last executing test programs: 2.944974815s ago: executing program 1 (id=12414): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e876", 0x2}], 0x1}, 0x4800) 2.722997226s ago: executing program 1 (id=12417): unshare(0x8040480) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 2.548316361s ago: executing program 1 (id=12420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) 1.774846239s ago: executing program 0 (id=12435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000891}, 0x10) 1.648194299s ago: executing program 4 (id=12438): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 1.567080088s ago: executing program 0 (id=12440): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 1.556295732s ago: executing program 4 (id=12441): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044) 1.551118388s ago: executing program 1 (id=12442): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.464346567s ago: executing program 1 (id=12443): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x89}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20) 1.457078385s ago: executing program 4 (id=12444): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.442796715s ago: executing program 2 (id=12445): unshare(0x20400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x112}) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) 1.365452373s ago: executing program 1 (id=12446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) 1.321006526s ago: executing program 2 (id=12447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 1.286341342s ago: executing program 2 (id=12448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) 1.263032729s ago: executing program 4 (id=12449): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 1.171238161s ago: executing program 2 (id=12451): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) 1.095964438s ago: executing program 4 (id=12453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 945.186873ms ago: executing program 3 (id=12454): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x3c, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 837.755931ms ago: executing program 3 (id=12455): unshare(0x28000600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 687.623889ms ago: executing program 3 (id=12456): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) 619.140705ms ago: executing program 0 (id=12457): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) 545.768776ms ago: executing program 3 (id=12458): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x20040400) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6}, 0x10) 508.130648ms ago: executing program 0 (id=12459): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x404, 0x0, 0x0, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) 341.220334ms ago: executing program 0 (id=12460): unshare(0x22020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xfffffffffffffdb1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x1c, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x21, 0x8, 0x0, 0x0}}, 0x10) 291.709916ms ago: executing program 3 (id=12461): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000003000000000000006000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 215.480403ms ago: executing program 2 (id=12462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xfffffffffffffea2, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 160.546768ms ago: executing program 0 (id=12463): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x9, 0xfe}, {0x6, 0x1, 0x0, 0x8eb6}]}) write(r0, &(0x7f00000004c0)='t8', 0x2) 66.368393ms ago: executing program 3 (id=12464): r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x7}, 0x40002102) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0) 45.897129ms ago: executing program 4 (id=12465): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) 0s ago: executing program 2 (id=12466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)={r1, 0xfffb, 0x20, 0x2b}, &(0x7f0000000380)=0x18) kernel console output (not intermixed with test programs): 6] netlink: set zone limit has 8 unknown bytes [ 287.873426][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4508'. [ 288.194596][T15440] xt_l2tp: missing protocol rule (udp|l2tpip) [ 288.221563][T15445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4520'. [ 288.318274][T15447] netlink: 'syz.4.4523': attribute type 5 has an invalid length. [ 288.358182][T15452] xt_connbytes: Forcing CT accounting to be enabled [ 288.371332][T15452] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 288.671036][T15473] netlink: 'syz.3.4534': attribute type 8 has an invalid length. [ 288.965161][T15489] netlink: 'syz.0.4544': attribute type 1 has an invalid length. [ 288.986573][T15494] netlink: 'syz.1.4546': attribute type 3 has an invalid length. [ 289.010635][T15489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4544'. [ 289.455319][T15520] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4555'. [ 289.509602][T15524] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.705244][T15535] netlink: 'syz.2.4563': attribute type 15 has an invalid length. [ 289.927065][T15551] netlink: 'syz.1.4571': attribute type 21 has an invalid length. [ 290.340738][T15570] __nla_validate_parse: 5 callbacks suppressed [ 290.340762][T15570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4578'. [ 290.519899][T15578] openvswitch: netlink: EtherType 50a is less than min 600 [ 290.729082][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 291.272786][T15624] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4605'. [ 291.288422][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4605'. [ 291.317966][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4605'. [ 291.329768][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4608'. [ 291.749638][T15653] validate_nla: 1 callbacks suppressed [ 291.749661][T15653] netlink: 'syz.4.4620': attribute type 3 has an invalid length. [ 292.301376][T15692] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.678364][T15715] netlink: 'syz.0.4647': attribute type 1 has an invalid length. [ 292.707955][T15715] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4647'. [ 292.865291][T15726] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4650'. [ 293.452427][T15766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.790698][T15788] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.042875][T15804] netlink: 'syz.3.4686': attribute type 13 has an invalid length. [ 294.190132][T15811] openvswitch: netlink: Multiple metadata blocks provided [ 294.438696][T15828] netlink: 'syz.4.4698': attribute type 1 has an invalid length. [ 294.573982][T15836] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 294.641709][T15841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.113611][T15871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4721'. [ 295.222813][T15880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.441035][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4732'. [ 295.518309][T15894] xt_CT: No such helper "syz0" [ 295.703342][T15911] netlink: 'syz.4.4740': attribute type 1 has an invalid length. [ 295.917988][T15926] netlink: 'syz.4.4747': attribute type 1 has an invalid length. [ 295.947519][T15926] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4747'. [ 295.977084][T15926] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4747'. [ 296.011275][T15926] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4747'. [ 296.041647][T15933] bond0: option arp_validate: invalid value (55553) [ 296.288363][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4760'. [ 296.435189][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4765'. [ 296.543862][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4768'. [ 296.580650][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4768'. [ 296.605827][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4768'. [ 296.640946][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4768'. [ 296.823338][T15985] geneve2: entered promiscuous mode [ 296.846499][ T9737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.865779][ T9737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.900801][ T9737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.126930][T16006] IPv6: NLM_F_REPLACE set, but no existing node found! [ 297.507555][T16030] ip6erspan0: entered allmulticast mode [ 297.616361][T16036] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 297.973391][T16060] geneve2: entered promiscuous mode [ 297.978758][T16060] geneve2: entered allmulticast mode [ 298.304174][T16086] netlink: 'syz.1.4827': attribute type 11 has an invalid length. [ 298.723173][T16116] netlink: 'syz.3.4840': attribute type 7 has an invalid length. [ 298.733056][T16114] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 298.746789][T16114] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 298.967574][T16130] netlink: 'syz.0.4849': attribute type 1 has an invalid length. [ 299.365472][T16149] Cannot find del_set index 2 as target [ 300.219106][T16191] netlink: 'syz.2.4879': attribute type 1 has an invalid length. [ 300.270696][T16191] netlink: 'syz.2.4879': attribute type 2 has an invalid length. [ 300.617182][T16213] ip6erspan0: entered allmulticast mode [ 300.628377][T16214] xt_policy: neither incoming nor outgoing policy selected [ 300.786243][T16221] __nla_validate_parse: 12 callbacks suppressed [ 300.786267][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4894'. [ 300.824482][T16223] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4893'. [ 300.850792][T16223] 0X: renamed from caif0 [ 300.885536][T16223] 0X: entered allmulticast mode [ 300.895534][T16223] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 301.044177][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4899'. [ 301.425219][T16260] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4910'. [ 301.620204][T16270] netlink: 'syz.1.4914': attribute type 1 has an invalid length. [ 301.633961][T16270] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4914'. [ 301.846282][T16283] netlink: 'syz.1.4920': attribute type 1 has an invalid length. [ 301.991802][T16292] nbd: must specify at least one socket [ 302.019817][T16296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4928'. [ 302.143308][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4931'. [ 302.286881][T16312] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.302833][T16316] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4938'. [ 302.608421][T16324] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 302.655889][T16333] netlink: 'syz.1.4947': attribute type 8 has an invalid length. [ 302.671696][T16324] bond3 (unregistering): Released all slaves [ 302.898881][T16345] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4952'. [ 302.937948][T16345] openvswitch: netlink: Missing key (keys=40, expected=100) [ 303.008952][T16352] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4954'. [ 303.532527][T16378] : renamed from veth0_to_bond [ 304.282725][T16419] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 304.312287][T16419] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 304.330738][T16419] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 304.834537][T16440] netlink: 'syz.1.4999': attribute type 1 has an invalid length. [ 305.854437][T16474] __nla_validate_parse: 5 callbacks suppressed [ 305.854461][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5016'. [ 305.882026][T16478] netlink: 'syz.4.5018': attribute type 2 has an invalid length. [ 306.733184][T16520] SET target dimension over the limit! [ 307.108550][T16530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5043'. [ 307.659147][T16552] wg1: entered promiscuous mode [ 307.780818][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5056'. [ 307.790009][T16556] openvswitch: netlink: Flow key attr not present in new flow. [ 307.950780][T16565] netlink: 'syz.4.5061': attribute type 10 has an invalid length. [ 307.958663][T16565] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5061'. [ 308.449465][T16589] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5070'. [ 308.621559][T16601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.928113][T16620] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 309.150935][T16633] 8021q: VLANs not supported on lo [ 309.620869][T16666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5101'. [ 309.658543][T16666] netlink: 'syz.3.5101': attribute type 5 has an invalid length. [ 309.886173][T16678] xt_hashlimit: max too large, truncated to 1048576 [ 310.449835][T16705] netlink: 'syz.4.5115': attribute type 1 has an invalid length. [ 310.486407][T16705] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5115'. [ 310.723917][T16724] netlink: 'syz.0.5122': attribute type 2 has an invalid length. [ 311.089513][T16749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5137'. [ 311.100190][T16749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.472770][T16773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5147'. [ 311.549530][T16778] xt_cgroup: path and classid specified [ 311.760998][T16792] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 311.820804][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5156'. [ 311.842951][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5156'. [ 311.985808][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5162'. [ 312.130293][T16816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5166'. [ 313.184121][T16888] netlink: 'syz.0.5202': attribute type 64 has an invalid length. [ 313.254018][T16890] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 313.270975][T16890] bond3 (unregistering): Released all slaves [ 313.605193][T16914] netlink: 'syz.0.5216': attribute type 1 has an invalid length. [ 313.724674][T16921] netlink: 'syz.4.5219': attribute type 1 has an invalid length. [ 313.740783][T16921] netlink: 'syz.4.5219': attribute type 3 has an invalid length. [ 313.748663][T16921] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5219'. [ 314.211130][T16957] netlink: 'syz.3.5236': attribute type 3 has an invalid length. [ 314.587975][T16982] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 315.002949][T17012] openvswitch: netlink: Flow key attribute not present in set flow. [ 315.156999][T17021] bond2: option resend_igmp: invalid value (2878) [ 315.172220][T17021] bond2: option resend_igmp: allowed values 0 - 255 [ 315.226974][T17021] bond2 (unregistering): Released all slaves [ 315.596602][T17046] bridge3: entered allmulticast mode [ 315.860201][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5286'. [ 316.474102][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'. [ 316.494641][T17095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5304'. [ 316.719763][T17111] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5312'. [ 316.926903][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5316'. [ 317.367009][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.500681][T17138] netlink: 'syz.4.5324': attribute type 21 has an invalid length. [ 317.508827][T17138] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.540708][T17138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.548092][T17138] IPv6: NLM_F_CREATE should be set when creating new route [ 317.555451][T17138] IPv6: NLM_F_CREATE should be set when creating new route [ 317.562769][T17138] IPv6: NLM_F_CREATE should be set when creating new route [ 317.589672][T17142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5326'. [ 317.851901][T17156] openvswitch: netlink: IPv6 tunnel dst address is zero [ 317.855706][T17155] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.899921][T17161] netlink: 'syz.4.5335': attribute type 1 has an invalid length. [ 318.278795][T17185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5348'. [ 319.303674][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5381'. [ 319.385801][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5382'. [ 319.444048][T17262] netlink: 'syz.4.5383': attribute type 1 has an invalid length. [ 319.799143][T17286] nft_compat: unsupported protocol 5 [ 320.223368][T17318] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 320.360299][T17327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5415'. [ 320.481934][T17332] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.572265][T17340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.746292][T17354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5428'. [ 320.784626][T17354] batadv1: entered promiscuous mode [ 320.798844][T17354] batadv1: entered allmulticast mode [ 320.824255][T17354] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 320.865646][ T5902] IPVS: starting estimator thread 0... [ 320.930888][T17363] openvswitch: netlink: IP tunnel TTL not specified. [ 320.970917][T17361] IPVS: using max 24 ests per chain, 57600 per kthread [ 321.016132][T17369] netlink: 'syz.2.5436': attribute type 2 has an invalid length. [ 321.059947][T17371] netlink: 'syz.0.5437': attribute type 10 has an invalid length. [ 321.075109][T17371] bond0: entered promiscuous mode [ 321.075126][ T9725] bond0: (slave bond_slave_0): interface is now down [ 321.091224][T17371] bond_slave_0: entered promiscuous mode [ 321.101297][T17371] bond_slave_1: entered promiscuous mode [ 321.108109][ T9725] bond0: (slave bond_slave_1): interface is now down [ 321.116738][T17371] team0: entered promiscuous mode [ 321.123132][ T9725] bond0: (slave team0): interface is now down [ 321.136846][T17371] team_slave_0: entered promiscuous mode [ 321.156787][T17371] team_slave_1: entered promiscuous mode [ 321.164756][ T9725] bond0: (slave bond_slave_0): interface is now down [ 321.172698][T17371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.190368][T17371] bridge0: port 3(bond0) entered blocking state [ 321.190682][ T9725] bond0: (slave bond_slave_1): interface is now down [ 321.199232][T17371] bridge0: port 3(bond0) entered disabled state [ 321.226047][T17371] bond0: entered allmulticast mode [ 321.239843][T17371] bond_slave_0: entered allmulticast mode [ 321.240611][ T9725] bond0: (slave team0): interface is now down [ 321.250359][T17371] bond_slave_1: entered allmulticast mode [ 321.259087][T17371] team0: entered allmulticast mode [ 321.265101][T17371] team_slave_0: entered allmulticast mode [ 321.272852][T17371] team_slave_1: entered allmulticast mode [ 321.294813][T17379] dummy0: left promiscuous mode [ 321.299927][T17379] dummy0: left allmulticast mode [ 321.300679][ T9741] bond0: (slave bond_slave_0): interface is now down [ 321.312051][ T9741] bond0: (slave bond_slave_1): interface is now down [ 321.319021][ T9741] bond0: (slave team0): interface is now down [ 321.338478][T17379] team0: Port device dummy0 removed [ 321.350622][ T9737] bond0: (slave bond_slave_0): interface is now down [ 321.358179][ T9737] bond0: (slave bond_slave_1): interface is now down [ 321.374237][ T9737] bond0: (slave team0): interface is now down [ 321.375418][T17385] netlink: 'syz.3.5444': attribute type 33 has an invalid length. [ 321.386590][T17379] bond0: (slave bond_slave_0): Releasing backup interface [ 321.399583][T17379] bond0: (slave bond_slave_1): Releasing backup interface [ 321.409940][T17379] team_slave_0: left promiscuous mode [ 321.415797][ T9737] bond0: (slave bond_slave_0): interface is now down [ 321.422905][ T9737] bond0: (slave bond_slave_1): interface is now down [ 321.424628][T17379] team_slave_0: left allmulticast mode [ 321.431537][ T9737] bond0: (slave team0): interface is now down [ 321.452012][T17379] team0: Port device team_slave_0 removed [ 321.460639][ T9737] bond0: (slave bond_slave_0): interface is now down [ 321.467386][ T9737] bond0: (slave bond_slave_1): interface is now down [ 321.471593][T17379] team_slave_1: left promiscuous mode [ 321.481165][T17379] team_slave_1: left allmulticast mode [ 321.492862][ T9737] bond0: (slave team0): interface is now down [ 321.506639][T17379] team0: Port device team_slave_1 removed [ 321.521993][T17379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.521993][ T9733] bond0: (slave bond_slave_0): interface is now down [ 321.522136][T17381] __nla_validate_parse: 3 callbacks suppressed [ 321.522149][T17381] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5442'. [ 321.539221][ T9733] bond0: (slave bond_slave_1): interface is now down [ 321.590897][T17385] `: renamed from team0 (while UP) [ 321.592505][ T9733] bond0: (slave team0): interface is now down [ 321.631504][ T9733] bond0: (slave bond_slave_0): interface is now down [ 321.647489][ T9733] bond0: (slave bond_slave_1): interface is now down [ 321.654685][ T9733] bond0: (slave team0): interface is now down [ 321.727779][T17391] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 321.729074][ T9733] bond0: (slave bond_slave_0): interface is now down [ 321.763071][ T9733] bond0: (slave bond_slave_1): interface is now down [ 321.779233][ T9733] bond0: (slave team0): interface is now down [ 321.805004][T17391] bond2 (unregistering): Released all slaves [ 321.850791][ T9733] bond0: (slave bond_slave_0): interface is now down [ 321.858106][ T9733] bond0: (slave bond_slave_1): interface is now down [ 321.886588][ T9733] bond0: (slave team0): interface is now down [ 321.920759][ T9741] bond0: (slave bond_slave_0): interface is now down [ 321.927638][ T9741] bond0: (slave bond_slave_1): interface is now down [ 321.948251][ T9741] bond0: (slave team0): interface is now down [ 321.979213][ T9741] bond0: now running without any active interface! [ 322.020489][T17409] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 322.032088][T17411] netlink: 'syz.1.5455': attribute type 10 has an invalid length. [ 322.040060][T17411] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5455'. [ 322.061171][T17411] bond0: entered promiscuous mode [ 322.077179][T17411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.205451][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5460'. [ 322.630811][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 322.733878][T17457] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5479'. [ 323.063555][T17479] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5491'. [ 323.357690][T17500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.694333][T17522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5512'. [ 323.734162][T17526] netlink: 'syz.0.5513': attribute type 1 has an invalid length. [ 323.751494][T17526] netlink: 936 bytes leftover after parsing attributes in process `syz.0.5513'. [ 323.946336][T17539] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5519'. [ 324.128839][T17550] team0: left allmulticast mode [ 324.168601][T17550] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.351855][T17564] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.540824][T17578] netlink: 'syz.1.5539': attribute type 32 has an invalid length. [ 325.255626][T17608] delete_channel: no stack [ 325.920039][T17646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5569'. [ 325.940666][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5569'. [ 326.645347][T17696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.876213][T17708] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 326.910985][T17708] netlink: 'syz.0.5597': attribute type 2 has an invalid length. [ 327.062986][T17717] __nla_validate_parse: 1 callbacks suppressed [ 327.063007][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5602'. [ 327.173892][T17725] xt_TCPMSS: Only works on TCP SYN packets [ 327.366407][T17737] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5613'. [ 327.414619][T17737] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 327.463337][T17744] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 327.485496][T17747] netlink: 'syz.3.5618': attribute type 2 has an invalid length. [ 327.702103][T17759] lo: entered allmulticast mode [ 327.714078][T17759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.975725][T17777] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 328.422169][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 328.933479][T17837] netlink: 'syz.3.5660': attribute type 3 has an invalid length. [ 328.941548][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5659'. [ 329.510800][T17871] sctp: [Deprecated]: syz.1.5673 (pid 17871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.510800][T17871] Use struct sctp_sack_info instead [ 329.754657][T17886] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 329.846877][T17892] netlink: 'syz.1.5683': attribute type 1 has an invalid length. [ 329.907029][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'. [ 329.920035][T17892] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5683'. [ 330.373456][T17920] veth3: entered promiscuous mode [ 330.570046][T17936] netlink: 'syz.0.5704': attribute type 309 has an invalid length. [ 330.713191][T17944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.733096][T17946] netlink: 'syz.1.5708': attribute type 10 has an invalid length. [ 331.102987][T17965] bond3: entered promiscuous mode [ 331.108228][T17965] bond3: entered allmulticast mode [ 331.129552][T17965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.476083][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5733'. [ 331.707602][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'. [ 331.766112][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5741'. [ 331.777226][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5742'. [ 332.117405][T18032] __nla_validate_parse: 3 callbacks suppressed [ 332.117426][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5749'. [ 332.134136][T18032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5749'. [ 332.429280][T18048] m1Ie5: entered promiscuous mode [ 332.695641][T18066] x_tables: duplicate entry at hook 1 [ 333.260730][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5781'. [ 333.270193][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5781'. [ 333.340265][T18096] tc_dump_action: action bad kind [ 333.627482][T18114] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.478340][T18165] netlink: 'syz.0.5815': attribute type 32 has an invalid length. [ 334.840700][T18183] netlink: 'syz.2.5826': attribute type 3 has an invalid length. [ 335.074408][T18197] Zero length message leads to an empty skb [ 335.409401][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5842'. [ 335.500857][T18223] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 335.774365][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 335.805639][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 335.826818][T18242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.877245][T18243] netlink: 'syz.4.5853': attribute type 5 has an invalid length. [ 335.918346][T18248] set match dimension is over the limit! [ 335.995281][T18251] sctp: [Deprecated]: syz.4.5860 (pid 18251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.995281][T18251] Use struct sctp_sack_info instead [ 336.280157][T18264] gre1: entered allmulticast mode [ 336.335294][T18271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5867'. [ 336.370915][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5867'. [ 336.473421][T18275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.746925][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 336.846217][T18298] 5n: entered promiscuous mode [ 337.563792][T18343] __nla_validate_parse: 1 callbacks suppressed [ 337.563815][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5903'. [ 337.604181][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5903'. [ 337.671434][T18349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5906'. [ 337.993342][T18366] netlink: 'syz.4.5914': attribute type 6 has an invalid length. [ 338.072234][T18369] sock: sock_timestamping_bind_phc: sock not bind to device [ 338.299567][T18381] Cannot find del_set index 1536 as target [ 338.603178][T18392] xt_nat: multiple ranges no longer supported [ 338.896004][T18413] netlink: 'syz.1.5937': attribute type 1 has an invalid length. [ 338.913461][T18413] nbd: couldn't find device at index -427251215 [ 339.071431][T18427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.369718][T18445] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.5953'. [ 340.101793][T18489] ipt_ECN: cannot use operation on non-tcp rule [ 340.423219][T18508] netlink: 'syz.3.5983': attribute type 1 has an invalid length. [ 340.441242][T18508] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5983'. [ 340.462553][T18508] netlink: 658 bytes leftover after parsing attributes in process `syz.3.5983'. [ 340.472068][T18508] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5983'. [ 340.570032][T18514] pimreg: entered allmulticast mode [ 340.770885][T18526] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.5992'. [ 340.791226][T18526] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 340.898930][T18530] netlink: 'syz.4.5996': attribute type 15 has an invalid length. [ 341.278699][T18550] bond3: option tlb_dynamic_lb: invalid value (5) [ 341.293226][T18550] bond3 (unregistering): Released all slaves [ 341.475591][T18568] netlink: 'syz.4.6012': attribute type 1 has an invalid length. [ 341.532715][T18571] dvmrp0: entered allmulticast mode [ 341.591814][T18574] netlink: 'syz.0.6016': attribute type 5 has an invalid length. [ 341.929219][T18596] bond2: option xmit_hash_policy: invalid value (10) [ 341.951129][T18596] bond2 (unregistering): Released all slaves [ 342.556636][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6045'. [ 343.079699][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6063'. [ 343.095202][T18675] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6064'. [ 343.455744][T18697] x_tables: duplicate underflow at hook 1 [ 343.740892][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6085'. [ 343.750941][T18718] delete_channel: no stack [ 343.866727][T18723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6089'. [ 343.891117][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6089'. [ 343.893376][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6091'. [ 343.900981][T18723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6089'. [ 343.941616][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6089'. [ 343.957047][T18723] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6089'. [ 343.966483][T18723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6089'. [ 343.986769][T18728] : renamed from veth0_to_bond [ 344.002416][T18733] netlink: 'syz.4.6094': attribute type 4 has an invalid length. [ 344.142684][T18742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.017863][T18799] veth2: entered allmulticast mode [ 346.063619][T18869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.078079][T18869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.089372][T18869] hsr0: entered promiscuous mode [ 346.095181][T18869] hsr0: entered allmulticast mode [ 346.100408][T18869] hsr_slave_0: entered allmulticast mode [ 346.116342][T18869] hsr_slave_1: entered allmulticast mode [ 346.262586][T18879] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 346.595509][T18906] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 346.723818][T18911] sctp: [Deprecated]: syz.0.6179 (pid 18911) Use of int in max_burst socket option. [ 346.723818][T18911] Use struct sctp_assoc_value instead [ 346.785306][T18913] netlink: 'syz.2.6181': attribute type 1 has an invalid length. [ 346.821876][T18917] netlink: 'syz.4.6183': attribute type 10 has an invalid length. [ 346.836604][T18917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.839240][T18919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.849733][T18917] bond0: entered promiscuous mode [ 346.862830][T18917] bond_slave_0: entered promiscuous mode [ 346.868850][T18917] bond_slave_1: entered promiscuous mode [ 346.877380][T18917] bond0: entered allmulticast mode [ 346.883997][T18917] bond_slave_0: entered allmulticast mode [ 346.890266][T18917] bond_slave_1: entered allmulticast mode [ 346.916927][T18917] team0: Port device bond0 added [ 347.562536][T18961] xt_TPROXY: Can be used only with -p tcp or -p udp [ 348.175978][T19004] xt_bpf: check failed: parse error [ 348.294646][T19010] netlink: 'syz.2.6229': attribute type 21 has an invalid length. [ 348.330630][T19010] __nla_validate_parse: 9 callbacks suppressed [ 348.330652][T19010] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6229'. [ 348.378052][T19010] netlink: 'syz.2.6229': attribute type 5 has an invalid length. [ 348.400815][T19010] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6229'. [ 348.578732][T19033] Unknown options in mask 6 [ 349.187396][T19072] ip6t_srh: unknown srh match flags 4000 [ 349.336752][T19080] Cannot find add_set index 1 as target [ 349.747977][T19103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.794264][T19085] bond3 (unregistering): Released all slaves [ 349.802517][T19105] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 350.010867][T19112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6279'. [ 350.030207][T19112] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6279'. [ 350.060457][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6282'. [ 350.060994][T19112] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6279'. [ 350.087271][T19112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6279'. [ 350.250301][T19125] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 350.371940][T19133] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6289'. [ 350.430724][T19133] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6289'. [ 350.704520][T19154] x_tables: duplicate underflow at hook 3 [ 350.911653][T19167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6307'. [ 350.928934][T19169] xt_hashlimit: size too large, truncated to 1048576 [ 350.936554][T19169] xt_hashlimit: overflow, try lower: 0/0 [ 351.183867][T19185] --map-set only usable from mangle table [ 351.828333][T19216] netlink: 'syz.2.6331': attribute type 10 has an invalid length. [ 351.871145][T19216] veth1_macvtap: left promiscuous mode [ 351.878110][T19216] team0: Device veth1_macvtap failed to register rx_handler [ 352.272528][T19233] openvswitch: netlink: IPv4 tunnel dst address is zero [ 353.353829][T19295] __nla_validate_parse: 7 callbacks suppressed [ 353.353854][T19295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6370'. [ 353.843190][T19326] netlink: 'syz.3.6385': attribute type 9 has an invalid length. [ 354.211099][T19347] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 354.230322][T19347] bridge4: entered allmulticast mode [ 354.366069][T19358] netlink: 'syz.4.6401': attribute type 39 has an invalid length. [ 354.725887][T19385] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 354.735132][T19386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.908968][T19396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6420'. [ 355.226719][T19417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6430'. [ 355.358128][T19424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6435'. [ 355.386192][T19424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6435'. [ 355.430624][T19424] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6435'. [ 355.615922][T19442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6443'. [ 355.737170][T19452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 355.880769][T19461] macvtap0: entered promiscuous mode [ 356.210163][T19482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6463'. [ 356.276633][T19484] batadv0: entered promiscuous mode [ 356.294395][T19484] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 356.604508][T19508] netlink: 'syz.0.6477': attribute type 49 has an invalid length. [ 356.733749][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6481'. [ 356.985112][T19534] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6489'. [ 357.198180][T19546] geneve4: entered allmulticast mode [ 357.576664][T19572] netlink: 'syz.4.6506': attribute type 21 has an invalid length. [ 357.661010][T19578] netlink: 'syz.3.6510': attribute type 1 has an invalid length. [ 358.544109][T19638] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 358.626696][T19644] __nla_validate_parse: 6 callbacks suppressed [ 358.626718][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'. [ 358.971752][T19666] netlink: 'syz.4.6556': attribute type 2 has an invalid length. [ 358.999255][T19670] netlink: 'syz.3.6555': attribute type 21 has an invalid length. [ 359.025714][T19670] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6555'. [ 359.051577][T19670] netlink: 'syz.3.6555': attribute type 3 has an invalid length. [ 359.073869][T19670] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6555'. [ 359.268798][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6563'. [ 359.289092][T19684] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.318812][T19687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6563'. [ 359.573756][T19706] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6573'. [ 359.908100][T19728] netlink: 'syz.3.6585': attribute type 58 has an invalid length. [ 360.265034][T19747] geneve1: entered promiscuous mode [ 360.307597][T19754] netlink: 'syz.1.6598': attribute type 8 has an invalid length. [ 360.584537][T19772] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6607'. [ 360.952708][T19798] netlink: 'syz.3.6618': attribute type 1 has an invalid length. [ 360.990734][T19798] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6618'. [ 361.252138][T19818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.311008][T19822] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 361.990966][T19866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.093090][T19873] netlink: 'syz.0.6657': attribute type 1 has an invalid length. [ 362.111678][T19872] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6656'. [ 362.120869][T19875] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6659'. [ 362.125780][T19872] netlink: 'syz.3.6656': attribute type 6 has an invalid length. [ 362.735788][T19912] ip6tnl4: entered promiscuous mode [ 362.770573][T19912] ip6tnl4: entered allmulticast mode [ 362.861364][T19925] netlink: zone id is out of range [ 362.897820][T19925] netlink: zone id is out of range [ 362.904961][T19925] netlink: zone id is out of range [ 362.913244][T19925] netlink: zone id is out of range [ 362.932735][T19925] netlink: zone id is out of range [ 362.938308][T19925] netlink: zone id is out of range [ 362.952761][T19925] netlink: zone id is out of range [ 362.962400][T19925] netlink: zone id is out of range [ 362.978609][T19925] netlink: zone id is out of range [ 363.657917][T19976] __nla_validate_parse: 4 callbacks suppressed [ 363.657941][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.695786][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.700448][T19980] netlink: 632 bytes leftover after parsing attributes in process `syz.1.6708'. [ 363.714196][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.726808][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.741076][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.766225][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.781465][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.793225][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.804372][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6710'. [ 363.819819][T19976] bridge0: left allmulticast mode [ 363.830321][T19976] 8021q: adding VLAN 0 to HW filter on device .` [ 363.841196][T19976] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.104132][T20001] validate_nla: 2 callbacks suppressed [ 364.104156][T20001] netlink: 'syz.0.6720': attribute type 89 has an invalid length. [ 364.410420][T20020] netlink: 'syz.0.6731': attribute type 96 has an invalid length. [ 364.587520][T20034] xt_bpf: check failed: parse error [ 364.592999][T20036] netlink: 'syz.3.6737': attribute type 16 has an invalid length. [ 364.593028][T20036] netlink: 'syz.3.6737': attribute type 17 has an invalid length. [ 364.992611][T20060] netlink: 'syz.4.6750': attribute type 9 has an invalid length. [ 366.967428][T20168] netlink: 'syz.0.6802': attribute type 10 has an invalid length. [ 366.986858][T20168] dummy0: entered promiscuous mode [ 366.996874][T20168] dummy0: entered allmulticast mode [ 367.014539][T20168] bridge0: port 4(dummy0) entered blocking state [ 367.044751][T20168] bridge0: port 4(dummy0) entered disabled state [ 367.117939][T20174] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.295997][T20185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.303400][T20185] IPv6: NLM_F_CREATE should be set when creating new route [ 367.310724][T20185] IPv6: NLM_F_CREATE should be set when creating new route [ 367.535800][T20202] xt_policy: output policy not valid in PREROUTING and INPUT [ 367.714004][T20214] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 367.862828][T20224] net_ratelimit: 13 callbacks suppressed [ 367.862849][T20224] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 367.952727][T20232] netlink: 'syz.2.6833': attribute type 1 has an invalid length. [ 367.961027][T20232] netlink: 'syz.2.6833': attribute type 1 has an invalid length. [ 368.384755][T20260] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 368.749621][T20278] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 368.764501][T20278] bond3 (unregistering): Released all slaves [ 368.814850][T20286] ipt_REJECT: TCP_RESET invalid for non-tcp [ 368.847012][T20288] netlink: 'syz.0.6859': attribute type 28 has an invalid length. [ 368.873317][T20288] netlink: 'syz.0.6859': attribute type 3 has an invalid length. [ 368.905251][T20288] __nla_validate_parse: 17 callbacks suppressed [ 368.905272][T20288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6859'. [ 368.944099][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6861'. [ 369.063364][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'. [ 369.076176][T20298] Unsupported ieee802154 address type: 0 [ 369.084892][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'. [ 369.217229][T20306] bond5: option arp_interval: invalid value (18446744073709551615) [ 369.240074][T20311] x_tables: duplicate underflow at hook 3 [ 369.245298][T20313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.280861][T20306] bond5: option arp_interval: allowed values 0 - 2147483647 [ 369.333591][T20306] bond5 (unregistering): Released all slaves [ 369.639136][T20335] openvswitch: netlink: IP tunnel dst address not specified [ 369.780344][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6887'. [ 370.053375][T20353] openvswitch: netlink: IP tunnel TTL not specified. [ 370.340757][T20363] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6896'. [ 370.385956][T20363] ..0{X: renamed from gretap0 [ 370.585108][T20363] ..0{X: entered allmulticast mode [ 370.603328][T20363] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 370.893985][T20390] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.942191][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6910'. [ 370.987767][T20395] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 371.020711][T20395] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 371.375651][T20414] lo: left allmulticast mode [ 371.394278][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6922'. [ 371.411899][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6922'. [ 371.426415][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6922'. [ 371.495490][T20414] bond0: left promiscuous mode [ 371.510252][T20414] team0: left promiscuous mode [ 371.540915][T20414] 0X: left allmulticast mode [ 371.546012][T20414] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 371.695038][T20430] openvswitch: netlink: IP tunnel dst address not specified [ 371.853608][T20442] netlink: 'syz.2.6935': attribute type 62 has an invalid length. [ 372.086450][T20456] netlink: 'syz.1.6942': attribute type 1 has an invalid length. [ 372.526241][T20481] veth4: entered allmulticast mode [ 373.184049][T20531] netlink: 'syz.0.6978': attribute type 7 has an invalid length. [ 373.842378][T20573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.197542][T20595] netlink: set zone limit has 4 unknown bytes [ 374.485869][T20615] netlink: 'syz.2.7018': attribute type 3 has an invalid length. [ 374.551094][T20620] __nla_validate_parse: 19 callbacks suppressed [ 374.551120][T20620] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7019'. [ 374.591284][T20620] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7019'. [ 375.499700][T20683] netlink: 'syz.2.7052': attribute type 1 has an invalid length. [ 375.549640][T20683] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7052'. [ 375.643938][T20694] netlink: 'syz.0.7056': attribute type 1 has an invalid length. [ 375.662934][T20694] netlink: 'syz.0.7056': attribute type 3 has an invalid length. [ 375.672701][T20694] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7056'. [ 375.993789][T20715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7064'. [ 376.232979][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.251101][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.262907][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.290738][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7074'. [ 376.323693][T20738] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7075'. [ 376.334625][T20732] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 376.369063][T20738] bond0 (unregistering): left allmulticast mode [ 376.384875][T20738] bond_slave_0: left allmulticast mode [ 376.401527][T20738] bond_slave_1: left allmulticast mode [ 376.412071][T20738] team0: left allmulticast mode [ 376.422156][T20738] team_slave_0: left allmulticast mode [ 376.431197][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7078'. [ 376.433391][T20738] team_slave_1: left allmulticast mode [ 376.449794][T20738] bridge0: port 3(bond0) entered disabled state [ 376.474757][T20738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.487164][T20738] bond_slave_0: left promiscuous mode [ 376.504268][T20738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.519923][T20738] bond_slave_1: left promiscuous mode [ 376.542249][T20738] bond0 (unregistering): (slave team0): Releasing backup interface [ 376.557904][T20738] team0: left promiscuous mode [ 376.567461][T20738] team_slave_0: left promiscuous mode [ 376.579257][T20738] team_slave_1: left promiscuous mode [ 376.596654][T20738] bond0 (unregistering): Released all slaves [ 376.633825][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.648084][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.659363][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.678455][T20732] wlan1 speed is unknown, defaulting to 1000 [ 376.697358][T20756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7085'. [ 376.701562][T20732] wlan1 speed is unknown, defaulting to 1000 [ 377.182570][T20784] netlink: 'syz.2.7098': attribute type 1 has an invalid length. [ 377.210346][T20784] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7098'. [ 377.260123][T20788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.765663][T20824] netlink: 'syz.2.7118': attribute type 10 has an invalid length. [ 378.020869][T20840] netlink: 'syz.1.7125': attribute type 3 has an invalid length. [ 378.149278][T20847] netlink: 'syz.2.7129': attribute type 10 has an invalid length. [ 378.169477][T20847] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 378.247948][T20854] netlink: 'syz.3.7133': attribute type 1 has an invalid length. [ 378.459900][T20870] x_tables: duplicate underflow at hook 2 [ 378.502351][T20875] sock: sock_timestamping_bind_phc: sock not bind to device [ 378.660757][T20882] ipt_ECN: cannot use operation on non-tcp rule [ 379.007918][T20908] netlink: 'syz.2.7160': attribute type 1 has an invalid length. [ 379.311373][T20929] xt_TCPMSS: Only works on TCP SYN packets [ 379.448263][T20938] xt_l2tp: invalid flags combination: 8 [ 379.633772][T20953] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 379.723140][T20957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.794836][T20959] netlink: 'syz.2.7186': attribute type 1 has an invalid length. [ 379.819423][T20965] __nla_validate_parse: 8 callbacks suppressed [ 379.819444][T20965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7188'. [ 379.873612][T20965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7188'. [ 379.973682][T20971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7190'. [ 380.182057][T20989] netlink: 'syz.0.7200': attribute type 1 has an invalid length. [ 380.293433][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7202'. [ 380.437192][T21001] netlink: 'syz.1.7207': attribute type 1 has an invalid length. [ 380.461434][T21001] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.7207'. [ 380.673867][T21019] netlink: 'syz.3.7215': attribute type 1 has an invalid length. [ 380.757467][T21025] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7218'. [ 380.934026][T21039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7225'. [ 381.185616][T21054] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.7233'. [ 381.196609][T21055] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 381.203043][T21058] xt_TCPMSS: Only works on TCP SYN packets [ 381.446334][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7240'. [ 381.672838][T21084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7247'. [ 382.147506][T21115] macsec1: entered promiscuous mode [ 382.161731][T21115] geneve1: entered promiscuous mode [ 382.177974][T21115] macsec1: entered allmulticast mode [ 382.187430][T21115] geneve1: entered allmulticast mode [ 382.358650][T21129] validate_nla: 1 callbacks suppressed [ 382.358672][T21129] netlink: 'syz.1.7269': attribute type 1 has an invalid length. [ 382.376010][T21129] NCSI netlink: No device for ifindex 0 [ 382.383843][T21128] netlink: 'syz.2.7268': attribute type 6 has an invalid length. [ 382.510310][T21137] xt_hashlimit: size too large, truncated to 1048576 [ 382.587360][T21137] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.120733][T21167] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 383.811781][T21213] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 3, id = 0 [ 385.434149][T21297] Bluetooth: MGMT ver 1.23 [ 385.575065][T21307] hsr0: entered promiscuous mode [ 385.600438][T21306] hsr0: left promiscuous mode [ 385.717951][T21313] netlink: 'syz.0.7348': attribute type 1 has an invalid length. [ 385.740677][T21313] __nla_validate_parse: 7 callbacks suppressed [ 385.740697][T21313] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7348'. [ 385.758530][T21318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7351'. [ 385.768445][T21313] netlink: 'syz.0.7348': attribute type 1 has an invalid length. [ 385.784399][T21313] netlink: 'syz.0.7348': attribute type 8 has an invalid length. [ 385.793393][T21313] netlink: 606 bytes leftover after parsing attributes in process `syz.0.7348'. [ 386.517750][T21359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7365'. [ 387.091668][T21390] Bluetooth: MGMT ver 1.23 [ 387.254846][T21401] sch_fq: defrate 4294967293 ignored. [ 387.470756][T21412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7389'. [ 387.501116][T21412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7389'. [ 387.649896][T21421] vlan2: entered promiscuous mode [ 387.674525][T21421] bridge0: entered promiscuous mode [ 388.025438][T21443] tipc: Enabled bearer , priority 10 [ 388.051570][T21445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7401'. [ 388.518509][T21476] bond0: invalid ARP target 0.0.0.0 specified for addition [ 388.526720][T21476] bond0: option arp_ip_target: invalid value (0) [ 388.543686][T21476] bond0 (unregistering): Released all slaves [ 388.698744][T21485] netlink: 'syz.2.7419': attribute type 1 has an invalid length. [ 388.727965][T21485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.993924][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7427'. [ 389.036546][T21505] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 389.602514][T21543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.620961][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7445'. [ 390.376483][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7464'. [ 390.386658][T21579] nbd: illegal input index -1113835520 [ 390.555186][T21588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.676900][T21597] macvtap1: entered promiscuous mode [ 390.699519][T21597] veth1_to_hsr: entered promiscuous mode [ 390.718107][T21597] macvtap1: entered allmulticast mode [ 390.733705][T21597] veth1_to_hsr: entered allmulticast mode [ 391.102552][T21619] __nla_validate_parse: 1 callbacks suppressed [ 391.102575][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7482'. [ 391.448117][T21635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7492'. [ 391.609937][T21648] macsec1: entered promiscuous mode [ 391.615945][T21648] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 392.049008][T21675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7509'. [ 393.025045][T21728] netlink: 'syz.4.7533': attribute type 3 has an invalid length. [ 393.089251][T21730] tipc: Enabling of bearer rejected, failed to enable media [ 393.148830][T21734] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 393.292204][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7540'. [ 393.601770][T21765] netlink: 'syz.4.7551': attribute type 322 has an invalid length. [ 394.008023][T21792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7564'. [ 394.527010][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7576'. [ 394.576346][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7576'. [ 394.624203][T21818] netlink: 580 bytes leftover after parsing attributes in process `syz.1.7576'. [ 395.870890][T21868] netlink: 'syz.2.7601': attribute type 1 has an invalid length. [ 395.878777][T21868] netlink: 732 bytes leftover after parsing attributes in process `syz.2.7601'. [ 396.785835][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7624'. [ 396.797350][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7624'. [ 396.829374][T21920] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7624'. [ 396.844409][T21920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7624'. [ 396.894561][T21926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7627'. [ 397.443488][T21963] sctp: [Deprecated]: syz.4.7643 (pid 21963) Use of int in max_burst socket option deprecated. [ 397.443488][T21963] Use struct sctp_assoc_value instead [ 397.557555][T21965] IPVS: Scheduler module ip_vs_sip not found [ 397.898418][T21988] netlink: 'syz.0.7656': attribute type 29 has an invalid length. [ 397.930327][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7656'. [ 397.942919][T21988] netlink: 'syz.0.7656': attribute type 29 has an invalid length. [ 397.958916][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7656'. [ 398.074600][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7662'. [ 398.165865][T22004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7664'. [ 398.282049][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7666'. [ 398.302911][T22009] netlink: 'syz.3.7666': attribute type 18 has an invalid length. [ 398.654434][T22033] sctp: [Deprecated]: syz.0.7677 (pid 22033) Use of int in max_burst socket option. [ 398.654434][T22033] Use struct sctp_assoc_value instead [ 400.163486][T22106] xt_socket: unknown flags 0xfc [ 401.323104][T22178] tipc: MTU too low for tipc bearer [ 401.528148][T22186] team0: entered allmulticast mode [ 401.536155][T22186] team_slave_0: entered allmulticast mode [ 401.543362][T22186] team_slave_1: entered allmulticast mode [ 401.731068][T22194] : entered promiscuous mode [ 402.060751][T22211] __nla_validate_parse: 2 callbacks suppressed [ 402.060775][T22211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7764'. [ 402.090137][T22214] IPVS: Unknown mcast interface: veth0_to_bond [ 402.712359][ T5888] IPVS: starting estimator thread 0... [ 402.820653][T22254] IPVS: using max 26 ests per chain, 62400 per kthread [ 403.178326][ T30] audit: type=1804 audit(1773738524.437:6): pid=22278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7795" name="/newroot/1569/cgroup.controllers" dev="tmpfs" ino=7869 res=1 errno=0 [ 403.237489][ T30] audit: type=1800 audit(1773738524.437:7): pid=22278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7795" name="cgroup.controllers" dev="tmpfs" ino=7869 res=0 errno=0 [ 403.466052][T22297] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7805'. [ 403.591856][T22301] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 403.774149][T22315] nbd: must specify a device to reconfigure [ 404.201695][T22346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7828'. [ 404.245906][T22346] vlan3: entered promiscuous mode [ 404.256801][T22346] veth0_to_team: entered promiscuous mode [ 404.267156][T22346] vlan3: entered allmulticast mode [ 404.274040][T22346] veth0_to_team: entered allmulticast mode [ 404.724542][T22377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7842'. [ 404.804808][T22382] Bluetooth: MGMT ver 1.23 [ 404.978335][T22393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7851'. [ 405.000789][T22393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7851'. [ 405.018709][T22393] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7851'. [ 405.407703][T22420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.826180][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7874'. [ 406.279780][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7887'. [ 406.874024][T22500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7903'. [ 407.116465][T22514] macsec1: entered promiscuous mode [ 407.122672][T22514] team0: entered promiscuous mode [ 407.128569][T22514] team0: Device macsec1 is already an upper device of the team interface [ 407.149219][T22514] team0: left promiscuous mode [ 407.177064][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7911'. [ 407.251929][T22518] syz.4.7912 (22518) used greatest stack depth: 15176 bytes left [ 407.908692][T22559] veth5: entered promiscuous mode [ 408.087336][T22575] netem: change failed [ 408.379469][T22594] tipc: Invalid UDP bearer configuration [ 408.379530][T22594] tipc: Enabling of bearer rejected, failed to enable media [ 408.653387][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7955'. [ 408.763171][T22620] netlink: 'syz.4.7961': attribute type 11 has an invalid length. [ 408.773028][T22620] netlink: 'syz.4.7961': attribute type 4 has an invalid length. [ 408.794341][T22620] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.7961'. [ 408.918033][T22626] tipc: Enabling of bearer rejected, failed to enable media [ 408.994984][T22632] smc: net device wlan0 applied user defined pnetid SYZ0 [ 409.432160][T22658] netlink: 'syz.3.7979': attribute type 1 has an invalid length. [ 409.450837][T22658] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7979'. [ 409.459941][T22658] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7979'. [ 409.521369][T22658] netlink: 'syz.3.7979': attribute type 1 has an invalid length. [ 410.004334][T22685] vlan1: entered allmulticast mode [ 410.009851][T22685] bridge_slave_0: entered allmulticast mode [ 410.482546][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8006'. [ 411.231883][T22763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8029'. [ 411.431206][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8038'. [ 411.597001][T22788] netlink: 296 bytes leftover after parsing attributes in process `syz.0.8043'. [ 411.819252][T22798] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8047'. [ 413.214704][T22881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8087'. [ 413.329297][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 413.346241][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 413.355927][T22889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 413.449079][T22897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8095'. [ 413.470107][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8094'. [ 413.490661][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8094'. [ 413.508720][T22899] tipc: Enabling of bearer rejected, failed to enable media [ 413.581204][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8099'. [ 413.611444][ T9733] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.630867][ T9733] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.666474][ T9733] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.682497][ T9733] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.691900][T22910] netlink: 'syz.0.8101': attribute type 1 has an invalid length. [ 413.706380][T22910] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8101'. [ 413.812336][T22916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8104'. [ 415.142770][T22984] SET target dimension over the limit! [ 415.550811][T23000] netlink: 'syz.2.8139': attribute type 27 has an invalid length. [ 415.641559][T23006] netlink: 'syz.4.8142': attribute type 1 has an invalid length. [ 416.713937][ T9737] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 416.742184][ T5888] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 416.750384][ T9737] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.195192][ T5888] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 417.454407][T23091] netlink: 'syz.0.8184': attribute type 5 has an invalid length. [ 417.646551][T23104] netlink: 'syz.3.8190': attribute type 178 has an invalid length. [ 417.753589][ T5888] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 418.764060][T23175] __nla_validate_parse: 7 callbacks suppressed [ 418.764083][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8223'. [ 418.866508][T23179] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8225'. [ 419.607359][T23220] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8245'. [ 419.671841][T23224] ip6tnl6: entered allmulticast mode [ 419.987966][T23245] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8256'. [ 420.011698][T23249] block nbd1: not configured, cannot reconfigure [ 420.352226][T23269] netlink: 'syz.1.8267': attribute type 13 has an invalid length. [ 420.710839][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 420.847396][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8279'. [ 421.041434][T23303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8284'. [ 422.107327][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8300'. [ 422.116999][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8300'. [ 422.133309][T23337] netlink: 'syz.3.8300': attribute type 14 has an invalid length. [ 422.152182][T23337] netlink: 'syz.3.8300': attribute type 11 has an invalid length. [ 422.263293][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8304'. [ 422.290064][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8305'. [ 422.313295][T23347] netlink: 'syz.2.8305': attribute type 13 has an invalid length. [ 424.174870][T23469] __nla_validate_parse: 3 callbacks suppressed [ 424.174893][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8362'. [ 424.218891][T23469] macvlan0: entered promiscuous mode [ 424.240112][T23469] macvlan0: entered allmulticast mode [ 424.253377][T23469] veth1_to_batadv: entered allmulticast mode [ 424.397819][T23482] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8369'. [ 424.539356][T23491] netlink: 216 bytes leftover after parsing attributes in process `syz.3.8372'. [ 424.563414][T23491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8372'. [ 424.574001][T23491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8372'. [ 425.052941][T23513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.196591][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8385'. [ 425.736489][T23529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8390'. [ 425.809783][T23533] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8392'. [ 425.842960][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8392'. [ 426.854054][T23597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8422'. [ 427.507699][T23630] netlink: 'syz.2.8436': attribute type 298 has an invalid length. [ 427.796047][T23644] tipc: Started in network mode [ 427.815538][T23644] tipc: Node identity 00000000000000000000000300000001, cluster identity 4711 [ 427.838181][T23644] tipc: Enabling of bearer rejected, failed to enable media [ 429.175621][T23718] No such timeout policy "syz1" [ 429.249636][T23722] netem: change failed [ 429.350723][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 429.471516][ T9741] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.485025][ T9741] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.507624][ T9741] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.535542][ T9741] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.671836][T23747] __nla_validate_parse: 5 callbacks suppressed [ 429.671860][T23747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8491'. [ 429.783415][T23755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8493'. [ 429.914237][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'. [ 430.570701][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8516'. [ 430.576914][T23801] netlink: 'syz.3.8515': attribute type 1 has an invalid length. [ 430.852955][T23816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8525'. [ 431.215760][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8535'. [ 431.235623][T23844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8535'. [ 431.621579][T23866] IPVS: Error connecting to the multicast addr [ 431.629166][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8547'. [ 431.941890][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8554'. [ 432.015211][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8556'. [ 433.001108][T23938] netlink: 'syz.3.8583': attribute type 9 has an invalid length. [ 434.184982][T24013] netlink: 'syz.0.8620': attribute type 2 has an invalid length. [ 434.653152][T24038] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 434.685367][T24046] __nla_validate_parse: 10 callbacks suppressed [ 434.685389][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8632'. [ 434.793180][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8632'. [ 434.870863][T24038] bond0 (unregistering): Released all slaves [ 435.080709][T24043] ip6gretap0: entered promiscuous mode [ 435.125128][T24043] ip6gretap0: left promiscuous mode [ 435.615481][T24086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8654'. [ 435.878188][T24100] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8661'. [ 435.902112][T24100] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8661'. [ 435.912651][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8662'. [ 435.930899][T24100] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 436.667456][T24150] tipc: Started in network mode [ 436.676431][T24150] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 436.692342][T24150] tipc: Enabling of bearer rejected, failed to enable media [ 436.732356][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8688'. [ 436.748338][T24155] tipc: Enabling of bearer rejected, failed to enable media [ 437.094048][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8698'. [ 437.722744][T24205] netlink: 'syz.2.8711': attribute type 2 has an invalid length. [ 438.210093][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8724'. [ 438.408638][T24245] netlink: 'syz.4.8731': attribute type 2 has an invalid length. [ 438.663997][T24264] ip6tnl0: Caught tx_queue_len zero misconfig [ 438.922753][T24281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8747'. [ 439.465950][T24314] tipc: Enabling of bearer rejected, media not registered [ 439.804131][T24338] __nla_validate_parse: 1 callbacks suppressed [ 439.804155][T24338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8777'. [ 439.824264][T24337] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8776'. [ 439.850788][T24337] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8776'. [ 440.278409][T24365] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8785'. [ 440.287590][T24356] "syz.3.8784" (24356) uses obsolete ecb(arc4) skcipher [ 440.331361][T24365] netlink: 'syz.1.8785': attribute type 9 has an invalid length. [ 440.345022][T24365] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8785'. [ 440.362292][T24370] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 440.370773][T24365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8785'. [ 440.712256][T24389] netlink: 'syz.0.8797': attribute type 3 has an invalid length. [ 441.223024][T24415] netlink: 'syz.3.8809': attribute type 30 has an invalid length. [ 441.850904][T24445] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8823'. [ 442.223950][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8830'. [ 442.642937][T24486] tipc: New replicast peer: 255.255.255.255 [ 442.655217][T24486] tipc: Enabled bearer , priority 26 [ 443.776131][ T5910] tipc: Node number set to 4269801491 [ 444.647093][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8882'. [ 444.656754][T24571] openvswitch: netlink: Message has 2 unknown bytes. [ 445.255025][T24613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8902'. [ 445.610002][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8912'. [ 445.990696][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 446.642261][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8942'. [ 446.872467][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 446.880888][T24713] mac80211_hwsim hwsim5 wlan0: default FDB implementation only supports local addresses [ 446.950752][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 446.957596][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 447.098450][T24729] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 447.117292][T24730] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 447.371258][T24744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8967'. [ 447.594858][T24757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8973'. [ 447.605068][T24757] IPVS: Unknown mcast interface: veth0_to_bond [ 448.355837][T24799] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8991'. [ 448.725016][ T5888] IPVS: starting estimator thread 0... [ 448.821785][T24817] IPVS: using max 23 ests per chain, 55200 per kthread [ 448.871976][T24825] netlink: 'syz.2.9004': attribute type 3 has an invalid length. [ 449.005372][T24831] block nbd0: not configured, cannot reconfigure [ 449.203246][T24846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9016'. [ 449.250645][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9017'. [ 449.266756][T24846] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 449.286240][T24846] bond2 (unregistering): Released all slaves [ 450.176462][T24909] sit1: entered promiscuous mode [ 450.574956][T24936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9057'. [ 450.590932][T24936] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9057'. [ 450.626255][T24936] vlan0: entered promiscuous mode [ 450.641302][T24936] geneve1: entered promiscuous mode [ 450.649858][T24936] vlan0: entered allmulticast mode [ 450.656052][T24936] geneve1: entered allmulticast mode [ 451.333790][T24983] netlink: 'syz.0.9081': attribute type 1 has an invalid length. [ 451.359671][T24983] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9081'. [ 451.381220][T24983] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9081'. [ 451.395467][T24983] netlink: 'syz.0.9081': attribute type 1 has an invalid length. [ 451.419410][T24983] netlink: 'syz.0.9081': attribute type 8 has an invalid length. [ 452.156079][T25030] pim6reg99999999: entered allmulticast mode [ 452.305289][T25041] netlink: 'syz.4.9109': attribute type 1 has an invalid length. [ 452.323375][T25041] netlink: 'syz.4.9109': attribute type 1 has an invalid length. [ 452.342465][T25041] netlink: 'syz.4.9109': attribute type 1 has an invalid length. [ 452.444292][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9114'. [ 452.454354][T25050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9114'. [ 452.464902][T25050] netlink: 'syz.3.9114': attribute type 14 has an invalid length. [ 452.503780][T25050] netlink: 'syz.3.9114': attribute type 12 has an invalid length. [ 452.923332][T25077] netlink: 'syz.4.9126': attribute type 1 has an invalid length. [ 453.784642][T25129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9151'. [ 454.171650][T25151] validate_nla: 2 callbacks suppressed [ 454.171674][T25151] netlink: 'syz.3.9163': attribute type 1 has an invalid length. [ 454.196592][T25151] netlink: 'syz.3.9163': attribute type 2 has an invalid length. [ 454.215119][T25151] netlink: 'syz.3.9163': attribute type 1 has an invalid length. [ 454.230957][T25151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9163'. [ 454.492452][T25171] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9172'. [ 454.994519][T25203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9186'. [ 455.043323][T25208] macsec1: entered allmulticast mode [ 455.048789][T25208] macsec0: entered allmulticast mode [ 455.080928][T25208] macsec0: left allmulticast mode [ 457.034013][T25298] __nla_validate_parse: 3 callbacks suppressed [ 457.034038][T25298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9232'. [ 457.243698][T25305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.639083][T25332] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9249'. [ 457.675626][T25336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9250'. [ 457.839512][T25346] xt_hashlimit: size too large, truncated to 1048576 [ 458.260840][T25371] Bluetooth: MGMT ver 1.23 [ 458.418795][T25376] netlink: 'syz.2.9270': attribute type 16 has an invalid length. [ 458.500810][T25376] netlink: 'syz.2.9270': attribute type 3 has an invalid length. [ 458.508778][T25376] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.9270'. [ 458.574330][T25389] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 459.472977][T25442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9301'. [ 459.504535][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9303'. [ 459.558087][T25449] netlink: 'syz.3.9305': attribute type 4 has an invalid length. [ 459.607714][T25453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9307'. [ 459.826764][T25465] bond4: (slave bond_slave_1): Device is not our slave [ 459.847056][T25465] bond4: option active_slave: invalid value (bond_slave_1) [ 459.911842][T25465] bond4 (unregistering): Released all slaves [ 460.076323][T25471] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9315'. [ 460.106053][T25471] netlink: 'syz.3.9315': attribute type 9 has an invalid length. [ 460.120007][T25471] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9315'. [ 460.129854][T25471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9315'. [ 460.772996][T25518] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 460.920138][T25522] netlink: 'syz.2.9339': attribute type 1 has an invalid length. [ 460.928999][T25522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.269955][T25532] IPv6: sit1: Disabled Multicast RS [ 461.301833][T25532] sit1: entered allmulticast mode [ 461.964479][T25565] ip6gretap2: entered allmulticast mode [ 462.127240][T25574] __nla_validate_parse: 2 callbacks suppressed [ 462.127265][T25574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9364'. [ 462.271784][T25581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9369'. [ 462.600970][T25609] netlink: 332 bytes leftover after parsing attributes in process `syz.1.9382'. [ 462.601428][T25606] netlink: 'syz.3.9383': attribute type 3 has an invalid length. [ 462.610595][T25609] netlink: 'syz.1.9382': attribute type 9 has an invalid length. [ 462.626962][T25609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9382'. [ 462.640306][T25609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9382'. [ 462.824945][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9388'. [ 462.868329][T25618] vlan1: entered promiscuous mode [ 462.893110][T25618] gretap0: entered promiscuous mode [ 463.302515][T25646] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 463.333555][T25646] bond4 (unregistering): Released all slaves [ 464.293961][T25710] netlink: 'syz.3.9432': attribute type 5 has an invalid length. [ 464.439202][T25721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9436'. [ 464.454184][T25718] macsec2: entered promiscuous mode [ 464.489347][T25721] vlan4: entered promiscuous mode [ 464.643905][T25730] tipc: Enabling of bearer rejected, failed to enable media [ 464.858319][T25741] netlink: 'syz.1.9447': attribute type 1 has an invalid length. [ 464.975730][T25745] netlink: 'syz.4.9449': attribute type 11 has an invalid length. [ 465.020600][T25745] netlink: 'syz.4.9449': attribute type 4 has an invalid length. [ 465.036722][T25745] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.9449'. [ 465.328437][T25773] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9462'. [ 465.412445][T25775] netlink: 'syz.2.9463': attribute type 7 has an invalid length. [ 465.420414][T25775] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.9463'. [ 466.228944][T25823] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 466.262411][T25823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.776817][T25859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.154091][T25882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9516'. [ 467.169663][T25882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9516'. [ 467.174649][T25887] netlink: 'syz.2.9518': attribute type 1 has an invalid length. [ 467.356497][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9521'. [ 467.570047][T25907] netlink: 'syz.4.9529': attribute type 4 has an invalid length. [ 467.598298][T25907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9529'. [ 467.709799][T25917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9531'. [ 468.073442][T25934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9540'. [ 468.430661][T25951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9549'. [ 468.516445][T25957] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9551'. [ 468.976123][T25979] netlink: 'syz.1.9563': attribute type 1 has an invalid length. [ 468.985716][T25979] netlink: 728 bytes leftover after parsing attributes in process `syz.1.9563'. [ 468.998577][T25981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9564'. [ 469.079663][T25961] ipvlan0: entered promiscuous mode [ 469.366665][T25999] tipc: Enabled bearer , priority 14 [ 469.640173][T26015] ipvlan0: entered promiscuous mode [ 469.764146][T26022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.867765][T26024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.271056][T26053] bridge_slave_0: invalid flags given to default FDB implementation [ 470.743776][T26083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.909072][T26094] ip6tnl8: entered allmulticast mode [ 471.640340][T26143] netlink: 'syz.2.9641': attribute type 32 has an invalid length. [ 471.768504][T26143] bond0: option coupled_control: invalid value (12) [ 471.785655][T26143] bond0 (unregistering): Released all slaves [ 472.161796][T26174] __nla_validate_parse: 7 callbacks suppressed [ 472.161819][T26174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9657'. [ 472.327163][T26188] netlink: 'syz.2.9663': attribute type 1 has an invalid length. [ 472.462805][T26195] nbd: must specify an index to disconnect [ 472.634147][T26207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9672'. [ 472.902556][T26221] ip6gretap0: entered promiscuous mode [ 473.210758][T26244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9690'. [ 473.307574][T26250] xt_policy: too many policy elements [ 473.354568][T26253] vlan5: entered promiscuous mode [ 473.360358][T26253] geneve1: entered promiscuous mode [ 473.367811][T26253] vlan5: entered allmulticast mode [ 473.374532][T26253] geneve1: entered allmulticast mode [ 473.464561][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.487592][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9696'. [ 473.501019][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.509616][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9696'. [ 473.519406][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.529227][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9696'. [ 473.541166][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.557758][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9696'. [ 473.578668][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.587143][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9696'. [ 473.609933][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9701'. [ 473.612834][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.639855][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9696'. [ 473.672053][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 473.686037][T26258] netlink: 'syz.4.9696': attribute type 29 has an invalid length. [ 475.658528][T26371] NCSI netlink: No device for ifindex 8 [ 477.282912][T26478] __nla_validate_parse: 34 callbacks suppressed [ 477.282937][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9803'. [ 477.553720][T26492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9809'. [ 477.854581][T26509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.888066][T26512] validate_nla: 22 callbacks suppressed [ 477.888090][T26512] netlink: 'syz.1.9820': attribute type 1 has an invalid length. [ 478.330138][T26534] tipc: Enabled bearer , priority 10 [ 478.390702][T26538] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9833'. [ 478.630761][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 478.891563][T26574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9850'. [ 478.955364][T26576] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 478.965203][T26576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 479.540152][T26613] gtp1: entered promiscuous mode [ 479.557645][T26613] gtp1: entered allmulticast mode [ 479.856117][T26632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9877'. [ 479.869239][T26632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9877'. [ 480.067552][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9881'. [ 480.236274][T26647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9884'. [ 480.449946][T26664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9892'. [ 481.387735][T26704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9911'. [ 481.659380][T26718] sctp: [Deprecated]: syz.0.9918 (pid 26718) Use of int in max_burst socket option. [ 481.659380][T26718] Use struct sctp_assoc_value instead [ 481.765128][T26725] netlink: 'syz.0.9922': attribute type 1 has an invalid length. [ 481.783467][T26725] netlink: 'syz.0.9922': attribute type 1 has an invalid length. [ 481.800941][T26725] netlink: 'syz.0.9922': attribute type 8 has an invalid length. [ 482.521456][T26765] tunl0: Caught tx_queue_len zero misconfig [ 482.527532][T26765] __nla_validate_parse: 5 callbacks suppressed [ 482.527550][T26765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9941'. [ 483.725293][T26828] : renamed from bond_slave_0 [ 483.865435][T26830] netlink: 'syz.1.9972': attribute type 13 has an invalid length. [ 483.891108][T26830] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.9972'. [ 484.682086][T26870] netlink: 204 bytes leftover after parsing attributes in process `syz.1.9990'. [ 484.706884][T26870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9990'. [ 485.064747][T26894] pim6reg: entered allmulticast mode [ 485.100017][T26894] pim6reg: left allmulticast mode [ 485.149770][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10006'. [ 485.781589][T26942] bridge0: entered promiscuous mode [ 486.346392][T26981] netlink: 'syz.0.10045': attribute type 11 has an invalid length. [ 486.355885][T26981] netlink: 'syz.0.10045': attribute type 11 has an invalid length. [ 486.364791][T26981] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10045'. [ 486.705191][T26996] xt_hashlimit: size too large, truncated to 1048576 [ 486.872244][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10057'. [ 487.139467][T27020] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10062'. [ 487.159540][T27020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10062'. [ 487.898813][T27060] pim6reg: entered allmulticast mode [ 488.481350][T27093] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10098'. [ 488.501598][T27093] ip6gre0: Caught tx_queue_len zero misconfig [ 488.507773][T27093] netlink: 175 bytes leftover after parsing attributes in process `syz.1.10098'. [ 488.917517][T27122] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.10113'. [ 488.928921][T27122] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 489.071164][ T30] audit: type=1800 audit(1773738610.337:8): pid=27132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10118" name="memory.events" dev="tmpfs" ino=10465 res=0 errno=0 [ 489.140834][ T30] audit: type=1804 audit(1773738610.357:9): pid=27132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.10118" name="/newroot/2087/memory.events" dev="tmpfs" ino=10465 res=1 errno=0 [ 489.720182][T27172] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10135'. [ 490.003135][T27192] vlan1: entered promiscuous mode [ 490.008510][T27192] vlan1: entered allmulticast mode [ 490.301268][T27209] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 490.528730][T27224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10162'. [ 492.309485][T27329] macsec2: entered allmulticast mode [ 492.338319][T27329] macsec0: entered allmulticast mode [ 492.776977][T27355] vlan2: entered promiscuous mode [ 492.791835][T27355] geneve1: entered promiscuous mode [ 492.831379][T27355] vlan2: entered allmulticast mode [ 492.841273][T27355] geneve1: entered allmulticast mode [ 492.896874][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10225'. [ 492.924936][T27361] netlink: 'syz.2.10226': attribute type 62 has an invalid length. [ 493.276492][T27378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10235'. [ 494.540301][T27432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10260'. [ 494.784179][T27445] sch_fq: defrate 4294967293 ignored. [ 494.938846][T27453] netlink: 'syz.3.10270': attribute type 1 has an invalid length. [ 494.965711][T27453] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10270'. [ 494.987558][T27453] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10270'. [ 495.103239][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10273'. [ 495.107337][T27460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10274'. [ 496.172468][T27500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10293'. [ 496.271374][T27505] netlink: 744 bytes leftover after parsing attributes in process `syz.0.10296'. [ 498.320630][T27592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10337'. [ 499.128534][T27636] atomic_op ffff88807ae19998 conn xmit_atomic 0000000000000000 [ 499.136648][T27637] netlink: 'syz.2.10359': attribute type 3 has an invalid length. [ 499.147220][T27637] netlink: 'syz.2.10359': attribute type 1 has an invalid length. [ 499.187650][T27637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10359'. [ 499.486707][T27655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10368'. [ 500.040323][T27682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10381'. [ 500.090804][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.170785][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.233142][T27689] sctp: [Deprecated]: syz.1.10384 (pid 27689) Use of int in maxseg socket option. [ 500.233142][T27689] Use struct sctp_assoc_value instead [ 500.472685][T27694] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 500.752913][T27710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10394'. [ 501.138317][T27730] netlink: 'syz.1.10403': attribute type 1 has an invalid length. [ 501.152280][T27730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.426598][T27747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10412'. [ 501.541443][T27750] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.10413'. [ 502.035129][T27780] netlink: 'syz.0.10425': attribute type 1 has an invalid length. [ 502.338383][T27784] bridge0: port 4(dummy0) entered blocking state [ 502.345093][T27784] bridge0: port 4(dummy0) entered forwarding state [ 502.353404][T27784] bridge0: left allmulticast mode [ 502.366212][T27784] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.383240][T27784] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 502.403504][ T5888] lo speed is unknown, defaulting to 1000 [ 502.409295][ T5888] sqz0: Port: 1 Link ACTIVE [ 502.416937][T23527] lo speed is unknown, defaulting to 1000 [ 502.475974][T27799] netlink: 'syz.1.10436': attribute type 2 has an invalid length. [ 502.957931][T27825] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.10448'. [ 503.148334][T27839] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10450'. [ 503.337598][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10460'. [ 503.448839][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10461'. [ 503.543041][T27859] ipvlan1: entered promiscuous mode [ 503.553343][T27859] bridge0: port 1(ipvlan1) entered blocking state [ 503.560936][T27859] bridge0: port 1(ipvlan1) entered disabled state [ 503.567858][T27859] ipvlan1: entered allmulticast mode [ 503.574642][T27859] bridge0: entered allmulticast mode [ 503.601583][T27859] ipvlan1: left allmulticast mode [ 503.614073][T27859] bridge0: left allmulticast mode [ 504.069712][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10473'. [ 504.132459][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10473'. [ 505.048161][T27938] __nla_validate_parse: 2 callbacks suppressed [ 505.048184][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10501'. [ 505.374013][T27956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10509'. [ 505.844466][T27989] netlink: 'syz.2.10527': attribute type 9 has an invalid length. [ 505.859316][T27988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10526'. [ 506.567280][T28035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10549'. [ 507.753787][T28107] netlink: 124 bytes leftover after parsing attributes in process `syz.3.10583'. [ 507.853050][T28112] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 507.929751][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10588'. [ 508.010761][T28120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10591'. [ 508.627508][T28152] netlink: 'syz.4.10605': attribute type 1 has an invalid length. [ 508.649518][T28152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10605'. [ 509.876064][T28218] ..0{X: left allmulticast mode [ 509.895470][T28218] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10635'. [ 510.041867][T28224] rdma_op ffff88802c78c9f0 conn xmit_rdma 0000000000000000 [ 510.176627][T28232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10642'. [ 510.388073][T28244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10648'. [ 511.125127][T28271] udevd[28271]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 511.597448][T28312] netlink: 'syz.3.10677': attribute type 10 has an invalid length. [ 511.620795][T28312] dummy0: left promiscuous mode [ 511.629228][T28312] dummy0: left allmulticast mode [ 511.656915][T28312] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 511.905303][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10686'. [ 512.071671][T28340] erspan0: entered promiscuous mode [ 512.308105][T28353] netlink: 'syz.4.10695': attribute type 1 has an invalid length. [ 512.883576][T28376] netlink: 'syz.2.10707': attribute type 14 has an invalid length. [ 513.389835][T28406] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10720'. [ 514.757078][T28455] IPVS: stopping backup sync thread 21213 ... [ 515.715095][T28501] xt_hashlimit: size too large, truncated to 1048576 [ 516.310670][ T9737] batman_adv: batadv3: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 518.533364][T28596] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10804'. [ 519.205506][T28639] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 520.126496][T28683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10845'. [ 520.136652][T28683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10845'. [ 520.848184][T28729] tap0: tun_chr_ioctl cmd 1074025692 [ 521.403970][T28759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10880'. [ 521.407536][T28768] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10881'. [ 521.419174][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10880'. [ 522.285369][T28812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10896'. [ 522.682629][T28835] lo: Caught tx_queue_len zero misconfig [ 522.811232][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10913'. [ 523.043505][ T9741] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.071793][ T9741] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.086377][T28860] pimreg: tun_chr_ioctl cmd 1074025677 [ 523.092750][T28860] pimreg: linktype set to 774 [ 523.097839][ T9741] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.107991][ T9741] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.118103][T28862] tipc: Enabled bearer , priority 10 [ 523.325897][T28872] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10925'. [ 523.783795][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10938'. [ 523.794144][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10938'. [ 524.591510][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10963'. [ 524.605367][T28948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10963'. [ 524.615929][T28948] netlink: 'syz.2.10963': attribute type 20 has an invalid length. [ 524.732830][T28956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10966'. [ 525.438473][T28978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10977'. [ 525.464546][T28978] netlink: 'syz.0.10977': attribute type 29 has an invalid length. [ 525.474703][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10977'. [ 525.733907][T28995] batadv_slave_0: Caught tx_queue_len zero misconfig [ 526.012427][T29005] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.10990'. [ 526.177374][T29017] netlink: 6856 bytes leftover after parsing attributes in process `syz.3.10996'. [ 526.209369][T29017] netlink: 6856 bytes leftover after parsing attributes in process `syz.3.10996'. [ 526.326092][T29023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.333573][T29023] IPv6: NLM_F_CREATE should be set when creating new route [ 526.341275][T29023] IPv6: NLM_F_CREATE should be set when creating new route [ 526.348801][T29023] IPv6: NLM_F_CREATE should be set when creating new route [ 528.726418][T29167] netlink: 'syz.2.11064': attribute type 1 has an invalid length. [ 528.745985][T29167] netlink: 'syz.2.11064': attribute type 2 has an invalid length. [ 528.763971][T29167] netlink: 'syz.2.11064': attribute type 1 has an invalid length. [ 528.782630][T29167] netlink: 'syz.2.11064': attribute type 3 has an invalid length. [ 528.803130][T29167] __nla_validate_parse: 3 callbacks suppressed [ 528.803153][T29167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11064'. [ 529.470819][T29209] netlink: 2076 bytes leftover after parsing attributes in process `syz.0.11083'. [ 529.484537][T29209] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 529.506189][T29213] netlink: 'syz.4.11085': attribute type 4 has an invalid length. [ 529.798013][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11089'. [ 529.983014][T29233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11094'. [ 530.464814][T29260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11107'. [ 530.489575][T29260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11107'. [ 530.994314][T29281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11117'. [ 531.020024][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11117'. [ 531.050998][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11117'. [ 531.233304][T29297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11124'. [ 531.421971][T29308] nbd: socks must be embedded in a SOCK_ITEM attr [ 531.429029][T29308] block nbd1: shutting down sockets [ 532.042997][T29347] netlink: 'syz.4.11147': attribute type 3 has an invalid length. [ 532.059699][T29347] netlink: 'syz.4.11147': attribute type 3 has an invalid length. [ 532.449925][T29372] netlink: 'syz.2.11158': attribute type 15 has an invalid length. [ 533.911608][T29444] __nla_validate_parse: 7 callbacks suppressed [ 533.911641][T29444] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11192'. [ 534.064031][T29452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.178287][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11201'. [ 534.326685][T29462] wg1 speed is unknown, defaulting to 1000 [ 534.385915][T29462] gre0 speed is unknown, defaulting to 1000 [ 534.451173][T29474] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.11206'. [ 535.193456][T29462] lo speed is unknown, defaulting to 1000 [ 535.388073][T29518] netlink: 'syz.0.11224': attribute type 3 has an invalid length. [ 535.528636][T29524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11227'. [ 535.943118][T29462] wlan1 speed is unknown, defaulting to 1000 [ 536.982175][T29578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11252'. [ 537.432917][T29598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11261'. [ 537.927385][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11269'. [ 538.265966][T29636] sctp: [Deprecated]: syz.3.11271 (pid 29636) Use of int in maxseg socket option. [ 538.265966][T29636] Use struct sctp_assoc_value instead [ 538.290131][T29635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11276'. [ 538.307065][T29635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11276'. [ 538.394032][T28686] Bluetooth: hci4: command 0x0406 tx timeout [ 538.437883][T29647] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11281'. [ 538.536807][T29652] tun0: tun_chr_ioctl cmd 1074025677 [ 538.543061][T29652] tun0: linktype set to 27 [ 538.834103][T29671] netem: incorrect gi model size [ 538.856059][T29671] netem: change failed [ 539.164952][T29691] __nla_validate_parse: 3 callbacks suppressed [ 539.164976][T29691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11304'. [ 539.313930][T29699] netlink: 300 bytes leftover after parsing attributes in process `syz.3.11307'. [ 539.479416][T29709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11311'. [ 539.739122][T29723] bond0 (unregistering): Released all slaves [ 540.646255][T29762] pimreg: entered allmulticast mode [ 540.667797][T29762] pimreg: left allmulticast mode [ 540.964911][T29775] bridge0: port 1(veth0_to_bridge) entered blocking state [ 540.980203][T29775] bridge0: port 1(veth0_to_bridge) entered disabled state [ 540.991938][T29779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11345'. [ 541.002670][T29779] netlink: 35 bytes leftover after parsing attributes in process `syz.3.11345'. [ 541.004232][T29775] veth0_to_bridge: entered allmulticast mode [ 541.039473][T29775] veth0_to_bridge: entered promiscuous mode [ 541.287567][T29798] netlink: 'syz.2.11352': attribute type 10 has an invalid length. [ 542.964124][T29872] bond4: ARP target 9.0.0.0 is already present [ 542.970888][T29872] bond4: option arp_ip_target: invalid value (9) [ 542.980016][T29872] bond4 (unregistering): Released all slaves [ 543.144097][T29881] netlink: 844 bytes leftover after parsing attributes in process `syz.0.11389'. [ 543.494839][T29899] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 543.497392][T29901] netlink: 'syz.1.11398': attribute type 3 has an invalid length. [ 543.502869][T29899] syzkaller1: linktype set to 768 [ 543.933693][T29925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11409'. [ 545.395859][T30006] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11448'. [ 545.485657][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11449'. [ 545.966057][T30039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11464'. [ 546.047530][T30042] netlink: 'syz.2.11463': attribute type 11 has an invalid length. [ 546.160921][T30048] tun0: tun_chr_ioctl cmd 1074025681 [ 546.703116][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11483'. [ 546.801877][T30089] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11485'. [ 547.750822][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 548.544769][T30171] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11524'. [ 548.585259][T30171] netlink: 'syz.2.11524': attribute type 1 has an invalid length. [ 549.142711][T30207] team0: No ports can be present during mode change [ 549.201421][T30210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11543'. [ 549.307866][T30214] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11545'. [ 549.375903][T30219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11547'. [ 549.397079][T30221] netlink: 'syz.3.11549': attribute type 2 has an invalid length. [ 549.411437][T30219] netem: unknown loss type 4 [ 549.416371][T30219] netem: change failed [ 549.456157][T30224] netlink: 'syz.3.11549': attribute type 2 has an invalid length. [ 549.494909][T30221] !9: entered promiscuous mode [ 549.536903][T30224] !9: left promiscuous mode [ 549.603044][T30231] netlink: 'syz.0.11554': attribute type 8 has an invalid length. [ 549.635912][T30231] sch_fq: defrate 0 ignored. [ 549.711817][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11557'. [ 549.884864][T30249] ip6gre3: entered promiscuous mode [ 549.902713][T30249] ip6gre3: entered allmulticast mode [ 550.221943][T30271] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 551.104369][T30317] netlink: 'syz.4.11592': attribute type 58 has an invalid length. [ 551.137586][T30315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.156951][T30320] netlink: 'syz.4.11592': attribute type 58 has an invalid length. [ 551.258156][T30315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.403356][T30315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.510148][T30315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.679036][ T9733] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.726469][T28778] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.771501][T28778] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.822990][T28778] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.956882][T30340] __nla_validate_parse: 2 callbacks suppressed [ 551.956918][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11602'. [ 551.990661][T30340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11602'. [ 552.922720][T30377] netem: unknown loss type 0 [ 552.927777][T30377] netem: change failed [ 553.357972][T30398] vxlan0: entered promiscuous mode [ 553.363826][T30398] vxlan0: entered allmulticast mode [ 553.382070][T28778] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.409772][T28778] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.429200][T30402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11631'. [ 553.439084][T30402] netlink: 200 bytes leftover after parsing attributes in process `syz.1.11631'. [ 553.448941][T28778] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.448997][T28778] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.574321][T30454] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.11650'. [ 555.193354][T30477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11661'. [ 555.251552][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11662'. [ 555.256908][T30477] bond0: entered promiscuous mode [ 555.300988][T30477] : entered promiscuous mode [ 555.306246][T30477] bond_slave_1: entered promiscuous mode [ 555.341137][T30477] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 555.360124][T30477] dummy0: entered promiscuous mode [ 555.381679][T30477] batadv_slave_0: entered promiscuous mode [ 555.389552][T30477] batadv_slave_0: left promiscuous mode [ 555.417835][T30477] bond0: left promiscuous mode [ 555.430601][T30477] : left promiscuous mode [ 555.439944][T30477] bond_slave_1: left promiscuous mode [ 555.452896][T30477] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 555.476675][T30477] dummy0: left promiscuous mode [ 555.679371][ T10] lo speed is unknown, defaulting to 1000 [ 555.685417][ T10] sqz0: Port: 1 Link DOWN [ 555.691269][ T10] lo speed is unknown, defaulting to 1000 [ 555.912541][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11676'. [ 555.931098][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11676'. [ 555.940370][T30513] netlink: 58 bytes leftover after parsing attributes in process `syz.0.11676'. [ 557.776363][T30604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11719'. [ 557.878694][T30609] tun0: tun_chr_ioctl cmd 2147767507 [ 558.039333][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11725'. [ 558.093894][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11727'. [ 558.836669][T30655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11742'. [ 558.847436][T30655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11742'. [ 559.587371][T30699] netlink: 312 bytes leftover after parsing attributes in process `syz.1.11762'. [ 560.030067][T30727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11774'. [ 560.078244][T30729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11776'. [ 560.242944][T30740] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11781'. [ 560.396651][T30746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11784'. [ 561.422749][T30807] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 562.854005][T30886] xt_hashlimit: max too large, truncated to 1048576 [ 562.874766][T30886] Cannot find add_set index 3 as target [ 564.376443][T30959] __nla_validate_parse: 1 callbacks suppressed [ 564.376476][T30959] netlink: 180 bytes leftover after parsing attributes in process `syz.0.11883'. [ 564.561293][T30964] nbd: socks must be embedded in a SOCK_ITEM attr [ 564.589699][T30964] block nbd1: shutting down sockets [ 565.269131][T30995] IPVS: persistence engine module ip_vs_pe_ not found [ 565.366964][T31001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11903'. [ 565.965293][T31036] netlink: 'syz.4.11919': attribute type 11 has an invalid length. [ 565.974301][T31036] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.11919'. [ 566.329020][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11930'. [ 566.341155][T31060] vcan0: tx address claim with dlc 0 [ 566.591137][T31074] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 566.611257][T31074] syzkaller1: linktype set to 825 [ 567.095604][T31110] netlink: 'syz.3.11952': attribute type 10 has an invalid length. [ 567.164874][T31113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11952'. [ 567.229298][T31110] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 567.239421][T31113] bridge_slave_0: left promiscuous mode [ 567.247007][T31113] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.354766][T31113] bond0: (slave bridge0): Releasing backup interface [ 568.332705][T31156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.065777][T31184] erspan0: entered promiscuous mode [ 569.642837][T31207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11983'. [ 570.021980][ T5487] veth1_macvtap: left promiscuous mode [ 570.859265][T31255] tap0: tun_chr_ioctl cmd 1074025680 [ 570.985942][T31267] sctp: [Deprecated]: syz.1.12005 (pid 31267) Use of int in max_burst socket option. [ 570.985942][T31267] Use struct sctp_assoc_value instead [ 571.104259][T31275] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 572.885970][T31366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12050'. [ 572.895709][T31366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12050'. [ 572.906895][ T30] audit: type=1804 audit(1773738694.167:10): pid=31369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.12049" name="/newroot/2434/cgroup.controllers" dev="tmpfs" ino=12215 res=1 errno=0 [ 572.914549][T31370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12047'. [ 572.940359][T31366] netlink: 'syz.1.12050': attribute type 18 has an invalid length. [ 572.969137][ T30] audit: type=1800 audit(1773738694.197:11): pid=31369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12049" name="cgroup.controllers" dev="tmpfs" ino=12215 res=0 errno=0 [ 573.858810][T31427] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 574.311040][T31445] netpci0: tun_chr_ioctl cmd 1074025678 [ 574.340999][T31445] netpci0: group set to 0 [ 575.340742][T31509] netlink: 'syz.2.12113': attribute type 1 has an invalid length. [ 575.362112][T31509] netlink: 'syz.2.12113': attribute type 3 has an invalid length. [ 575.500916][T31513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.778964][T31527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12121'. [ 578.304605][T31637] netlink: 'syz.0.12170': attribute type 2 has an invalid length. [ 578.352810][T31637] !: entered promiscuous mode [ 578.375818][T31637] netlink: 'syz.0.12170': attribute type 2 has an invalid length. [ 578.525028][T31643] netlink: 'syz.4.12171': attribute type 6 has an invalid length. [ 579.253613][T31682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12188'. [ 579.704327][T31696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12195'. [ 580.710146][T31744] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12217'. [ 580.836736][T31748] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 580.850818][T31748] syzkaller1: linktype set to 823 [ 581.731952][T31778] block nbd1: server does not support multiple connections per device. [ 581.742216][T31778] block nbd1: shutting down sockets [ 581.942232][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12244'. [ 581.957998][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12244'. [ 581.983446][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12244'. [ 582.008247][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12244'. [ 582.029334][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12244'. [ 582.049901][T31801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12244'. [ 582.358684][T31826] netlink: 'syz.4.12256': attribute type 1 has an invalid length. [ 582.371515][T31827] netlink: 'syz.1.12255': attribute type 1 has an invalid length. [ 582.390657][T31826] netlink: 'syz.4.12256': attribute type 2 has an invalid length. [ 582.398913][T31827] netlink: 'syz.1.12255': attribute type 7 has an invalid length. [ 582.410656][T31827] netlink: 'syz.1.12255': attribute type 8 has an invalid length. [ 582.438526][T31827] netlink: 208 bytes leftover after parsing attributes in process `syz.1.12255'. [ 582.482318][T31827] NCSI netlink: No device for ifindex 1073545264 [ 582.628116][T31840] netlink: ct family unspecified [ 582.639732][T31840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.897841][T31858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12267'. [ 582.982716][T31864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12269'. [ 583.029166][T31864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12269'. [ 584.148036][T31923] netlink: 'syz.1.12291': attribute type 1 has an invalid length. [ 584.158764][T31923] netlink: 'syz.1.12291': attribute type 1 has an invalid length. [ 584.166761][T31923] netlink: 'syz.1.12291': attribute type 8 has an invalid length. [ 585.727129][T32019] batman_adv: batadv0: Adding interface: vlan3 [ 585.734455][T32019] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.767387][T32019] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 586.689118][T32078] netlink: 'syz.0.12361': attribute type 83 has an invalid length. [ 586.827445][T32085] wg1 speed is unknown, defaulting to 1000 [ 586.838947][T32085] gre0 speed is unknown, defaulting to 1000 [ 587.226410][T32085] lo speed is unknown, defaulting to 1000 [ 587.832994][T32085] wlan1 speed is unknown, defaulting to 1000 [ 587.934298][ T5843] block nbd1: Receive control failed (result -32) [ 589.081714][T32162] sctp: [Deprecated]: syz.1.12395 (pid 32162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.081714][T32162] Use struct sctp_sack_info instead [ 589.671371][T32174] nbd2: detected capacity change from 0 to 63 [ 589.677281][T32191] __nla_validate_parse: 8 callbacks suppressed [ 589.677300][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12406'. [ 589.685952][ T5143] block nbd2: Receive control failed (result -32) [ 589.701068][ T5843] block nbd2: Receive control failed (result -32) [ 589.702780][T28686] block nbd2: Receive control failed (result -32) [ 589.718774][T31988] block nbd2: Dead connection, failed to find a fallback [ 589.737596][T31988] block nbd2: shutting down sockets [ 589.740846][T32191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12406'. [ 589.747893][T31988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.764094][T31988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 589.774391][T31988] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.784176][T31988] Buffer I/O error on dev nbd2, logical block 1, async page read [ 589.792618][T31988] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.802795][T32191] netlink: 'syz.2.12406': attribute type 18 has an invalid length. [ 589.804319][T31988] Buffer I/O error on dev nbd2, logical block 2, async page read [ 589.832684][T31988] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.851790][T31988] Buffer I/O error on dev nbd2, logical block 3, async page read [ 589.870340][T31988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.890489][T31988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 589.898646][T31988] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.908859][T31988] Buffer I/O error on dev nbd2, logical block 1, async page read [ 589.931995][T31988] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 589.972703][T31988] Buffer I/O error on dev nbd2, logical block 2, async page read [ 589.992620][T31988] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.015704][T31988] Buffer I/O error on dev nbd2, logical block 3, async page read [ 590.080614][T31988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.110484][T31988] Buffer I/O error on dev nbd2, logical block 0, async page read [ 590.146780][T31988] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.192987][T31988] Buffer I/O error on dev nbd2, logical block 1, async page read [ 590.226698][T31988] ldm_validate_partition_table(): Disk read failed. [ 590.253856][T31988] Dev nbd2: unable to read RDB block 0 [ 590.267821][T32211] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12415'. [ 590.290238][T31988] nbd2: unable to read partition table [ 590.775395][T31988] ldm_validate_partition_table(): Disk read failed. [ 590.792030][T31988] Dev nbd2: unable to read RDB block 0 [ 590.799393][T31988] nbd2: unable to read partition table [ 591.008268][T32238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.015680][T32238] IPv6: NLM_F_CREATE should be set when creating new route [ 591.023057][T32238] IPv6: NLM_F_CREATE should be set when creating new route [ 591.030851][T32238] IPv6: NLM_F_CREATE should be set when creating new route [ 591.061463][T32238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.680019][T32277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12444'. [ 591.843619][T32285] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12449'. [ 592.916811][T32314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12462'. [ 592.960551][T32314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12462'. [ 593.097401][T32319] [ 593.099804][T32319] ====================================================== [ 593.106843][T32319] WARNING: possible circular locking dependency detected [ 593.114148][T32319] syzkaller #0 Not tainted [ 593.118581][T32319] ------------------------------------------------------ [ 593.125710][T32319] syz.4.12465/32319 is trying to acquire lock: [ 593.131975][T32319] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 593.141789][T32319] [ 593.141789][T32319] but task is already holding lock: [ 593.149274][T32319] ffff888059a69538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 593.158646][T32319] [ 593.158646][T32319] which lock already depends on the new lock. [ 593.158646][T32319] [ 593.169687][T32319] [ 593.169687][T32319] the existing dependency chain (in reverse order) is: [ 593.179150][T32319] [ 593.179150][T32319] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 593.186952][T32319] __mutex_lock+0x19f/0x1300 [ 593.192268][T32319] __ipv6_dev_mc_inc+0x4e/0xa50 [ 593.197650][T32319] __ipv6_sock_mc_join+0x503/0x750 [ 593.203296][T32319] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 593.209830][T32319] do_ipv6_setsockopt+0x16e9/0x3150 [ 593.215757][T32319] ipv6_setsockopt+0x59/0x170 [ 593.221243][T32319] do_sock_setsockopt+0x17c/0x1b0 [ 593.226840][T32319] __x64_sys_setsockopt+0x13d/0x1b0 [ 593.232665][T32319] do_syscall_64+0x14d/0xf80 [ 593.237992][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.244409][T32319] [ 593.244409][T32319] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 593.252239][T32319] lock_sock_nested+0x41/0x100 [ 593.257628][T32319] inet_shutdown+0x6a/0x390 [ 593.262774][T32319] nbd_mark_nsock_dead+0x2e9/0x560 [ 593.268964][T32319] sock_shutdown+0x15e/0x260 [ 593.274981][T32319] nbd_clear_sock+0x24/0x170 [ 593.280107][T32319] nbd_config_put+0x2dd/0x580 [ 593.285637][T32319] nbd_genl_connect+0x19d5/0x1cf0 [ 593.291394][T32319] genl_family_rcv_msg_doit+0x22a/0x330 [ 593.297668][T32319] genl_rcv_msg+0x61c/0x7a0 [ 593.302871][T32319] netlink_rcv_skb+0x232/0x4b0 [ 593.308342][T32319] genl_rcv+0x28/0x40 [ 593.312845][T32319] netlink_unicast+0x80f/0x9b0 [ 593.318490][T32319] netlink_sendmsg+0x813/0xb40 [ 593.323822][T32319] ____sys_sendmsg+0x972/0x9f0 [ 593.329195][T32319] ___sys_sendmsg+0x2a5/0x360 [ 593.334444][T32319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 593.339999][T32319] do_syscall_64+0x14d/0xf80 [ 593.345213][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.351717][T32319] [ 593.351717][T32319] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 593.359530][T32319] __mutex_lock+0x19f/0x1300 [ 593.364764][T32319] nbd_queue_rq+0x37b/0x1100 [ 593.369900][T32319] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 593.376241][T32319] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 593.383113][T32319] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 593.389742][T32319] blk_mq_run_hw_queue+0x348/0x4f0 [ 593.395661][T32319] blk_mq_dispatch_list+0xd16/0xe10 [ 593.401491][T32319] blk_mq_flush_plug_list+0x48d/0x570 [ 593.407505][T32319] __blk_flush_plug+0x3ed/0x4d0 [ 593.412885][T32319] __submit_bio+0x28d/0x580 [ 593.418002][T32319] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 593.424154][T32319] block_read_full_folio+0x599/0x830 [ 593.429961][T32319] filemap_read_folio+0x137/0x3b0 [ 593.435539][T32319] do_read_cache_folio+0x358/0x590 [ 593.441188][T32319] read_part_sector+0xb6/0x2b0 [ 593.446472][T32319] adfspart_check_ICS+0xa5/0xa40 [ 593.451931][T32319] bdev_disk_changed+0x7ba/0x1550 [ 593.457486][T32319] blkdev_get_whole+0x380/0x510 [ 593.463033][T32319] bdev_open+0x31e/0xd30 [ 593.467969][T32319] blkdev_open+0x470/0x610 [ 593.472999][T32319] do_dentry_open+0x785/0x14e0 [ 593.478464][T32319] vfs_open+0x3b/0x340 [ 593.483147][T32319] path_openat+0x2e08/0x3860 [ 593.488359][T32319] do_file_open+0x23e/0x4a0 [ 593.493410][T32319] do_sys_openat2+0x113/0x200 [ 593.498810][T32319] __x64_sys_openat+0x138/0x170 [ 593.504205][T32319] do_syscall_64+0x14d/0xf80 [ 593.509328][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.515740][T32319] [ 593.515740][T32319] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 593.522962][T32319] __mutex_lock+0x19f/0x1300 [ 593.528082][T32319] nbd_queue_rq+0xc6/0x1100 [ 593.533118][T32319] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 593.539273][T32319] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 593.546387][T32319] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 593.552988][T32319] blk_mq_run_hw_queue+0x348/0x4f0 [ 593.558741][T32319] blk_mq_dispatch_list+0xd16/0xe10 [ 593.564995][T32319] blk_mq_flush_plug_list+0x48d/0x570 [ 593.570994][T32319] __blk_flush_plug+0x3ed/0x4d0 [ 593.576455][T32319] __submit_bio+0x28d/0x580 [ 593.581489][T32319] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 593.587775][T32319] block_read_full_folio+0x599/0x830 [ 593.593591][T32319] filemap_read_folio+0x137/0x3b0 [ 593.599164][T32319] do_read_cache_folio+0x358/0x590 [ 593.605099][T32319] read_part_sector+0xb6/0x2b0 [ 593.610491][T32319] adfspart_check_ICS+0xa5/0xa40 [ 593.615965][T32319] bdev_disk_changed+0x7ba/0x1550 [ 593.621521][T32319] blkdev_get_whole+0x380/0x510 [ 593.626894][T32319] bdev_open+0x31e/0xd30 [ 593.631663][T32319] blkdev_open+0x470/0x610 [ 593.636725][T32319] do_dentry_open+0x785/0x14e0 [ 593.642022][T32319] vfs_open+0x3b/0x340 [ 593.646636][T32319] path_openat+0x2e08/0x3860 [ 593.651772][T32319] do_file_open+0x23e/0x4a0 [ 593.656997][T32319] do_sys_openat2+0x113/0x200 [ 593.662442][T32319] __x64_sys_openat+0x138/0x170 [ 593.667918][T32319] do_syscall_64+0x14d/0xf80 [ 593.673200][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.680080][T32319] [ 593.680080][T32319] -> #3 (set->srcu){.+.+}-{0:0}: [ 593.687227][T32319] __synchronize_srcu+0xca/0x3e0 [ 593.692705][T32319] elevator_switch+0x1e8/0x7a0 [ 593.698342][T32319] elevator_change+0x2cc/0x450 [ 593.703626][T32319] elevator_set_default+0x36c/0x430 [ 593.709445][T32319] blk_register_queue+0x366/0x430 [ 593.715085][T32319] __add_disk+0x677/0xd50 [ 593.720025][T32319] add_disk_fwnode+0xfb/0x480 [ 593.725225][T32319] nbd_dev_add+0x72c/0xb50 [ 593.730186][T32319] nbd_init+0x168/0x1f0 [ 593.734888][T32319] do_one_initcall+0x250/0x8d0 [ 593.740190][T32319] do_initcall_level+0x104/0x190 [ 593.745655][T32319] do_initcalls+0x59/0xa0 [ 593.750510][T32319] kernel_init_freeable+0x2a6/0x3e0 [ 593.756235][T32319] kernel_init+0x1d/0x1d0 [ 593.761195][T32319] ret_from_fork+0x51e/0xb90 [ 593.766462][T32319] ret_from_fork_asm+0x1a/0x30 [ 593.771780][T32319] [ 593.771780][T32319] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 593.779615][T32319] __mutex_lock+0x19f/0x1300 [ 593.784751][T32319] elevator_change+0x1b3/0x450 [ 593.790040][T32319] elevator_set_none+0xb5/0x140 [ 593.795411][T32319] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 593.801751][T32319] nbd_start_device+0x17f/0xb10 [ 593.807402][T32319] nbd_genl_connect+0x165b/0x1cf0 [ 593.813058][T32319] genl_family_rcv_msg_doit+0x22a/0x330 [ 593.819498][T32319] genl_rcv_msg+0x61c/0x7a0 [ 593.824970][T32319] netlink_rcv_skb+0x232/0x4b0 [ 593.830263][T32319] genl_rcv+0x28/0x40 [ 593.834850][T32319] netlink_unicast+0x80f/0x9b0 [ 593.840153][T32319] netlink_sendmsg+0x813/0xb40 [ 593.845538][T32319] ____sys_sendmsg+0x972/0x9f0 [ 593.850828][T32319] ___sys_sendmsg+0x2a5/0x360 [ 593.856040][T32319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 593.861675][T32319] do_syscall_64+0x14d/0xf80 [ 593.866917][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.873426][T32319] [ 593.873426][T32319] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 593.882046][T32319] blk_alloc_queue+0x546/0x680 [ 593.887703][T32319] __blk_mq_alloc_disk+0x197/0x390 [ 593.893388][T32319] nbd_dev_add+0x499/0xb50 [ 593.898519][T32319] nbd_init+0x168/0x1f0 [ 593.903298][T32319] do_one_initcall+0x250/0x8d0 [ 593.908766][T32319] do_initcall_level+0x104/0x190 [ 593.915302][T32319] do_initcalls+0x59/0xa0 [ 593.920623][T32319] kernel_init_freeable+0x2a6/0x3e0 [ 593.926444][T32319] kernel_init+0x1d/0x1d0 [ 593.931491][T32319] ret_from_fork+0x51e/0xb90 [ 593.936792][T32319] ret_from_fork_asm+0x1a/0x30 [ 593.942216][T32319] [ 593.942216][T32319] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 593.949632][T32319] __lock_acquire+0x15a5/0x2cf0 [ 593.955030][T32319] lock_acquire+0xf0/0x2e0 [ 593.960243][T32319] fs_reclaim_acquire+0x71/0x100 [ 593.965964][T32319] __kmalloc_cache_noprof+0x40/0x660 [ 593.972219][T32319] __ipv6_dev_mc_inc+0x44f/0xa50 [ 593.978071][T32319] __ipv6_sock_mc_join+0x503/0x750 [ 593.983870][T32319] inet6_addr_add+0x3cf/0xb20 [ 593.989274][T32319] inet6_rtm_newaddr+0xa17/0xe30 [ 593.994841][T32319] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 594.000406][T32319] netlink_rcv_skb+0x232/0x4b0 [ 594.005716][T32319] netlink_unicast+0x80f/0x9b0 [ 594.011017][T32319] netlink_sendmsg+0x813/0xb40 [ 594.016616][T32319] ____sys_sendmsg+0x972/0x9f0 [ 594.022031][T32319] ___sys_sendmsg+0x2a5/0x360 [ 594.027928][T32319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 594.033439][T32319] do_syscall_64+0x14d/0xf80 [ 594.038560][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.044986][T32319] [ 594.044986][T32319] other info that might help us debug this: [ 594.044986][T32319] [ 594.055445][T32319] Chain exists of: [ 594.055445][T32319] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 594.055445][T32319] [ 594.068610][T32319] Possible unsafe locking scenario: [ 594.068610][T32319] [ 594.076074][T32319] CPU0 CPU1 [ 594.081442][T32319] ---- ---- [ 594.086893][T32319] lock(&idev->mc_lock); [ 594.091495][T32319] lock(sk_lock-AF_INET6); [ 594.098716][T32319] lock(&idev->mc_lock); [ 594.105577][T32319] lock(fs_reclaim); [ 594.109912][T32319] [ 594.109912][T32319] *** DEADLOCK *** [ 594.109912][T32319] [ 594.118258][T32319] 3 locks held by syz.4.12465/32319: [ 594.123958][T32319] #0: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 594.133686][T32319] #1: ffff8880344a12e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x3be/0xb20 [ 594.143628][T32319] #2: ffff888059a69538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 594.153470][T32319] [ 594.153470][T32319] stack backtrace: [ 594.159529][T32319] CPU: 1 UID: 0 PID: 32319 Comm: syz.4.12465 Not tainted syzkaller #0 PREEMPT(full) [ 594.159548][T32319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.159559][T32319] Call Trace: [ 594.159568][T32319] [ 594.159576][T32319] dump_stack_lvl+0xe8/0x150 [ 594.159601][T32319] print_circular_bug+0x2e1/0x300 [ 594.159627][T32319] check_noncircular+0x12e/0x150 [ 594.159654][T32319] __lock_acquire+0x15a5/0x2cf0 [ 594.159675][T32319] ? rcu_is_watching+0x15/0xb0 [ 594.159698][T32319] ? __mutex_lock+0x319/0x1300 [ 594.159727][T32319] lock_acquire+0xf0/0x2e0 [ 594.159746][T32319] ? __kmalloc_cache_noprof+0x40/0x660 [ 594.159765][T32319] ? __pfx___mutex_lock+0x10/0x10 [ 594.159791][T32319] fs_reclaim_acquire+0x71/0x100 [ 594.159809][T32319] ? __kmalloc_cache_noprof+0x40/0x660 [ 594.159825][T32319] __kmalloc_cache_noprof+0x40/0x660 [ 594.159842][T32319] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 594.159860][T32319] __ipv6_dev_mc_inc+0x44f/0xa50 [ 594.159881][T32319] __ipv6_sock_mc_join+0x503/0x750 [ 594.159899][T32319] ? __local_bh_enable_ip+0xd0/0x130 [ 594.159922][T32319] inet6_addr_add+0x3cf/0xb20 [ 594.159942][T32319] inet6_rtm_newaddr+0xa17/0xe30 [ 594.159968][T32319] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 594.160000][T32319] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 594.160022][T32319] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 594.160046][T32319] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 594.160067][T32319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.160090][T32319] ? __lock_acquire+0x6b5/0x2cf0 [ 594.160113][T32319] netlink_rcv_skb+0x232/0x4b0 [ 594.160135][T32319] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.160158][T32319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.160183][T32319] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.160207][T32319] netlink_unicast+0x80f/0x9b0 [ 594.160230][T32319] ? __pfx_netlink_unicast+0x10/0x10 [ 594.160250][T32319] ? netlink_sendmsg+0x650/0xb40 [ 594.160270][T32319] ? skb_put+0x11b/0x210 [ 594.160295][T32319] netlink_sendmsg+0x813/0xb40 [ 594.160320][T32319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.160344][T32319] ? aa_sock_msg_perm+0xf1/0x1b0 [ 594.160365][T32319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 594.160385][T32319] ____sys_sendmsg+0x972/0x9f0 [ 594.160404][T32319] ? futex_unqueue+0x211/0x240 [ 594.160429][T32319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.160448][T32319] ? import_iovec+0x73/0xa0 [ 594.160481][T32319] ___sys_sendmsg+0x2a5/0x360 [ 594.160498][T32319] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.160516][T32319] ? futex_wait+0x29a/0x380 [ 594.160547][T32319] ? __fget_files+0x2a/0x420 [ 594.160571][T32319] ? __fget_files+0x3a0/0x420 [ 594.160597][T32319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 594.160614][T32319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 594.160632][T32319] ? rcu_is_watching+0x15/0xb0 [ 594.160658][T32319] do_syscall_64+0x14d/0xf80 [ 594.160681][T32319] ? trace_irq_disable+0x3b/0x150 [ 594.160704][T32319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.160721][T32319] ? clear_bhb_loop+0x40/0x90 [ 594.160738][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.160754][T32319] RIP: 0033:0x7f1f20b9c799 [ 594.160770][T32319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.160784][T32319] RSP: 002b:00007f1f21af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.160802][T32319] RAX: ffffffffffffffda RBX: 00007f1f20e15fa0 RCX: 00007f1f20b9c799 [ 594.160814][T32319] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 594.160825][T32319] RBP: 00007f1f20c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 594.160835][T32319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.160845][T32319] R13: 00007f1f20e16038 R14: 00007f1f20e15fa0 R15: 00007ffedf4beff8 [ 594.160863][T32319]