last executing test programs: 3m17.961985551s ago: executing program 3 (id=6823): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 3m17.76913664s ago: executing program 3 (id=6829): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x80, 0x4) 3m17.65135632s ago: executing program 3 (id=6830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={r0, &(0x7f0000000500)}, 0x20) 3m17.428744351s ago: executing program 3 (id=6836): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7c}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x4, 0x8, 0x409, 0x2, 0x8, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 3m17.249316787s ago: executing program 3 (id=6841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) 3m17.067120799s ago: executing program 3 (id=6846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) 3m2.01382203s ago: executing program 32 (id=6846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3e, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) 2m43.641819092s ago: executing program 4 (id=7568): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0xf4db158ec847dc81, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x10012}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 2m43.452691017s ago: executing program 4 (id=7573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']^\x00'}]}, 0x1c}}, 0x20000084) 2m43.366725944s ago: executing program 4 (id=7575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "baa9"}]}], {0x14}}, 0x84}}, 0x0) 2m43.299923248s ago: executing program 4 (id=7578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2m43.209422564s ago: executing program 4 (id=7580): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x3000}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2m43.123088373s ago: executing program 4 (id=7582): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 2m28.026288164s ago: executing program 33 (id=7582): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 1m13.041316701s ago: executing program 1 (id=9380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cfa6ff00000100000008000000140001800600010022000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1m12.942538896s ago: executing program 1 (id=9384): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) 1m12.781009575s ago: executing program 1 (id=9387): unshare(0x20000400) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind(r0, 0x0, 0x0) 1m12.589157282s ago: executing program 1 (id=9392): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f0000001040)="05faa1d13aeb87e8c95d3ae29c4589f75608cf4f96f66c23ae2a2e5200909984738c875ae7c648fa34b6c134239aa3a71086aeeab8d0e33bb78ee36adb1ff9ecb91db75ee6048b581b0fa9273005916e6c3bd9f4cb3d44291d503540a24fd7f44566f6969512e8f28be370e9", 0x6c}], 0x1000000000000255, 0x0) 1m12.401471615s ago: executing program 1 (id=9397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 1m12.201325097s ago: executing program 1 (id=9401): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 57.18036841s ago: executing program 34 (id=9401): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) 1.860592407s ago: executing program 7 (id=10773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.689698656s ago: executing program 7 (id=10778): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000040000180060001000a00000008000500"], 0x54}}, 0x0) 1.478346514s ago: executing program 7 (id=10781): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x1e4c}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) 1.267984712s ago: executing program 6 (id=10786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f000000000000000000000000000000000014002000fec8"], 0x5c}}, 0x0) 1.105059823s ago: executing program 2 (id=10787): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@getchain={0x34, 0x66, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xe}, {0x1ffe8, 0x4}, {0x6, 0xfff1}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x24000001) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.097385935s ago: executing program 6 (id=10788): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) connect$x25(r0, &(0x7f0000000a80), 0x12) 1.048888445s ago: executing program 0 (id=10789): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x3) 1.038121603s ago: executing program 5 (id=10790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, {0x20, 0x2, @in6={0x2d, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 946.057315ms ago: executing program 7 (id=10791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r1, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 927.660945ms ago: executing program 6 (id=10792): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) 894.628143ms ago: executing program 2 (id=10793): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r1], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 834.824609ms ago: executing program 0 (id=10794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 791.114214ms ago: executing program 5 (id=10795): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) close(0x3) 751.123959ms ago: executing program 7 (id=10796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010b52acdc00fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000aa060a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 749.690562ms ago: executing program 6 (id=10797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) 676.965417ms ago: executing program 2 (id=10798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 642.877549ms ago: executing program 0 (id=10799): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x5f, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 595.926486ms ago: executing program 5 (id=10800): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) 538.178047ms ago: executing program 7 (id=10801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 520.573876ms ago: executing program 2 (id=10802): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x7ffffffe, r1, &(0x7f0000000140)={0xf0002003}) 517.281347ms ago: executing program 6 (id=10803): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 420.108089ms ago: executing program 0 (id=10804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1, r0}, 0xc) 407.575647ms ago: executing program 5 (id=10805): unshare(0x20000400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000001280)=""/247, &(0x7f0000000000)=0xf7) 361.568767ms ago: executing program 2 (id=10806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}}}}}, 0x2e) 329.823879ms ago: executing program 6 (id=10807): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x4000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001e00)) 245.881506ms ago: executing program 5 (id=10808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0) 125.425108ms ago: executing program 0 (id=10809): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a0679450e88370200c54c1960b89c40ebb373", 0x39}, {&(0x7f0000000840)}, {0x0}], 0x3}, 0x810) close(r0) 66.435635ms ago: executing program 2 (id=10810): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 65.988414ms ago: executing program 5 (id=10811): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x42}}], 0x60}, 0x0) 0s ago: executing program 0 (id=10812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000203050000000000000000f90100000009000200"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.4.4757'. [ 332.770005][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4757'. [ 332.794968][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4757'. [ 332.815473][T15699] bridge_slave_1: left allmulticast mode [ 332.831126][T15699] bridge_slave_1: left promiscuous mode [ 332.846021][T15699] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.898290][T15699] bridge_slave_0: left allmulticast mode [ 332.912233][T15699] bridge_slave_0: left promiscuous mode [ 332.965971][T15699] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.035260][T15706] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.042680][T15707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4764'. [ 333.071406][T15699] team0: Port device bridge0 removed [ 333.218522][T15711] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4766'. [ 333.351670][T15717] geneve1: entered promiscuous mode [ 333.453069][T15719] netlink: 'syz.0.4770': attribute type 1 has an invalid length. [ 333.692173][T15724] xt_CT: No such helper "syz0" [ 333.982190][T15744] netlink: 'syz.2.4780': attribute type 21 has an invalid length. [ 334.531420][T15768] netlink: 'syz.4.4791': attribute type 1 has an invalid length. [ 334.592692][T15767] bond3 (unregistering): Released all slaves [ 334.805743][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.937157][T15787] netlink: 'syz.2.4801': attribute type 3 has an invalid length. [ 334.956929][T15787] netlink: 'syz.2.4801': attribute type 3 has an invalid length. [ 335.101529][T15792] __nla_validate_parse: 2 callbacks suppressed [ 335.101550][T15792] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4803'. [ 336.183168][T15829] netlink: 556 bytes leftover after parsing attributes in process `syz.4.4823'. [ 337.388178][T15877] netlink: 'syz.2.4843': attribute type 6 has an invalid length. [ 337.411151][T15877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4843'. [ 337.644172][T15885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.678230][T15888] tc_dump_action: action bad kind [ 337.929133][T15901] netlink: 'syz.2.4855': attribute type 11 has an invalid length. [ 337.964464][T15901] netlink: 'syz.2.4855': attribute type 11 has an invalid length. [ 337.996310][T15901] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4855'. [ 338.076429][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4859'. [ 338.106023][T15907] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4859'. [ 339.222818][ T29] audit: type=1800 audit(1784337719.126:5): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4878" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4901 res=0 errno=0 [ 339.321309][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.363251][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.407979][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.442132][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.668467][T15964] netlink: 'syz.0.4886': attribute type 10 has an invalid length. [ 339.668753][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4887'. [ 339.696564][T15964] ipvlan0: entered allmulticast mode [ 339.706394][T15969] xt_hashlimit: max too large, truncated to 1048576 [ 339.715372][T15964] veth0_vlan: entered allmulticast mode [ 339.734867][T15964] team0: Device ipvlan0 failed to register rx_handler [ 340.518208][T16004] netlink: 'syz.2.4906': attribute type 1 has an invalid length. [ 340.829797][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4914'. [ 341.617433][T16061] netlink: 'syz.0.4935': attribute type 1 has an invalid length. [ 341.638481][T16061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4935'. [ 342.250754][T16092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4949'. [ 342.289928][T16092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4949'. [ 342.374404][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4951'. [ 342.607898][T16109] SET target dimension over the limit! [ 342.807298][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'. [ 342.937980][T16122] netlink: 'syz.2.4962': attribute type 2 has an invalid length. [ 342.969194][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4962'. [ 343.841966][T16164] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 344.165786][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.192327][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4990'. [ 344.358296][T16184] netlink: 'syz.1.4991': attribute type 9 has an invalid length. [ 344.744217][T16206] openvswitch: netlink: Multiple metadata blocks provided [ 344.969313][T16218] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5007'. [ 345.172998][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5014'. [ 345.195145][T16226] netlink: set zone limit has 4 unknown bytes [ 345.229071][T16225] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 345.570902][T16239] xt_connbytes: Forcing CT accounting to be enabled [ 346.118787][T16257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5027'. [ 346.146968][T16257] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5027'. [ 346.193313][T16257] netlink: 'syz.1.5027': attribute type 6 has an invalid length. [ 346.223133][T16257] netlink: 'syz.1.5027': attribute type 5 has an invalid length. [ 346.249520][T16257] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5027'. [ 346.362001][T16266] openvswitch: netlink: Actions may not be safe on all matching packets [ 346.584708][T16272] xt_connbytes: Forcing CT accounting to be enabled [ 347.016403][T16287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5044'. [ 347.352570][T16300] netlink: 'syz.4.5050': attribute type 2 has an invalid length. [ 347.373596][T16300] netlink: 'syz.4.5050': attribute type 1 has an invalid length. [ 347.401471][T16300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5050'. [ 348.719896][T16354] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 349.061342][T16364] netlink: 'syz.0.5082': attribute type 1 has an invalid length. [ 349.069384][T16364] netlink: 'syz.0.5082': attribute type 12 has an invalid length. [ 349.098675][T16364] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5082'. [ 349.291751][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5086'. [ 349.336396][T16375] netlink: 'syz.2.5087': attribute type 4 has an invalid length. [ 349.567409][T16385] bond0: Error: Cannot enslave bond to itself. [ 349.801228][T16397] netlink: 'syz.2.5098': attribute type 3 has an invalid length. [ 349.817246][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5098'. [ 350.069365][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5106'. [ 350.178295][T16405] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 350.222170][T16405] bond4 (unregistering): Released all slaves [ 350.782410][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5122'. [ 351.690586][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5141'. [ 351.700531][T16479] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 351.788128][T16479] bond1 (unregistering): Released all slaves [ 352.650600][T16520] netlink: 'syz.0.5156': attribute type 7 has an invalid length. [ 352.682899][T16520] netlink: 'syz.0.5156': attribute type 8 has an invalid length. [ 352.730656][T16524] netlink: 'syz.1.5159': attribute type 28 has an invalid length. [ 352.910118][T16530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5161'. [ 352.939330][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5161'. [ 352.964341][T16530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5161'. [ 353.068890][T16537] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 353.398422][T16550] netlink: 'syz.4.5171': attribute type 1 has an invalid length. [ 353.427242][T16550] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5171'. [ 354.760100][T16601] Unknown options in mask 6 [ 354.776209][T16602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5196'. [ 355.027599][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5202'. [ 355.325839][T16621] xt_HMARK: spi-set and port-set can't be combined [ 355.606793][T16634] netlink: 'syz.0.5215': attribute type 3 has an invalid length. [ 355.635359][T16634] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5215'. [ 355.664836][T16638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.057488][T16653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5224'. [ 356.067138][T16654] netlink: 'syz.1.5222': attribute type 12 has an invalid length. [ 356.762241][T16679] netlink: 'syz.1.5233': attribute type 2 has an invalid length. [ 356.848611][T16679] D'|o: entered promiscuous mode [ 356.891047][T16685] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 357.303880][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5245'. [ 357.344069][T16694] bond5: option all_slaves_active: invalid value (127) [ 357.363894][T16694] bond5 (unregistering): Released all slaves [ 357.920146][T16724] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5256'. [ 358.315803][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.356151][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.374197][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.384068][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.405234][T16745] sctp: [Deprecated]: syz.3.5267 (pid 16745) Use of int in max_burst socket option. [ 358.405234][T16745] Use struct sctp_assoc_value instead [ 358.430493][T16744] gre1: entered promiscuous mode [ 358.635370][T16754] netlink: 'syz.1.5271': attribute type 2 has an invalid length. [ 359.311680][T16787] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 359.723036][T16806] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5297'. [ 359.981413][T16817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.320878][T16830] netlink: 'syz.4.5309': attribute type 6 has an invalid length. [ 360.385028][T16836] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 360.470470][T16838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.651582][T16849] netlink: 'syz.3.5319': attribute type 1 has an invalid length. [ 360.749149][T16846] bond2: option downdelay: invalid value (18446744073709551487) [ 360.782644][T16846] bond2: option downdelay: allowed values 0 - 2147483647 [ 360.834322][T16846] bond2 (unregistering): Released all slaves [ 360.979756][T16863] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 360.999296][T16863] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 361.025481][T16863] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 361.278942][T16874] dummy0: entered allmulticast mode [ 361.309756][T16873] dummy0: left allmulticast mode [ 361.832260][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5344'. [ 361.867327][T16904] netlink: 580 bytes leftover after parsing attributes in process `syz.3.5344'. [ 362.385975][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5359'. [ 362.468142][T16930] bond1: Unable to set up delay as MII monitoring is disabled [ 362.511395][T16930] bond1 (unregistering): Released all slaves [ 362.725692][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.741965][T16947] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5365'. [ 362.763443][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5366'. [ 362.793055][T16947] gretap0: entered promiscuous mode [ 362.881590][T16952] geneve1: entered promiscuous mode [ 363.006330][T16958] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5371'. [ 363.010325][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5370'. [ 363.045903][T16959] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 363.439482][T16978] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 363.471207][T16978] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 363.568268][T16985] netlink: 'syz.3.5384': attribute type 1 has an invalid length. [ 363.894464][T17001] xt_hashlimit: size too large, truncated to 1048576 [ 363.920635][T17001] xt_hashlimit: max too large, truncated to 1048576 [ 364.340612][T17023] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5403'. [ 365.268276][T17062] netlink: 'syz.0.5421': attribute type 1 has an invalid length. [ 365.423962][T17066] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 365.442429][T17068] netlink: 'syz.3.5423': attribute type 1 has an invalid length. [ 366.323307][T17106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5443'. [ 366.372234][T17110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5445'. [ 366.376258][T17112] xt_recent: Unsupported userspace flags (000000c5) [ 366.643255][T17124] netlink: 'syz.1.5452': attribute type 11 has an invalid length. [ 366.968048][T17138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.999098][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5460'. [ 367.873825][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5479'. [ 368.848760][T17227] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.5503'. [ 368.860866][T17229] SET target dimension over the limit! [ 369.409686][T17255] netlink: 'syz.3.5515': attribute type 1 has an invalid length. [ 369.489948][T17260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.559700][T17262] netlink: 'syz.0.5519': attribute type 13 has an invalid length. [ 369.578373][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5519'. [ 369.787690][T17273] xt_policy: neither incoming nor outgoing policy selected [ 370.290590][T17291] bond1: option lp_interval: invalid value (0) [ 370.298165][T17291] bond1: option lp_interval: allowed values 1 - 2147483647 [ 370.310842][T17291] bond1 (unregistering): Released all slaves [ 370.793580][T17318] ip6t_srh: unknown srh invflags 4000 [ 370.796370][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5545'. [ 370.838621][T17319] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5545'. [ 370.878400][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5545'. [ 370.912237][T17319] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5545'. [ 371.149267][T17329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.229333][T17333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5553'. [ 371.267228][T17333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.384948][T17329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.622823][T17345] bond2 (unregistering): Released all slaves [ 371.807005][T17329] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 371.838992][T17329] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 371.884674][T17329] bridge0: port 3(netdevsim1) entered disabled state [ 371.939830][T17329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.126584][T17372] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5572'. [ 372.140080][T17329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.240977][T17372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.290652][T17372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.347810][T17372] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 372.384940][T17372] bond0 (unregistering): Released all slaves [ 372.461381][T17382] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5577'. [ 372.757363][T17395] netlink: 'syz.3.5583': attribute type 16 has an invalid length. [ 372.760971][T17388] bond2: option min_links: invalid value (18446744073709551612) [ 372.775909][T17395] netlink: 'syz.3.5583': attribute type 17 has an invalid length. [ 372.785902][T17388] bond2: option min_links: allowed values 0 - 2147483647 [ 372.797031][T17388] bond2 (unregistering): Released all slaves [ 372.830442][ T3246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.925146][T17390] bond1: option xmit_hash_policy: invalid value (10) [ 372.947434][T17390] bond1 (unregistering): Released all slaves [ 373.099532][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.224791][ T3246] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.277534][T17413] netlink: 'syz.4.5591': attribute type 46 has an invalid length. [ 373.310775][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.524938][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5597'. [ 374.261165][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5613'. [ 374.293386][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5613'. [ 374.298277][T17463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5615'. [ 374.472095][T17472] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.550230][T17474] netlink: 'syz.1.5621': attribute type 29 has an invalid length. [ 374.585614][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5621'. [ 375.000518][T17499] xt_nat: multiple ranges no longer supported [ 375.302308][T17515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.343977][T17517] netlink: 'syz.0.5641': attribute type 1 has an invalid length. [ 375.386106][T17517] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5641'. [ 375.435721][T17520] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5642'. [ 375.714191][T17533] netlink: 'syz.2.5649': attribute type 10 has an invalid length. [ 375.776988][T17533] team0: Port device dummy0 added [ 377.021656][T17586] openvswitch: netlink: IP tunnel dst address not specified [ 377.251400][T17592] bond2: entered allmulticast mode [ 377.258991][T17592] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.560958][T17607] netlink: 'syz.2.5681': attribute type 9 has an invalid length. [ 377.703203][T17614] netlink: 'syz.3.5685': attribute type 2 has an invalid length. [ 378.597804][T17649] x_tables: duplicate entry at hook 3 [ 378.732640][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.740639][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.826541][T17660] netlink: 'syz.2.5706': attribute type 1 has an invalid length. [ 380.015241][T17719] netlink: 'syz.3.5734': attribute type 28 has an invalid length. [ 380.071712][T17719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5734'. [ 380.699624][T17751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.209049][T17777] netlink: 'syz.3.5761': attribute type 2 has an invalid length. [ 381.246866][T17777] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5761'. [ 381.480713][T17789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.482485][T17786] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 381.507064][T17788] netlink: 'syz.3.5766': attribute type 32 has an invalid length. [ 381.521655][T17786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 381.927251][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5775'. [ 381.957166][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5775'. [ 382.235728][T17820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5782'. [ 382.415977][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5787'. [ 383.052611][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5802'. [ 383.156509][T17870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5805'. [ 383.176529][T17870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5805'. [ 383.451836][T17879] netlink: 'syz.1.5810': attribute type 1 has an invalid length. [ 384.432339][T17927] netlink: 'syz.1.5834': attribute type 11 has an invalid length. [ 384.686023][T17938] netlink: 193 bytes leftover after parsing attributes in process `syz.1.5839'. [ 384.926420][T17953] netlink: 'syz.4.5847': attribute type 4 has an invalid length. [ 385.150964][T17961] netlink: 'syz.4.5851': attribute type 1 has an invalid length. [ 385.154767][T17963] __nla_validate_parse: 1 callbacks suppressed [ 385.154785][T17963] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5852'. [ 385.207686][T17961] netlink: 'syz.4.5851': attribute type 2 has an invalid length. [ 385.269761][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5854'. [ 385.537612][T17980] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5861'. [ 385.575294][T17980] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5861'. [ 385.585735][T17980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5861'. [ 386.936973][T18048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5893'. [ 386.968587][T18048] netlink: 'syz.1.5893': attribute type 1 has an invalid length. [ 386.993141][T18048] netlink: 'syz.1.5893': attribute type 5 has an invalid length. [ 387.022970][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5893'. [ 387.636889][T18077] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 387.860816][T18089] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.5916'. [ 387.892225][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5916'. [ 387.907535][T18089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5916'. [ 388.189085][T18103] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 388.189085][T18103] Please contact the netfilter-devel mailing list or update your nftables rules. [ 389.016725][T18141] netlink: 'syz.0.5940': attribute type 1 has an invalid length. [ 390.203042][T18196] __nla_validate_parse: 7 callbacks suppressed [ 390.203064][T18196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5968'. [ 390.307909][T18196] ip6tnl3: entered allmulticast mode [ 391.324332][T18251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.536659][T18257] gretap0: left promiscuous mode [ 391.546872][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5999'. [ 391.600616][T18257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.624438][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5999'. [ 391.713562][T18257] veth1_vlan: left promiscuous mode [ 391.741650][T18257] veth0_vlan: left promiscuous mode [ 391.762048][T18257] veth0_vlan: entered promiscuous mode [ 391.783712][T18269] netlink: 'syz.0.6004': attribute type 3 has an invalid length. [ 391.793272][T18257] veth1_vlan: entered promiscuous mode [ 391.805264][T18269] netlink: 'syz.0.6004': attribute type 3 has an invalid length. [ 391.815311][T18272] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6005'. [ 391.823894][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6004'. [ 391.829039][T18257] veth1_macvtap: left promiscuous mode [ 391.843557][T18257] veth0_macvtap: entered promiscuous mode [ 391.864721][T18257] veth1_macvtap: entered promiscuous mode [ 391.891371][T18257] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 391.903221][T18257] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 391.948716][T10545] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.992594][T18257] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 392.020859][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 392.150455][T18267] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 392.186186][T10545] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.226848][T18267] bond2 (unregistering): Released all slaves [ 392.333600][T18275] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 392.348625][T18275] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 392.373150][T18275] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 392.612994][T18299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6016'. [ 392.649970][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6016'. [ 393.227660][T18327] netlink: 'syz.3.6032': attribute type 32 has an invalid length. [ 393.281300][T18333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6035'. [ 393.963082][T18361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6045'. [ 394.668734][T18384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.934146][T18396] netlink: 'syz.0.6059': attribute type 1 has an invalid length. [ 395.095447][T18399] xt_hashlimit: invalid rate [ 395.200617][T18402] netlink: 'syz.2.6065': attribute type 7 has an invalid length. [ 395.257657][T18402] netlink: 'syz.2.6065': attribute type 8 has an invalid length. [ 395.478701][T18411] Cannot find add_set index 34 as target [ 395.593651][T18414] __nla_validate_parse: 2 callbacks suppressed [ 395.593672][T18414] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.6070'. [ 395.964375][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6078'. [ 396.260842][T18440] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 396.268685][T18440] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 396.375243][T18443] bond2: entered promiscuous mode [ 396.414520][T18443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.517184][T18452] netlink: 'syz.2.6090': attribute type 10 has an invalid length. [ 396.592886][T18454] SET target dimension over the limit! [ 396.689910][T18458] netlink: 'syz.2.6092': attribute type 1 has an invalid length. [ 396.714528][T18458] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6092'. [ 396.842373][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6095'. [ 396.929758][T18466] netlink: 'syz.1.6096': attribute type 1 has an invalid length. [ 396.952811][T18466] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6096'. [ 397.096974][T18476] netlink: 'syz.3.6100': attribute type 1 has an invalid length. [ 397.120008][T18476] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6100'. [ 397.145184][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6100'. [ 397.664443][T18499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6113'. [ 398.244471][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6122'. [ 398.332664][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6122'. [ 398.359293][T18521] netlink: 'syz.3.6122': attribute type 6 has an invalid length. [ 398.565803][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.272000][T18559] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 400.051413][T18595] netlink: 'syz.4.6158': attribute type 25 has an invalid length. [ 400.081934][T18595] netlink: 'syz.4.6158': attribute type 3 has an invalid length. [ 400.122089][T18601] netlink: 'syz.1.6160': attribute type 3 has an invalid length. [ 400.138582][T18601] netlink: 'syz.1.6160': attribute type 3 has an invalid length. [ 400.522578][T18619] netlink: 'syz.1.6169': attribute type 1 has an invalid length. [ 400.610169][T18622] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 400.650494][T18622] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.683911][ T5819] IPVS: starting estimator thread 0... [ 400.795700][T18628] IPVS: using max 27 ests per chain, 64800 per kthread [ 400.827560][T18632] geneve5: entered allmulticast mode [ 400.995116][T18642] __nla_validate_parse: 4 callbacks suppressed [ 400.995138][T18642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6181'. [ 401.376676][T18656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6189'. [ 401.471283][T18660] bond0: option arp_validate: invalid value (55553) [ 401.874567][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6201'. [ 402.658112][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6220'. [ 402.663456][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6221'. [ 402.947049][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.409480][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6237'. [ 403.417036][T18756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6238'. [ 403.479452][T18759] netlink: 'syz.3.6239': attribute type 12 has an invalid length. [ 403.624013][T18766] netlink: 'syz.0.6242': attribute type 8 has an invalid length. [ 403.648357][T18767] netlink: 'syz.1.6241': attribute type 3 has an invalid length. [ 403.710279][T18767] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6241'. [ 404.440272][T18802] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 404.805335][T18818] netlink: 'syz.3.6262': attribute type 1 has an invalid length. [ 405.227065][T18838] pim6reg: entered allmulticast mode [ 405.240639][T18840] netlink: 'syz.3.6272': attribute type 21 has an invalid length. [ 405.796022][T18868] netlink: 'syz.2.6284': attribute type 2 has an invalid length. [ 405.806747][T18870] netlink: 768 bytes leftover after parsing attributes in process `syz.0.6285'. [ 405.829758][T18868] netlink: 'syz.2.6284': attribute type 1 has an invalid length. [ 405.856153][T18868] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6284'. [ 406.304768][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6296'. [ 406.319219][T18892] netlink: 'syz.2.6296': attribute type 2 has an invalid length. [ 406.407996][T18894] bond3: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 406.418455][T18894] bond3: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 406.428341][T18894] bond3: entered allmulticast mode [ 406.592287][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6300'. [ 407.051956][T18930] ip6gre3: entered allmulticast mode [ 407.144286][T18934] netlink: 'syz.4.6316': attribute type 10 has an invalid length. [ 408.185732][T18986] netlink: 'syz.3.6342': attribute type 21 has an invalid length. [ 408.212067][T18986] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6342'. [ 408.253137][T18986] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6342'. [ 408.515460][T19000] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6349'. [ 409.028345][T19026] validate_nla: 1 callbacks suppressed [ 409.028366][T19026] netlink: 'syz.3.6362': attribute type 1 has an invalid length. [ 409.070007][T19026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6362'. [ 409.301761][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6366'. [ 409.334426][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6366'. [ 409.527848][T19049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 409.777787][T19062] netlink: 400 bytes leftover after parsing attributes in process `syz.2.6377'. [ 409.796902][T19064] netlink: 'syz.0.6379': attribute type 4 has an invalid length. [ 409.935346][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6380'. [ 410.017865][T19069] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 410.330101][T19084] batadv1: entered promiscuous mode [ 410.345310][T19084] batadv1: entered allmulticast mode [ 410.370265][T19084] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 410.530785][T19096] xt_hashlimit: max too large, truncated to 1048576 [ 410.572845][T19096] xt_hashlimit: overflow, try lower: 17592186044421/511 [ 411.239408][T19128] netlink: 'syz.2.6406': attribute type 1 has an invalid length. [ 411.275866][T19128] netlink: 'syz.2.6406': attribute type 2 has an invalid length. [ 411.323729][T19135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.207987][T19177] __nla_validate_parse: 4 callbacks suppressed [ 412.208008][T19177] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6425'. [ 412.292766][T19175] lo speed is unknown, defaulting to 1000 [ 412.353880][T19175] lo speed is unknown, defaulting to 1000 [ 412.428604][T19175] lo speed is unknown, defaulting to 1000 [ 412.690645][T19194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6432'. [ 412.731527][T19194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6432'. [ 413.077835][T19209] xt_TPROXY: Can be used only with -p tcp or -p udp [ 413.358549][T19222] netlink: 'syz.2.6445': attribute type 2 has an invalid length. [ 413.642255][T19232] xt_l2tp: v2 sid > 0xffff: 262144 [ 413.778598][T19238] netlink: 'syz.2.6453': attribute type 1 has an invalid length. [ 413.984930][ T5819] lo speed is unknown, defaulting to 1000 [ 413.998196][T19175] infiniband s: set down [ 414.010250][T19175] infiniband s: added lo [ 414.074599][T19175] smbdirect: ib_dev[s]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 414.090271][T19175] smbdirect: ib_dev[s]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 414.108193][T19175] smbdirect: ib_dev[s]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 414.132744][T19253] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6460'. [ 414.180108][T19175] RDS/IB: s: added [ 414.191985][T19175] smc: adding ib device s with port count 1 [ 414.199724][T19175] smc: ib device s port 1 has no pnetid [ 414.214630][ T5819] lo speed is unknown, defaulting to 1000 [ 414.252643][T19175] lo speed is unknown, defaulting to 1000 [ 414.313763][T19262] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 414.422115][T19264] netlink: 'syz.3.6465': attribute type 21 has an invalid length. [ 414.452696][T19264] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6465'. [ 414.468106][T19264] netlink: 'syz.3.6465': attribute type 4 has an invalid length. [ 414.530511][T19264] netlink: 'syz.3.6465': attribute type 3 has an invalid length. [ 414.548504][T19264] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6465'. [ 414.950137][T19286] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 415.427158][T19175] lo speed is unknown, defaulting to 1000 [ 415.763921][T19312] netlink: 'syz.2.6489': attribute type 5 has an invalid length. [ 415.774976][T19312] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6489'. [ 415.934085][T19319] netlink: 'syz.2.6492': attribute type 2 has an invalid length. [ 417.427259][T19341] openvswitch: netlink: EtherType 50a is less than min 600 [ 418.537828][T19175] lo speed is unknown, defaulting to 1000 [ 418.737975][T19353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6508'. [ 418.767154][T19353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6508'. [ 418.926823][T19361] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 418.947910][T19361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.385204][T19175] lo speed is unknown, defaulting to 1000 [ 419.469874][T19383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6523'. [ 419.681345][T19392] xt_TCPMSS: Only works on TCP SYN packets [ 419.808217][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6530'. [ 419.817449][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6530'. [ 420.202044][T19175] lo speed is unknown, defaulting to 1000 [ 420.503546][T19427] netlink: 'syz.1.6543': attribute type 5 has an invalid length. [ 420.554061][T19427] ip6erspan0: entered allmulticast mode [ 420.861586][T19301] smc: removing ib device s [ 420.869029][T19441] openvswitch: netlink: IP tunnel TTL not specified. [ 420.937125][T19443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6551'. [ 420.982033][T19301] smbdirect: ib_dev[s] removed [ 422.265897][T19493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6576'. [ 422.277802][T19493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6576'. [ 422.343583][T19496] netlink: 'syz.0.6578': attribute type 12 has an invalid length. [ 422.363371][T19496] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6578'. [ 422.560592][T19497] bond4: option mode: invalid value (254) [ 422.593900][T19497] bond4 (unregistering): Released all slaves [ 422.913283][T19518] xt_hashlimit: size too large, truncated to 1048576 [ 422.933350][T19518] xt_hashlimit: max too large, truncated to 1048576 [ 422.976164][T19521] netlink: 'syz.2.6590': attribute type 15 has an invalid length. [ 422.994395][T19521] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6590'. [ 423.396053][T19537] netlink: 'syz.2.6598': attribute type 21 has an invalid length. [ 423.744072][T19548] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 424.151574][T19569] bond0: (slave bond_slave_0): Releasing backup interface [ 424.215909][T19569] bond0: (slave bond_slave_1): Releasing backup interface [ 424.279169][T19569] team0: Port device team_slave_0 removed [ 424.346553][T19569] team0: Port device team_slave_1 removed [ 424.374084][T19569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.412618][T19569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.447168][T19569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.480380][T19581] __nla_validate_parse: 1 callbacks suppressed [ 424.480402][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6619'. [ 424.911825][T19601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6628'. [ 424.931845][T19601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6628'. [ 424.971991][T19605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6630'. [ 425.054643][T19607] sctp: [Deprecated]: syz.3.6631 (pid 19607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.054643][T19607] Use struct sctp_sack_info instead [ 425.320447][T19620] netlink: 'syz.3.6637': attribute type 5 has an invalid length. [ 425.339134][T19621] bridge_slave_0: entered promiscuous mode [ 425.355923][T19621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 425.382522][T19625] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6639'. [ 425.409221][T19625] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6639'. [ 425.559664][T19632] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6643'. [ 425.599092][T19632] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6643'. [ 425.664069][T19638] tc_dump_action: action bad kind [ 425.958313][T19653] netlink: 712 bytes leftover after parsing attributes in process `syz.4.6652'. [ 426.004771][T19653] netlink: 5504 bytes leftover after parsing attributes in process `syz.4.6652'. [ 426.197638][T19664] x_tables: duplicate underflow at hook 1 [ 426.907216][T19705] netlink: 'syz.0.6673': attribute type 2 has an invalid length. [ 427.009173][T19705] : entered promiscuous mode [ 427.196968][T19717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.204361][T19717] IPv6: NLM_F_CREATE should be set when creating new route [ 427.763525][T19747] bond4: entered promiscuous mode [ 427.770952][T19747] bond4: entered allmulticast mode [ 427.777185][T19747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.792560][T19753] netlink: 'syz.2.6696': attribute type 21 has an invalid length. [ 428.213161][T19774] SET target dimension over the limit! [ 428.275348][T19777] bridge_slave_0: left allmulticast mode [ 428.320222][T19777] bridge_slave_0: left promiscuous mode [ 428.351790][T19777] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.427919][T19777] bridge_slave_1: left allmulticast mode [ 428.441391][T19777] bridge_slave_1: left promiscuous mode [ 428.460047][T19777] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.482227][T19777] bond0: (slave bond_slave_0): Releasing backup interface [ 428.525168][T19777] bond0: (slave bond_slave_1): Releasing backup interface [ 428.554662][T19777] team0: Port device team_slave_0 removed [ 428.566519][T19777] team0: Port device team_slave_1 removed [ 428.580149][T19777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.603947][T19777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.622985][T19777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 429.478976][T19832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.119015][T19870] __nla_validate_parse: 6 callbacks suppressed [ 430.119037][T19870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6753'. [ 430.188622][T19864] bond3: option primary_reselect: invalid value (6) [ 430.217698][T19864] bond3 (unregistering): Released all slaves [ 430.503718][T19886] gtp0: entered allmulticast mode [ 430.611568][T19892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6764'. [ 430.950596][T19909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6773'. [ 431.010973][T19915] netlink: 'syz.4.6776': attribute type 9 has an invalid length. [ 431.413765][T19932] netlink: 34 bytes leftover after parsing attributes in process `syz.3.6784'. [ 431.585814][T19943] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.791232][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6796'. [ 432.177607][T19973] netlink: 'syz.0.6804': attribute type 7 has an invalid length. [ 432.213073][T19973] netlink: 'syz.0.6804': attribute type 8 has an invalid length. [ 432.306604][T19980] netlink: 'syz.2.6808': attribute type 11 has an invalid length. [ 432.490416][T19989] netlink: 'syz.3.6812': attribute type 1 has an invalid length. [ 432.500749][T19989] netlink: 'syz.3.6812': attribute type 1 has an invalid length. [ 432.522801][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6813'. [ 432.545072][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6813'. [ 432.693891][T19999] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.629152][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6840'. [ 434.009633][T20044] veth5: entered allmulticast mode [ 434.029001][T20061] netlink: 'syz.1.6848': attribute type 8 has an invalid length. [ 434.050649][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6850'. [ 434.247861][T20069] netlink: 'syz.4.6852': attribute type 1 has an invalid length. [ 434.289798][T20069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6852'. [ 434.544455][T20081] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.467913][T20138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.498317][T20138] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 435.683246][T20151] __nla_validate_parse: 3 callbacks suppressed [ 435.683291][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6891'. [ 435.837572][T20155] dvmrp8: entered allmulticast mode [ 435.968005][T20166] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 436.196667][T20180] netlink: 'syz.4.6906': attribute type 1 has an invalid length. [ 436.204624][T20180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6906'. [ 436.677002][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6918'. [ 436.802928][T20211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6922'. [ 436.857450][T20215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6924'. [ 437.342830][T20241] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6937'. [ 437.962850][T20267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.013758][T20271] bridge5: entered allmulticast mode [ 438.098142][T20274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.250257][T20281] netlink: 'syz.4.6958': attribute type 2 has an invalid length. [ 438.343800][T20285] netlink: 'syz.2.6959': attribute type 3 has an invalid length. [ 438.396684][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6960'. [ 438.426862][T20287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6960'. [ 438.543696][T20294] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6963'. [ 438.946060][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6974'. [ 438.955928][T20316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.064176][T20322] netlink: 'syz.1.6977': attribute type 21 has an invalid length. [ 439.094728][T20322] netlink: 'syz.1.6977': attribute type 5 has an invalid length. [ 439.107505][T20322] netlink: 'syz.1.6977': attribute type 6 has an invalid length. [ 439.444774][T20340] vlan0: left promiscuous mode [ 440.054072][T20364] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 440.062342][T20364] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 440.169253][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.988533][T20410] __nla_validate_parse: 5 callbacks suppressed [ 440.988555][T20410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7019'. [ 441.027758][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7021'. [ 441.364590][T20434] openvswitch: netlink: IPv4 tunnel dst address is zero [ 441.673625][T20447] ip6tnl4: entered allmulticast mode [ 441.682837][T20450] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7037'. [ 442.063226][T20471] x_tables: ip_tables: ah match: only valid for protocol 51 [ 442.378390][T20487] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7055'. [ 442.434475][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7055'. [ 442.467093][T20487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7055'. [ 442.938256][T20519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7071'. [ 443.057341][T20525] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7074'. [ 443.109373][T20525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.297986][T20540] netlink: 'syz.4.7081': attribute type 10 has an invalid length. [ 443.315649][T20540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7081'. [ 443.613524][T20555] netlink: 'syz.1.7087': attribute type 1 has an invalid length. [ 444.087343][T20581] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 444.354659][T20595] netlink: 'syz.4.7107': attribute type 1 has an invalid length. [ 444.375031][T20595] netlink: 'syz.4.7107': attribute type 2 has an invalid length. [ 445.034001][T20632] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7125'. [ 445.066888][T20632] Zero length message leads to an empty skb [ 446.097525][T20688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7153'. [ 446.308101][T20699] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7160'. [ 446.580357][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7165'. [ 446.759397][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7171'. [ 447.079304][T20739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7177'. [ 447.368245][T20757] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7185'. [ 447.544647][T20766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.694774][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7215'. [ 448.849775][T20830] erspan0: left allmulticast mode [ 449.070213][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.080870][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.091025][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.104459][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.116361][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.158805][T20830] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.372299][T20830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.399974][T20830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.468841][T20830] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 449.476590][T20830] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 449.496245][T20830] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 449.503116][T20830] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 449.653543][T20830] bridge3: left promiscuous mode [ 449.659057][T20830] bridge3: left allmulticast mode [ 449.666591][T20830] ip6tnl2: left allmulticast mode [ 449.674947][T20830] ip6tnl3: left allmulticast mode [ 449.686347][T20830] bridge5: left allmulticast mode [ 449.697400][T20830] ip6tnl4: left allmulticast mode [ 449.703757][T20828] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 449.712449][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.767692][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 449.805107][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.858745][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 449.887208][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.921888][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 449.951840][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.975655][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 450.880851][T20896] macsec1: entered promiscuous mode [ 450.892114][T20896] bridge0: entered promiscuous mode [ 451.209161][ T50] Bluetooth: hci5: command tx timeout [ 451.603916][T20840] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.611346][T20840] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.622020][T20840] bridge_slave_0: entered allmulticast mode [ 451.636275][T20840] bridge_slave_0: entered promiscuous mode [ 451.656203][T20840] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.673734][T20840] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.691297][T20840] bridge_slave_1: entered allmulticast mode [ 451.734064][T20840] bridge_slave_1: entered promiscuous mode [ 451.792364][T20939] sit3: entered promiscuous mode [ 451.977729][T20840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.021704][T20840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.095313][T20840] team0: Port device team_slave_0 added [ 452.149138][T20840] team0: Port device team_slave_1 added [ 452.190851][T20960] netlink: 'syz.4.7265': attribute type 1 has an invalid length. [ 452.219874][T20962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.234737][T20960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.272061][T20840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.288585][T20964] netlink: 'syz.2.7267': attribute type 4 has an invalid length. [ 452.296934][T20840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.345040][T20964] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7267'. [ 452.367598][T20840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.427247][T20964] .`: renamed from bond0 (while UP) [ 452.462421][T20840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.485060][T20840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.563537][T20840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.825320][T20840] hsr_slave_0: entered promiscuous mode [ 452.851684][T20840] hsr_slave_1: entered promiscuous mode [ 452.862750][T20840] debugfs: 'hsr0' already exists in 'hsr' [ 452.877264][T20840] Cannot create hsr debugfs directory [ 453.286397][ T50] Bluetooth: hci5: command tx timeout [ 453.512134][T21017] sock: sock_timestamping_bind_phc: sock not bind to device [ 453.594471][T21023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.817768][T20840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 453.861633][T20840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.884801][T20840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 453.921737][T20840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.937486][T20840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 453.961305][T20840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.991584][T20840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.023877][T20840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.348055][T20840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.438963][T20840] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.483400][T21063] pim6reg: entered allmulticast mode [ 454.527383][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.534610][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.562315][T21063] pim6reg: left allmulticast mode [ 454.604093][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.612474][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.864778][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7307'. [ 455.094327][T21089] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7311'. [ 455.378730][ T50] Bluetooth: hci5: command tx timeout [ 455.470690][T21107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7318'. [ 455.867739][T21119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7322'. [ 455.902344][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7323'. [ 456.365249][ T5643] udevd[5643]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 456.566124][T20840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.823255][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7336'. [ 457.109028][ T3246] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.141148][ T3246] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.160327][ T3246] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.221911][ T3246] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.379431][T20840] veth0_vlan: entered promiscuous mode [ 457.412370][T20840] veth1_vlan: entered promiscuous mode [ 457.448971][ T50] Bluetooth: hci5: command tx timeout [ 457.473609][T20840] veth0_macvtap: entered promiscuous mode [ 457.493063][T20840] veth1_macvtap: entered promiscuous mode [ 457.529604][T20840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.543265][T20840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.601901][ T3246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.628499][ T3246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.651425][ T3246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.677995][ T3246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.694647][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7354'. [ 457.947642][ T3246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.970093][ T3246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.071396][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.098964][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.682664][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7370'. [ 459.182573][T21248] netlink: 'syz.5.7379': attribute type 11 has an invalid length. [ 459.510374][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7387'. [ 459.748093][T21279] nbd: socks must be embedded in a SOCK_ITEM attr [ 460.987638][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7422'. [ 461.052113][T21342] Bluetooth: MGMT ver 1.23 [ 461.281489][T21350] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 461.326103][T21350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.976428][T21387] netlink: 'syz.2.7445': attribute type 28 has an invalid length. [ 463.905204][T21480] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7493'. [ 464.107140][ T48] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.138918][ T48] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.170898][ T48] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.201744][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.974885][T21533] bridge_slave_0: left promiscuous mode [ 465.019372][T21533] geneve1: left promiscuous mode [ 465.049674][T21533] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 465.060079][T21533] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 465.073091][T21533] ip6tnl1: left allmulticast mode [ 465.081729][T21533] bridge0: left allmulticast mode [ 465.094800][T21533] gre1: left promiscuous mode [ 465.120112][T21533] bond2: left promiscuous mode [ 465.133748][T21533] bond3: left allmulticast mode [ 465.139497][T21533] ip6erspan0: left allmulticast mode [ 465.162161][T21533] bond4: left promiscuous mode [ 465.167588][T21533] bond4: left allmulticast mode [ 465.176638][T21533] macsec1: left promiscuous mode [ 465.228922][ T722] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.243909][ T722] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.268678][ T722] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.298726][ T722] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.342843][ T722] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.368774][ T722] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.394458][T21550] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.460563][ T722] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.482607][ T722] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.526794][T21550] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.630690][T21550] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.896625][T21550] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.157439][ T3246] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.332699][T21550] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.492020][T21607] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7551'. [ 466.525775][T21607] C: renamed from veth1_to_team [ 466.654457][T21616] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.453489][T21656] vlan2: entered promiscuous mode [ 467.458796][T21656] bridge0: entered promiscuous mode [ 467.859379][T21682] netlink: 'syz.0.7585': attribute type 24 has an invalid length. [ 467.942797][T21684] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7586'. [ 467.955048][T21684] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7586'. [ 468.085060][T21693] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7590'. [ 468.311174][T21706] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7597'. [ 468.630007][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7605'. [ 469.041386][T21746] netlink: 'syz.1.7616': attribute type 1 has an invalid length. [ 469.428340][T21759] "syz.5.7622" (21759) uses obsolete ecb(arc4) skcipher [ 469.687495][T21782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7633'. [ 469.919158][T21792] netlink: 'syz.1.7639': attribute type 2 has an invalid length. [ 470.885759][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.902465][T21828] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7656'. [ 470.926027][T21828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7656'. [ 470.938361][T21828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7656'. [ 471.077132][T21832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7658'. [ 471.160447][T21836] netlink: 'syz.0.7659': attribute type 2 has an invalid length. [ 471.426721][T21848] xt_cgroup: invalid path, errno=-2 [ 471.756371][T21860] IPv6: sit2: Disabled Multicast RS [ 472.626353][T21894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7687'. [ 473.659352][T21943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7709'. [ 473.970128][T21961] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7717'. [ 474.086149][T21967] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7721'. [ 474.168214][T21973] netlink: 'syz.0.7724': attribute type 10 has an invalid length. [ 474.222767][T21977] netlink: 'syz.0.7724': attribute type 10 has an invalid length. [ 474.230257][T21973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.259489][T21973] team0: Port device netdevsim1 added [ 474.958879][T22008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7741'. [ 475.017960][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7742'. [ 475.671498][T22045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.033357][T22095] IPv6: Can't replace route, no match found [ 477.180131][T22101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7785'. [ 477.282347][T22101] ipvlan2: entered allmulticast mode [ 477.293284][T22101] gretap0: entered allmulticast mode [ 477.676851][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7791'. [ 477.810525][T22119] netlink: 'syz.2.7793': attribute type 2 has an invalid length. [ 477.854929][T22119] : entered promiscuous mode [ 478.244109][T22137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7802'. [ 478.328556][T22139] tipc: Started in network mode [ 478.349905][T22139] tipc: Node identity 002d0000000000000040ffffe0000001, cluster identity 4711 [ 478.361696][T22139] tipc: Enabling of bearer rejected, failed to enable media [ 478.607165][T22157] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7812'. [ 478.987012][T22175] tipc: Started in network mode [ 478.992134][T22175] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 479.002264][T22175] tipc: Enabling of bearer rejected, failed to enable media [ 479.027623][T22177] netlink: 'syz.5.7821': attribute type 12 has an invalid length. [ 479.036766][T22177] netlink: 'syz.5.7821': attribute type 29 has an invalid length. [ 479.047098][T22177] netlink: 'syz.5.7821': attribute type 7 has an invalid length. [ 479.054890][T22177] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7821'. [ 480.268285][T22225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.839255][T10542] IPVS: starting estimator thread 0... [ 480.935775][T22249] IPVS: using max 25 ests per chain, 60000 per kthread [ 481.155639][T22266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7865'. [ 482.164722][T22299] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 482.476615][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7886'. [ 482.970891][T22343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7901'. [ 483.113198][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7904'. [ 483.122351][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7904'. [ 483.137659][T22349] netlink: 'syz.5.7904': attribute type 14 has an invalid length. [ 483.150234][T22349] netlink: 'syz.5.7904': attribute type 13 has an invalid length. [ 483.160834][T22351] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 483.192093][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.221174][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.233076][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.244049][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.252091][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.648905][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7912'. [ 484.671626][T22424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7934'. [ 485.200854][T22352] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.209020][T22352] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.216817][T22352] bridge_slave_0: entered allmulticast mode [ 485.225027][T22352] bridge_slave_0: entered promiscuous mode [ 485.236114][T22352] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.243513][T22352] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.253383][T22352] bridge_slave_1: entered allmulticast mode [ 485.268570][T22352] bridge_slave_1: entered promiscuous mode [ 485.288754][ T5637] Bluetooth: hci6: command tx timeout [ 485.438611][T22352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.467054][T22352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.620809][T22352] team0: Port device team_slave_0 added [ 485.654404][T22466] ipvlan2: entered promiscuous mode [ 485.662892][T22466] bridge0: port 3(ipvlan2) entered blocking state [ 485.670210][T22466] bridge0: port 3(ipvlan2) entered disabled state [ 485.677463][T22466] ipvlan2: entered allmulticast mode [ 485.682824][T22466] bridge0: entered allmulticast mode [ 485.697124][T22466] ipvlan2: left allmulticast mode [ 485.721216][T22466] bridge0: left allmulticast mode [ 485.788827][T22352] team0: Port device team_slave_1 added [ 485.832370][T22352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.839824][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.908971][T22352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.940735][T22352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.961421][T22352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.017559][T22352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.198608][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7961'. [ 486.202180][T22352] hsr_slave_0: entered promiscuous mode [ 486.226362][T22352] hsr_slave_1: entered promiscuous mode [ 486.233405][T22352] debugfs: 'hsr0' already exists in 'hsr' [ 486.240195][T22352] Cannot create hsr debugfs directory [ 486.250875][T22485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7961'. [ 486.291538][T22490] bridge_slave_1: invalid flags given to default FDB implementation [ 486.663760][T22508] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7973'. [ 487.141122][T22352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.175351][T22352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.200006][T22352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.237512][T22352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.258492][T22352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.306494][T22352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.325073][T22352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 487.347452][T22352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.375801][ T5637] Bluetooth: hci6: command tx timeout [ 487.633495][T22352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.707504][T22352] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.769286][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.776510][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.815912][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.823221][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.844626][T22560] netlink: 'syz.0.7990': attribute type 23 has an invalid length. [ 487.980380][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7994'. [ 488.006271][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7994'. [ 488.867047][T22598] netlink: 'syz.5.8006': attribute type 2 has an invalid length. [ 488.890613][T22352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.453867][ T5637] Bluetooth: hci6: command tx timeout [ 489.720319][T22352] veth0_vlan: entered promiscuous mode [ 489.768397][T22639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8023'. [ 489.780322][T22352] veth1_vlan: entered promiscuous mode [ 489.789352][T22639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8023'. [ 489.871692][T22352] veth0_macvtap: entered promiscuous mode [ 489.921226][T22352] veth1_macvtap: entered promiscuous mode [ 489.984404][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8028'. [ 490.002649][T22352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.041727][T22648] macsec1: entered promiscuous mode [ 490.050103][T22648] batadv0: entered promiscuous mode [ 490.056340][T22648] macsec1: entered allmulticast mode [ 490.061844][T22648] batadv0: entered allmulticast mode [ 490.072990][T22648] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 490.111317][T22648] batadv0: left allmulticast mode [ 490.126214][T22648] batadv0: left promiscuous mode [ 490.177639][T22352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.221122][ T75] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.243482][T22656] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 490.254435][ T75] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.275280][T22658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8033'. [ 490.294897][ T75] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.314598][ T75] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.520966][T22664] netlink: 'syz.5.8038': attribute type 1 has an invalid length. [ 490.546433][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.567681][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.710576][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.746052][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.767487][T22673] team0: Port device bridge_slave_0 added [ 491.321758][T22702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.517902][T22711] sch_tbf: burst 0 is lower than device lo mtu (5390) ! [ 491.526227][ T5637] Bluetooth: hci6: command tx timeout [ 491.906105][T22729] tipc: Started in network mode [ 491.926173][T22729] tipc: Node identity ac14140f, cluster identity 4711 [ 491.948871][T22729] tipc: New replicast peer: 255.255.255.255 [ 491.959863][T22729] tipc: Enabled bearer , priority 10 [ 491.998287][T22731] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 492.169283][T22737] netlink: 'syz.1.8071': attribute type 1 has an invalid length. [ 492.965380][T22782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8093'. [ 493.102100][T10543] tipc: Node number set to 2886997007 [ 493.499281][T22804] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8104'. [ 493.607357][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8105'. [ 494.631633][T22863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8133'. [ 494.652659][T22863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8133'. [ 495.135016][T22885] netlink: 'syz.1.8143': attribute type 3 has an invalid length. [ 495.696168][T22911] netlink: 280 bytes leftover after parsing attributes in process `syz.1.8154'. [ 495.711602][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8155'. [ 496.824398][T22946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8171'. [ 496.904529][T22946] batadv0: entered promiscuous mode [ 496.929572][T22946] macsec1: entered promiscuous mode [ 496.948716][T22946] macsec1: entered allmulticast mode [ 496.957418][T22946] batadv0: entered allmulticast mode [ 496.964555][T22946] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 496.991404][T22946] batadv0: left allmulticast mode [ 497.001992][T22946] batadv0: left promiscuous mode [ 497.124204][T22957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8177'. [ 497.651418][T22980] netlink: 'syz.0.8188': attribute type 1 has an invalid length. [ 497.660247][T22980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8188'. [ 497.813846][T22984] Bluetooth: MGMT ver 1.23 [ 498.155340][T23001] tipc: Enabling of bearer rejected, already enabled [ 498.687536][T23030] tipc: Invalid UDP bearer configuration [ 498.687599][T23030] tipc: Enabling of bearer rejected, failed to enable media [ 498.998233][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'. [ 499.313202][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8228'. [ 499.552497][T23071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8232'. [ 499.674382][T23077] netlink: 'syz.0.8235': attribute type 49 has an invalid length. [ 501.383929][T23151] sctp: [Deprecated]: syz.1.8271 (pid 23151) Use of int in max_burst socket option. [ 501.383929][T23151] Use struct sctp_assoc_value instead [ 501.593001][T23160] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8275'. [ 501.610552][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.741017][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8278'. [ 501.911899][T23174] tipc: Enabling of bearer rejected, failed to enable media [ 501.967140][T23176] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8283'. [ 502.640730][T23211] tipc: Enabling of bearer rejected, failed to enable media [ 502.999668][T23230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8308'. [ 503.020810][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8308'. [ 503.040056][T23230] netlink: 'syz.5.8308': attribute type 18 has an invalid length. [ 503.939048][T23232] ipvlan2: entered promiscuous mode [ 504.226557][T23271] netlink: 'syz.1.8327': attribute type 1 has an invalid length. [ 504.246483][T23271] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8327'. [ 504.513859][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8333'. [ 504.805185][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8339'. [ 504.842688][T23301] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 505.034547][T23312] netlink: 'syz.2.8346': attribute type 58 has an invalid length. [ 505.194455][T23318] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8349'. [ 505.220097][T23318] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8349'. [ 505.241850][T23321] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8350'. [ 505.906801][T23351] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8363'. [ 505.929411][T23351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8363'. [ 505.951690][T23351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8363'. [ 506.137406][T23360] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8367'. [ 507.588362][T23426] nbd: must specify at least one socket [ 507.686250][T23430] netlink: 'syz.6.8401': attribute type 2 has an invalid length. [ 508.278632][T23459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.839533][T23488] netlink: 'syz.1.8429': attribute type 12 has an invalid length. [ 508.864768][T23488] netlink: 'syz.1.8429': attribute type 11 has an invalid length. [ 509.490158][T23520] __nla_validate_parse: 6 callbacks suppressed [ 509.490182][T23520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8445'. [ 511.374417][T23606] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8484'. [ 511.689290][T23622] batman_adv: batadv0: Adding interface: ip6gretap1 [ 511.713336][T23622] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.785417][T23622] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 511.813287][T23627] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8496'. [ 511.884981][T23627] vlan2: entered allmulticast mode [ 511.908846][T23627] gretap0: entered allmulticast mode [ 512.579746][T23661] netlink: 'syz.1.8510': attribute type 1 has an invalid length. [ 512.602280][T23661] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8510'. [ 512.631616][T23661] netlink: 'syz.1.8510': attribute type 1 has an invalid length. [ 512.958791][T23673] netlink: 'syz.6.8517': attribute type 6 has an invalid length. [ 513.589596][T23695] vlan2: entered promiscuous mode [ 513.610328][T23695] gretap0: entered promiscuous mode [ 514.054167][T23713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.111981][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.122490][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8538'. [ 514.134427][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.174075][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.237048][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.281142][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.312111][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.344609][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.370861][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.417218][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.436309][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.454149][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.477660][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.530572][T23716] __nla_validate_parse: 2 callbacks suppressed [ 514.530593][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.551365][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.560021][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.569828][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.578518][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.589460][T23716] netlink: 'syz.5.8537': attribute type 29 has an invalid length. [ 514.597954][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.607915][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.627142][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.666416][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.713145][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.748572][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.767346][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8537'. [ 514.920296][T23747] tipc: Enabling of bearer rejected, failed to enable media [ 515.652063][T23782] openvswitch: netlink: Message has 4 unknown bytes. [ 515.663816][T23782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.362704][T23904] bond5: Removing last ns target with arp_interval on [ 520.051588][T23979] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 522.392262][T24073] validate_nla: 11 callbacks suppressed [ 522.392283][T24073] netlink: 'syz.2.8701': attribute type 1 has an invalid length. [ 522.427110][T24073] __nla_validate_parse: 13 callbacks suppressed [ 522.427132][T24073] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8701'. [ 522.756537][T24089] netlink: 'syz.1.8710': attribute type 4 has an invalid length. [ 522.885936][T24097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8713'. [ 523.558058][T24131] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8730'. [ 524.705267][T24187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8757'. [ 524.723142][T24187] geneve0: entered promiscuous mode [ 524.734443][T24187] geneve0: left promiscuous mode [ 524.959589][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8760'. [ 525.564384][T24221] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8774'. [ 525.577484][T24221] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8774'. [ 525.608199][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8775'. [ 525.621996][T24221] netlink: 'syz.1.8774': attribute type 5 has an invalid length. [ 525.655519][T24221] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8774'. [ 526.180164][T24249] Bluetooth: MGMT ver 1.23 [ 526.443918][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8795'. [ 527.131135][T24290] vlan2: entered allmulticast mode [ 527.151731][T24290] bond0: entered allmulticast mode [ 527.170368][T24290] bond_slave_0: entered allmulticast mode [ 527.190323][T24290] bond_slave_1: entered allmulticast mode [ 527.333496][T24301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.480564][T24305] __nla_validate_parse: 3 callbacks suppressed [ 527.480586][T24305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8815'. [ 528.551730][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8834'. [ 528.627172][T24347] netlink: 'syz.5.8835': attribute type 13 has an invalid length. [ 528.650645][T24347] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8835'. [ 528.673439][T24347] syz_tun: refused to change device tx_queue_len [ 528.682341][T24347] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 528.726224][T24350] tipc: Invalid UDP bearer configuration [ 528.726303][T24350] tipc: Enabling of bearer rejected, failed to enable media [ 528.875194][T24356] netlink: 'syz.0.8840': attribute type 39 has an invalid length. [ 528.985273][T24358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.031349][T24360] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8842'. [ 529.055115][T24362] batadv0: entered promiscuous mode [ 529.070591][T24362] macvtap1: entered promiscuous mode [ 529.082068][T24362] macvtap1: entered allmulticast mode [ 529.092764][T24362] batadv0: entered allmulticast mode [ 529.100429][T24362] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 529.122419][T24362] batadv0: left allmulticast mode [ 529.142234][T24362] batadv0: left promiscuous mode [ 529.229232][T24371] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8847'. [ 529.280699][T24373] netlink: 'syz.1.8848': attribute type 10 has an invalid length. [ 529.332699][T24373] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8848'. [ 529.589988][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8854'. [ 529.614343][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8855'. [ 529.628745][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8854'. [ 529.816917][T24398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8858'. [ 530.156831][T24412] xt_hashlimit: size too large, truncated to 1048576 [ 531.876256][ T5624] IPVS: starting estimator thread 0... [ 531.985591][T24476] IPVS: using max 25 ests per chain, 60000 per kthread [ 532.461049][ T5844] IPVS: starting estimator thread 0... [ 532.565682][T24506] IPVS: using max 27 ests per chain, 64800 per kthread [ 534.783257][T24591] netlink: 'syz.5.8946': attribute type 178 has an invalid length. [ 535.433859][T24625] netlink: 'syz.6.8964': attribute type 2 has an invalid length. [ 535.447563][T24625] __nla_validate_parse: 2 callbacks suppressed [ 535.447584][T24625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8964'. [ 535.512374][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8965'. [ 535.549783][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8968'. [ 536.380342][T24669] IPVS: stopping backup sync thread 23301 ... [ 536.647962][T24683] nbd: must specify an index to disconnect [ 536.666306][T24681] IPVS: Error connecting to the multicast addr [ 537.355988][T24717] netlink: 'syz.5.9005': attribute type 23 has an invalid length. [ 538.259524][T24758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9025'. [ 538.690449][T24776] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9034'. [ 538.930623][T24783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9037'. [ 538.975966][T24785] netlink: 277 bytes leftover after parsing attributes in process `syz.6.9039'. [ 539.329445][T24800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9045'. [ 539.737805][T24817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9053'. [ 540.605046][T24861] tipc: Enabling of bearer rejected, failed to enable media [ 541.042050][T24881] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9085'. [ 543.503123][T24976] netlink: 'syz.1.9127': attribute type 3 has an invalid length. [ 543.682173][T24985] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 543.891913][T24992] netlink: 'syz.5.9135': attribute type 322 has an invalid length. [ 544.135348][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9143'. [ 545.244777][T25021] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 545.452081][T25027] netlink: 'syz.0.9153': attribute type 13 has an invalid length. [ 545.467473][T25028] vlan2: entered promiscuous mode [ 545.479324][T25028] bridge0: entered promiscuous mode [ 545.817377][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9157'. [ 547.074088][T25089] netlink: 'syz.1.9182': attribute type 1 has an invalid length. [ 547.520080][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9191'. [ 549.358979][T25175] tipc: Enabled bearer , priority 30 [ 549.531841][T25181] nbd: must specify a device to reconfigure [ 550.390415][T25216] netlink: 'syz.6.9240': attribute type 1 has an invalid length. [ 550.441741][T25216] netlink: 240 bytes leftover after parsing attributes in process `syz.6.9240'. [ 550.476317][ T5759] tipc: Node number set to 4278255617 [ 550.862333][T25240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9252'. [ 550.941585][T25240] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9252'. [ 551.540784][T25275] Bluetooth: MGMT ver 1.23 [ 551.876045][T25292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9275'. [ 553.555258][T25357] vlan2: entered promiscuous mode [ 554.160855][T25372] netlink: 'syz.6.9315': attribute type 2 has an invalid length. [ 554.232559][T25376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9317'. [ 554.804462][T25398] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9325'. [ 554.997140][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9329'. [ 555.334348][T25422] xt_hashlimit: size too large, truncated to 1048576 [ 555.362431][T25427] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 556.121978][T25453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9345'. [ 556.155829][T25453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9345'. [ 556.582387][T25474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9354'. [ 556.890752][T25491] netlink: 10 bytes leftover after parsing attributes in process `syz.5.9361'. [ 556.925641][T25493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9360'. [ 557.101953][T25499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.283285][T25507] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 557.585744][T25523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9374'. [ 557.690009][T25529] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 558.479265][T25567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9396'. [ 560.722438][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9442'. [ 560.746126][ T5844] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 561.183800][T25689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9453'. [ 561.207106][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 561.447047][ T5844] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 562.054753][T25728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9471'. [ 562.232886][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9474'. [ 562.251114][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9474'. [ 562.294964][T25732] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 562.349135][T25732] bond1 (unregistering): Released all slaves [ 562.668550][T25753] netlink: 'syz.2.9483': attribute type 4 has an invalid length. [ 562.697324][T25753] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9483'. [ 563.048186][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.152896][T25780] openvswitch: netlink: Message has 1 unknown bytes. [ 563.175879][T25780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.761852][T25848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9529'. [ 565.060053][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9535'. [ 565.489881][T25880] netlink: 'syz.2.9544': attribute type 5 has an invalid length. [ 565.737710][T25892] netlink: 'syz.5.9551': attribute type 1 has an invalid length. [ 566.130158][T25910] netlink: 'syz.6.9559': attribute type 4 has an invalid length. [ 566.169650][T25910] netlink: 240 bytes leftover after parsing attributes in process `syz.6.9559'. [ 566.821645][T25941] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 566.971837][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9577'. [ 567.159335][T25949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.171163][T25956] netlink: 'syz.6.9580': attribute type 13 has an invalid length. [ 567.382502][T25956] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.390399][T25956] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.398830][T25960] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9581'. [ 567.529236][T25962] xt_nfacct: accounting object `\$9ZM#E|^c\F9YⳈ' does not exist [ 567.676064][T25956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.694680][T25956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.194275][ T48] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.225828][ T48] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.241287][ T48] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.284996][ T48] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.891874][T26008] netlink: 452 bytes leftover after parsing attributes in process `syz.6.9603'. [ 568.947310][T26011] IPVS: Unknown mcast interface: veth0_to_bond [ 569.334891][T26033] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 569.347913][T26033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.520101][T26085] sctp: [Deprecated]: syz.0.9639 (pid 26085) Use of int in max_burst socket option deprecated. [ 570.520101][T26085] Use struct sctp_assoc_value instead [ 570.765849][T26092] netlink: 'syz.0.9644': attribute type 4 has an invalid length. [ 572.523913][T26183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9689'. [ 572.892348][T26197] tipc: Enabling not permitted [ 572.913598][T26197] tipc: Enabling of bearer rejected, failed to enable media [ 573.024751][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9699'. [ 573.070443][T26208] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.9701'. [ 573.155268][T26212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9703'. [ 573.332000][T26220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9708'. [ 573.341824][T26220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9708'. [ 573.938852][T26249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 573.954907][T26249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 573.963024][T26249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 573.974327][T26249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 573.985053][T26249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 575.049724][T26249] Bluetooth: hci6: command 0x0405 tx timeout [ 575.901342][T26327] tipc: Enabled bearer , priority 10 [ 575.968018][T26247] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.975636][T26247] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.983121][T26247] bridge_slave_0: entered allmulticast mode [ 575.998801][T26247] bridge_slave_0: entered promiscuous mode [ 576.018106][T26247] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.033001][T26247] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.046499][T26247] bridge_slave_1: entered allmulticast mode [ 576.072492][T26247] bridge_slave_1: entered promiscuous mode [ 576.091057][T26249] Bluetooth: hci7: command tx timeout [ 576.203031][T26247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.223071][T26247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.367253][T26247] team0: Port device team_slave_0 added [ 576.384908][T26247] team0: Port device team_slave_1 added [ 576.406627][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 576.518781][T26247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.538043][T26247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.596321][T26247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.611539][T26247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.619268][T26247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.654146][T26247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.775375][T26358] veth7: entered allmulticast mode [ 576.821963][T26360] tipc: MTU too low for tipc bearer [ 576.851221][T26247] hsr_slave_0: entered promiscuous mode [ 576.873539][T26247] hsr_slave_1: entered promiscuous mode [ 576.896574][T26247] debugfs: 'hsr0' already exists in 'hsr' [ 576.909812][T26247] Cannot create hsr debugfs directory [ 577.084980][T26374] netlink: 'syz.0.9774': attribute type 2 has an invalid length. [ 577.446020][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 577.600430][T26247] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 577.641920][T26247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.657006][T26247] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 577.673867][T26247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.708271][T26247] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 577.740694][T26247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.759437][T26247] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 577.787750][T26247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.067800][T26247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.128602][T26247] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.167686][ T5637] Bluetooth: hci7: command tx timeout [ 578.178413][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.185652][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.262586][T26426] netlink: 'syz.6.9798': attribute type 1 has an invalid length. [ 578.267655][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.271703][T26426] netlink: 200 bytes leftover after parsing attributes in process `syz.6.9798'. [ 578.277587][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.485727][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 578.965746][T26249] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 579.068428][T26459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9811'. [ 579.258115][T26465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9813'. [ 579.525909][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 579.708961][T26484] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9820'. [ 579.792513][T26247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.248742][T26249] Bluetooth: hci7: command tx timeout [ 580.330753][T26509] netlink: 'syz.0.9829': attribute type 4 has an invalid length. [ 580.391139][T26509] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9829'. [ 580.566025][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 580.601474][T26524] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9836'. [ 580.694590][T26247] veth0_vlan: entered promiscuous mode [ 580.758173][T26247] veth1_vlan: entered promiscuous mode [ 580.881031][T26247] veth0_macvtap: entered promiscuous mode [ 580.928375][T26247] veth1_macvtap: entered promiscuous mode [ 581.023110][T26247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.079254][T26247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.108024][ T722] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.133145][ T722] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.169088][ T722] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.182180][ T722] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.395034][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.423685][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.504443][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.534518][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.616103][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 581.802375][T26573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 582.325719][T26249] Bluetooth: hci7: command tx timeout [ 582.454450][T26603] netlink: 'syz.0.9874': attribute type 1 has an invalid length. [ 582.479896][T26603] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9874'. [ 582.646053][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 583.685739][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 584.008848][T26656] openvswitch: netlink: Missing key (keys=40, expected=100) [ 584.725961][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 585.379705][T26708] netlink: 'syz.6.9925': attribute type 15 has an invalid length. [ 585.728321][T26724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9932'. [ 585.766170][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 585.920264][T26729] netlink: 'syz.7.9937': attribute type 5 has an invalid length. [ 585.946268][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9935'. [ 585.955363][T26733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9936'. [ 585.977975][T26733] netlink: 35 bytes leftover after parsing attributes in process `syz.0.9936'. [ 586.386155][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9947'. [ 586.805693][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 587.846130][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 587.937820][T26824] xt_hashlimit: size too large, truncated to 1048576 [ 588.613826][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9993'. [ 588.829831][ T29] audit: type=1800 audit(1784337968.736:6): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10002" name="memory.events" dev="tmpfs" ino=2075 res=0 errno=0 [ 588.885697][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 588.922252][ T29] audit: type=1804 audit(1784337968.756:7): pid=26867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.10002" name="/newroot/410/memory.events" dev="tmpfs" ino=2075 res=1 errno=0 [ 589.026371][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10003'. [ 589.044948][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10003'. [ 589.398623][T26893] team0: Device tunl0 is of different type [ 589.926122][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 590.966259][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 590.966603][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10046'. [ 592.005985][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 593.047354][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 593.978024][T27082] netlink: 'syz.2.10100': attribute type 11 has an invalid length. [ 594.003876][T27082] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.10100'. [ 594.085937][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 594.244423][T27099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10107'. [ 594.274278][T27099] netlink: 'syz.7.10107': attribute type 1 has an invalid length. [ 594.303148][T27099] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10107'. [ 594.567462][T27105] : option downdelay: invalid value (18446744073709547007) [ 594.601665][T27105] : option downdelay: allowed values 0 - 2147483647 [ 594.616709][T27105]  (unregistering): Released all slaves [ 594.634036][T27118] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10115'. [ 594.691189][T27121] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10117'. [ 594.748863][T27121] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10117'. [ 594.800401][T27121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10117'. [ 594.935718][T27127] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10120'. [ 595.126085][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 595.648066][T27163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10137'. [ 596.005093][T27177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10144'. [ 596.040471][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10144'. [ 596.070075][T27177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10144'. [ 596.108465][T27177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10144'. [ 596.165703][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 596.332316][T27190] netlink: 'syz.2.10149': attribute type 2 has an invalid length. [ 596.415769][T27195] netlink: 'syz.6.10151': attribute type 2 has an invalid length. [ 596.549214][T27201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10153'. [ 596.603261][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10153'. [ 596.617625][T27201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10153'. [ 596.656425][T27204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10153'. [ 597.125717][ T5637] Bluetooth: hci7: command 0x0405 tx timeout [ 597.206786][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 597.272111][T27237] netlink: 'syz.0.10171': attribute type 27 has an invalid length. [ 597.440262][T27244] netlink: 'syz.7.10174': attribute type 8 has an invalid length. [ 597.464778][T27247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10176'. [ 597.776821][T27257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10182'. [ 597.811976][T27257] tipc: Enabling of bearer rejected, failed to enable media [ 598.245955][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 598.843524][T27307] tipc: Started in network mode [ 598.856002][T27307] tipc: Node identity 00000000000000000000000000000001, cluster identity 4096 [ 598.874056][T27307] tipc: Enabling of bearer rejected, failed to enable media [ 599.285735][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 599.470806][T27327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.478212][T27327] IPv6: NLM_F_CREATE should be set when creating new route [ 599.485867][T27327] IPv6: NLM_F_CREATE should be set when creating new route [ 599.493157][T27327] IPv6: NLM_F_CREATE should be set when creating new route [ 599.611992][T27328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.111304][T27355] netlink: 'syz.5.10228': attribute type 32 has an invalid length. [ 600.297908][T27355] bond2: option coupled_control: invalid value (255) [ 600.325833][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 600.338084][T27355] bond2 (unregistering): Released all slaves [ 600.596236][T27377] sch_fq: defrate 8 ignored. [ 601.365666][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 601.572356][T27419] netlink: 'syz.0.10259': attribute type 3 has an invalid length. [ 602.118773][T27439] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.405969][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 602.739539][T27458] __nla_validate_parse: 6 callbacks suppressed [ 602.739561][T27458] netlink: 208 bytes leftover after parsing attributes in process `syz.5.10278'. [ 602.765866][T27458] netlink: 208 bytes leftover after parsing attributes in process `syz.5.10278'. [ 603.237724][T27473] veth1_to_hsr: entered promiscuous mode [ 603.260092][T27473] netlink: 76 bytes leftover after parsing attributes in process `syz.7.10284'. [ 603.308071][T27473] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 603.445741][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 603.729564][T27494] tipc: Enabled bearer , priority 0 [ 603.949902][T27501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10298'. [ 604.430800][T27519] tipc: Enabling of bearer rejected, failed to enable media [ 604.486059][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 604.626675][T27531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10313'. [ 604.845682][T10543] tipc: Node number set to 3765305342 [ 605.525999][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 605.575838][T27574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10335'. [ 605.721977][T27578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10336'. [ 606.070111][T27590] netlink: 165 bytes leftover after parsing attributes in process `syz.0.10342'. [ 606.090076][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 606.454215][T27598] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.462077][T27598] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.566997][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 606.769939][T27598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.814228][T27598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.829748][T27615] netlink: 332 bytes leftover after parsing attributes in process `syz.7.10354'. [ 606.846650][T27615] netlink: 'syz.7.10354': attribute type 9 has an invalid length. [ 606.864024][T27615] netlink: 108 bytes leftover after parsing attributes in process `syz.7.10354'. [ 607.169972][T27598] vlan2: left promiscuous mode [ 607.175866][T27598] bridge0: left promiscuous mode [ 607.235575][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.260215][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.290950][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.321563][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.359004][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.387130][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.424138][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.454683][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.606111][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 607.846831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 608.221769][T27656] block nbd0: not configured, cannot reconfigure [ 608.641033][T27672] __nla_validate_parse: 2 callbacks suppressed [ 608.641055][T27672] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10382'. [ 608.655742][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 608.730628][T27677] xt_hashlimit: size too large, truncated to 1048576 [ 609.164875][T27687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10389'. [ 609.349273][T27694] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10391'. [ 609.685744][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 609.947481][T27710] macvtap1: entered promiscuous mode [ 609.963706][T27710] bridge0: entered promiscuous mode [ 610.131568][T27714] pimreg9: entered allmulticast mode [ 610.408260][T27721] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10404'. [ 610.444848][T27721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10404'. [ 610.725808][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 611.775692][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 612.805769][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 613.519662][T27852] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 613.845811][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 613.921915][T27870] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10473'. [ 613.939161][T27870] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10473'. [ 614.042154][T27879] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 614.174187][T27883] Cannot find del_set index 14804 as target [ 614.245941][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.596899][T27903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10490'. [ 614.896131][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 615.163492][T27934] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10504'. [ 615.333084][T27939] netlink: 'syz.5.10508': attribute type 3 has an invalid length. [ 615.350645][T27939] netlink: 'syz.5.10508': attribute type 1 has an invalid length. [ 615.373470][T27939] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10508'. [ 615.773789][T27967] netlink: 'syz.0.10521': attribute type 18 has an invalid length. [ 615.872187][ T3246] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 615.893419][ T3246] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.926145][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 615.949185][ T3246] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.965529][ T3246] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.154973][T27985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10527'. [ 616.560325][T28004] netlink: zone id is out of range [ 616.581333][T28004] netlink: zone id is out of range [ 616.610073][T28004] netlink: zone id is out of range [ 616.629237][T28004] netlink: zone id is out of range [ 616.649517][T28004] netlink: zone id is out of range [ 616.668280][T28004] netlink: zone id is out of range [ 616.683087][T28004] netlink: zone id is out of range [ 616.693643][T28004] netlink: zone id is out of range [ 616.700163][T28004] netlink: zone id is out of range [ 616.966157][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 617.159433][T28029] netlink: 'syz.0.10549': attribute type 5 has an invalid length. [ 617.703186][T28061] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 618.005756][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 618.632835][T28099] sctp: [Deprecated]: syz.5.10584 (pid 28099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.632835][T28099] Use struct sctp_sack_info instead [ 618.663779][T28099] sctp: [Deprecated]: syz.5.10584 (pid 28099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.663779][T28099] Use struct sctp_sack_info instead [ 619.055698][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 620.085764][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 620.143019][T28116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10592'. [ 620.207856][T28116] ip6gre4: entered promiscuous mode [ 620.214727][T28116] ip6gre4: entered allmulticast mode [ 620.754468][T28140] ip6gre2: entered promiscuous mode [ 620.771275][T28140] ip6gre2: entered allmulticast mode [ 620.806475][ T1102] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.814725][ T1102] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.826944][ T5844] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.832743][T28142] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10604'. [ 621.095963][ T5844] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 621.126194][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 621.296229][T20845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 622.006778][T28194] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10630'. [ 622.166820][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 622.180411][T28206] block nbd7: not configured, cannot reconfigure [ 622.721081][T28228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10646'. [ 622.748310][T28228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10646'. [ 623.206306][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 623.841695][T28274] team0: Device vlan4 is already an upper device of the team interface [ 624.091462][T28280] bridge1: entered promiscuous mode [ 624.107502][T28280] bridge1: entered allmulticast mode [ 624.130715][T28280] team0: Port device bridge1 added [ 624.246615][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 624.489557][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.805705][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 625.296365][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 625.728782][T28348] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10704'. [ 625.761817][T28348] netlink: 192 bytes leftover after parsing attributes in process `syz.5.10704'. [ 625.787468][T28348] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10704'. [ 626.060694][T28363] netlink: 'syz.6.10712': attribute type 30 has an invalid length. [ 626.182931][T28371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10715'. [ 626.326159][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 626.387748][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10719'. [ 626.449218][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10720'. [ 626.920239][T28402] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.10730'. [ 626.951814][T28402] net_ratelimit: 12 callbacks suppressed [ 626.951835][T28402] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 626.976524][T28402] openvswitch: netlink: Message has 512 unknown bytes. [ 626.993298][T28405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10731'. [ 627.366210][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 627.396659][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10740'. [ 627.639539][T10542] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 627.996258][T10542] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 628.406633][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 628.843602][T28480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.258495][T28500] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10777'. [ 629.446378][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 629.634289][T28513] pimreg1: renamed from bridge0 [ 629.660461][T28513] pimreg1: entered allmulticast mode [ 629.678892][T28513] A link change request failed with some changes committed already. Interface pimreg1 may have been left with an inconsistent configuration, please check. [ 629.852261][T28521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.924974][T28524] tipc: Enabling of bearer rejected, failed to enable media [ 630.486204][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 630.882961][T28568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.897045][ T30] INFO: task syz.4.7582:21676 blocked for more than 143 seconds. [ 630.915760][ T30] Not tainted syzkaller #0 [ 630.930987][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.962230][ T30] task:syz.4.7582 state:D stack:27784 pid:21676 tgid:21674 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 631.015721][ T30] Call Trace: [ 631.021024][ T30] [ 631.024054][ T30] __schedule+0x17d9/0x56c0 [ 631.051723][ T30] ? __lock_acquire+0x683/0x2cf0 [ 631.068245][ T30] ? __lock_acquire+0x683/0x2cf0 [ 631.086889][ T30] ? __pfx___schedule+0x10/0x10 [ 631.108496][ T30] ? schedule+0x90/0x2b0 [ 631.123024][ T30] schedule+0x164/0x2b0 [ 631.144831][ T30] schedule_preempt_disabled+0x13/0x30 [ 631.151706][ T30] __mutex_lock+0x7bf/0x1550 [ 631.167075][ T30] ? __mutex_lock+0x5d4/0x1550 [ 631.179746][ T30] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 631.189584][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 631.194790][ T30] ? net_generic+0x1e/0x240 [ 631.200323][ T30] ? net_generic+0x1e/0x240 [ 631.204986][ T30] ? net_generic+0x1e/0x240 [ 631.210779][ T30] ? net_generic+0x1e/0x240 [ 631.216232][ T30] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 631.221834][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 631.228175][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.234399][ T30] ? bpf_lsm_capable+0x9/0x20 [ 631.239802][ T30] ? security_capable+0x7e/0x2c0 [ 631.244966][ T30] genl_rcv_msg+0x614/0x7a0 [ 631.250399][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.256156][ T30] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 631.262313][ T30] netlink_rcv_skb+0x226/0x4a0 [ 631.267562][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.272683][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.278666][ T30] ? down_read+0x2be/0x330 [ 631.283108][ T30] genl_rcv+0x28/0x40 [ 631.288072][ T30] netlink_unicast+0x7bb/0x940 [ 631.292926][ T30] netlink_sendmsg+0x813/0xb40 [ 631.298245][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.303587][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.309109][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.314440][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 631.320105][ T30] ____sys_sendmsg+0x54e/0x850 [ 631.324956][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.330814][ T30] ? import_iovec+0x73/0xa0 [ 631.335989][ T30] ___sys_sendmsg+0x2a5/0x360 [ 631.340699][ T30] ? __lock_acquire+0x683/0x2cf0 [ 631.345776][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.351956][ T30] ? futex_wait+0x2a2/0x390 [ 631.356828][ T30] ? __fget_files+0x2a/0x420 [ 631.361479][ T30] ? __fget_files+0x3a2/0x420 [ 631.366623][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 631.371651][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.377260][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.383398][ T30] do_syscall_64+0x174/0x580 [ 631.388543][ T30] ? trace_irq_disable+0x3b/0x140 [ 631.393667][ T30] ? clear_bhb_loop+0x40/0x90 [ 631.398812][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.404714][ T30] RIP: 0033:0x7f5fb259de99 [ 631.409833][ T30] RSP: 002b:00007f5fb33d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.418836][ T30] RAX: ffffffffffffffda RBX: 00007f5fb2825fa0 RCX: 00007f5fb259de99 [ 631.427269][ T30] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 631.435372][ T30] RBP: 00007f5fb2633eaf R08: 0000000000000000 R09: 0000000000000000 [ 631.444042][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.452627][ T30] R13: 00007f5fb2826038 R14: 00007f5fb2825fa0 R15: 00007ffc2d625eb8 [ 631.461683][ T30] [ 631.464982][ T30] [ 631.464982][ T30] Showing all locks held in the system: [ 631.473553][ T30] 1 lock held by rcu_exp_gp_kthr/18: [ 631.479550][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 631.499259][ T30] 1 lock held by khungtaskd/30: [ 631.516988][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 631.528963][ C1] tipc: Duplicate ff010001 using eth(aa:aa:aa:aa:aa:32) seen on [ 631.539286][ T30] 2 locks held by getty/5376: [ 631.544036][ T30] #0: ffff8880363880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 631.554556][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 631.566100][ T30] 2 locks held by syz.3.6846/20058: [ 631.571367][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 631.580213][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 631.591188][ T30] 2 locks held by syz.4.7582/21676: [ 631.597039][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 631.605289][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 631.617677][ T30] 2 locks held by syz.1.9401/25578: [ 631.622935][ T30] #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 631.631836][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 631.642657][ T30] 2 locks held by dhcpcd/28573: [ 631.647981][ T30] #0: ffff888051edd2c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 631.658724][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 631.670136][ T30] [ 631.672495][ T30] ============================================= [ 631.672495][ T30] [ 631.681293][ T30] NMI backtrace for cpu 1 [ 631.681313][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 631.681335][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 631.681347][ T30] Call Trace: [ 631.681354][ T30] [ 631.681360][ T30] dump_stack_lvl+0xe8/0x150 [ 631.681426][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 631.681554][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 631.681594][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 631.681622][ T30] sys_info+0x135/0x170 [ 631.681643][ T30] watchdog+0xfd7/0x1030 [ 631.681685][ T30] ? watchdog+0x1c7/0x1030 [ 631.681718][ T30] kthread+0x388/0x470 [ 631.681745][ T30] ? __pfx_watchdog+0x10/0x10 [ 631.681766][ T30] ? __pfx_kthread+0x10/0x10 [ 631.681795][ T30] ret_from_fork+0x514/0xb70 [ 631.681848][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 631.681875][ T30] ? __switch_to+0xc89/0x1420 [ 631.681903][ T30] ? __pfx_kthread+0x10/0x10 [ 631.681932][ T30] ret_from_fork_asm+0x1a/0x30 [ 631.681968][ T30] [ 631.681976][ T30] Sending NMI from CPU 1 to CPUs 0: [ 631.796005][ C0] NMI backtrace for cpu 0 [ 631.796024][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 631.796043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 631.796053][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 631.796082][ C0] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 631.796096][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 631.796113][ C0] RAX: 00000000000b8ed1 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 631.796125][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380 [ 631.796136][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 631.796149][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 631.796160][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 631.796172][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 631.796186][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.796198][ C0] CR2: 000056340af6f168 CR3: 0000000025a8c000 CR4: 00000000003526f0 [ 631.796214][ C0] Call Trace: [ 631.796222][ C0] [ 631.796228][ C0] default_idle+0x9/0x20 [ 631.796244][ C0] default_idle_call+0x72/0xb0 [ 631.796261][ C0] do_idle+0x2e0/0x540 [ 631.796310][ C0] ? __pfx_do_idle+0x10/0x10 [ 631.796330][ C0] ? do_idle+0x4cb/0x540 [ 631.796351][ C0] cpu_startup_entry+0x43/0x60 [ 631.796372][ C0] rest_init+0x2de/0x300 [ 631.796390][ C0] start_kernel+0x392/0x3e0 [ 631.796467][ C0] x86_64_start_reservations+0x24/0x30 [ 631.796535][ C0] x86_64_start_kernel+0x137/0x1b0 [ 631.796552][ C0] common_startup_64+0x13e/0x157 [ 631.796578][ C0] [ 631.982727][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 631.989593][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 631.998719][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 632.008781][ T30] Call Trace: [ 632.012148][ T30] [ 632.015081][ T30] vpanic+0x56c/0xa60 [ 632.019072][ T30] ? __pfx___schedule+0x10/0x10 [ 632.023951][ T30] ? __pfx_vpanic+0x10/0x10 [ 632.028503][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 632.034700][ T30] panic+0xc5/0xd0 [ 632.038451][ T30] ? __pfx_panic+0x10/0x10 [ 632.042906][ T30] ? preempt_schedule_common+0x82/0xd0 [ 632.048407][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 632.053818][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 632.060007][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 632.066199][ T30] watchdog+0x1030/0x1030 [ 632.070567][ T30] ? watchdog+0x1c7/0x1030 [ 632.075014][ T30] kthread+0x388/0x470 [ 632.079104][ T30] ? __pfx_watchdog+0x10/0x10 [ 632.083795][ T30] ? __pfx_kthread+0x10/0x10 [ 632.088400][ T30] ret_from_fork+0x514/0xb70 [ 632.093005][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 632.098128][ T30] ? __switch_to+0xc89/0x1420 [ 632.102823][ T30] ? __pfx_kthread+0x10/0x10 [ 632.107447][ T30] ret_from_fork_asm+0x1a/0x30 [ 632.112252][ T30] [ 632.115454][ T30] Kernel Offset: disabled [ 632.119803][ T30] Rebooting in 86400 seconds..