034][T21703] ip_tables: iptables: counters copy to user failed while replacing table [ 378.794136][T21711] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7539'. [ 378.926437][T21716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.057919][T21720] ipvlan0: entered allmulticast mode [ 379.057941][T21720] veth0_vlan: entered allmulticast mode [ 379.076989][T21720] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 379.367590][T21730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.412586][T21767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7564'. [ 380.865485][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7575'. [ 380.865512][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7575'. [ 381.097302][T21799] netlink: 'syz.5.7580': attribute type 1 has an invalid length. [ 381.097327][T21799] netlink: 'syz.5.7580': attribute type 2 has an invalid length. [ 381.797248][T21815] lo: entered promiscuous mode [ 381.797428][T21815] lo: entered allmulticast mode [ 381.824527][T21815] tunl0: entered promiscuous mode [ 381.824719][T21815] tunl0: entered allmulticast mode [ 381.841645][T21815] gre0: entered promiscuous mode [ 381.841667][T21815] gre0: entered allmulticast mode [ 381.860486][T21815] 0XD: entered promiscuous mode [ 381.873255][T21815] erspan0: entered promiscuous mode [ 381.873277][T21815] erspan0: entered allmulticast mode [ 381.879275][T21815] ip_vti0: entered promiscuous mode [ 381.879296][T21815] ip_vti0: entered allmulticast mode [ 381.885058][T21815] ip6_vti0: entered promiscuous mode [ 381.885077][T21815] ip6_vti0: entered allmulticast mode [ 381.891221][T21815] sit0: entered promiscuous mode [ 381.891240][T21815] sit0: entered allmulticast mode [ 381.952954][T21815] ip6tnl0: entered promiscuous mode [ 381.953540][T21815] ip6tnl0: entered allmulticast mode [ 381.971840][T21815] ip6gre0: entered promiscuous mode [ 381.971862][T21815] ip6gre0: entered allmulticast mode [ 381.974035][T21815] syz_tun: entered promiscuous mode [ 381.974053][T21815] syz_tun: entered allmulticast mode [ 381.985080][T21815] ip6gretap0: entered promiscuous mode [ 381.985099][T21815] ip6gretap0: entered allmulticast mode [ 381.995854][T21815] bridge0: entered promiscuous mode [ 381.995891][T21815] bridge0: entered allmulticast mode [ 381.999981][T21815] vcan0: entered promiscuous mode [ 382.000008][T21815] vcan0: entered allmulticast mode [ 382.011340][T21815] bond0: entered promiscuous mode [ 382.011359][T21815] bond_slave_0: entered promiscuous mode [ 382.011535][T21815] bond_slave_1: entered promiscuous mode [ 382.011694][T21815] bond0: entered allmulticast mode [ 382.011707][T21815] bond_slave_0: entered allmulticast mode [ 382.011720][T21815] bond_slave_1: entered allmulticast mode [ 382.026763][T21815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.046441][T21815] team0: entered promiscuous mode [ 382.046461][T21815] team_slave_0: entered promiscuous mode [ 382.052257][T21815] team_slave_1: entered promiscuous mode [ 382.052428][T21815] team0: entered allmulticast mode [ 382.052441][T21815] team_slave_0: entered allmulticast mode [ 382.052455][T21815] team_slave_1: entered allmulticast mode [ 382.056274][T21815] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.064468][T21815] dummy0: entered promiscuous mode [ 382.064489][T21815] dummy0: entered allmulticast mode [ 382.081829][T21815] nlmon0: entered promiscuous mode [ 382.081850][T21815] nlmon0: entered allmulticast mode [ 382.086920][T21815] batadv0: entered promiscuous mode [ 382.086939][T21815] batadv0: entered allmulticast mode [ 382.097923][T21815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.109547][T21815] vxcan0: entered promiscuous mode [ 382.109568][T21815] vxcan0: entered allmulticast mode [ 382.135369][T21815] vxcan1: entered promiscuous mode [ 382.135391][T21815] vxcan1: entered allmulticast mode [ 382.145704][T21815] veth0: entered promiscuous mode [ 382.145723][T21815] veth0: entered allmulticast mode [ 382.156294][T21815] veth1: entered promiscuous mode [ 382.156316][T21815] veth1: entered allmulticast mode [ 382.171032][T21815] wg0: entered promiscuous mode [ 382.171053][T21815] wg0: entered allmulticast mode [ 382.186369][T21815] wg1: entered promiscuous mode [ 382.186388][T21815] wg1: entered allmulticast mode [ 382.206949][T21815] wg2: entered promiscuous mode [ 382.206970][T21815] wg2: entered allmulticast mode [ 382.219087][T21815] veth0_to_bridge: entered promiscuous mode [ 382.219110][T21815] veth0_to_bridge: entered allmulticast mode [ 382.226165][T21815] bridge_slave_0: entered promiscuous mode [ 382.226185][T21815] bridge_slave_0: entered allmulticast mode [ 382.231416][T21815] veth1_to_bridge: entered promiscuous mode [ 382.231434][T21815] veth1_to_bridge: entered allmulticast mode [ 382.240013][T21815] veth0_to_bond: entered promiscuous mode [ 382.240032][T21815] veth0_to_bond: entered allmulticast mode [ 382.261184][T21815] veth1_to_bond: entered promiscuous mode [ 382.261206][T21815] veth1_to_bond: entered allmulticast mode [ 382.283768][T21815] veth0_to_team: entered promiscuous mode [ 382.283790][T21815] veth0_to_team: entered allmulticast mode [ 382.293842][T21815] veth1_to_team: entered promiscuous mode [ 382.293864][T21815] veth1_to_team: entered allmulticast mode [ 382.307876][T21815] veth0_to_batadv: entered promiscuous mode [ 382.307896][T21815] veth0_to_batadv: entered allmulticast mode [ 382.314290][T21815] batadv_slave_0: entered promiscuous mode [ 382.314341][T21815] batadv_slave_0: entered allmulticast mode [ 382.323546][T21815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.323929][T21815] veth1_to_batadv: entered promiscuous mode [ 382.323945][T21815] veth1_to_batadv: entered allmulticast mode [ 382.333526][T21815] batadv_slave_1: entered promiscuous mode [ 382.333546][T21815] batadv_slave_1: entered allmulticast mode [ 382.346084][T21815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.346464][T21815] xfrm0: entered promiscuous mode [ 382.346479][T21815] xfrm0: entered allmulticast mode [ 382.364104][T21815] veth0_to_hsr: entered promiscuous mode [ 382.364125][T21815] veth0_to_hsr: entered allmulticast mode [ 382.369428][T21815] hsr_slave_0: entered allmulticast mode [ 382.375322][T21815] veth1_to_hsr: entered promiscuous mode [ 382.375340][T21815] veth1_to_hsr: entered allmulticast mode [ 382.387554][T21815] hsr_slave_1: entered allmulticast mode [ 382.388226][T21815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.388245][T21815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.388295][T21815] hsr0: entered promiscuous mode [ 382.396903][T21815] hsr0: entered allmulticast mode [ 382.510510][T21815] veth1_virt_wifi: entered promiscuous mode [ 382.510691][T21815] veth1_virt_wifi: entered allmulticast mode [ 382.520150][T21815] veth0_virt_wifi: entered promiscuous mode [ 382.520303][T21815] veth0_virt_wifi: entered allmulticast mode [ 382.522221][T21831] ebt_among: dst integrity fail: 200 [ 382.536277][T21815] virt_wifi0: entered promiscuous mode [ 382.536457][T21815] virt_wifi0: entered allmulticast mode [ 382.536640][T21815] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 382.582755][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.582862][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.458293][T21960] netlink: 'syz.3.7657': attribute type 1 has an invalid length. [ 385.459598][T21960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7657'. [ 385.966508][T21976] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7662'. [ 386.067211][T21981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7663'. [ 386.067236][T21981] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7663'. [ 386.310580][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7669'. [ 386.557733][T22003] gre1: entered promiscuous mode [ 386.721202][T22009] wlan1: mtu greater than device maximum [ 386.736417][T22010] netlink: 'syz.3.7678': attribute type 4 has an invalid length. [ 387.032946][T22024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7682'. [ 387.494391][T22045] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7695'. [ 387.721576][T22059] SET target dimension over the limit! [ 387.876533][T22067] netlink: zone id is out of range [ 387.876556][T22067] netlink: zone id is out of range [ 387.876565][T22067] netlink: zone id is out of range [ 387.876573][T22067] netlink: zone id is out of range [ 387.876580][T22067] netlink: zone id is out of range [ 387.876588][T22067] netlink: zone id is out of range [ 387.876596][T22067] netlink: zone id is out of range [ 387.876603][T22067] netlink: zone id is out of range [ 387.876610][T22067] netlink: zone id is out of range [ 388.235928][T22078] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7711'. [ 388.237404][T22078] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 388.237799][T22078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.423214][T22083] lo: entered promiscuous mode [ 388.423239][T22083] lo: entered allmulticast mode [ 388.450400][T22083] tunl0: entered promiscuous mode [ 388.450422][T22083] tunl0: entered allmulticast mode [ 388.451610][T22083] gre0: entered promiscuous mode [ 388.451628][T22083] gre0: entered allmulticast mode [ 388.455431][T22083] gretap0: entered promiscuous mode [ 388.455450][T22083] gretap0: entered allmulticast mode [ 388.455741][T22084] netlink: 'syz.6.7714': attribute type 1 has an invalid length. [ 388.455761][T22084] nbd: illegal input index 393236 [ 388.457492][T22083] erspan0: entered promiscuous mode [ 388.457510][T22083] erspan0: entered allmulticast mode [ 388.494512][T22083] ip_vti0: entered promiscuous mode [ 388.494533][T22083] ip_vti0: entered allmulticast mode [ 388.541760][T22083] ip6_vti0: entered promiscuous mode [ 388.541781][T22083] ip6_vti0: entered allmulticast mode [ 388.544554][T22083] sit0: entered promiscuous mode [ 388.544573][T22083] sit0: entered allmulticast mode [ 388.546953][T22083] ip6tnl0: entered promiscuous mode [ 388.546970][T22083] ip6tnl0: entered allmulticast mode [ 388.547577][T22083] ip6gre0: entered promiscuous mode [ 388.547591][T22083] ip6gre0: entered allmulticast mode [ 388.597697][T22083] syz_tun: entered promiscuous mode [ 388.597726][T22083] syz_tun: entered allmulticast mode [ 388.613046][T22083] ip6gretap0: entered promiscuous mode [ 388.613067][T22083] ip6gretap0: entered allmulticast mode [ 388.619731][T22083] bridge0: entered promiscuous mode [ 388.619928][T22083] bridge0: entered allmulticast mode [ 388.692176][T22083] vcan0: entered promiscuous mode [ 388.692383][T22083] vcan0: entered allmulticast mode [ 388.696271][T22083] .`: entered promiscuous mode [ 388.696458][T22083] .`: entered allmulticast mode [ 388.789512][T22083] team0: entered promiscuous mode [ 388.789537][T22083] team0: entered allmulticast mode [ 388.791493][T22083] nlmon0: entered promiscuous mode [ 388.791512][T22083] nlmon0: entered allmulticast mode [ 388.792175][T22083] vxcan0: entered promiscuous mode [ 388.792190][T22083] vxcan0: entered allmulticast mode [ 388.827353][T22083] vxcan1: entered promiscuous mode [ 388.827375][T22083] vxcan1: entered allmulticast mode [ 388.828191][T22083] veth0: entered promiscuous mode [ 388.828207][T22083] veth0: entered allmulticast mode [ 388.856837][T22083] veth1: entered promiscuous mode [ 388.856857][T22083] veth1: entered allmulticast mode [ 388.873155][T22083] wg0: entered promiscuous mode [ 388.873175][T22083] wg0: entered allmulticast mode [ 388.873986][T22083] wg1: entered promiscuous mode [ 388.874001][T22083] wg1: entered allmulticast mode [ 388.877781][T22083] wg2: entered promiscuous mode [ 388.877798][T22083] wg2: entered allmulticast mode [ 388.925259][T22083] veth0_to_bridge: entered promiscuous mode [ 388.925281][T22083] veth0_to_bridge: entered allmulticast mode [ 388.926294][T22083] bridge_slave_0: entered promiscuous mode [ 388.926310][T22083] bridge_slave_0: entered allmulticast mode [ 388.928171][T22083] veth1_to_bridge: entered promiscuous mode [ 388.928188][T22083] veth1_to_bridge: entered allmulticast mode [ 388.974901][T22083] bridge_slave_1: entered promiscuous mode [ 388.974923][T22083] bridge_slave_1: entered allmulticast mode [ 388.991053][T22083] veth0_to_bond: entered promiscuous mode [ 388.991074][T22083] veth0_to_bond: entered allmulticast mode [ 389.011597][T22083] bond_slave_0: entered promiscuous mode [ 389.011619][T22083] bond_slave_0: entered allmulticast mode [ 389.014339][T22083] veth1_to_bond: entered promiscuous mode [ 389.014357][T22083] veth1_to_bond: entered allmulticast mode [ 389.024847][T22083] bond_slave_1: entered promiscuous mode [ 389.024866][T22083] bond_slave_1: entered allmulticast mode [ 389.061366][T22083] veth0_to_team: entered promiscuous mode [ 389.061387][T22083] veth0_to_team: entered allmulticast mode [ 389.068283][T22083] team_slave_0: entered promiscuous mode [ 389.091297][T22083] veth1_to_team: entered promiscuous mode [ 389.091319][T22083] veth1_to_team: entered allmulticast mode [ 389.094581][T22083] team_slave_1: entered promiscuous mode [ 389.094600][T22083] team_slave_1: entered allmulticast mode [ 389.097500][T22083] veth0_to_batadv: entered promiscuous mode [ 389.097518][T22083] veth0_to_batadv: entered allmulticast mode [ 389.139740][T22083] batadv_slave_0: entered promiscuous mode [ 389.139924][T22083] batadv_slave_0: entered allmulticast mode [ 389.150651][T22083] veth1_to_batadv: entered promiscuous mode [ 389.150830][T22083] veth1_to_batadv: entered allmulticast mode [ 389.165670][T22083] batadv_slave_1: entered promiscuous mode [ 389.165846][T22083] batadv_slave_1: entered allmulticast mode [ 389.173268][T22083] xfrm0: entered promiscuous mode [ 389.173450][T22083] xfrm0: entered allmulticast mode [ 389.197256][T22083] veth0_to_hsr: entered promiscuous mode [ 389.206756][T22083] veth0_to_hsr: entered allmulticast mode [ 389.216577][T22083] hsr_slave_0: entered allmulticast mode [ 389.226090][T22083] veth1_to_hsr: entered promiscuous mode [ 389.226302][T22083] veth1_to_hsr: entered allmulticast mode [ 389.291855][T22083] hsr_slave_1: entered allmulticast mode [ 389.296246][T22083] hsr0: entered promiscuous mode [ 389.296322][T22083] hsr0: entered allmulticast mode [ 389.321769][T22083] veth1_virt_wifi: entered promiscuous mode [ 389.321878][T22083] veth1_virt_wifi: entered allmulticast mode [ 389.334312][T22083] veth0_virt_wifi: entered promiscuous mode [ 389.334485][T22083] veth0_virt_wifi: entered allmulticast mode [ 389.349045][T22083] virt_wifi0: entered promiscuous mode [ 389.349227][T22083] virt_wifi0: entered allmulticast mode [ 389.357755][T22088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7716'. [ 389.357808][T22088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7716'. [ 390.760018][T22112] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 390.884825][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.898873][ T5634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.901835][ T5634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.905772][ T5634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.907131][ T5634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 391.007937][ T5642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 391.017642][ T5642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 391.030775][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 391.055493][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 391.059541][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.148454][T22160] netlink: 'syz.5.7743': attribute type 1 has an invalid length. [ 392.148475][T22160] netlink: 'syz.5.7743': attribute type 2 has an invalid length. [ 392.148487][T22160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7743'. [ 392.456015][T22115] lo speed is unknown, defaulting to 1000 [ 392.618530][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.090793][T22184] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7754'. [ 393.090892][T22184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7754'. [ 393.100543][ T5634] Bluetooth: hci7: command tx timeout [ 393.175005][T22115] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.493124][T22196] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7760'. [ 393.574256][T22115] wg2 speed is unknown, defaulting to 1000 [ 393.595075][T22115] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.690246][T22205] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7766'. [ 393.906996][T22214] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7769'. [ 393.907023][T22214] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7769'. [ 394.348269][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7775'. [ 394.617859][T22241] SET target dimension over the limit! [ 394.671543][T22115] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.673682][T22115] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.673838][T22115] bridge_slave_0: entered allmulticast mode [ 394.693622][T22115] bridge_slave_0: entered promiscuous mode [ 394.722097][T22115] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.722201][T22115] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.722344][T22115] bridge_slave_1: entered allmulticast mode [ 394.727169][T22115] bridge_slave_1: entered promiscuous mode [ 394.820926][T22115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.824028][T22115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.050735][T22115] team0: Port device team_slave_0 added [ 395.072865][T22115] team0: Port device team_slave_1 added [ 395.180856][ T5634] Bluetooth: hci7: command tx timeout [ 395.230180][T22115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.230197][T22115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.230221][T22115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.305165][T22115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.305182][T22115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.305207][T22115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.706965][T22115] hsr_slave_0: entered promiscuous mode [ 395.723539][T22115] hsr_slave_1: entered promiscuous mode [ 395.724281][T22115] debugfs: 'hsr0' already exists in 'hsr' [ 395.724300][T22115] Cannot create hsr debugfs directory [ 396.484827][T22290] netlink: 'syz.3.7803': attribute type 3 has an invalid length. [ 396.484850][T22290] netlink: 'syz.3.7803': attribute type 1 has an invalid length. [ 396.484862][T22290] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7803'. [ 396.484877][T22290] NCSI netlink: No device for ifindex 0 [ 396.791488][T22115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 396.812492][T22115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.825871][T22115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 396.864306][T22311] xt_IDLETIMER: timeout value is too big [ 396.866697][T22115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.871351][T22115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 396.917734][T22115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.937110][T22115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.014215][T22115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.199074][T22328] x_tables: duplicate underflow at hook 3 [ 397.258761][ T5634] Bluetooth: hci7: command tx timeout [ 397.280851][T22115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.315653][T22115] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.335806][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.335915][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.383346][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.383454][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.080926][T22357] x_tables: duplicate entry at hook 2 [ 398.308455][T22364] ip6t_srh: unknown srh match flags 4000 [ 398.970910][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7845'. [ 399.348479][ T5634] Bluetooth: hci7: command tx timeout [ 399.454377][T22406] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7852'. [ 399.469128][T22115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.129970][T22435] net_ratelimit: 702 callbacks suppressed [ 400.129989][T22435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 400.279876][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7869'. [ 400.284441][T22115] veth0_vlan: entered promiscuous mode [ 400.321842][T22441] vlan0: entered promiscuous mode [ 400.395675][T22115] veth1_vlan: entered promiscuous mode [ 400.729925][T22115] veth0_macvtap: entered promiscuous mode [ 400.756971][T22115] veth1_macvtap: entered promiscuous mode [ 400.871645][T22115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.929318][T22115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.031228][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.034558][ T89] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.035150][ T89] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.035185][ T89] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.481660][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.481683][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.654946][T22484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7887'. [ 401.683746][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.683767][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.400811][T22502] netlink: 'syz.5.7893': attribute type 3 has an invalid length. [ 402.400834][T22502] netlink: 666 bytes leftover after parsing attributes in process `syz.5.7893'. [ 403.122427][T22535] netlink: 'syz.2.7910': attribute type 10 has an invalid length. [ 403.122667][T22535] veth1_to_hsr: left promiscuous mode [ 403.122684][T22535] veth1_to_hsr: left allmulticast mode [ 403.599079][T22554] netlink: 'syz.5.7920': attribute type 2 has an invalid length. [ 403.816465][T22559] Cannot find del_set index 0 as target [ 404.167681][T22571] netlink: 'syz.7.7928': attribute type 9 has an invalid length. [ 405.151938][T22614] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 405.324881][T22618] netlink: 124 bytes leftover after parsing attributes in process `syz.6.7952'. [ 405.324908][T22618] netlink: 124 bytes leftover after parsing attributes in process `syz.6.7952'. [ 405.627865][T22629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.977799][T22646] ebt_among: dst integrity fail: 102 [ 406.256155][T22657] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 406.542339][T22672] netlink: 'syz.7.7979': attribute type 49 has an invalid length. [ 406.920845][T22687] netlink: 'syz.2.7987': attribute type 1 has an invalid length. [ 407.695238][T22723] bond3: entered promiscuous mode [ 407.695644][T22723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.906081][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8010'. [ 407.906123][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8010'. [ 407.943086][T22738] gretap2: entered allmulticast mode [ 408.420969][T22756] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 409.188860][T22770] netlink: 'syz.6.8024': attribute type 15 has an invalid length. [ 410.049207][T22800] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8038'. [ 410.049235][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8038'. [ 410.049248][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8038'. [ 410.360173][T22817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8046'. [ 410.962275][T22844] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8059'. [ 412.035313][T22886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8080'. [ 412.243000][T22897] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 412.244067][T22897] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 412.890391][T22924] xt_MASQUERADE: bad rangesize 20224 [ 412.910615][T22921] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 412.934675][T22921] bond6 (unregistering): Released all slaves [ 413.083881][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8104'. [ 413.548668][ T29] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.558208][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8112'. [ 413.558229][T22952] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8112'. [ 413.588532][ T5789] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.770409][ T986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.792828][T22956] x_tables: duplicate entry at hook 4 [ 414.288672][T22975] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8122'. [ 414.288694][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8122'. [ 414.288711][T22975] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8122'. [ 414.288723][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8122'. [ 414.379074][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 414.779470][ T3356] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 414.779705][ T3356] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 415.660030][ T5789] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 415.880997][T23031] __nla_validate_parse: 3 callbacks suppressed [ 415.881017][T23031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8151'. [ 415.881035][T23031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8151'. [ 416.040951][T23038] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.213712][T23045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 416.348733][T23049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8159'. [ 416.624475][T23058] xt_hashlimit: size too large, truncated to 1048576 [ 416.691842][T23063] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 417.397473][T23097] netlink: 'syz.6.8181': attribute type 8 has an invalid length. [ 417.426941][T23088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.518944][ T29] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.780423][T23109] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8188'. [ 417.780463][T23109] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8188'. [ 418.300709][ T4963] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 418.410409][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8195'. [ 418.787713][T23139] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8202'. [ 418.938665][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 419.526662][T23169] tipc: Started in network mode [ 419.526693][T23169] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 419.546229][T23169] tipc: Enabled bearer , priority 10 [ 420.320846][T23185] macvtap1: entered promiscuous mode [ 420.320870][T23185] bridge0: entered promiscuous mode [ 420.530799][ T4963] tipc: Node number set to 10070698 [ 420.852850][T23202] bridge0: port 2(syz_tun) entered blocking state [ 420.853026][T23202] bridge0: port 2(syz_tun) entered disabled state [ 420.857070][T23202] bridge0: port 2(syz_tun) entered blocking state [ 420.857168][T23202] bridge0: port 2(syz_tun) entered forwarding state [ 420.880024][T23202] bridge0: mtu less than device minimum [ 421.831728][T23229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8245'. [ 421.875547][T23229] macsec1: entered promiscuous mode [ 423.190794][T23277] netlink: 'syz.7.8268': attribute type 7 has an invalid length. [ 423.190815][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8268'. [ 423.190844][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8268'. [ 423.274376][T23275] netlink: 332 bytes leftover after parsing attributes in process `syz.5.8267'. [ 423.274432][T23275] netlink: 'syz.5.8267': attribute type 9 has an invalid length. [ 423.274446][T23275] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8267'. [ 423.274460][T23275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8267'. [ 424.064712][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8283'. [ 424.065031][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8283'. [ 424.137832][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8286'. [ 424.149754][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8287'. [ 425.889107][T23376] Bluetooth: MGMT ver 1.23 [ 426.365957][T23395] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 427.818630][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.463245][T23445] __nla_validate_parse: 1 callbacks suppressed [ 429.463265][T23445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8345'. [ 429.490733][T23445] dummy0: Device is already in use. [ 432.598050][T23504] tipc: Started in network mode [ 432.598082][T23504] tipc: Node identity ac1414aa, cluster identity 4711 [ 432.603446][T23504] tipc: New replicast peer: 172.20.20.187 [ 432.604743][T23504] tipc: Enabled bearer , priority 10 [ 433.728547][ T5738] tipc: Node number set to 2886997162 [ 434.229182][ T32] INFO: task syz.1.5536:17433 blocked for more than 143 seconds. [ 434.229206][ T32] Not tainted syzkaller #0 [ 434.229217][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.229227][ T32] task:syz.1.5536 state:D stack:27168 pid:17433 tgid:17431 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 434.229300][ T32] Call Trace: [ 434.229308][ T32] [ 434.229321][ T32] __schedule+0x17dd/0x5820 [ 434.229569][ T32] ? __pfx___schedule+0x10/0x10 [ 434.229643][ T32] ? schedule+0x90/0x2b0 [ 434.229674][ T32] schedule+0x164/0x2b0 [ 434.229704][ T32] schedule_preempt_disabled+0x13/0x30 [ 434.229731][ T32] __mutex_lock+0x7c4/0x15a0 [ 434.229755][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 434.229779][ T32] ? nfsd_nl_listener_get_doit+0x104/0x610 [ 434.229902][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 434.229944][ T32] ? __nlmsg_put+0xef/0x1b0 [ 434.230061][ T32] ? genlmsg_put+0x137/0x2e0 [ 434.230092][ T32] nfsd_nl_listener_get_doit+0x104/0x610 [ 434.230116][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 434.230136][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 434.230164][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 434.230200][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 434.230254][ T32] genl_rcv_msg+0x614/0x7a0 [ 434.230289][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.230316][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 434.230353][ T32] netlink_rcv_skb+0x226/0x4a0 [ 434.230378][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.230408][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.230447][ T32] ? down_read+0x2b9/0x320 [ 434.230474][ T32] genl_rcv+0x28/0x40 [ 434.230499][ T32] netlink_unicast+0x8ef/0xa80 [ 434.230540][ T32] netlink_sendmsg+0x7f0/0xb20 [ 434.230571][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.230598][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 434.230715][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 434.230740][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.230763][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 434.230844][ T32] ____sys_sendmsg+0x54e/0x850 [ 434.230909][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.230948][ T32] ? import_iovec+0x73/0xa0 [ 434.231044][ T32] ___sys_sendmsg+0x2a5/0x360 [ 434.231070][ T32] ? __lock_acquire+0x747/0x2de0 [ 434.231121][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.231154][ T32] ? futex_wait+0x2a2/0x390 [ 434.371844][ T5642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 434.405302][ T32] ? __fget_files+0x3a2/0x420 [ 434.405379][ T32] ? __fget_files+0x2a/0x420 [ 434.405411][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 434.405436][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.405488][ T32] do_syscall_64+0x166/0x520 [ 434.405508][ T32] ? trace_irq_disable+0x3b/0x140 [ 434.405537][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.405580][ T32] ? clear_bhb_loop+0x70/0xc0 [ 434.405604][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.405623][ T32] RIP: 0033:0x7f579679f559 [ 434.405641][ T32] RSP: 002b:00007f57976e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.405663][ T32] RAX: ffffffffffffffda RBX: 00007f5796a25fa0 RCX: 00007f579679f559 [ 434.405678][ T32] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 434.405690][ T32] RBP: 00007f5796836b20 R08: 0000000000000000 R09: 0000000000000000 [ 434.405702][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.405713][ T32] R13: 00007f5796a26038 R14: 00007f5796a25fa0 R15: 00007ffdc7fe2688 [ 434.405747][ T32] [ 434.405787][ T32] [ 434.405787][ T32] Showing all locks held in the system: [ 434.405798][ T32] locks held by kworker/u8:0/12: 4, last CPU#1: [ 434.405812][ T32] #0: ffff88807af5d148 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.405885][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.405937][ T32] #2: ffff88807c015480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 434.406074][ T32] #3: ffff88802131b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 434.406127][ T32] locks held by kworker/u8:1/13: 2, last CPU#1: [ 434.406140][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406190][ T32] #1: ffffc90000127c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406243][ T32] locks held by pr/ttyS0/31: 1, last CPU#1: [ 434.406256][ T32] #0: ffffffff8fc33858 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 434.406312][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 434.406326][ T32] #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.406391][ T32] locks held by kworker/u8:2/43: 3, last CPU#1: [ 434.406404][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406453][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406504][ T32] #2: ffff888029de0258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 434.406632][ T32] locks held by kworker/u8:8/986: 3, last CPU#0: [ 434.406646][ T32] #0: ffff888033407948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406696][ T32] #1: ffffc900049b7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406746][ T32] #2: ffff88801f2b29d8 (&p->pi_lock){-.-.}-{2:2}, at: gate_timer_func+0x2b/0x450 [ 434.406882][ T32] locks held by kworker/u8:12/3356: 3, last CPU#1: [ 434.406897][ T32] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406947][ T32] #1: ffffc9000e077c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 434.406998][ T32] #2: ffff88807517f258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 434.407057][ T32] locks held by udevd/5001: 4, last CPU#1: [ 434.407070][ T32] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 434.452745][ T5642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 434.481082][ T5642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 434.498618][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 434.506421][ T5642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 434.553853][ T32] #1: ffff8880b8524708 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 434.553916][ T32] #2: ffffffff9ba8d708 (&____s->seqcount#2){----}-{0:0}, at: ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 434.554008][ T32] #3: ffffffff8fa148c8 (rename_lock.seqcount){+.+.}-{0:0}, at: prepend_path+0x228/0x840 [ 434.554072][ T32] locks held by getty/5387: 2, on CPU#1: [ 434.554085][ T32] #0: ffff888036a560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.554237][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 434.554281][ T32] locks held by syz-executor/5618: 1, last CPU#0: [ 434.554295][ T32] #0: ffff8880332f4cc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 434.554351][ T32] locks held by syz-executor/5640: 4, last CPU#0: [ 434.554364][ T32] #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 434.554410][ T32] #1: ffff88803447e540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 434.554453][ T32] #2: ffff888034479bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 434.554502][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 434.554733][ T32] locks held by syz.0.3594/13318: 2, on CPU#0: [ 434.554746][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.554805][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 434.554853][ T32] locks held by syz.1.5536/17433: 2, on CPU#1: [ 434.554866][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.554914][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x104/0x610 [ 434.554960][ T32] locks held by syz.4.7476/21585: 2, on CPU#0: [ 434.554973][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.555022][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 434.555069][ T32] locks held by syz.2.8186/23105: 2, on CPU#1: [ 434.555081][ T32] #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 434.555129][ T32] #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1470 [ 434.555183][ T32] locks held by syz.6.8379/23517: 2, last CPU#0: [ 434.555196][ T32] #0: ffff88802be20340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 434.555239][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 434.555278][ T32] locks held by syz.7.8380/23520: 2, last CPU#0: [ 434.555289][ T32] #0: ffff88802be27180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 434.555332][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 434.555374][ T32] locks held by udevd/23526: 4, last CPU#0: [ 434.555386][ T32] #0: ffff88805083ed08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 434.555438][ T32] #1: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 434.555484][ T32] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 434.555542][ T32] #3: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 434.555587][ T32] [ 434.555592][ T32] ============================================= [ 434.555592][ T32] [ 434.555612][ T32] NMI backtrace for cpu 0 [ 434.555628][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.555649][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.555659][ T32] Call Trace: [ 434.555667][ T32] [ 434.555674][ T32] dump_stack_lvl+0xe8/0x150 [ 434.555708][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 434.555777][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.555811][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 434.555839][ T32] sys_info+0x135/0x170 [ 434.555889][ T32] watchdog+0xfd2/0x1030 [ 434.555924][ T32] ? watchdog+0x1c7/0x1030 [ 434.555952][ T32] kthread+0x38b/0x480 [ 434.555970][ T32] ? __pfx_watchdog+0x10/0x10 [ 434.555988][ T32] ? __pfx_kthread+0x10/0x10 [ 434.556008][ T32] ret_from_fork+0x514/0xb70 [ 434.556039][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 434.556058][ T32] ? __switch_to+0xc78/0x1410 [ 434.556086][ T32] ? __pfx_kthread+0x10/0x10 [ 434.556105][ T32] ret_from_fork_asm+0x1a/0x30 [ 434.556138][ T32] [ 434.556145][ T32] Sending NMI from CPU 0 to CPUs 1: [ 434.556176][ C1] NMI backtrace for cpu 1 [ 434.556190][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 434.556212][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.556224][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 434.556305][ C1] Code: e8 1e 1c 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 13 c1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 434.556321][ C1] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 434.556338][ C1] RAX: 1ffffffff37b4300 RBX: 00000000000003fd RCX: 0000000000000000 [ 434.556352][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 434.556364][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 434.556378][ C1] R10: dffffc0000000000 R11: ffffffff857849b0 R12: dffffc0000000000 [ 434.556393][ C1] R13: 0000000000000000 R14: ffffffff9bda1b20 R15: 0000000000000000 [ 434.556406][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 434.556423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.556436][ C1] CR2: 00007f09a58b0ac0 CR3: 000000005a008000 CR4: 00000000003526f0 [ 434.556454][ C1] Call Trace: [ 434.556461][ C1] [ 434.556470][ C1] wait_for_lsr+0x184/0x2f0 [ 434.556530][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 434.556559][ C1] serial8250_console_write+0xa7e/0x1200 [ 434.556595][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 434.556624][ C1] ? __schedule+0x17f3/0x5820 [ 434.556662][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 434.556700][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 434.556727][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 434.556758][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 434.556814][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 434.556840][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 434.556861][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 434.556887][ C1] ? __kthread_parkme+0x71/0x1f0 [ 434.556916][ C1] ? __kthread_parkme+0x199/0x1f0 [ 434.556946][ C1] kthread+0x38b/0x480 [ 434.556965][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 434.556985][ C1] ? __pfx_kthread+0x10/0x10 [ 434.557005][ C1] ret_from_fork+0x514/0xb70 [ 434.557026][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 434.557045][ C1] ? __switch_to+0xc78/0x1410 [ 434.557074][ C1] ? __pfx_kthread+0x10/0x10 [ 434.557094][ C1] ret_from_fork_asm+0x1a/0x30 [ 434.557121][ C1] [ 434.604667][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 435.645570][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 435.654676][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.664720][ T32] Call Trace: [ 435.667991][ T32] [ 435.670913][ T32] vpanic+0x56d/0xa60 [ 435.674900][ T32] ? __pfx___schedule+0x10/0x10 [ 435.679745][ T32] ? __pfx_vpanic+0x10/0x10 [ 435.684247][ T32] panic+0xc5/0xd0 [ 435.687961][ T32] ? __pfx_panic+0x10/0x10 [ 435.692369][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 435.697820][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 435.703188][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 435.709346][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 435.715507][ T32] watchdog+0x102b/0x1030 [ 435.719846][ T32] ? watchdog+0x1c7/0x1030 [ 435.724266][ T32] kthread+0x38b/0x480 [ 435.728333][ T32] ? __pfx_watchdog+0x10/0x10 [ 435.733004][ T32] ? __pfx_kthread+0x10/0x10 [ 435.737586][ T32] ret_from_fork+0x514/0xb70 [ 435.742168][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 435.747270][ T32] ? __switch_to+0xc78/0x1410 [ 435.751944][ T32] ? __pfx_kthread+0x10/0x10 [ 435.756527][ T32] ret_from_fork_asm+0x1a/0x30 [ 435.761339][ T32] [ 435.764710][ T32] Kernel Offset: disabled [ 435.769049][ T32] Rebooting in 86400 seconds..