last executing test programs: 3m19.374856372s ago: executing program 32 (id=3158): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) 2m28.410104825s ago: executing program 5 (id=4501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m28.094452659s ago: executing program 5 (id=4507): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 2m27.889537225s ago: executing program 5 (id=4512): syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xff83, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 2m27.180508614s ago: executing program 5 (id=4523): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='Z', 0x1}], 0x1, &(0x7f0000000200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x77e4, 0x9}}], 0x38, 0x4855}, 0x24008002) 2m26.903593034s ago: executing program 5 (id=4528): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000140)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x2, 0x42, 0x0, @void}, "efc159f70f"}}}}}}, 0x0) 2m26.725091967s ago: executing program 5 (id=4533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000090) 2m19.270678573s ago: executing program 3 (id=4679): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2c, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@nested={0x8, 0xd8, 0x0, 0x1, [@typed={0x4, 0x15, 0x0, 0x0, @binary}]}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m19.082508888s ago: executing program 3 (id=4683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x6000000, 0x0, {0x7, 0x0, 0x32}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 2m18.899926443s ago: executing program 3 (id=4688): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 2m18.751406144s ago: executing program 3 (id=4691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.612969591s ago: executing program 3 (id=4697): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="180100002f0001ff0000000000dcdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m18.480470052s ago: executing program 3 (id=4700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m11.667881704s ago: executing program 33 (id=4533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x20000090) 2m5.075252621s ago: executing program 2 (id=4987): r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_flags=0x400}) 2m4.618114619s ago: executing program 2 (id=4990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m4.4354904s ago: executing program 2 (id=4992): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x5e) 2m4.206389414s ago: executing program 2 (id=4995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}}, 0x0) 2m4.126684445s ago: executing program 2 (id=4996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000006e93000000000000b50302000000000085000000b7000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.03743942s ago: executing program 2 (id=5000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m3.405636656s ago: executing program 34 (id=4700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xe}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m48.846219331s ago: executing program 35 (id=5000): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 1m16.543466846s ago: executing program 8 (id=5698): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x24, 0x3e, 0x0, 0x1, [@nested={0x20, 0x126, 0x0, 0x1, [@generic="fa1cb0734903177c74e2440aa77549fa014f63d0680b6d562a67e174"]}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 1m16.314850414s ago: executing program 8 (id=5702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xc6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) 1m15.651872263s ago: executing program 8 (id=5713): r0 = socket$inet(0x2, 0xa, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x2799, @broadcast}, {0x2, 0x4e20, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x3000000000, 0x5}) 1m15.446141028s ago: executing program 8 (id=5717): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x8, 0x4) 1m15.266027688s ago: executing program 8 (id=5720): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000210000000000000000000000002000800086f"], 0x80}, 0x1, 0x7}, 0x0) 1m15.143047402s ago: executing program 8 (id=5723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m13.450990831s ago: executing program 4 (id=5748): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) 1m13.306233758s ago: executing program 4 (id=5751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x47, 0x48, 0x805, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x80000003}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x48}}, 0x10) 1m13.087920084s ago: executing program 4 (id=5755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newsa={0x150, 0x10, 0x413, 0x0, 0xffffffff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x10}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "b512b390ac60fe3e6b54c6b909007c9f70d0cf"}}]}, 0x150}}, 0x844) 1m12.329060525s ago: executing program 4 (id=5763): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private=0xa010100, 0x8, 0x15}}) 1m12.103561265s ago: executing program 4 (id=5767): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB=';'], 0x20) 1m11.927433576s ago: executing program 4 (id=5770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m0.043019857s ago: executing program 36 (id=5723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 56.923516982s ago: executing program 37 (id=5770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 29.699353489s ago: executing program 7 (id=6502): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300008"}) 29.533953342s ago: executing program 7 (id=6506): r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) 29.362139948s ago: executing program 7 (id=6510): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x474}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 29.185196992s ago: executing program 7 (id=6513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x70bd2c, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x23, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x2e3fa6bf2c47fb38, 0x1000, 0x10}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 28.943494642s ago: executing program 7 (id=6519): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e40000001000090503000000000000000c00d2000000000000000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce287128282829"], 0xe4}], 0x1, 0x0, 0x0, 0x1}, 0x40040) 28.477409272s ago: executing program 7 (id=6528): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 13.38677003s ago: executing program 38 (id=6528): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1.172166819s ago: executing program 6 (id=6953): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x0) 1.132559933s ago: executing program 1 (id=6954): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3ff, 0x7}, &(0x7f0000000240)=0x90) 1.102226839s ago: executing program 0 (id=6956): unshare(0x22020400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 980.176174ms ago: executing program 6 (id=6957): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000012140100000000000000000008004b001300000008000380"], 0x28}}, 0x0) 943.071381ms ago: executing program 1 (id=6958): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) 875.583612ms ago: executing program 9 (id=6959): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0x164, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@empty, @in=@loopback, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0x3, 0x0, 0x3501, 0x5, 0x2}, {@in=@remote, @in=@multicast1, @in=@multicast2, @in6=@local, 0x2b, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@local, 0x0, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 848.745866ms ago: executing program 0 (id=6960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 799.582287ms ago: executing program 9 (id=6961): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) 746.242312ms ago: executing program 1 (id=6962): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x98) 699.773353ms ago: executing program 6 (id=6963): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) 652.050042ms ago: executing program 0 (id=6964): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x8001, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0x88) 609.483849ms ago: executing program 1 (id=6965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x6}]}}}]}, 0x40}}, 0x20000000) 609.321614ms ago: executing program 9 (id=6966): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, 0x0, &(0x7f0000001800)) 483.700292ms ago: executing program 0 (id=6967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x9, 0x11}}]}, 0x28}}, 0x0) 438.65237ms ago: executing program 9 (id=6968): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x6e0, 0x0, 0x540, 0x540, 0x540, 0x1d0, 0x610, 0x610, 0x610, 0x610, 0x610, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x80]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x2, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x740) 420.730307ms ago: executing program 1 (id=6969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001740)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x91}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 415.07219ms ago: executing program 6 (id=6970): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f00000000c0)) 273.806844ms ago: executing program 9 (id=6971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000019000100000000000000000080209000001100f5ffffffff0b0009"], 0x30}}, 0x0) 255.241071ms ago: executing program 0 (id=6972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 233.927706ms ago: executing program 6 (id=6973): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) 154.72271ms ago: executing program 1 (id=6974): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x0, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x100000, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 50.515235ms ago: executing program 9 (id=6975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.738385ms ago: executing program 6 (id=6976): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000100)) 0s ago: executing program 0 (id=6977): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) kernel console output (not intermixed with test programs): es in process `syz.1.2366'. [ 221.604681][T10711] syz.2.2368 uses obsolete (PF_INET,SOCK_PACKET) [ 221.660610][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.684982][T10691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.775860][T10715] IPv6: Can't replace route, no match found [ 221.932067][T10699] bond1: option fail_over_mac: invalid value (127) [ 221.953819][T10699] bond1 (unregistering): Released all slaves [ 221.996440][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.036114][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 222.046239][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.059349][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.077675][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.211712][T10728] netlink: 'syz.4.2376': attribute type 8 has an invalid length. [ 222.274840][T10734] netlink: zone id is out of range [ 222.299545][T10734] netlink: zone id is out of range [ 222.309247][T10734] netlink: zone id is out of range [ 222.314997][T10734] netlink: zone id is out of range [ 222.320394][T10734] netlink: zone id is out of range [ 222.325998][T10734] netlink: zone id is out of range [ 222.671223][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 222.853135][T10753] netlink: 'syz.2.2384': attribute type 10 has an invalid length. [ 222.952628][T10758] xt_socket: unknown flags 0x8 [ 223.114670][T10763] SET target dimension over the limit! [ 223.230615][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 223.998749][T10806] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 224.049421][T10809] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2407'. [ 224.075184][T10806] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2405'. [ 224.097135][T10809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2407'. [ 224.131872][T10809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2407'. [ 224.253875][T10817] net_ratelimit: 2 callbacks suppressed [ 224.253894][T10817] netlink: zone id is out of range [ 224.304030][T10817] netlink: zone id is out of range [ 224.325831][T10817] netlink: zone id is out of range [ 224.347188][T10817] netlink: zone id is out of range [ 224.366978][T10817] netlink: zone id is out of range [ 224.391249][T10817] netlink: zone id is out of range [ 224.418153][T10817] netlink: zone id is out of range [ 224.439589][T10817] netlink: zone id is out of range [ 224.460701][T10817] netlink: zone id is out of range [ 224.484514][T10817] netlink: zone id is out of range [ 225.662148][T10888] bridge0: port 1(ip6gretap0) entered blocking state [ 225.679528][T10888] bridge0: port 1(ip6gretap0) entered disabled state [ 225.696775][T10888] ip6gretap0: entered allmulticast mode [ 225.713180][T10888] ip6gretap0: entered promiscuous mode [ 225.736335][T10888] bridge0: port 1(ip6gretap0) entered blocking state [ 225.744280][T10888] bridge0: port 1(ip6gretap0) entered forwarding state [ 226.008582][T10900] dvmrp8: entered allmulticast mode [ 226.403648][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 226.726146][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.734173][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.818015][T10931] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 227.298892][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.316421][T10908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.520291][T10908] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 227.634558][ T1183] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.672563][ T1183] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.694899][ T1183] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.731842][ T1183] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.781860][ T1183] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.831876][ T1183] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 227.877406][ T1183] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.911005][T10958] netlink: 'syz.3.2469': attribute type 3 has an invalid length. [ 227.929626][ T1183] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 228.152286][T10969] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 228.582030][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2480'. [ 228.604166][T10988] tipc: Can't bind to reserved service type 0 [ 228.688400][T10986] veth5: entered allmulticast mode [ 228.694580][T10992] netlink: 'syz.3.2484': attribute type 23 has an invalid length. [ 228.950788][T11003] netlink: 'syz.1.2489': attribute type 13 has an invalid length. [ 228.977253][T11003] netlink: 'syz.1.2489': attribute type 12 has an invalid length. [ 229.528957][T11035] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2505'. [ 229.583453][T11035] netlink: 'syz.2.2505': attribute type 2 has an invalid length. [ 229.623724][T11035] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 229.652109][T11035] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2505'. [ 230.041743][T11048] bond1: Unable to set down delay as MII monitoring is disabled [ 230.068182][T11048] bond1 (unregistering): Released all slaves [ 230.403970][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.411963][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.743573][T11063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.764570][T11063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.116864][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.136341][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.171271][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.216067][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.446754][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 231.587864][T11118] net_ratelimit: 377 callbacks suppressed [ 231.587886][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.067626][T11142] bond3: Unable to set down delay as MII monitoring is disabled [ 232.080940][T11142] bond3 (unregistering): Released all slaves [ 232.216978][T11153] netlink: 'syz.4.2560': attribute type 10 has an invalid length. [ 232.238987][T11153] openvswitch: netlink: Flow key attr not present in new flow. [ 232.853931][T11184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.936189][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 233.090955][T11188] bond2: Unable to set down delay as MII monitoring is disabled [ 233.134134][T11188] bond2 (unregistering): Released all slaves [ 233.295085][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 233.329547][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 233.813546][T11223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2595'. [ 234.254581][T11240] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 234.261714][T11240] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 234.307806][T11240] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 234.378878][T11243] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 234.440657][T10946] xfrm0 speed is unknown, defaulting to 1000 [ 234.448048][T11183] infiniband syz0: set down [ 234.453906][T11183] infiniband syz0: added xfrm0 [ 234.577443][T11183] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 234.639568][T11183] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 234.711367][T11183] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 234.784034][T11183] RDS/IB: syz0: added [ 234.795550][T11183] smc: adding ib device syz0 with port count 1 [ 234.811794][T11183] smc: ib device syz0 port 1 has no pnetid [ 234.821394][ T5844] xfrm0 speed is unknown, defaulting to 1000 [ 234.853290][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 235.118499][T11272] x_tables: unsorted entry at hook 3 [ 235.207347][T11274] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.411009][T11280] netlink: 'syz.1.2623': attribute type 9 has an invalid length. [ 235.518017][T11284] netlink: 'syz.4.2625': attribute type 10 has an invalid length. [ 235.659213][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 235.690040][T11290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.821749][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2631'. [ 235.941555][T11298] netlink: 'syz.2.2632': attribute type 1 has an invalid length. [ 235.974883][T11298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2632'. [ 236.317108][T11312] netlink: 'syz.3.2639': attribute type 2 has an invalid length. [ 236.738590][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 236.829302][T11330] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2648'. [ 236.860806][T11332] netlink: 'syz.3.2650': attribute type 3 has an invalid length. [ 236.872035][T11330] veth0_to_bond: default FDB implementation only supports local addresses [ 237.053928][T11340] SET target dimension over the limit! [ 237.212425][T11346] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 237.245716][T11346] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2655'. [ 237.291107][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 237.578250][T11361] xt_hashlimit: max too large, truncated to 1048576 [ 237.622853][T11361] xt_ecn: cannot match TCP bits for non-tcp packets [ 237.700572][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 238.133205][T11386] openvswitch: netlink: Flow actions attr not present in new flow. [ 238.334287][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2680'. [ 238.374781][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2680'. [ 238.418836][T11394] tc_dump_action: action bad kind [ 238.455306][T11183] xfrm0 speed is unknown, defaulting to 1000 [ 239.364915][T11434] geneve1: entered promiscuous mode [ 239.366496][T11432] SET target dimension over the limit! [ 239.382340][T11434] geneve1: entered allmulticast mode [ 239.472053][T11438] openvswitch: netlink: IPv4 tun info is not correct [ 239.716354][T11450] netlink: 'syz.2.2708': attribute type 12 has an invalid length. [ 240.015066][T11466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2716'. [ 240.104414][T11470] hsr0: entered promiscuous mode [ 240.429918][T11488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2727'. [ 240.464497][T11488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.536967][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'. [ 240.681071][T11498] vlan0: left promiscuous mode [ 240.924196][T11511] macvlan1: entered promiscuous mode [ 240.954740][T11511] macvlan1: entered allmulticast mode [ 240.969273][T11511] veth1_vlan: entered allmulticast mode [ 241.658155][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 242.000691][T11568] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.099904][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 242.174528][T11574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2768'. [ 242.398333][T11586] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 242.635106][T11598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2780'. [ 243.195185][T11622] netlink: 'syz.1.2792': attribute type 2 has an invalid length. [ 243.394066][T11631] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2796'. [ 244.004538][T11661] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.108002][T11664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2812'. [ 244.156383][T11667] netlink: 'syz.0.2814': attribute type 49 has an invalid length. [ 244.354196][T11676] SET target dimension over the limit! [ 244.837170][T11700] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 244.859568][T11700] netlink: 'syz.3.2831': attribute type 2 has an invalid length. [ 245.072797][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 245.699221][T11737] bond1: option lp_interval: invalid value (0) [ 245.706294][T11737] bond1: option lp_interval: allowed values 1 - 2147483647 [ 245.717202][T11737] bond1 (unregistering): Released all slaves [ 245.855707][T11739] vti0: entered promiscuous mode [ 246.157840][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 246.192531][T11759] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2859'. [ 246.209884][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 246.219699][T11759] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2859'. [ 246.234808][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2859'. [ 246.511903][T11773] netlink: 'syz.2.2866': attribute type 5 has an invalid length. [ 246.799942][T11787] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 246.945386][T11791] netlink: 203 bytes leftover after parsing attributes in process `syz.4.2875'. [ 247.558301][T11817] Unsupported ieee802154 address type: 0 [ 248.085728][T11844] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2901'. [ 248.120228][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 248.134230][T11850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2905'. [ 248.158247][T11847] bond1: entered promiscuous mode [ 248.163671][T11847] bond1: entered allmulticast mode [ 248.169479][T11847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.200497][T11844] bond0 (unregistering): Released all slaves [ 248.615972][T11870] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 248.789205][T11877] netlink: 'syz.4.2917': attribute type 3 has an invalid length. [ 248.797363][T11877] netlink: 'syz.4.2917': attribute type 2 has an invalid length. [ 248.806896][T11877] netlink: 'syz.4.2917': attribute type 2 has an invalid length. [ 249.098334][T11891] netlink: 'syz.3.2924': attribute type 30 has an invalid length. [ 250.081937][T11932] netlink: 'syz.3.2944': attribute type 1 has an invalid length. [ 250.110046][T11932] __nla_validate_parse: 5 callbacks suppressed [ 250.110068][T11932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2944'. [ 250.289568][T11940] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 250.465088][T11946] netlink: 'syz.2.2950': attribute type 2 has an invalid length. [ 250.488637][T11946] netlink: 'syz.2.2950': attribute type 5 has an invalid length. [ 250.497779][T11946] netlink: 'syz.2.2950': attribute type 2 has an invalid length. [ 250.514989][T11946] netlink: 'syz.2.2950': attribute type 5 has an invalid length. [ 250.642173][ T30] audit: type=1107 audit(1783933109.438:2): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 250.706092][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2956'. [ 250.792898][T11960] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2957'. [ 250.925725][T11968] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2963'. [ 250.953556][T11968] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2963'. [ 250.978119][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2963'. [ 251.038790][T11972] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2962'. [ 251.057143][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 251.072816][T11974] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 251.088679][T11974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.111489][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2965'. [ 251.138362][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2964'. [ 251.560882][T11990] bond2: option miimon: invalid value (18446744073709551615) [ 251.582547][T11990] bond2: option miimon: allowed values 0 - 2147483647 [ 251.611714][T11990] bond2 (unregistering): Released all slaves [ 251.781165][T11998] bond0: option resend_igmp: invalid value (2878) [ 251.814742][T11998] bond0: option resend_igmp: allowed values 0 - 255 [ 251.869088][T11998] bond0 (unregistering): Released all slaves [ 253.341624][T12087] netlink: 'syz.0.3017': attribute type 2 has an invalid length. [ 253.638632][T12098] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 253.670999][T12098] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 253.701369][T12098] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 254.548005][T12142] netlink: 'syz.3.3044': attribute type 33 has an invalid length. [ 255.120094][T12163] __nla_validate_parse: 6 callbacks suppressed [ 255.120116][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3053'. [ 255.203297][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3055'. [ 255.565801][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 255.873180][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 255.965298][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.496857][T12222] netlink: 'syz.4.3084': attribute type 2 has an invalid length. [ 256.643393][T12227] netlink: 'syz.2.3086': attribute type 4 has an invalid length. [ 256.680575][T12227] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3086'. [ 256.733291][T12231] netlink: 'syz.4.3088': attribute type 9 has an invalid length. [ 258.133073][T12295] netlink: 'syz.1.3120': attribute type 13 has an invalid length. [ 258.158176][T12295] gretap0: refused to change device tx_queue_len [ 258.176313][T12295] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 258.219530][T12298] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.361173][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 258.462068][T12311] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3127'. [ 258.480513][T12313] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3129'. [ 258.520357][T12311] tc_dump_action: action bad kind [ 258.924790][T12327] bond2: option resend_igmp: invalid value (2878) [ 258.951831][T12327] bond2: option resend_igmp: allowed values 0 - 255 [ 258.962070][T12327] bond2 (unregistering): Released all slaves [ 260.051952][T12385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3162'. [ 261.466848][T12450] tc_dump_action: action bad kind [ 261.651031][T12456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3198'. [ 262.464057][T12484] batadv1: entered promiscuous mode [ 262.476730][T12484] batadv1: entered allmulticast mode [ 262.543388][T12487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3213'. [ 262.689904][T12490] netlink: 'syz.3.3215': attribute type 1 has an invalid length. [ 263.027133][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3221'. [ 263.334337][T12515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3227'. [ 263.553191][T12523] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 263.685333][T12531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.857719][T12539] openvswitch: netlink: Message has 8 unknown bytes. [ 263.882939][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.989009][T12545] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 263.996753][T12545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.369091][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3251'. [ 264.586962][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'. [ 264.873142][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 264.912283][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 264.940067][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 264.977363][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 265.106714][T12596] netlink: 'syz.3.3266': attribute type 2 has an invalid length. [ 265.157022][T12598] gre0: entered promiscuous mode [ 265.173782][T12598] gre0: entered allmulticast mode [ 265.408959][T12610] gretap0: entered promiscuous mode [ 265.701360][T12623] SET target dimension over the limit! [ 267.422565][T12701] netlink: 'syz.1.3318': attribute type 1 has an invalid length. [ 267.440783][T12701] __nla_validate_parse: 71 callbacks suppressed [ 267.440805][T12701] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3318'. [ 268.801795][T12768] netlink: 'syz.4.3353': attribute type 16 has an invalid length. [ 268.812712][T12768] netlink: 'syz.4.3353': attribute type 17 has an invalid length. [ 268.847446][T12763] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 268.866171][T12763] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 268.880885][T12763] bond2: entered allmulticast mode [ 268.887524][T12763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.095206][T12775] bond0 (unregistering): Released all slaves [ 269.180018][T12776] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 269.201390][T12776] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.342661][T12787] netlink: 'syz.1.3360': attribute type 30 has an invalid length. [ 269.534464][T12800] netlink: 'syz.3.3364': attribute type 30 has an invalid length. [ 269.619850][T12800] bond0: option arp_missed_max: invalid value (0) [ 269.627821][T12800] bond0: option arp_missed_max: allowed values 1 - 255 [ 269.644238][T12800] bond0 (unregistering): Released all slaves [ 269.669792][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3368'. [ 269.942500][T12817] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.308508][T12832] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 271.442206][T12888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.535708][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.865004][T12902] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3409'. [ 271.880429][T12905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.739884][T12938] Cannot find add_set index 34 as target [ 272.936680][T12944] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 273.865203][T12975] veth5: entered allmulticast mode [ 275.171299][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.188904][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.198341][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.206517][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.216669][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.355210][T13036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3473'. [ 275.731443][T13054] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 276.398081][T13028] xfrm0 speed is unknown, defaulting to 1000 [ 276.576449][T13092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3498'. [ 276.612342][T13092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3498'. [ 277.089193][T13115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3509'. [ 277.186943][T13121] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.242752][ T5647] Bluetooth: hci5: command tx timeout [ 277.296238][T13124] xt_TCPMSS: Only works on TCP SYN packets [ 277.548453][T13135] netlink: 'syz.4.3517': attribute type 2 has an invalid length. [ 277.575197][T13135] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 277.602922][T13135] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3517'. [ 277.658630][T13138] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 277.821207][T13142] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 277.846280][T13142] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3520'. [ 278.002843][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3525'. [ 278.488868][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.537488][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.561381][T13028] bridge_slave_0: entered allmulticast mode [ 278.599401][T13028] bridge_slave_0: entered promiscuous mode [ 278.625136][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.634429][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.643621][T13180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3536'. [ 278.662814][T13028] bridge_slave_1: entered allmulticast mode [ 278.677923][T13028] bridge_slave_1: entered promiscuous mode [ 278.792776][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.809940][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.955666][T13028] team0: Port device team_slave_0 added [ 278.988738][T13028] team0: Port device team_slave_1 added [ 279.090573][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 279.111149][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.137470][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.196310][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.318702][T13198] bond0: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 279.326029][ T5647] Bluetooth: hci5: command tx timeout [ 279.388111][T13198] bond0 (unregistering): Released all slaves [ 279.570093][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.584011][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.615674][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.650502][T13216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.824793][T13028] hsr_slave_0: entered promiscuous mode [ 279.831863][T13028] hsr_slave_1: entered promiscuous mode [ 279.839104][T13028] debugfs: 'hsr0' already exists in 'hsr' [ 279.846244][T13028] Cannot create hsr debugfs directory [ 280.732214][T13028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 280.767452][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.779313][T13260] netlink: 'syz.1.3575': attribute type 11 has an invalid length. [ 280.788390][T13028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.801952][T13260] netlink: 'syz.1.3575': attribute type 4 has an invalid length. [ 280.813254][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.822573][T13260] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3575'. [ 280.931043][T13264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3577'. [ 280.958343][T13258] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 281.017039][T13258] bond3 (unregistering): Released all slaves [ 281.128826][T13028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.163449][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.250975][T13266] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 281.273033][T13266] bond0 (unregistering): Released all slaves [ 281.382911][T13272] netlink: 'syz.4.3581': attribute type 210 has an invalid length. [ 281.403345][ T5647] Bluetooth: hci5: command tx timeout [ 281.421426][T13028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.430636][T13284] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 281.463692][T13028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.663182][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.754941][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.796928][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.804168][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.874418][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.881725][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.629808][T13337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.288774][T13369] netlink: 'syz.1.3621': attribute type 12 has an invalid length. [ 283.322560][T13369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3621'. [ 283.366599][T13371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3622'. [ 283.494147][ T5647] Bluetooth: hci5: command tx timeout [ 283.533426][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.687530][T13379] bond4 (unregistering): Released all slaves [ 284.411149][T13416] netlink: 'syz.4.3639': attribute type 1 has an invalid length. [ 284.431816][T13416] netlink: 'syz.4.3639': attribute type 1 has an invalid length. [ 284.454283][T13028] veth0_vlan: entered promiscuous mode [ 284.509583][T13028] veth1_vlan: entered promiscuous mode [ 284.615225][T13028] veth0_macvtap: entered promiscuous mode [ 284.647864][T13424] ±ÿ: renamed from lo (while UP) [ 284.664733][T13028] veth1_macvtap: entered promiscuous mode [ 284.839486][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.896004][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.967532][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.987797][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.008851][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.019793][T13438] openvswitch: netlink: EtherType 50a is less than min 600 [ 285.029379][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.329617][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.360879][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.430390][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.445351][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.599105][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3679'. [ 286.967126][T13518] netlink: 'syz.2.3689': attribute type 11 has an invalid length. [ 287.857736][T13562] netlink: 'syz.1.3710': attribute type 4 has an invalid length. [ 287.882309][T13563] netlink: 'syz.3.3711': attribute type 10 has an invalid length. [ 287.890561][T13562] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3710'. [ 287.914071][T13563] bridge0: port 1(ip6gretap0) entered disabled state [ 287.960014][T13562] .`: renamed from bond0 [ 288.751252][T13599] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 289.289851][T13617] netlink: 'syz.2.3738': attribute type 11 has an invalid length. [ 289.728323][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3748'. [ 290.221098][T13661] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3759'. [ 291.251328][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3780'. [ 291.398480][ T5632] IPVS: starting estimator thread 0... [ 291.501950][T13709] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 291.523201][T13714] IPVS: using max 30 ests per chain, 72000 per kthread [ 291.548228][T13709] bond1 (unregistering): Released all slaves [ 292.097141][T13738] netlink: 'syz.5.3795': attribute type 2 has an invalid length. [ 292.338555][T13749] netlink: 'syz.3.3800': attribute type 32 has an invalid length. [ 292.355889][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3800'. [ 292.376957][T13750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3801'. [ 292.423225][T13750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3801'. [ 292.664134][T13749] bond0: Setting coupled_control to off (0) [ 292.731291][T13771] netlink: 'syz.2.3811': attribute type 2 has an invalid length. [ 292.889064][T13777] xt_TCPMSS: Only works on TCP SYN packets [ 293.051807][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3818'. [ 293.083640][T13785] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 293.117930][T13785] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3818'. [ 293.278014][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3823'. [ 293.886545][T13825] xt_connbytes: Forcing CT accounting to be enabled [ 293.903242][T13825] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 294.201752][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3845'. [ 294.562167][T13861] netlink: 'syz.3.3855': attribute type 210 has an invalid length. [ 295.438610][T13907] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 295.466762][T13908] netlink: 'syz.4.3878': attribute type 1 has an invalid length. [ 295.504808][T13908] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3878'. [ 295.639347][T13917] netlink: 'syz.1.3883': attribute type 10 has an invalid length. [ 295.673823][T13917] .`: (slave bridge0): Enslaving as an active interface with an up link [ 295.955116][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3890'. [ 295.973363][T13932] netlink: 'syz.1.3891': attribute type 4 has an invalid length. [ 296.009516][T13934] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3892'. [ 296.080621][T13934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.833852][T13968] netlink: 'syz.5.3908': attribute type 1 has an invalid length. [ 297.457420][T13989] __nla_validate_parse: 4 callbacks suppressed [ 297.457441][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 297.481240][T13990] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 297.568733][T13992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3920'. [ 297.968910][T14008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3929'. [ 298.892973][T14058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3953'. [ 299.025766][T14062] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3955'. [ 299.238317][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.251563][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.516657][T14085] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3966'. [ 299.664816][ T47] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.739602][T14095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.970629][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 300.522696][T14131] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 300.553961][T14131] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 300.598115][T14131] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 300.848895][T14147] geneve2: entered allmulticast mode [ 301.099287][T14159] netdevsim netdevsim4: Direct firmware load for á failed with error -2 [ 301.113061][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4005'. [ 301.125320][T14159] netdevsim netdevsim4: Falling back to sysfs fallback for: á [ 301.274834][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4007'. [ 301.289837][T14167] vlan0: entered promiscuous mode [ 301.539752][T14180] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 301.672251][T14186] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 302.490365][T14226] set match dimension is over the limit! [ 302.567705][T14229] IPVS: Error joining to the multicast group [ 302.805089][T14242] gtp0: entered allmulticast mode [ 302.920548][T14248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.113810][T14256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4051'. [ 303.881283][T14298] netlink: 'syz.5.4072': attribute type 49 has an invalid length. [ 304.322079][T14321] netlink: 'syz.3.4083': attribute type 1 has an invalid length. [ 304.356844][T14321] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4083'. [ 304.415135][ T30] audit: type=1800 audit(1783933163.218:3): pid=14328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4086" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4050 res=0 errno=0 [ 304.861894][T14346] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4095'. [ 305.438104][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4109'. [ 305.545683][T14378] 8021q: adding VLAN 0 to HW filter on device .` [ 305.571161][T14378] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.639620][T14378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.725373][T14378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.760290][T14378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.808215][T14378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.833769][T14378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.853385][T14396] netlink: 'syz.2.4119': attribute type 1 has an invalid length. [ 305.880068][T14378] veth1_vlan: left promiscuous mode [ 305.883888][T14396] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4119'. [ 305.900686][T14378] veth0_vlan: left promiscuous mode [ 305.909777][T14378] veth0_vlan: entered promiscuous mode [ 305.918608][T14378] veth1_vlan: entered promiscuous mode [ 305.974245][T14378] veth1_macvtap: left promiscuous mode [ 305.993950][T14378] veth0_macvtap: left promiscuous mode [ 306.029383][T14378] veth0_macvtap: entered promiscuous mode [ 306.063689][T14378] veth1_macvtap: entered promiscuous mode [ 306.088213][T14378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.098595][T14378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.108760][T14378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.125285][T14378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.146430][T14378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.163052][T14378] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 306.199604][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.206919][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.246169][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.253534][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.415933][T14410] x_tables: duplicate underflow at hook 4 [ 307.199514][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.304199][T14422] bond0: option mode: invalid value (254) [ 307.337688][T14422] bond0 (unregistering): Released all slaves [ 307.414207][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.437873][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.501443][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.325948][T14476] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.653034][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.663178][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4168'. [ 308.664617][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.692061][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4168'. [ 308.796584][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4170'. [ 308.822820][T14499] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 309.820545][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.853058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.868814][T14549] tc_dump_action: action bad kind [ 310.228725][T14565] netlink: 'syz.5.4203': attribute type 1 has an invalid length. [ 310.945199][T14589] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 311.039628][T14591] netlink: 'syz.1.4214': attribute type 2 has an invalid length. [ 311.212708][T14597] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 311.372652][T14601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4219'. [ 311.393291][T14601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4219'. [ 311.888309][T14619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.080166][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4251'. [ 313.090246][T14667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4251'. [ 313.374027][T14682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4258'. [ 313.867091][T14705] netlink: 'syz.4.4272': attribute type 10 has an invalid length. [ 314.455552][T14735] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.4284'. [ 315.030755][T14768] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old? [ 315.235396][T14782] netlink: 'syz.1.4307': attribute type 30 has an invalid length. [ 315.245966][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4307'. [ 315.330246][T14782] bond0: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 315.358886][T14782] bond0 (unregistering): Released all slaves [ 315.968563][T14810] netlink: 'syz.1.4317': attribute type 11 has an invalid length. [ 315.990493][T14810] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4317'. [ 316.086313][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4319'. [ 316.189497][T14820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.246477][T14788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.262698][T14788] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 316.450905][T14788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.468239][T14831] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4325'. [ 316.490910][T14788] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 316.570338][T14788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.623825][T14788] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 316.714563][T14788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.736656][T14788] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 316.802096][T14788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.835068][T14788] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 316.908421][T14848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4333'. [ 317.615953][T14788] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 317.645941][T14788] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 317.768553][T14884] netlink: 'syz.3.4347': attribute type 1 has an invalid length. [ 317.801468][T14884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4347'. [ 317.819867][T14887] xt_connbytes: Forcing CT accounting to be enabled [ 317.839571][T14887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.966904][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 318.024799][T14891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4350'. [ 318.098253][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4351'. [ 318.108066][T14897] netlink: 'syz.5.4352': attribute type 3 has an invalid length. [ 318.117495][T14897] netlink: 'syz.5.4352': attribute type 3 has an invalid length. [ 318.770321][T14918] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 318.857050][T14918] bond1 (unregistering): Released all slaves [ 319.546345][T14966] __nla_validate_parse: 4 callbacks suppressed [ 319.546367][T14966] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4377'. [ 319.942861][T14985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4384'. [ 319.972814][T14986] netlink: 'syz.1.4387': attribute type 11 has an invalid length. [ 320.004592][T14986] netlink: 'syz.1.4387': attribute type 4 has an invalid length. [ 320.033408][T14986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4387'. [ 320.311704][T15003] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4392'. [ 320.349125][T15003] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4392'. [ 320.391208][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4392'. [ 320.410670][T15008] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 320.561780][T15016] netlink: 'syz.1.4397': attribute type 21 has an invalid length. [ 320.614082][T15016] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4397'. [ 320.658582][T15016] netlink: 'syz.1.4397': attribute type 4 has an invalid length. [ 320.697128][T15016] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4397'. [ 320.719788][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4401'. [ 320.746299][T15026] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 320.883701][T15029] xt_l2tp: v2 sid > 0xffff: 262144 [ 321.975972][T15080] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 322.651741][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4439'. [ 322.900010][T15128] netlink: 'syz.4.4444': attribute type 4 has an invalid length. [ 323.957841][T15178] =v: renamed from veth0_to_bond (while UP) [ 324.390239][T15194] bond3: option updelay: invalid value (18446744073709518847) [ 324.398672][T15194] bond3: option updelay: allowed values 0 - 2147483647 [ 324.414647][T15194] bond3 (unregistering): Released all slaves [ 324.778696][T15213] bond2: entered promiscuous mode [ 324.826978][T15213] bond2: entered allmulticast mode [ 324.864853][T15213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.032901][T15225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.040349][T15225] IPv6: NLM_F_CREATE should be set when creating new route [ 325.047720][T15225] IPv6: NLM_F_CREATE should be set when creating new route [ 325.081025][T15226] __nla_validate_parse: 6 callbacks suppressed [ 325.081045][T15226] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4484'. [ 325.105570][T15228] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 325.114006][T15228] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.598620][T15252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4496'. [ 326.189612][T15283] xt_limit: Overflow, try lower: 2/2147483648 [ 326.416261][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4514'. [ 326.455755][T15296] netlink: 'syz.4.4513': attribute type 1 has an invalid length. [ 326.471256][T15294] bridge0: port 1(ip6gretap0) entered blocking state [ 326.478262][T15294] bridge0: port 1(ip6gretap0) entered forwarding state [ 326.631221][T15294] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 326.864112][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4520'. [ 326.888430][T15310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.900248][T15311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.004344][T15364] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4542'. [ 328.578104][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4550'. [ 329.177187][T15406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 331.135577][T15479] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4590'. [ 331.167601][T15481] netlink: 'syz.4.4591': attribute type 1 has an invalid length. [ 331.470168][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4600'. [ 331.741974][T15513] netlink: 'syz.1.4607': attribute type 12 has an invalid length. [ 332.394786][T15540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.402121][T15540] IPv6: NLM_F_CREATE should be set when creating new route [ 332.409489][T15540] IPv6: NLM_F_CREATE should be set when creating new route [ 332.642232][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4624'. [ 332.721981][T15557] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 332.789100][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 332.822795][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 332.854297][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 332.881698][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 332.910760][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 332.934256][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 332.962574][T15560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4629'. [ 333.936867][T15610] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 334.552924][T15641] xt_l2tp: v2 doesn't support IP mode [ 334.623488][T15644] netlink: 'syz.3.4669': attribute type 49 has an invalid length. [ 334.902773][T15660] sctp: [Deprecated]: syz.1.4677 (pid 15660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.902773][T15660] Use struct sctp_sack_info instead [ 335.008210][T15664] openvswitch: netlink: IP tunnel dst address not specified [ 335.289395][T15682] xt_l2tp: invalid flags combination: 0 [ 336.068881][T15722] Cannot find del_set index 3 as target [ 336.167732][T15728] netlink: 'syz.2.4711': attribute type 1 has an invalid length. [ 336.176248][T15728] netlink: 'syz.2.4711': attribute type 2 has an invalid length. [ 336.676212][T15750] __nla_validate_parse: 28 callbacks suppressed [ 336.676233][T15750] netlink: 768 bytes leftover after parsing attributes in process `syz.4.4724'. [ 336.702145][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4723'. [ 336.712050][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4723'. [ 336.723217][T15753] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 337.546766][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4743'. [ 337.664324][T15800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4747'. [ 337.674856][T15800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4747'. [ 337.685468][T15802] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 338.034561][T15820] netlink: 'syz.2.4757': attribute type 9 has an invalid length. [ 338.600560][T15851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.765901][T15858] netlink: 380 bytes leftover after parsing attributes in process `syz.1.4772'. [ 338.779114][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4772'. [ 338.800827][T15858] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4772'. [ 339.268369][T15876] x_tables: unsorted entry at hook 2 [ 339.428881][T15882] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4784'. [ 340.032463][T15905] xt_HMARK: proto mask must be zero with L3 mode [ 340.701207][T15937] netlink: 'syz.1.4810': attribute type 1 has an invalid length. [ 340.716262][T15941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.662696][T15989] netlink: 'syz.4.4836': attribute type 39 has an invalid length. [ 341.761920][T15995] netlink: 'syz.1.4840': attribute type 1 has an invalid length. [ 341.781848][T15995] __nla_validate_parse: 2 callbacks suppressed [ 341.781895][T15995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4840'. [ 341.799771][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4840'. [ 342.191803][T16017] bond0: entered promiscuous mode [ 342.197569][T16017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.439685][T16034] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 342.729917][T16048] netlink: 'syz.4.4866': attribute type 5 has an invalid length. [ 342.765829][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.784638][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.797695][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.806847][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.816397][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.870830][ T5647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.880933][ T5647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.894253][ T5647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.907697][ T5647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.915591][ T5647] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.162706][T16064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.647805][T16050] xfrm0 speed is unknown, defaulting to 1000 [ 343.655860][T16088] netlink: 'syz.1.4882': attribute type 4 has an invalid length. [ 343.674104][T16088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4882'. [ 343.822055][T16096] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4885'. [ 343.852531][T16096] netlink: 'syz.2.4885': attribute type 1 has an invalid length. [ 344.098888][T16107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4890'. [ 344.163132][T16107] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4890'. [ 344.192574][T16107] netlink: 'syz.4.4890': attribute type 5 has an invalid length. [ 344.213495][T16107] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4890'. [ 344.767713][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.776378][T16050] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.787050][T16050] bridge_slave_0: entered allmulticast mode [ 344.795453][T16050] bridge_slave_0: entered promiscuous mode [ 344.804773][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.812145][T16050] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.819678][T16050] bridge_slave_1: entered allmulticast mode [ 344.829681][T16050] bridge_slave_1: entered promiscuous mode [ 344.953194][T16050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.988937][T16050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.004231][ T5647] Bluetooth: hci6: command tx timeout [ 345.033903][T16150] sctp: [Deprecated]: syz.4.4910 (pid 16150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.033903][T16150] Use struct sctp_sack_info instead [ 345.079360][T16154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4908'. [ 345.086911][T16153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4909'. [ 345.103820][T16153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4909'. [ 345.205381][T16050] team0: Port device team_slave_0 added [ 345.229467][T16050] team0: Port device team_slave_1 added [ 345.381300][T16050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.412503][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.460468][T16050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.529642][T16050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.545860][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.612958][T16050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.677116][T16177] xt_socket: unknown flags 0x4c [ 345.738914][T16050] hsr_slave_0: entered promiscuous mode [ 345.745906][T16050] hsr_slave_1: entered promiscuous mode [ 345.758460][T16050] debugfs: 'hsr0' already exists in 'hsr' [ 345.770545][T16050] Cannot create hsr debugfs directory [ 346.399823][T16210] netlink: 'syz.1.4938': attribute type 21 has an invalid length. [ 346.447148][T16212] openvswitch: netlink: Message has 4 unknown bytes. [ 346.469771][T16050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.497218][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.521889][T16050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.563857][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.587831][T16050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.615733][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.634151][T16050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.671006][T16050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.915997][T16050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.991957][T16050] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.026055][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.033549][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.054310][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.061565][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.082504][ T5647] Bluetooth: hci6: command tx timeout [ 347.461207][T16256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.676946][T16270] ipt_REJECT: TCP_RESET invalid for non-tcp [ 347.845832][T16278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.928421][T16281] Cannot find add_set index 0 as target [ 347.968590][T16286] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 348.067806][T16291] __nla_validate_parse: 2 callbacks suppressed [ 348.067827][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4969'. [ 348.154785][T16050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.254888][T16298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.675049][T16050] veth0_vlan: entered promiscuous mode [ 348.695626][T16050] veth1_vlan: entered promiscuous mode [ 348.769413][T16050] veth0_macvtap: entered promiscuous mode [ 348.788511][T16050] veth1_macvtap: entered promiscuous mode [ 348.817066][T16050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.846824][T16050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.934072][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.960887][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.988690][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.011583][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.162503][ T5647] Bluetooth: hci6: command tx timeout [ 349.597819][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.630181][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.692072][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.731242][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.987634][T16349] netlink: 'syz.2.4995': attribute type 5 has an invalid length. [ 350.419059][T16369] ip6t_srh: unknown srh match flags 4000 [ 350.849990][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5012'. [ 350.987796][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.998046][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.009926][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.024042][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.033347][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.242853][ T5647] Bluetooth: hci6: command tx timeout [ 351.623941][T16413] netlink: 'syz.4.5022': attribute type 1 has an invalid length. [ 351.654364][T16413] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5022'. [ 351.811830][T16386] xfrm0 speed is unknown, defaulting to 1000 [ 351.977278][T16426] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.015511][T16429] netlink: 'syz.1.5030': attribute type 1 has an invalid length. [ 352.029413][T16429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.363067][ T5844] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 352.731055][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5045'. [ 352.920291][ T47] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 353.082617][ T5647] Bluetooth: hci7: command tx timeout [ 353.168512][T10948] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 353.231399][T16481] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5056'. [ 353.530369][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.547033][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.568668][T16386] bridge_slave_0: entered allmulticast mode [ 353.590792][T16386] bridge_slave_0: entered promiscuous mode [ 353.617628][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.634238][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.657978][T16502] netlink: 292 bytes leftover after parsing attributes in process `syz.6.5062'. [ 353.661936][T16386] bridge_slave_1: entered allmulticast mode [ 353.691632][T16386] bridge_slave_1: entered promiscuous mode [ 353.794348][T16386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.829136][T16386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.939552][T16386] team0: Port device team_slave_0 added [ 353.956035][T16386] team0: Port device team_slave_1 added [ 354.005327][ T57] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 354.030107][ T57] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 354.098909][T16386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.106709][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.134242][T16386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.147344][T16386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.153193][T10946] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 354.154976][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.155003][T16386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.361010][T16386] hsr_slave_0: entered promiscuous mode [ 354.379845][T16386] hsr_slave_1: entered promiscuous mode [ 354.393551][T16386] debugfs: 'hsr0' already exists in 'hsr' [ 354.409658][T16386] Cannot create hsr debugfs directory [ 354.619224][T16529] netlink: 'syz.4.5076': attribute type 1 has an invalid length. [ 354.893654][T16539] netlink: 'syz.6.5081': attribute type 32 has an invalid length. [ 355.164274][ T5647] Bluetooth: hci7: command tx timeout [ 355.217425][T16386] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 355.241396][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 355.262596][T16386] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 355.286756][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 355.320836][T16386] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 355.359720][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 355.378029][T16386] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 355.398667][T16386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 355.698152][T16386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.745318][T16386] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.789460][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.796730][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.827323][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.834928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.354638][T16600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5108'. [ 356.381541][T16595] bond1: option arp_interval: invalid value (18446744073709551615) [ 356.392896][T16595] bond1: option arp_interval: allowed values 0 - 2147483647 [ 356.403956][T16595] bond1 (unregistering): Released all slaves [ 356.506234][T16604] gre1: entered allmulticast mode [ 357.105972][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5118'. [ 357.185980][T16386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.238190][T16637] xt_bpf: check failed: parse error [ 357.243694][ T5647] Bluetooth: hci7: command tx timeout [ 357.561952][T16647] bond4: option packets_per_slave: invalid value (1048582) [ 357.572737][T16647] bond4: option packets_per_slave: allowed values 0 - 65535 [ 357.601288][T16647] bond4 (unregistering): Released all slaves [ 357.732923][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 357.949646][T16386] veth0_vlan: entered promiscuous mode [ 358.009605][T16386] veth1_vlan: entered promiscuous mode [ 358.049385][T16386] veth0_macvtap: entered promiscuous mode [ 358.061180][T16386] veth1_macvtap: entered promiscuous mode [ 358.107440][T16386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.128487][T16386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.147243][ T1015] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.166535][ T1015] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.892920][ T1015] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.946804][T16671] bond4: entered promiscuous mode [ 358.954542][T16671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.995698][ T1015] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.265486][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.289042][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.307058][T16678] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5138'. [ 359.322842][ T5647] Bluetooth: hci7: command tx timeout [ 359.398339][T16680] netlink: 'syz.1.5139': attribute type 28 has an invalid length. [ 359.406977][T16680] netlink: 'syz.1.5139': attribute type 3 has an invalid length. [ 359.414883][T16680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5139'. [ 359.463515][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.487955][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.437224][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'. [ 360.464303][T16706] netlink: 356 bytes leftover after parsing attributes in process `syz.1.5151'. [ 361.078932][T16726] netlink: 'syz.7.5161': attribute type 4 has an invalid length. [ 361.103886][T16724] netdevsim netdevsim1: Direct firmware load for .® failed with error -2 [ 361.131609][T16724] netdevsim netdevsim1: Falling back to sysfs fallback for: .® [ 361.229830][T16728] bond1: option primary_reselect: invalid value (6) [ 361.238486][T16728] bond1 (unregistering): Released all slaves [ 365.208233][T16682] SET target dimension over the limit! [ 365.208742][T16739] Cannot find add_set index 0 as target [ 365.402822][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 365.695335][ T5630] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 365.709880][ T5630] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 365.720538][ T5630] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 365.734987][ T5630] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 365.745771][ T5630] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 366.951525][T16789] netlink: 'syz.1.5185': attribute type 9 has an invalid length. [ 367.194829][T16796] xt_NFQUEUE: number of total queues is 0 [ 367.421697][T16757] xfrm0 speed is unknown, defaulting to 1000 [ 367.589894][T16816] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5197'. [ 367.802824][ T5647] Bluetooth: hci8: command tx timeout [ 368.391475][T16834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.895131][T16843] openvswitch: netlink: IP tunnel TTL not specified. [ 369.625595][T16757] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.638016][T16757] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.654365][T16757] bridge_slave_0: entered allmulticast mode [ 369.687092][T16757] bridge_slave_0: entered promiscuous mode [ 369.767349][T16881] bond5: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 369.778420][T16881] bond5: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 369.789403][T16881] bond5: entered allmulticast mode [ 369.795715][T16757] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.805558][T16757] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.813349][T16757] bridge_slave_1: entered allmulticast mode [ 369.837171][T16757] bridge_slave_1: entered promiscuous mode [ 369.883109][ T5647] Bluetooth: hci8: command tx timeout [ 369.916074][T16757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.946280][T16757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.125493][T16757] team0: Port device team_slave_0 added [ 370.169894][T16757] team0: Port device team_slave_1 added [ 370.258720][T16899] netlink: 'syz.7.5233': attribute type 12 has an invalid length. [ 370.365657][T16757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.384509][T16757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.470752][T16757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.486852][T16909] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 370.506476][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5238'. [ 370.519760][T16907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.551155][T16757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.573725][T16757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.610038][T16757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.859173][T16757] hsr_slave_0: entered promiscuous mode [ 370.888094][T16757] hsr_slave_1: entered promiscuous mode [ 370.915629][T16757] debugfs: 'hsr0' already exists in 'hsr' [ 370.924523][T16757] Cannot create hsr debugfs directory [ 371.501408][T16942] Cannot find del_set index 1 as target [ 371.664017][T16946] xt_hashlimit: size too large, truncated to 1048576 [ 371.682657][T16946] xt_hashlimit: max too large, truncated to 1048576 [ 371.885775][T16951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.962616][ T5647] Bluetooth: hci8: command tx timeout [ 372.038149][T16955] geneve1: entered promiscuous mode [ 372.077047][T16757] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 372.138085][T16757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.174811][T16757] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 372.223077][T16757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.247714][T16757] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 372.280723][T16757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.307299][T16757] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 372.338307][T16757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.430888][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5269'. [ 372.627093][T16757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.725297][T16757] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.772039][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.779504][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.839837][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.847100][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.042632][ T5647] Bluetooth: hci8: command tx timeout [ 374.598135][T16757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.664144][T17058] ip6gre1: entered allmulticast mode [ 374.878747][T17071] netlink: 193 bytes leftover after parsing attributes in process `syz.6.5309'. [ 374.989514][T17075] ipt_ECN: cannot use operation on non-tcp rule [ 375.186547][T17085] netlink: 34 bytes leftover after parsing attributes in process `syz.6.5313'. [ 375.509429][T16757] veth0_vlan: entered promiscuous mode [ 375.570460][T16757] veth1_vlan: entered promiscuous mode [ 375.700261][T16757] veth0_macvtap: entered promiscuous mode [ 375.750893][T16757] veth1_macvtap: entered promiscuous mode [ 375.779437][T17100] xt_hashlimit: size too large, truncated to 1048576 [ 375.804134][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5322'. [ 375.815510][T17100] xt_hashlimit: max too large, truncated to 1048576 [ 375.837322][T16757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.879959][T16757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.935201][ T1183] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.958006][ T1183] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.986074][ T1183] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.026624][ T1183] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.277334][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.306481][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.504740][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.534043][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.940116][T17127] netlink: 228 bytes leftover after parsing attributes in process `syz.8.5168'. [ 377.199267][T17134] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 378.318372][T17187] netlink: 'syz.6.5361': attribute type 15 has an invalid length. [ 378.519084][T17196] lo: entered promiscuous mode [ 378.551655][T17196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.225782][T17219] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 379.521293][T17219] bond1 (unregistering): Released all slaves [ 380.122569][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 380.250311][T17250] netlink: 'syz.1.5390': attribute type 1 has an invalid length. [ 380.625028][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5400'. [ 380.819397][T17279] xt_policy: neither incoming nor outgoing policy selected [ 381.089107][T17289] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 381.270496][T17297] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5414'. [ 381.290341][T17297] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5414'. [ 381.575213][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5418'. [ 381.612045][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5418'. [ 382.922018][T17352] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5441'. [ 382.961017][T17354] netlink: 'syz.1.5442': attribute type 7 has an invalid length. [ 382.992659][T17354] netlink: 'syz.1.5442': attribute type 8 has an invalid length. [ 383.045320][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5444'. [ 383.062140][T17358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5444'. [ 383.395319][T17370] Cannot find set identified by id 0 to match [ 383.642296][T17376] bridge2: entered allmulticast mode [ 383.685674][T17380] netlink: 'syz.8.5454': attribute type 21 has an invalid length. [ 383.714464][T17380] netlink: 'syz.8.5454': attribute type 1 has an invalid length. [ 383.738560][T17380] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5454'. [ 383.748807][T17383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 383.990932][T17394] Cannot find del_set index 1 as target [ 384.491827][T17414] netlink: 'syz.6.5470': attribute type 3 has an invalid length. [ 384.507845][T17414] netlink: 'syz.6.5470': attribute type 3 has an invalid length. [ 385.519981][T17437] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 385.553635][T17437] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 385.586247][T17437] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 385.927133][T17450] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 385.996579][T17450] bond1 (unregistering): Released all slaves [ 386.623541][T17477] bond6: option lacp_rate: invalid value (3) [ 386.639504][T17477] bond6 (unregistering): Released all slaves [ 386.976700][T17496] netlink: 'syz.1.5508': attribute type 1 has an invalid length. [ 387.011921][T17499] netlink: 'syz.8.5509': attribute type 30 has an invalid length. [ 387.269893][T17509] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 387.462928][T17517] bridge0: port 3(netdevsim1) entered blocking state [ 387.499826][T17517] bridge0: port 3(netdevsim1) entered disabled state [ 387.521751][T17517] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 387.580570][T17517] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 387.593970][T17517] bridge0: port 3(netdevsim1) entered blocking state [ 387.600866][T17517] bridge0: port 3(netdevsim1) entered forwarding state [ 387.866013][T17534] netlink: 'syz.4.5527': attribute type 21 has an invalid length. [ 387.907847][T17534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5527'. [ 387.995248][T17540] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5530'. [ 388.052101][T17540] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5530'. [ 388.073121][T17540] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5530'. [ 388.356073][T17550] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 388.416562][T17550] bond1 (unregistering): Released all slaves [ 388.627053][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5544'. [ 388.826814][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5548'. [ 389.104257][T17590] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5554'. [ 389.388213][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5563'. [ 389.422160][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5563'. [ 389.530910][T17611] netlink: 'syz.8.5564': attribute type 10 has an invalid length. [ 389.554423][T17611] ipvlan0: entered allmulticast mode [ 389.567002][T17611] veth0_vlan: entered allmulticast mode [ 389.608194][T17611] team0: Device ipvlan0 failed to register rx_handler [ 389.837984][T17622] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5570'. [ 390.159704][T17639] netlink: 'syz.7.5579': attribute type 1 has an invalid length. [ 390.309973][T17647] geneve2: entered promiscuous mode [ 391.317958][T17642] infiniband syz1: set active [ 391.334281][T17642] infiniband syz1: added bridge_slave_0 [ 391.369066][T17642] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 391.369588][T17687] netlink: 'syz.6.5602': attribute type 5 has an invalid length. [ 391.422858][T17642] infiniband syz1: Couldn't open port 1 [ 391.444652][T17642] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 391.489763][T17687] ip6erspan0: entered allmulticast mode [ 391.500845][T17642] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 391.552240][T17642] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 391.742008][T17694] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.770289][T17694] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.805439][T17642] RDS/IB: syz1: added [ 391.813746][T17642] smc: adding ib device syz1 with port count 1 [ 391.834587][T17642] smc: ib device syz1 port 1 has no pnetid [ 391.915145][T17694] bridge0: port 3(netdevsim1) entered disabled state [ 393.179430][T17741] __nla_validate_parse: 6 callbacks suppressed [ 393.179453][T17741] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5627'. [ 393.711407][T17760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.983987][T17766] netlink: 'syz.7.5640': attribute type 2 has an invalid length. [ 395.531027][T17804] bond4: option downdelay: invalid value (18446744073709551487) [ 395.577928][T17804] bond4: option downdelay: allowed values 0 - 2147483647 [ 395.611552][T17804] bond4 (unregistering): Released all slaves [ 395.650179][T17817] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5664'. [ 396.640972][T17849] netlink: 'syz.6.5680': attribute type 13 has an invalid length. [ 397.106914][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5687'. [ 397.685906][T17885] netlink: 'syz.8.5698': attribute type 62 has an invalid length. [ 397.766144][T17887] openvswitch: netlink: Multiple metadata blocks provided [ 397.818794][T17889] openvswitch: netlink: IPv4 tunnel dst address is zero [ 397.951826][T17891] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 397.978299][T17891] bond1 (unregistering): Released all slaves [ 398.082976][T17900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.138604][T17964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5738'. [ 400.286358][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5739'. [ 400.959466][T17992] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5751'. [ 401.920838][T18033] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 401.958866][T18033] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 402.540305][T18052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5773'. [ 402.574042][T18052] netlink: 'syz.7.5773': attribute type 2 has an invalid length. [ 402.607339][T18054] xfrm1: entered allmulticast mode [ 403.895061][T18109] netlink: 'syz.1.5801': attribute type 21 has an invalid length. [ 403.916159][T18109] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5801'. [ 404.006747][T18113] netlink: 404 bytes leftover after parsing attributes in process `syz.1.5804'. [ 404.016333][T18113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5804'. [ 404.029132][T18113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5804'. [ 404.040620][T18113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5804'. [ 404.142119][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5806'. [ 405.523637][T18168] netlink: 'syz.6.5829': attribute type 4 has an invalid length. [ 406.128085][T18192] __nla_validate_parse: 1 callbacks suppressed [ 406.128106][T18192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5841'. [ 406.182055][T18196] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5843'. [ 406.208009][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5843'. [ 406.589033][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5850'. [ 406.622460][T18212] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 406.837789][T18223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.369750][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5870'. [ 407.422871][T18248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5869'. [ 407.721965][T18261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.208112][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5886'. [ 408.464147][T18295] netlink: 'syz.1.5892': attribute type 3 has an invalid length. [ 408.473104][T18295] netlink: 'syz.1.5892': attribute type 1 has an invalid length. [ 408.490799][T18295] netlink: 'syz.1.5892': attribute type 2 has an invalid length. [ 408.627396][T18301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5895'. [ 408.639406][T18301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5895'. [ 408.922789][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 409.752571][T18339] netlink: 'syz.7.5915': attribute type 23 has an invalid length. [ 409.769831][T18339] netlink: 'syz.7.5915': attribute type 21 has an invalid length. [ 409.916885][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5917'. [ 410.074271][T18352] netlink: 'syz.1.5920': attribute type 3 has an invalid length. [ 410.731951][T18382] netlink: 'syz.7.5935': attribute type 1 has an invalid length. [ 411.836295][T18402] __nla_validate_parse: 3 callbacks suppressed [ 411.836320][T18402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5945'. [ 412.694350][T18432] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5960'. [ 413.469059][T18466] netlink: 'syz.6.5977': attribute type 9 has an invalid length. [ 413.619436][T18474] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 413.644745][T18474] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 414.449237][ T5630] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 414.464147][ T5630] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 414.480121][ T5630] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 414.506636][ T5630] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 414.516292][ T5630] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 414.768664][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6000'. [ 415.016054][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6003'. [ 415.215911][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6007'. [ 415.248990][T18537] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 415.284125][T18537] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 415.297636][T18540] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 415.334810][T18502] xfrm0 speed is unknown, defaulting to 1000 [ 415.546697][T18546] Cannot find del_set index 2 as target [ 415.689018][T18552] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6015'. [ 416.191922][T18566] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6022'. [ 416.229329][T18566] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6022'. [ 416.275968][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6024'. [ 416.391693][T18572] netdevsim netdevsim7 €Â: renamed from netdevsim0 (while UP) [ 416.429960][T18574] netlink: 'syz.1.6027': attribute type 2 has an invalid length. [ 416.603962][ T5647] Bluetooth: hci9: command tx timeout [ 416.889218][T18594] xt_ecn: cannot match TCP bits for non-tcp packets [ 416.921095][T18596] netlink: 'syz.6.6035': attribute type 29 has an invalid length. [ 417.351910][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6043'. [ 417.719102][T18627] SET target dimension over the limit! [ 417.729012][T18622] bridge2: entered allmulticast mode [ 417.749149][ T5630] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 417.766388][ T5630] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 417.777330][ T5630] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 417.792251][ T5630] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 417.803305][ T5630] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 417.955213][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.974193][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.992994][T18502] bridge_slave_0: entered allmulticast mode [ 418.007833][T18502] bridge_slave_0: entered promiscuous mode [ 418.021100][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.028660][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.039400][T18502] bridge_slave_1: entered allmulticast mode [ 418.047571][T18502] bridge_slave_1: entered promiscuous mode [ 418.207524][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.254397][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.280106][T18644] netlink: 'syz.7.6055': attribute type 21 has an invalid length. [ 418.395646][T18502] team0: Port device team_slave_0 added [ 418.460844][T18502] team0: Port device team_slave_1 added [ 418.649195][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.680381][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.714861][ T5647] Bluetooth: hci9: command tx timeout [ 418.740653][T18660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6062'. [ 418.750077][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.814701][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.832894][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.894469][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.066393][T18502] hsr_slave_0: entered promiscuous mode [ 419.093084][T18502] hsr_slave_1: entered promiscuous mode [ 419.118597][T18502] debugfs: 'hsr0' already exists in 'hsr' [ 419.136951][T18502] Cannot create hsr debugfs directory [ 419.224020][T18625] xfrm0 speed is unknown, defaulting to 1000 [ 419.302177][T18676] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 419.320126][T18676] bridge3: entered allmulticast mode [ 419.394957][T18680] netlink: 'syz.1.6071': attribute type 1 has an invalid length. [ 419.413153][T18680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6071'. [ 419.620611][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6074'. [ 419.634585][T18686] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6074'. [ 419.670323][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6074'. [ 419.883368][ T5647] Bluetooth: hci10: command tx timeout [ 420.012643][T18700] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6081'. [ 420.499820][T18502] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 420.550382][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.594101][T18502] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 420.631203][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.656286][T18502] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 420.688318][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.717740][T18502] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 420.762616][ T5647] Bluetooth: hci9: command tx timeout [ 420.776680][T18502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.924564][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6093'. [ 420.953997][T18733] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6093'. [ 421.160238][T18740] tc_dump_action: action bad kind [ 421.183282][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.279620][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.418291][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.425563][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.597158][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.607788][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.733230][T18759] openvswitch: netlink: Duplicate or invalid key (type 0). [ 421.748093][T18759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.816628][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.830930][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.962566][ T5647] Bluetooth: hci10: command tx timeout [ 421.978245][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.999170][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.006536][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.019020][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.028430][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.063197][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.842661][ T5647] Bluetooth: hci9: command tx timeout [ 423.189420][T18625] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.214465][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.238196][T18625] bridge_slave_0: entered allmulticast mode [ 423.263894][T18625] bridge_slave_0: entered promiscuous mode [ 423.308417][T18625] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.329859][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.360237][T18625] bridge_slave_1: entered allmulticast mode [ 423.382132][T18625] bridge_slave_1: entered promiscuous mode [ 423.512179][T18821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.612798][T18625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.676392][T18625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.846689][T18625] team0: Port device team_slave_0 added [ 423.881501][T18625] team0: Port device team_slave_1 added [ 424.012951][T18625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.027216][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.072587][ T5647] Bluetooth: hci10: command tx timeout [ 424.081094][T18625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.098685][T18625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.134754][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.182415][T18625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.404616][T18625] hsr_slave_0: entered promiscuous mode [ 424.438124][T18625] hsr_slave_1: entered promiscuous mode [ 424.455015][T18625] debugfs: 'hsr0' already exists in 'hsr' [ 424.472731][T18625] Cannot create hsr debugfs directory [ 424.579998][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.632151][T18859] netlink: 'syz.7.6148': attribute type 9 has an invalid length. [ 424.654878][T18859] netlink: 'syz.7.6148': attribute type 5 has an invalid length. [ 425.060892][T18875] netlink: 'syz.6.6155': attribute type 1 has an invalid length. [ 425.090077][T18875] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6155'. [ 425.416761][T18887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.690195][T18895] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6164'. [ 425.755484][T18502] veth0_vlan: entered promiscuous mode [ 425.930139][T18502] veth1_vlan: entered promiscuous mode [ 426.069938][T18906] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6170'. [ 426.116490][T18502] veth0_macvtap: entered promiscuous mode [ 426.132834][ T5647] Bluetooth: hci10: command tx timeout [ 426.158521][T18502] veth1_macvtap: entered promiscuous mode [ 426.267663][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.415038][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.506978][ T47] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.546789][ T47] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.582862][ T47] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.596575][ T47] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.786392][T18625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.907379][T18625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.922031][T18625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.956073][T18625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.969861][T18625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.002042][T18625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.085300][T18625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.205474][T18625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.554319][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.587947][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.710881][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.745663][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.926471][T18625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.017718][T18625] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.086202][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.093506][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.178225][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.185539][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.751146][T18986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6204'. [ 428.907508][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6206'. [ 429.207672][T19002] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6210'. [ 429.398801][T19012] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 429.415055][T19011] tipc: Trying to set illegal importance in message [ 429.523869][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6217'. [ 429.713754][T19024] netlink: 'syz.6.6220': attribute type 1 has an invalid length. [ 429.736370][T19024] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6220'. [ 429.921410][T19031] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 429.980215][T18625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.213426][T18625] veth0_vlan: entered promiscuous mode [ 430.262047][T18625] veth1_vlan: entered promiscuous mode [ 430.386067][T18625] veth0_macvtap: entered promiscuous mode [ 430.427395][T18625] veth1_macvtap: entered promiscuous mode [ 430.481940][T18625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.514328][T18625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.567254][ T1183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.634628][ T1183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.651944][ T1183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.664340][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.779247][T19059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 430.990555][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.034428][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.104900][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.113881][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.296182][T19077] netlink: 'syz.6.6246': attribute type 15 has an invalid length. [ 431.304488][T19077] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6246'. [ 431.515799][T19085] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6249'. [ 431.962270][T19097] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.970131][T19097] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.301919][T19097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.358891][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6262'. [ 432.390701][T19097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.707266][T19118] netlink: 'syz.0.6265': attribute type 4 has an invalid length. [ 432.722750][ T47] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.755739][ T47] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.790381][ T47] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.829509][ T47] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.321597][T19139] openvswitch: netlink: Actions may not be safe on all matching packets [ 433.365057][T19141] netlink: 'syz.7.6276': attribute type 4 has an invalid length. [ 434.998287][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6306'. [ 435.955922][T19232] IPVS: Error connecting to the multicast addr [ 436.350311][ T30] audit: type=1107 audit(1783933295.148:4): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 437.397655][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6350'. [ 437.709885][T19302] netlink: 'syz.1.6356': attribute type 15 has an invalid length. [ 439.074100][T19356] netlink: 160 bytes leftover after parsing attributes in process `syz.7.6383'. [ 439.561188][T19378] netlink: 'syz.1.6394': attribute type 2 has an invalid length. [ 439.599385][T19380] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6395'. [ 439.728605][T19384] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 439.963654][T19396] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6403'. [ 440.845531][T19437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6424'. [ 441.042773][T19443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6428'. [ 441.077039][T19447] netlink: 'syz.1.6427': attribute type 1 has an invalid length. [ 441.111774][T19447] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6427'. [ 442.276665][T19500] Cannot find del_set index 8192 as target [ 442.363569][T19504] gre0: entered promiscuous mode [ 442.383024][T19504] gre0: entered allmulticast mode [ 442.412898][T19504] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 442.620894][T19512] bond1: Unable to set up delay as MII monitoring is disabled [ 442.706055][T19512] bond1 (unregistering): Released all slaves [ 443.456338][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6481'. [ 443.690873][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6486'. [ 443.738676][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6486'. [ 443.839037][T19570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6489'. [ 443.894371][T19570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6489'. [ 444.071463][T19578] netlink: 'syz.6.6493': attribute type 29 has an invalid length. [ 444.103099][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6493'. [ 444.491408][T19599] : renamed from bond_slave_0 (while UP) [ 444.829277][T19612] netlink: 'syz.1.6507': attribute type 5 has an invalid length. [ 444.880542][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6509'. [ 445.012257][T19620] netlink: 'syz.6.6512': attribute type 1 has an invalid length. [ 445.066176][T19622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6513'. [ 445.100583][T19622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6513'. [ 445.118370][T19622] netlink: 31 bytes leftover after parsing attributes in process `syz.7.6513'. [ 445.725378][T19646] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.754188][T19653] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 445.892683][T19661] gre0: left promiscuous mode [ 445.897487][T19661] gre0: left allmulticast mode [ 446.087596][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.094929][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.254380][T19665] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 446.277276][T19665] bond4 (unregistering): Released all slaves [ 446.348058][T19674] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 446.372985][T19674] bond1 (unregistering): Released all slaves [ 447.411553][T19725] SET target dimension over the limit! [ 448.151684][T19760] openvswitch: netlink: Multiple metadata blocks provided [ 448.288919][T19759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.309962][T19759] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.326981][T19759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.438685][T19759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.468766][T19759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.498699][T19759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.515634][T19759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.545851][T19759] veth1_vlan: left promiscuous mode [ 448.555014][T19759] veth0_vlan: left promiscuous mode [ 448.565936][T19759] veth0_vlan: entered promiscuous mode [ 448.585013][T19759] veth1_vlan: entered promiscuous mode [ 448.607828][T19759] veth1_macvtap: left promiscuous mode [ 448.615338][T19759] veth0_macvtap: left promiscuous mode [ 448.623069][T19759] veth0_macvtap: entered promiscuous mode [ 448.630559][T19759] veth1_macvtap: entered promiscuous mode [ 448.648393][T19759] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 448.656954][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.669453][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.692697][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.703679][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 448.715449][T19759] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 448.723650][T19759] mac80211_hwsim hwsim35 wlan0: left allmulticast mode [ 448.739025][T19759] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 448.801913][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.809197][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.833672][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.840962][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.978590][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.037071][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.062558][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.084605][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.139509][T19789] __nla_validate_parse: 5 callbacks suppressed [ 449.139531][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6590'. [ 449.190925][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6590'. [ 449.527537][T19801] netlink: 'syz.1.6597': attribute type 21 has an invalid length. [ 449.544896][T19801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6597'. [ 449.569029][T19801] netlink: 'syz.1.6597': attribute type 1 has an invalid length. [ 451.108848][T19866] --map-set only usable from mangle table [ 451.130484][T19870] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 451.149868][T19869] x_tables: ip_tables: osf match: only valid for protocol 6 [ 452.656756][T19937] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6659'. [ 452.985424][T19949] geneve2: entered promiscuous mode [ 453.070403][T19955] netlink: 'syz.0.6669': attribute type 1 has an invalid length. [ 453.188041][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6670'. [ 453.227440][T19957] netlink: 'syz.1.6670': attribute type 1 has an invalid length. [ 453.310705][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6675'. [ 453.456074][T19971] netlink: 'syz.0.6677': attribute type 1 has an invalid length. [ 453.497488][T19971] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6677'. [ 453.788435][T19984] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 454.599369][T20010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6695'. [ 455.447854][T20046] netlink: 'syz.0.6707': attribute type 12 has an invalid length. [ 455.488185][T20049] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6709'. [ 455.949502][T20061] netlink: 'syz.1.6713': attribute type 1 has an invalid length. [ 456.654047][T20088] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6726'. [ 456.675908][T20088] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6726'. [ 456.759671][T20090] netlink: 244 bytes leftover after parsing attributes in process `syz.9.6727'. [ 457.096586][T20104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6733'. [ 457.265404][T20110] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6737'. [ 457.304015][T20110] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6737'. [ 457.323237][T20110] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6737'. [ 457.377259][T20114] netlink: 'syz.9.6739': attribute type 8 has an invalid length. [ 458.209399][T20147] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6753'. [ 458.617860][T20166] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 458.640729][T20166] bond2 (unregistering): Released all slaves [ 459.904616][T20233] __nla_validate_parse: 3 callbacks suppressed [ 459.904638][T20233] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6775'. [ 460.221633][T20246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6784'. [ 460.242449][T20246] netlink: 'syz.1.6784': attribute type 2 has an invalid length. [ 460.276185][T20246] netlink: 'syz.1.6784': attribute type 1 has an invalid length. [ 460.307212][T20246] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6784'. [ 460.445044][T20256] netlink: 180 bytes leftover after parsing attributes in process `syz.9.6788'. [ 460.477207][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6788'. [ 460.607231][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6792'. [ 460.945199][T20273] bond4: option arp_all_targets: invalid value (3) [ 460.960963][ T5630] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 460.974509][T20273] bond4 (unregistering): Released all slaves [ 460.982652][ T5630] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 460.993590][ T5630] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 461.004736][ T5630] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 461.013179][ T5630] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 462.656529][T20331] netlink: 'syz.6.6821': attribute type 2 has an invalid length. [ 462.664827][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6821'. [ 462.878019][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6824'. [ 463.003505][T20344] netlink: 'syz.9.6826': attribute type 1 has an invalid length. [ 463.035567][T20344] netlink: 224 bytes leftover after parsing attributes in process `syz.9.6826'. [ 463.069458][T20344] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6826'. [ 463.084141][ T5630] Bluetooth: hci11: command tx timeout [ 463.099471][T20279] xfrm0 speed is unknown, defaulting to 1000 [ 463.161932][T20351] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 463.287994][T20353] SET target dimension over the limit! [ 463.571608][T20367] x_tables: duplicate entry at hook 2 [ 464.165255][T20383] netlink: 'syz.0.6845': attribute type 41 has an invalid length. [ 465.164259][ T5630] Bluetooth: hci11: command tx timeout [ 466.908331][T20361] ÿ: renamed from bond_slave_0 (while UP) [ 467.023951][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6865'. [ 467.243359][ T5630] Bluetooth: hci11: command tx timeout [ 467.327020][T20419] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 467.561825][T20440] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.6872'. [ 467.628376][T20440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6872'. [ 467.653193][T20440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6872'. [ 467.679996][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6873'. [ 467.969523][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 467.990892][T20445] lo speed is unknown, defaulting to 1000 [ 468.179223][T20445] lo speed is unknown, defaulting to 1000 [ 468.247173][T20445] lo speed is unknown, defaulting to 1000 [ 468.289868][T20445] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 468.344101][T20445] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 468.393696][T20445] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 468.506440][T20445] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 468.648516][T20445] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 468.807304][T20445] lo speed is unknown, defaulting to 1000 [ 468.880579][T20445] lo speed is unknown, defaulting to 1000 [ 468.915358][T20445] lo speed is unknown, defaulting to 1000 [ 468.959120][T20445] lo speed is unknown, defaulting to 1000 [ 468.976381][T20445] lo speed is unknown, defaulting to 1000 [ 469.009337][T20445] lo speed is unknown, defaulting to 1000 [ 469.047093][T20445] lo speed is unknown, defaulting to 1000 [ 469.095744][T20445] lo speed is unknown, defaulting to 1000 [ 469.146013][T20445] lo speed is unknown, defaulting to 1000 [ 469.192221][T20445] lo speed is unknown, defaulting to 1000 [ 469.281414][T20445] lo speed is unknown, defaulting to 1000 [ 469.308180][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6889'. [ 469.323534][ T5647] Bluetooth: hci11: command tx timeout [ 469.353335][T20445] lo speed is unknown, defaulting to 1000 [ 469.633852][T20510] netlink: 'syz.9.6891': attribute type 1 has an invalid length. [ 469.664104][T20510] netlink: 'syz.9.6891': attribute type 2 has an invalid length. [ 469.732199][T20279] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.756210][T20279] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.792640][T20279] bridge_slave_0: entered allmulticast mode [ 469.829394][T20279] bridge_slave_0: entered promiscuous mode [ 469.867780][T20279] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.904818][T20279] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.933895][T20279] bridge_slave_1: entered allmulticast mode [ 469.961723][T20279] bridge_slave_1: entered promiscuous mode [ 470.010587][T20518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.249406][T20279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.269342][T20279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.483383][T20534] ip6tnl3: entered allmulticast mode [ 470.511691][T20279] team0: Port device team_slave_0 added [ 470.537728][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6903'. [ 470.578124][T20279] team0: Port device team_slave_1 added [ 470.609245][T20542] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 470.709526][T20546] netlink: 'syz.6.6907': attribute type 61 has an invalid length. [ 470.748140][T20279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.781969][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.820701][T20279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.866542][T20279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.888049][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.010110][T20279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.197545][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6916'. [ 471.218692][T20279] hsr_slave_0: entered promiscuous mode [ 471.228286][T20279] hsr_slave_1: entered promiscuous mode [ 471.235340][T20279] debugfs: 'hsr0' already exists in 'hsr' [ 471.241242][T20279] Cannot create hsr debugfs directory [ 471.299105][T20568] x_tables: unsorted underflow at hook 3 [ 471.590917][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6923'. [ 471.772600][T20586] xt_ecn: cannot match TCP bits for non-tcp packets [ 471.836472][T20588] netlink: 'syz.9.6928': attribute type 1 has an invalid length. [ 471.970717][T20279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.085712][T20598] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 472.340619][T20279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.596313][T20279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.751568][T20627] netlink: 292 bytes leftover after parsing attributes in process `syz.9.6947'. [ 472.900830][T20279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.519241][T20657] dummy0: entered allmulticast mode [ 473.602795][T20655] dummy0: left allmulticast mode [ 473.669531][T20279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 473.684992][T20279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.703985][T20279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 473.748497][T20279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.785514][T20279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 473.826309][T20279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.852098][T20279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 473.917964][T20279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.020613][T20686] xt_hashlimit: max too large, truncated to 1048576 [ 474.200549][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6977'. [ 474.221667][ T31] INFO: task syz.5.4533:15342 blocked for more than 143 seconds. [ 474.257721][ T31] Not tainted syzkaller #0 [ 474.277656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.315474][T20279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.315985][ T31] task:syz.5.4533 state:D stack:27200 pid:15342 tgid:15341 ppid:13028 task_flags:0x400040 flags:0x00080002 [ 474.360357][ T31] Call Trace: [ 474.368390][ T31] [ 474.372003][ T31] __schedule+0x17d9/0x56c0 [ 474.398738][ T31] ? __lock_acquire+0x683/0x2cf0 [ 474.412444][ T31] ? __lock_acquire+0x683/0x2cf0 [ 474.420823][T20279] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.423178][ T31] ? __pfx___schedule+0x10/0x10 [ 474.446877][ T31] ? schedule+0x90/0x2b0 [ 474.454741][T20187] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.462066][T20187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.468517][ T31] schedule+0x164/0x2b0 [ 474.473983][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.479543][ T31] __mutex_lock+0x7bf/0x1550 [ 474.485493][ T31] ? __mutex_lock+0x5d4/0x1550 [ 474.490374][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 474.496464][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.501762][ T31] ? __nlmsg_put+0xef/0x1b0 [ 474.506620][ T31] ? genlmsg_put+0x137/0x2e0 [ 474.511503][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 474.517749][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 474.525678][ T31] ? __nla_parse+0x40/0x60 [ 474.530446][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 474.543141][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 474.550528][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 474.559910][T20181] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.561178][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 474.567402][T20181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.582032][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 474.589037][ T31] genl_rcv_msg+0x614/0x7a0 [ 474.595093][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.600310][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 474.607770][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.614180][ T31] ? __asan_memcpy+0x40/0x70 [ 474.618994][ T31] ? __skb_clone+0x5c/0x6c0 [ 474.625113][ T31] netlink_rcv_skb+0x226/0x4a0 [ 474.633775][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.638999][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.644924][ T31] ? down_read+0x2be/0x330 [ 474.649518][ T31] genl_rcv+0x28/0x40 [ 474.656292][ T31] netlink_unicast+0x7bb/0x940 [ 474.661240][ T31] netlink_sendmsg+0x813/0xb40 [ 474.668684][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.677307][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.684085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.691143][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 474.698352][ T31] ____sys_sendmsg+0x54e/0x850 [ 474.704523][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.709938][ T31] ? import_iovec+0x73/0xa0 [ 474.714827][ T31] ___sys_sendmsg+0x2a5/0x360 [ 474.719596][ T31] ? __lock_acquire+0x683/0x2cf0 [ 474.724743][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.730081][ T31] ? futex_wait+0x2a2/0x390 [ 474.735074][ T31] ? __fget_files+0x2a/0x420 [ 474.740203][ T31] ? __fget_files+0x3a2/0x420 [ 474.749581][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 474.754905][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.760487][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.767407][ T31] do_syscall_64+0x174/0x580 [ 474.772189][ T31] ? trace_irq_disable+0x3b/0x140 [ 474.777556][ T31] ? clear_bhb_loop+0x40/0x90 [ 474.790310][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.796840][ T31] RIP: 0033:0x7f864259de59 [ 474.801382][ T31] RSP: 002b:00007f8643531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.810508][ T31] RAX: ffffffffffffffda RBX: 00007f8642825fa0 RCX: 00007f864259de59 [ 474.818782][ T31] RDX: 0000000020000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 474.826970][ T31] RBP: 00007f8642633e6f R08: 0000000000000000 R09: 0000000000000000 [ 474.835285][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.844126][ T31] R13: 00007f8642826038 R14: 00007f8642825fa0 R15: 00007ffc20ec5908 [ 474.856411][ T31] [ 474.859816][ T31] [ 474.859816][ T31] Showing all locks held in the system: [ 474.869596][ T31] 1 lock held by khungtaskd/31: [ 474.874789][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 474.900835][ T31] 4 locks held by kworker/u8:8/1015: [ 474.906397][ T31] 2 locks held by getty/5375: [ 474.911181][ T31] #0: ffff8880323310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.921784][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 474.933361][ T31] 3 locks held by kworker/0:9/10948: [ 474.938809][ T31] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 474.950531][ T31] #1: ffffc90005f6fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 474.964951][ T31] #2: ffff888056543250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 474.975588][ T31] 2 locks held by syz.0.3158/12375: [ 474.980866][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.990001][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 475.002097][ T31] 2 locks held by syz.5.4533/15342: [ 475.008827][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.018083][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 475.028633][ T31] 2 locks held by syz.3.4700/15708: [ 475.034259][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.042939][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 475.054165][ T31] 2 locks held by syz.2.5000/16359: [ 475.059466][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.068262][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 475.079306][ T31] 2 locks held by syz.8.5723/17936: [ 475.086156][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.095285][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 475.108531][ T31] 2 locks held by syz.4.5770/18045: [ 475.116565][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.126817][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 475.137263][ T31] 2 locks held by syz.7.6528/19655: [ 475.142711][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.151118][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 475.165662][ T31] 2 locks held by modprobe/20694: [ 475.170928][ T31] [ 475.173910][ T31] ============================================= [ 475.173910][ T31] [ 475.183083][ T31] NMI backtrace for cpu 0 [ 475.183113][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 475.183140][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.183154][ T31] Call Trace: [ 475.183163][ T31] [ 475.183172][ T31] dump_stack_lvl+0xe8/0x150 [ 475.183234][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 475.183338][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.183380][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 475.183411][ T31] sys_info+0x135/0x170 [ 475.183433][ T31] watchdog+0xfd7/0x1030 [ 475.183476][ T31] ? watchdog+0x1c7/0x1030 [ 475.183509][ T31] kthread+0x388/0x470 [ 475.183550][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.183573][ T31] ? __pfx_kthread+0x10/0x10 [ 475.183605][ T31] ret_from_fork+0x514/0xb70 [ 475.183654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.183685][ T31] ? __switch_to+0xc89/0x1420 [ 475.183714][ T31] ? __pfx_kthread+0x10/0x10 [ 475.183747][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.183785][ T31] [ 475.183794][ T31] Sending NMI from CPU 0 to CPUs 1: [ 475.304982][ C1] NMI backtrace for cpu 1 [ 475.305003][ C1] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 475.305031][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.305047][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 475.305074][ C1] RIP: 0010:filter_irq_stacks+0x29/0xa0 [ 475.305123][ C1] Code: 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 <48> c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 d4 88 82 00 49 8b 04 [ 475.305139][ C1] RSP: 0000:ffffc900015e7638 EFLAGS: 00000206 [ 475.305155][ C1] RAX: ffffc900015e76f8 RBX: 0000000000000007 RCX: 0000000000000001 [ 475.305167][ C1] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffc900015e76c0 [ 475.305179][ C1] RBP: ffffc900015e78e8 R08: 0000000000000007 R09: 0000000000000000 [ 475.305190][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 000000000000000c [ 475.305202][ C1] R13: dffffc0000000000 R14: ffffc900015e76c0 R15: ffffc900015e76f8 [ 475.305216][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 475.305231][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.305244][ C1] CR2: 00007fb531946e9c CR3: 0000000079eac000 CR4: 00000000003526f0 [ 475.305260][ C1] Call Trace: [ 475.305267][ C1] [ 475.305277][ C1] stack_depot_save_flags+0x33/0x800 [ 475.305300][ C1] ? __lock_acquire+0x683/0x2cf0 [ 475.305329][ C1] kasan_save_track+0x4f/0x80 [ 475.305352][ C1] ? kasan_save_track+0x3e/0x80 [ 475.305373][ C1] ? kasan_save_free_info+0x40/0x50 [ 475.305390][ C1] ? __kasan_slab_free+0x5c/0x80 [ 475.305413][ C1] ? kfree+0x1c5/0x640 [ 475.305437][ C1] ? skb_release_data+0x85e/0xab0 [ 475.305464][ C1] ? __kfree_skb+0x5d/0x210 [ 475.305489][ C1] ? nsim_dev_trap_report_work+0x7ac/0xb40 [ 475.305507][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 475.305528][ C1] ? worker_thread+0xa47/0xfb0 [ 475.305548][ C1] ? kthread+0x388/0x470 [ 475.305572][ C1] ? ret_from_fork+0x514/0xb70 [ 475.305597][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 475.305643][ C1] kasan_save_free_info+0x40/0x50 [ 475.305662][ C1] __kasan_slab_free+0x5c/0x80 [ 475.305687][ C1] kfree+0x1c5/0x640 [ 475.305705][ C1] ? skb_release_data+0x85e/0xab0 [ 475.305736][ C1] skb_release_data+0x85e/0xab0 [ 475.305771][ C1] __kfree_skb+0x5d/0x210 [ 475.305798][ C1] nsim_dev_trap_report_work+0x7ac/0xb40 [ 475.305828][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 475.305848][ C1] process_scheduled_works+0xa8e/0x14e0 [ 475.305887][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.305912][ C1] ? assign_work+0x3cf/0x5d0 [ 475.305935][ C1] worker_thread+0xa47/0xfb0 [ 475.305974][ C1] kthread+0x388/0x470 [ 475.306000][ C1] ? __pfx_worker_thread+0x10/0x10 [ 475.306025][ C1] ? __pfx_kthread+0x10/0x10 [ 475.306051][ C1] ret_from_fork+0x514/0xb70 [ 475.306079][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 475.306104][ C1] ? __switch_to+0xc89/0x1420 [ 475.306128][ C1] ? __pfx_kthread+0x10/0x10 [ 475.306154][ C1] ret_from_fork_asm+0x1a/0x30 [ 475.306181][ C1] [ 475.624647][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 475.631647][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 475.640808][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.650996][ T31] Call Trace: [ 475.654317][ T31] [ 475.657293][ T31] vpanic+0x56c/0xa60 [ 475.661345][ T31] ? __pfx___schedule+0x10/0x10 [ 475.666262][ T31] ? __pfx_vpanic+0x10/0x10 [ 475.670864][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 475.677121][ T31] panic+0xc5/0xd0 [ 475.680928][ T31] ? __pfx_panic+0x10/0x10 [ 475.685505][ T31] ? preempt_schedule_common+0x82/0xd0 [ 475.691029][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 475.696454][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 475.702648][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 475.708875][ T31] watchdog+0x1030/0x1030 [ 475.713257][ T31] ? watchdog+0x1c7/0x1030 [ 475.717722][ T31] kthread+0x388/0x470 [ 475.721822][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.726521][ T31] ? __pfx_kthread+0x10/0x10 [ 475.731180][ T31] ret_from_fork+0x514/0xb70 [ 475.735807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.740954][ T31] ? __switch_to+0xc89/0x1420 [ 475.745667][ T31] ? __pfx_kthread+0x10/0x10 [ 475.750294][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.755102][ T31] [ 475.758764][ T31] Kernel Offset: disabled [ 475.763111][ T31] Rebooting in 86400 seconds..