last executing test programs: 4.336275059s ago: executing program 3 (id=5878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x70}}, 0x0) 4.147779244s ago: executing program 3 (id=5880): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)="e8cabacd0ca391646b383f7bb489cfaf1016f7e095a443f86a63bb63516dd8fe1b9d20723345b3350a0180772ca6a1d5fdf7f67a0581a73f7ded8de146e124cedf7ebd6a18571834f52f0ffba0b52489c85bf44d0349572202a9c83de00352257fbfaab5e74625f72de52e9a9b341a79ceafb20fd538d3db19a457069e31c588299844fb882f64681a3aba69a1dfffb85e4e1971b6d3e302914dd93e21762a3649471f9ff10eb11305105b1ba374cdffcc92607cfaf975972616707f179935fe6ead140bc88d79", 0xc7}], 0x1}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d84"], 0xffdd) 3.916628372s ago: executing program 3 (id=5886): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r0, &(0x7f0000005a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000031c0)=""/161, 0xa1}, 0x6a20b209}], 0x1, 0x10102, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 3.736840633s ago: executing program 3 (id=5893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) 3.451714227s ago: executing program 3 (id=5901): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf25070000000500130081000000140008"], 0x38}}, 0x2) 3.272936224s ago: executing program 3 (id=5906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) 2.740472565s ago: executing program 4 (id=5921): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x27bf, @local, 0x3}, 0x1c) 2.511738563s ago: executing program 4 (id=5923): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1}, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.23084714s ago: executing program 4 (id=5927): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 2.143846321s ago: executing program 4 (id=5929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.065154375s ago: executing program 2 (id=5931): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 2.0192055s ago: executing program 1 (id=5932): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x6, 0x40, 0x3, 0x179a0000, 0x6}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x1c418df926b9de26}]}}}]}, 0x58}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.904419567s ago: executing program 2 (id=5934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) 1.904234074s ago: executing program 4 (id=5935): socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) 1.780542336s ago: executing program 2 (id=5937): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1.715927111s ago: executing program 1 (id=5938): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.077030938s ago: executing program 2 (id=5940): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c40)=[{&(0x7f0000001ac0)="d956d860d8dcf4a2720288082da5df8883bbe6fea928477ee93a2bc4031283d674d3fcd99587d4fd3e88e2fa6ba885d56a787c4ece112c11ea324f8eab5105efa569310e69a6a1e3215f86a9d535f2939c569f79c6676f1d0a93a9a8388e90a62f59f88b5e3e5bf69413712da888b0d384fcaba7087875e6806653ef619d7d1a84059b7879f1538cd855c623c568625e495b003ad6ce69db1d87cd32f80849f05982796855cff596d38d1256d3558a426e736dbe9489ffc73157a79c9c7e0e30", 0xc0}, {&(0x7f0000001b80)='{', 0x1}], 0x2, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 1.076814151s ago: executing program 1 (id=5941): r0 = socket$inet6(0xa, 0x80003, 0x5) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x6e8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="78000000000000000000000004000000432fc131f859d0d555ceb2712bfd8f5104c8e91bb95deb81e189f52b25629cf2ecb1545cf068a497318d3faa06c05161efbc82bc4175c3c43be3cb762b456f42431d6ab58a9aca3914e9509f776bccd29fa4d514281294e9a5d5c5ab371b90c32e6bdee7d351897370000000000000008800000000100000672ac5a9d27bc6d4854b118b9fbdd7325a1748ebd881ec93bd74a3ba2c47a5a9e0b04edadb69ac0a2cbb9b302c3089440192c11b0e8d88eff5f3e9eb143408aa04c1a4d33983850cb690bf5802d5c2493900f40d1e4424f8fff15f68f8000000b80000000000000029"], 0x3b0}}], 0x2, 0x80) 1.076629001s ago: executing program 2 (id=5942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) 1.076295498s ago: executing program 1 (id=5944): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 1.076149513s ago: executing program 1 (id=5945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "b712"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xc4}}, 0x40000) 1.075988033s ago: executing program 2 (id=5946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001940)=""/122, 0x7a}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/132, 0x84}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000500)=""/43, 0x2b}], 0x5}, 0x6}], 0x3, 0x40002000, 0x0) 1.075886213s ago: executing program 0 (id=5947): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x42, 0x0) 1.075636494s ago: executing program 1 (id=5948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) 976.555781ms ago: executing program 0 (id=5949): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) 949.849141ms ago: executing program 0 (id=5950): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @private0, @local, {[], {0x0, 0x4e23, 0x8}}}}}}, 0x0) 888.299489ms ago: executing program 0 (id=5951): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 781.323191ms ago: executing program 4 (id=5952): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r0, &(0x7f0000000400)="1113687780fefab361d94a0dd7a95379ac0c0fc249f56b53ef19017a44f186ed885373f8d443e66e17ac32c4f3b60d8625d9fd6479f5fab5700bcfe817c722624f3bdf32404846e404cd8fe797ba8bbf9edf29167c5450b2b0888b8d33a629239d0c4d325c76ceedc47f4718084ba57ead2e225957b3e1a773d78304551ac0b60f2f0003071204d5c52ddeca97cc637a60df6b7cc1038f67100f4ac283388c1c8ce3d147a7b2e794872a7c5fdc86", 0xae) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 52.452633ms ago: executing program 0 (id=5953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001016401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000060000000000000009000000000000000000000000000000050000000000000008000000000c280009000000000000000000000000000000000000000000000e77fefbb8793e9100020000000000000000020000000000000100010000000000840105"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 0s ago: executing program 0 (id=5954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) kernel console output (not intermixed with test programs): 589][T19585] netlink: 'syz.0.3629': attribute type 1 has an invalid length. [ 447.518845][T19585] netlink: 'syz.0.3629': attribute type 1 has an invalid length. [ 447.568348][T19594] netlink: 'syz.2.3631': attribute type 4 has an invalid length. [ 447.666515][T19597] IPv6: NLM_F_CREATE should be specified when creating new route [ 447.863378][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.086176][T19613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.124381][T19615] __nla_validate_parse: 12 callbacks suppressed [ 448.124404][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 448.506879][T19636] bond3: Unable to set up delay as MII monitoring is disabled [ 448.517189][T19636] bond3 (unregistering): Released all slaves [ 448.799888][T19646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3648'. [ 448.961851][T19651] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3650'. [ 449.219325][T19669] Bluetooth: MGMT ver 1.23 [ 449.233230][T19667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.326078][T19675] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3659'. [ 449.383384][T19678] sctp: [Deprecated]: syz.4.3661 (pid 19678) Use of int in max_burst socket option. [ 449.383384][T19678] Use struct sctp_assoc_value instead [ 449.420590][T19679] validate_nla: 1 callbacks suppressed [ 449.420611][T19679] netlink: 'syz.3.3660': attribute type 27 has an invalid length. [ 449.443763][T19675] syzkaller1: entered promiscuous mode [ 449.449942][T19675] syzkaller1: entered allmulticast mode [ 449.458186][T19684] sctp: [Deprecated]: syz.4.3661 (pid 19684) Use of int in maxseg socket option. [ 449.458186][T19684] Use struct sctp_assoc_value instead [ 449.537169][ T6822] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.548353][ T6822] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.567901][ T6822] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.631110][ T6822] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.661259][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3664'. [ 449.894841][T18127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.910028][T19706] tipc: Enabling of bearer rejected, media not registered [ 449.967519][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 449.977680][T19714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3669'. [ 449.987857][ T8484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.996867][T19714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 450.006289][T19714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3669'. [ 450.100962][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3672'. [ 450.268130][T19732] vlan2: entered promiscuous mode [ 450.273374][T19732] bridge0: entered promiscuous mode [ 450.298237][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 450.437830][T19749] netlink: 'syz.4.3682': attribute type 21 has an invalid length. [ 450.454795][T19745] gtp0: entered promiscuous mode [ 450.459934][T19745] gtp0: entered allmulticast mode [ 450.483116][T19750] gtp1: entered promiscuous mode [ 450.489453][T19750] gtp1: entered allmulticast mode [ 450.500379][T19745] gtp2: entered promiscuous mode [ 450.506144][T19745] gtp2: entered allmulticast mode [ 451.016681][T18125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.057087][T18124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.272915][T19793] syzkaller0: entered promiscuous mode [ 452.280069][T19793] syzkaller0: entered allmulticast mode [ 452.490750][T19807] netlink: 'syz.0.3696': attribute type 2 has an invalid length. [ 452.566311][T19810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.694980][T19817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.717835][T19815] netlink: 'syz.1.3700': attribute type 3 has an invalid length. [ 452.794076][T19824] tipc: Trying to set illegal importance in message [ 452.870847][T19829] netlink: 'syz.0.3705': attribute type 14 has an invalid length. [ 453.299806][T19855] __nla_validate_parse: 12 callbacks suppressed [ 453.299827][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'. [ 453.333609][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'. [ 453.542944][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3719'. [ 453.563489][T19869] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3720'. [ 453.839195][T19884] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3724'. [ 454.059023][T19890] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3727'. [ 454.096388][T19892] netlink: 'syz.4.3726': attribute type 4 has an invalid length. [ 454.168541][T19902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3726'. [ 454.178950][T19901] netlink: 'syz.2.3729': attribute type 26 has an invalid length. [ 454.200865][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3729'. [ 454.246009][T19901] netlink: 'syz.2.3729': attribute type 26 has an invalid length. [ 454.268204][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3729'. [ 454.288589][T19895] tipc: Enabled bearer , priority 0 [ 454.379394][T19895] syzkaller0: entered promiscuous mode [ 454.395850][T19895] syzkaller0: entered allmulticast mode [ 454.402504][T19895] tipc: Resetting bearer [ 454.416254][T19912] netlink: 'syz.0.3732': attribute type 3 has an invalid length. [ 454.565808][T19893] tipc: Resetting bearer [ 454.649587][T19926] netlink: 'syz.4.3734': attribute type 1 has an invalid length. [ 454.734392][T19932] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3737'. [ 454.801773][T19936] netlink: 'syz.2.3737': attribute type 1 has an invalid length. [ 454.810850][T19936] sctp: [Deprecated]: syz.2.3737 (pid 19936) Use of int in max_burst socket option. [ 454.810850][T19936] Use struct sctp_assoc_value instead [ 454.991653][T19941] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 456.367252][T19893] tipc: Disabling bearer [ 456.379309][T19926] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 456.431137][T19949] tc_dump_action: action bad kind [ 456.575767][T19927] hsr0 speed is unknown, defaulting to 1000 [ 456.619075][T19928] hsr0 speed is unknown, defaulting to 1000 [ 456.670391][T19974] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 456.697664][T19974] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 456.923077][T19979] ip6t_rpfilter: unknown options [ 456.931132][T19979] netlink: 'syz.0.3750': attribute type 3 has an invalid length. [ 457.126875][T19990] bond2: option fail_over_mac: invalid value (16) [ 457.136118][T19990] bond2 (unregistering): Released all slaves [ 457.452540][T20007] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 457.618912][T20016] netlink: 'syz.4.3761': attribute type 4 has an invalid length. [ 457.713032][T20016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.787588][T20023] : renamed from hsr0 (while UP) [ 457.795663][T20021] syzkaller0: entered promiscuous mode [ 457.801188][T20021] syzkaller0: entered allmulticast mode [ 458.179624][T20041] netlink: 'syz.0.3770': attribute type 15 has an invalid length. [ 458.253856][T20048] netlink: 'syz.2.3773': attribute type 3 has an invalid length. [ 458.345596][T20051] netlink: 'syz.0.3774': attribute type 1 has an invalid length. [ 458.403019][T20051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.412075][T20056] netlink: 'syz.4.3776': attribute type 1 has an invalid length. [ 458.539647][T20071] netlink: 'syz.2.3778': attribute type 25 has an invalid length. [ 458.570756][T20051] bond2: (slave veth5): Enslaving as an active interface with a down link [ 458.615756][T20056] bond3: entered promiscuous mode [ 458.621686][T20056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.652934][T20065] bond3: (slave bridge1): making interface the new active one [ 458.665380][T20065] bridge1: entered promiscuous mode [ 458.671618][T20065] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 458.711653][T20070] vlan2: entered allmulticast mode [ 458.721023][T20079] __nla_validate_parse: 10 callbacks suppressed [ 458.721042][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 458.746007][T20070] veth0_to_bond: entered allmulticast mode [ 458.759906][T20070] veth0_to_bond: entered promiscuous mode [ 458.793754][T20070] veth0_to_bond: left promiscuous mode [ 458.823136][T20070] bond2: (slave vlan2): making interface the new active one [ 458.847297][T20070] veth0_to_bond: entered promiscuous mode [ 458.856961][T20070] vlan2: entered promiscuous mode [ 458.872850][T20070] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 459.007362][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'. [ 459.019735][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'. [ 459.205240][T20110] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.212526][T20110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.510888][ T13] tipc: Resetting bearer [ 460.648105][ T13] tipc: Disabling bearer [ 460.671560][ T13] bond5 (unregistering): (slave vti1): Releasing backup interface [ 460.679932][ T13] vti1 (unregistering): left promiscuous mode [ 460.726205][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 460.762904][ T13] dvmrp6 (unregistering): left allmulticast mode [ 461.100925][ T13] bond0 (unregistering): Released all slaves [ 461.111769][ T13] bond1 (unregistering): Released all slaves [ 461.127275][ T13] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 461.136568][ T13] bond2 (unregistering): Released all slaves [ 461.152206][ T13] bond3 (unregistering): Released all slaves [ 461.170710][ T13] bond4 (unregistering): Released all slaves [ 461.190496][ T13] bond5 (unregistering): Released all slaves [ 461.204984][ T13] bond6 (unregistering): Released all slaves [ 461.219793][ T13] bond7 (unregistering): Released all slaves [ 461.241351][ T13] bond8 (unregistering): Released all slaves [ 461.256672][ T13] bond9 (unregistering): Released all slaves [ 461.346115][ T13] : left promiscuous mode [ 461.351314][T20053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.584862][T20143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3793'. [ 461.611881][ T13] : left promiscuous mode [ 461.639150][T20151] validate_nla: 1 callbacks suppressed [ 461.639170][T20151] netlink: 'syz.4.3795': attribute type 39 has an invalid length. [ 461.844922][ T13] tipc: Disabling bearer [ 461.858858][ T13] tipc: Left network mode [ 461.904343][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 462.140699][T20172] block nbd1: Unsupported socket: should be TCP or UNIX. [ 464.062745][T20202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3811'. [ 464.074151][T20203] netem: incorrect gi model size [ 464.088429][T20203] netem: change failed [ 464.095183][T20203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.362440][T20209] hsr0 speed is unknown, defaulting to 1000 [ 464.428215][T20214] vlan3: entered promiscuous mode [ 464.444051][T20214] bridge0: entered promiscuous mode [ 464.466526][ T13] hsr_slave_0: left promiscuous mode [ 464.487819][ T13] hsr_slave_1: left promiscuous mode [ 464.506814][ T13] veth1_macvtap: left promiscuous mode [ 464.516958][ T13] veth0_macvtap: left promiscuous mode [ 464.522790][ T13] veth1_vlan: left promiscuous mode [ 464.528581][ T13] veth0_vlan: left promiscuous mode [ 464.590114][T20220] netlink: 'syz.4.3817': attribute type 21 has an invalid length. [ 464.600192][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3817'. [ 464.948472][T20220] netlink: 'syz.4.3817': attribute type 21 has an invalid length. [ 464.967754][ T6821] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.983362][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3817'. [ 464.988597][ T6821] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.013349][ T6821] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.023049][ T6821] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.369310][T20231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 465.549477][T20263] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3829'. [ 465.558819][T20263] openvswitch: netlink: Flow actions attr not present in new flow. [ 465.612007][T20269] IPVS: set_ctl: invalid protocol: 58 172.20.20.22:20000 [ 465.621559][T20268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3830'. [ 465.665633][T20268] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3830'. [ 465.910189][T20284] syzkaller0: entered promiscuous mode [ 465.917167][T20283] netlink: 'syz.2.3836': attribute type 31 has an invalid length. [ 465.987534][T20284] syzkaller0: entered allmulticast mode [ 466.005512][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3837'. [ 466.394281][T20307] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3841'. [ 466.405107][T20308] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3841'. [ 467.768050][T20330] netlink: 'syz.0.3846': attribute type 1 has an invalid length. [ 467.812310][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3847'. [ 467.850009][T20327] xt_hashlimit: overflow, try lower: 3/0 [ 467.923847][T20339] xt_socket: unknown flags 0x50 [ 468.293789][T20350] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 468.436742][T20360] veth0_to_bond: mtu less than device minimum [ 469.239409][T20397] __nla_validate_parse: 2 callbacks suppressed [ 469.239430][T20397] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3862'. [ 469.462385][T20413] Bluetooth: MGMT ver 1.23 [ 469.489429][T12172] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.692713][T20418] caif0: entered promiscuous mode [ 469.699077][T20418] caif0: entered allmulticast mode [ 470.034837][ T6835] vlan2: left promiscuous mode [ 471.174398][ T5839] Bluetooth: hci2: command tx timeout [ 472.172741][T20392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.184794][T20402] netlink: 'syz.2.3867': attribute type 1 has an invalid length. [ 472.207310][T20402] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3867'. [ 472.237536][T20416] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3873'. [ 472.487617][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3878'. [ 472.522047][T20443] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 472.532494][T20435] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3875'. [ 472.547062][T20444] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3880'. [ 472.650753][T20443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.687660][T20452] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3879'. [ 472.716594][T20452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 472.725773][T20452] bond3: (slave batadv1): making interface the new active one [ 472.734535][T20452] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 472.746514][T20453] netlink: 'syz.2.3883': attribute type 3 has an invalid length. [ 472.933838][T20465] ipt_REJECT: TCP_RESET invalid for non-tcp [ 472.962621][T20465] openvswitch: netlink: Key type 70 is out of range max 32 [ 473.010167][T20467] sctp: [Deprecated]: syz.2.3889 (pid 20467) Use of int in maxseg socket option. [ 473.010167][T20467] Use struct sctp_assoc_value instead [ 473.046372][T20463] syzkaller0: entered promiscuous mode [ 473.053254][T20463] syzkaller0: entered allmulticast mode [ 473.093420][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3889'. [ 473.109610][T20472] netlink: 'syz.0.3890': attribute type 83 has an invalid length. [ 473.135775][T20473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3889'. [ 474.055252][T20486] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3894'. [ 474.762293][T20492] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3899'. [ 474.786585][T20492] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3899'. [ 474.826968][T20496] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3896'. [ 474.854570][T20496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3896'. [ 474.877189][T20506] block nbd0: reconnected socket [ 474.877319][ T5839] block nbd0: Receive control failed (result -107) [ 474.889985][T20503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3900'. [ 474.910359][T20506] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3897'. [ 475.221013][T20523] ip6t_REJECT: ECHOREPLY is not supported [ 475.418268][T20525] veth0: entered promiscuous mode [ 475.442891][T20519] syzkaller0: left promiscuous mode [ 475.461006][T20519] syzkaller0: left allmulticast mode [ 475.480596][T20525] veth0: left promiscuous mode [ 475.487779][T20519] tcpmss_tg6_check: 1 callbacks suppressed [ 475.487802][T20519] xt_TCPMSS: Only works on TCP SYN packets [ 475.723270][T20547] x_tables: unsorted underflow at hook 1 [ 475.730456][T20548] netlink: 'syz.0.3910': attribute type 29 has an invalid length. [ 475.739531][T20547] x_tables: unsorted underflow at hook 1 [ 475.745942][T20547] x_tables: unsorted underflow at hook 1 [ 475.751713][T20547] x_tables: unsorted underflow at hook 1 [ 475.767920][T20548] netlink: 'syz.0.3910': attribute type 29 has an invalid length. [ 476.103486][T20567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.115554][T20576] ipt_REJECT: ECHOREPLY no longer supported. [ 476.115554][T20571] netlink: 'syz.3.3918': attribute type 4 has an invalid length. [ 476.301029][T20586] netlink: 'syz.4.3924': attribute type 1 has an invalid length. [ 476.359157][T20586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.382539][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3924'. [ 476.460376][T20595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3926'. [ 476.483058][T20592] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 476.493764][T20592] bond4: entered allmulticast mode [ 476.552296][T20601] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3927'. [ 476.586599][T20601] 8021q: VLANs not supported on ip6_vti0 [ 476.824468][T20614] netlink: 'syz.1.3932': attribute type 3 has an invalid length. [ 476.837772][T20614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3932'. [ 476.993060][T20619] netlink: 'syz.1.3934': attribute type 1 has an invalid length. [ 477.182475][T20632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.297091][T20634] netlink: 'syz.1.3940': attribute type 61 has an invalid length. [ 477.648535][ T30] audit: type=1107 audit(1773690986.279:6): pid=20647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 477.677743][T20648] bridge_slave_1: entered allmulticast mode [ 477.966118][T20671] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.153416][T20691] tipc: Enabled bearer , priority 0 [ 478.291101][T20690] syzkaller0: entered promiscuous mode [ 478.304046][T20690] syzkaller0: entered allmulticast mode [ 478.315366][T20690] tipc: Resetting bearer [ 478.363699][T20688] tipc: Resetting bearer [ 478.458313][T20714] netlink: 'syz.4.3965': attribute type 2 has an invalid length. [ 480.044629][T20688] tipc: Disabling bearer [ 480.084029][T18125] tipc: Node number set to 1670775000 [ 480.543735][T20775] __nla_validate_parse: 6 callbacks suppressed [ 480.543782][T20775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3981'. [ 480.552459][T20776] netlink: 'syz.1.3982': attribute type 1 has an invalid length. [ 480.580813][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'. [ 480.969904][T20806] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3992'. [ 481.037241][T20808] syzkaller1: entered promiscuous mode [ 481.042786][T20808] syzkaller1: entered allmulticast mode [ 481.199407][T20815] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 481.342325][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 481.446547][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4001'. [ 481.466040][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4001'. [ 481.566504][T20845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4001'. [ 481.603481][T20843] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 481.644807][T20845] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 481.662876][T20845] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 481.880775][T20865] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 482.067559][T20870] xt_limit: Overflow, try lower: 271964/0 [ 482.367744][T20893] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20004 [ 482.409587][T20898] netlink: 'syz.3.4016': attribute type 1 has an invalid length. [ 482.477352][T20898] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 482.518460][T20898] veth5: entered promiscuous mode [ 482.533368][T20898] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 482.579471][T20910] netlink: 'syz.4.4020': attribute type 12 has an invalid length. [ 482.581341][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4019'. [ 482.600742][T20908] bridge_slave_0: left allmulticast mode [ 482.606547][T20908] bridge_slave_0: left promiscuous mode [ 482.612439][T20908] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.802752][T20915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4022'. [ 482.975283][T20926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4026'. [ 483.042204][T20931] syzkaller1: entered promiscuous mode [ 483.048044][T20931] syzkaller1: entered allmulticast mode [ 483.266456][T20934] syzkaller0: entered promiscuous mode [ 483.272182][T20934] syzkaller0: entered allmulticast mode [ 483.500940][T20948] netlink: 'syz.4.4030': attribute type 1 has an invalid length. [ 483.534142][T20948] netlink: 'syz.4.4030': attribute type 11 has an invalid length. [ 483.557616][T20948] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 483.589559][T20955] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:0 [ 483.648317][T20958] netlink: 'syz.2.4037': attribute type 21 has an invalid length. [ 483.767443][T20964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 483.898907][T20969] x_tables: duplicate underflow at hook 1 [ 485.286346][T20983] syzkaller0: entered promiscuous mode [ 485.291993][T20983] syzkaller0: entered allmulticast mode [ 485.365983][T20983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.647287][T21008] syzkaller0: entered promiscuous mode [ 485.667885][T21008] syzkaller0: entered allmulticast mode [ 485.682613][T21008] netlink: 'syz.0.4051': attribute type 1 has an invalid length. [ 486.043548][T21041] netlink: 'syz.0.4058': attribute type 11 has an invalid length. [ 486.189121][T21053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.250575][T21056] netlink: 'syz.0.4064': attribute type 2 has an invalid length. [ 486.384573][T21064] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.496313][T21064] __nla_validate_parse: 5 callbacks suppressed [ 486.496343][T21064] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4066'. [ 486.687209][T21076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4069'. [ 486.810908][T21085] x_tables: duplicate underflow at hook 1 [ 487.189641][T21116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4079'. [ 487.202708][T21116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4079'. [ 487.225443][T21118] netlink: 'syz.0.4078': attribute type 1 has an invalid length. [ 487.236911][T21120] netlink: 392 bytes leftover after parsing attributes in process `syz.2.4080'. [ 487.284492][T21120] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 487.297518][T21120] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4080'. [ 487.425461][T21122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4081'. [ 487.577368][T18127] IPVS: starting estimator thread 0... [ 487.593572][T21135] openvswitch: netlink: EtherType 50a is less than min 600 [ 487.686554][T21137] IPVS: using max 25 ests per chain, 60000 per kthread [ 487.955616][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4095'. [ 488.134434][ T5829] Bluetooth: hci1: command 0x041b tx timeout [ 488.300762][T21179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4096'. [ 488.343583][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4099'. [ 488.354455][T21179] Unknown options in mask b7f2 [ 488.451903][T21177] bond5: entered promiscuous mode [ 488.477552][T21177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.572086][T21177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.610755][T21177] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 488.622437][T21198] xt_hashlimit: size too large, truncated to 1048576 [ 488.654390][T21177] bond5: (slave sit2): Error -95 calling set_mac_address [ 488.765933][T21201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.873419][T21209] netlink: 'syz.4.4108': attribute type 1 has an invalid length. [ 488.884507][T21209] netlink: 'syz.4.4108': attribute type 1 has an invalid length. [ 489.151028][T21229] netlink: 'syz.4.4114': attribute type 7 has an invalid length. [ 489.486311][T21254] syzkaller0: entered promiscuous mode [ 489.491857][T21254] syzkaller0: entered allmulticast mode [ 489.516247][T21254] 0: reclassify loop, rule prio 0, protocol 800 [ 489.671821][T21266] netlink: 'syz.4.4124': attribute type 1 has an invalid length. [ 489.694670][T21267] netlink: 'syz.4.4124': attribute type 1 has an invalid length. [ 489.941697][T21276] netlink: 'syz.0.4129': attribute type 9 has an invalid length. [ 490.161064][T21283] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.179101][T21286] netlink: 'syz.4.4133': attribute type 1 has an invalid length. [ 490.205740][T21286] netlink: 'syz.4.4133': attribute type 11 has an invalid length. [ 490.239828][T21283] bridge_slave_0 (unregistering): left allmulticast mode [ 490.247582][T21283] bridge_slave_0 (unregistering): left promiscuous mode [ 490.259162][T21283] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.381184][ T5839] block nbd1: Receive control failed (result -107) [ 490.434387][T21295] nbd1: detected capacity change from 0 to 127 [ 490.457017][T20858] block nbd1: Dead connection, failed to find a fallback [ 490.465863][T20858] block nbd1: shutting down sockets [ 490.471284][T20858] blk_print_req_error: 138 callbacks suppressed [ 490.471301][T20858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.488431][T20858] buffer_io_error: 138 callbacks suppressed [ 490.488449][T20858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.502426][T20858] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.512556][T20858] Buffer I/O error on dev nbd1, logical block 1, async page read [ 490.540902][T20858] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.571234][T20858] Buffer I/O error on dev nbd1, logical block 2, async page read [ 490.589029][T20858] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.637593][T20858] Buffer I/O error on dev nbd1, logical block 3, async page read [ 490.669711][T21306] syzkaller1: entered promiscuous mode [ 490.675585][T20858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.694447][T21306] syzkaller1: entered allmulticast mode [ 490.701441][T20858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.720039][T20858] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.748776][T20858] Buffer I/O error on dev nbd1, logical block 1, async page read [ 490.764242][T20858] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.776361][T20858] Buffer I/O error on dev nbd1, logical block 2, async page read [ 490.784900][T20858] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.796867][T20858] Buffer I/O error on dev nbd1, logical block 3, async page read [ 490.807217][T20858] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.821730][T20858] Buffer I/O error on dev nbd1, logical block 0, async page read [ 490.830758][T20858] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 490.840626][T20858] Buffer I/O error on dev nbd1, logical block 1, async page read [ 490.849693][T20858] ldm_validate_partition_table(): Disk read failed. [ 490.857657][T20858] Dev nbd1: unable to read RDB block 0 [ 490.864633][T20858] nbd1: unable to read partition table [ 490.890042][T21314] ip6tnl3: entered allmulticast mode [ 490.897177][T20858] ldm_validate_partition_table(): Disk read failed. [ 490.917760][T20858] Dev nbd1: unable to read RDB block 0 [ 490.943670][T20858] nbd1: unable to read partition table [ 491.031741][T21323] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 491.080378][T21323] bond3 (unregistering): Released all slaves [ 491.436022][T21359] netlink: 'syz.0.4155': attribute type 16 has an invalid length. [ 491.457861][T21359] netlink: 'syz.0.4155': attribute type 17 has an invalid length. [ 491.586035][T21359] caif0: left promiscuous mode [ 491.591160][T21359] caif0: left allmulticast mode [ 491.596673][T21359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.633132][T21370] __nla_validate_parse: 16 callbacks suppressed [ 491.633151][T21370] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4158'. [ 492.082439][T21407] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4166'. [ 492.386741][T21419] x_tables: duplicate underflow at hook 2 [ 492.467425][T21420] xt_TCPMSS: Only works on TCP SYN packets [ 492.897084][T21423] bond3: entered promiscuous mode [ 492.925246][T21423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.970605][T21423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.973130][T21450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4180'. [ 492.998101][T21423] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 493.047497][T21423] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 493.111353][T21423] bond3: (slave vcan0): making interface the new active one [ 493.128785][T21423] vcan0: entered promiscuous mode [ 493.156055][T21423] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 493.168923][T21457] nbd: socks must be embedded in a SOCK_ITEM attr [ 493.254474][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 493.519934][T21470] bond4 (unregistering): Released all slaves [ 493.710261][T21489] bond6: entered promiscuous mode [ 493.715870][T21489] bond6: entered allmulticast mode [ 493.721500][T21489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 493.744697][T21492] syzkaller0: entered promiscuous mode [ 493.750345][T21492] syzkaller0: entered allmulticast mode [ 493.968277][T21506] validate_nla: 6 callbacks suppressed [ 493.968299][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 493.982970][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 493.996187][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.007295][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.016462][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.027941][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.036430][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.045759][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.053808][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.062786][T21506] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 494.272112][T21521] openvswitch: netlink: Missing key (keys=40, expected=80) [ 494.280174][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4204'. [ 494.323016][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4206'. [ 494.342069][T21519] bond6: Invalid ad_actor_system MAC address. [ 494.348692][T21519] bond6: option ad_actor_system: invalid value (1) [ 494.367647][T21519] bond6 (unregistering): Released all slaves [ 494.645487][T21497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.721095][T21548] Cannot find del_set index 4 as target [ 495.020485][T21555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4216'. [ 495.268683][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4217'. [ 495.352874][T21566] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 495.470564][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4219'. [ 495.495700][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4219'. [ 495.770113][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4223'. [ 495.810798][T21586] tipc: Enabling of bearer rejected, failed to enable media [ 495.897379][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 496.113088][T21604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.307520][T21619] tunl0: entered promiscuous mode [ 496.397600][ T48] batadv1: left allmulticast mode [ 496.402875][ T48] batadv1: left promiscuous mode [ 496.408598][ T48] bridge0: port 3(batadv1) entered disabled state [ 496.419835][ T48] gretap0: left allmulticast mode [ 496.425312][ T48] gretap0: left promiscuous mode [ 496.430661][ T48] bridge0: port 2(gretap0) entered disabled state [ 496.464776][ T48] bridge_slave_0: left promiscuous mode [ 496.470603][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.708711][T21590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.862671][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 497.080372][ T48] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 497.112678][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b251800: rx timeout, send abort [ 497.329820][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.345286][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.356416][ T48] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 497.366305][ T48] bond0 (unregistering): Released all slaves [ 497.379237][ T48] bond1 (unregistering): Released all slaves [ 497.395951][ T48] bond2 (unregistering): Released all slaves [ 497.417850][ T48] bond3 (unregistering): Released all slaves [ 497.436346][ T48] bond4 (unregistering): Released all slaves [ 497.450992][ T48] bond5 (unregistering): Released all slaves [ 497.468571][ T48] bond6 (unregistering): Released all slaves [ 497.489890][T21621] __nla_validate_parse: 4 callbacks suppressed [ 497.489916][T21621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4235'. [ 497.505534][T21621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4235'. [ 497.621031][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b251800: abort rx timeout. Force session deactivation [ 497.664814][ T48] 9: left promiscuous mode [ 497.679545][T21652] xt_hashlimit: size too large, truncated to 1048576 [ 497.902454][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f59c00: rx timeout, send abort [ 498.054158][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 498.150440][T21679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4247'. [ 498.203070][T21687] netlink: 'syz.4.4249': attribute type 11 has an invalid length. [ 498.366829][T21691] syzkaller1: entered promiscuous mode [ 498.373148][T21691] syzkaller1: entered allmulticast mode [ 498.379049][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 498.410767][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f59c00: abort rx timeout. Force session deactivation [ 498.548376][T21696] syzkaller0: entered promiscuous mode [ 498.554202][T21696] syzkaller0: entered allmulticast mode [ 498.568743][T21696] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 499.024138][ T48] hsr_slave_0: left promiscuous mode [ 499.058735][ T48] hsr_slave_1: left promiscuous mode [ 499.084933][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.104975][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.153272][T21727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4259'. [ 499.190055][ T48] pimreg (unregistering): left allmulticast mode [ 499.665909][T21729] veth1_macvtap: left promiscuous mode [ 499.675213][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 499.684841][ T5829] block nbd0: Receive control failed (result -107) [ 499.691944][T21752] block nbd0: reconnected socket [ 499.700446][T21752] tipc: Trying to set illegal importance in message [ 499.766290][T21743] syzkaller0: entered promiscuous mode [ 499.778646][T21743] syzkaller0: entered allmulticast mode [ 500.234934][T21784] validate_nla: 60 callbacks suppressed [ 500.234956][T21784] netlink: 'syz.3.4275': attribute type 4 has an invalid length. [ 500.300887][T21784] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 500.309578][T21784] bond6: option packets_per_slave: allowed values 0 - 65535 [ 500.362197][T21784] bond6 (unregistering): Released all slaves [ 500.475387][T21787] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4277'. [ 500.537051][T21796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4278'. [ 500.692415][T21817] netlink: 'syz.2.4279': attribute type 1 has an invalid length. [ 500.710066][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 500.716505][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 500.742279][T21817] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4279'. [ 500.771636][ T48] IPVS: stop unused estimator thread 0... [ 500.847936][T21817] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4279'. [ 500.893750][T21817] netlink: 'syz.2.4279': attribute type 1 has an invalid length. [ 500.902749][T21817] netlink: 634 bytes leftover after parsing attributes in process `syz.2.4279'. [ 500.999718][T21824] sctp: [Deprecated]: syz.3.4282 (pid 21824) Use of int in max_burst socket option deprecated. [ 500.999718][T21824] Use struct sctp_assoc_value instead [ 501.295678][T21846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 501.369066][T21848] bond6: entered promiscuous mode [ 501.383631][T21850] macvlan2: entered promiscuous mode [ 501.389381][T21850] macvlan2: entered allmulticast mode [ 501.398167][T21850] bond6: (slave macvlan2): Opening slave failed [ 501.402586][T21846] nbd: illegal input index 2958377 [ 501.615518][T21866] openvswitch: netlink: IP tunnel dst address not specified [ 502.018633][T21893] netlink: 'syz.2.4304': attribute type 10 has an invalid length. [ 502.200907][T21908] SET target dimension over the limit! [ 502.210092][T21914] netlink: 'syz.1.4307': attribute type 4 has an invalid length. [ 502.248647][T21914] netlink: 'syz.1.4307': attribute type 4 has an invalid length. [ 502.280115][T21908] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 502.290062][T21908] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 502.522967][T21930] __nla_validate_parse: 11 callbacks suppressed [ 502.522990][T21930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4312'. [ 502.535324][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4314'. [ 502.576718][T21924] 5gQ[: renamed from lo (while UP) [ 502.840569][T21930] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 502.939108][T21953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4321'. [ 503.016738][T21955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4320'. [ 503.097979][T21964] netlink: 'syz.3.4320': attribute type 21 has an invalid length. [ 503.127299][T21967] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4322'. [ 503.153786][T21955] team0 (unregistering): Port device team_slave_0 removed [ 503.212426][T21955] team0 (unregistering): Port device team_slave_1 removed [ 503.276732][T21964] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4320'. [ 503.305004][T21979] team0: Device 5gQ[ is loopback device. Loopback devices can't be added as a team port [ 503.317373][T21979] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 503.503990][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 503.591910][T21989] syzkaller0: entered promiscuous mode [ 503.598190][T21989] syzkaller0: entered allmulticast mode [ 503.783542][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4333'. [ 503.880774][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4336'. [ 504.076132][T22030] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 504.092394][T22030] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4339'. [ 504.237974][T22033] tc_dump_action: action bad kind [ 504.388488][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4345'. [ 504.532390][T22063] netlink: 'syz.2.4349': attribute type 1 has an invalid length. [ 504.900966][T22076] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 505.412792][T22126] TCP: TCP_TX_DELAY enabled [ 505.467731][T22130] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.533636][T22128] bridge_slave_1: left allmulticast mode [ 505.540096][T22128] bridge_slave_1: left promiscuous mode [ 505.547572][T22128] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.598727][T22128] bridge_slave_0: left promiscuous mode [ 505.604994][T22128] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.859405][T22153] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 505.868154][T22153] bond4: option packets_per_slave: allowed values 0 - 65535 [ 505.885853][T22153] bond4 (unregistering): Released all slaves [ 505.975318][T22162] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 506.049474][T22162] bond7: entered promiscuous mode [ 506.055464][T22162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 506.110129][T22162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 506.139980][T22162] bond7: (slave vcan0): The slave device specified does not support setting the MAC address [ 506.158308][T22162] bond7: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 506.184576][T22162] bond7: (slave vcan0): making interface the new active one [ 506.192131][T22162] vcan0: entered promiscuous mode [ 506.199885][T22162] bond7: (slave vcan0): Enslaving as an active interface with an up link [ 506.210125][T22178] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.376523][T22184] tipc: Enabled bearer , priority 0 [ 506.400143][T22184] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.425258][T22183] tipc: Disabling bearer [ 507.016278][T22228] openvswitch: netlink: Message has -2 unknown bytes. [ 507.042298][T22232] netlink: 'syz.0.4395': attribute type 1 has an invalid length. [ 507.082964][T22232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.106788][T22232] bond3: (slave batadv1): Opening slave failed [ 507.180518][T22236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 507.587421][T22251] netlink: 'syz.1.4402': attribute type 13 has an invalid length. [ 507.627859][T22251] veth0_macvtap: left promiscuous mode [ 507.650506][T22251] macvtap0: entered allmulticast mode [ 507.665740][T22251] macvtap0: refused to change device tx_queue_len [ 507.866142][T22254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 508.230848][T18125] IPVS: starting estimator thread 0... [ 508.255014][T22278] netlink: 'syz.0.4410': attribute type 1 has an invalid length. [ 508.262816][T22278] __nla_validate_parse: 18 callbacks suppressed [ 508.262833][T22278] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4410'. [ 508.324463][T22282] syzkaller1: entered promiscuous mode [ 508.330009][T22282] syzkaller1: entered allmulticast mode [ 508.352048][T22278] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4410'. [ 508.370366][T22227] syz.4.4393 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 508.382122][T22281] IPVS: using max 34 ests per chain, 81600 per kthread [ 508.413348][T22278] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4410'. [ 508.466840][T22227] CPU: 0 UID: 0 PID: 22227 Comm: syz.4.4393 Not tainted syzkaller #0 PREEMPT(full) [ 508.466871][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.466885][T22227] Call Trace: [ 508.466893][T22227] [ 508.466903][T22227] dump_stack_lvl+0xe8/0x150 [ 508.466942][T22227] dump_header+0xd3/0x4c0 [ 508.466974][T22227] oom_kill_process+0x3ab/0x970 [ 508.467003][T22227] out_of_memory+0x106c/0x1410 [ 508.467025][T22227] ? percpu_ref_put+0x19/0x180 [ 508.467053][T22227] ? __pfx___mutex_lock+0x10/0x10 [ 508.467162][T22227] ? __pfx_out_of_memory+0x10/0x10 [ 508.467181][T22227] ? do_raw_spin_unlock+0xf5/0x210 [ 508.467214][T22227] try_charge_memcg+0xc53/0x1560 [ 508.467244][T22227] ? __lock_acquire+0x6b5/0x2cf0 [ 508.467285][T22227] ? __pfx_try_charge_memcg+0x10/0x10 [ 508.467308][T22227] ? xa_load+0x60/0x210 [ 508.467368][T22227] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 508.467399][T22227] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 508.467434][T22227] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 508.467464][T22227] __swap_cache_prepare_and_add+0x52a/0x700 [ 508.467516][T22227] swap_cache_alloc_folio+0xf1/0x240 [ 508.467554][T22227] swap_cluster_readahead+0x369/0x690 [ 508.467595][T22227] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 508.467642][T22227] ? get_vma_policy+0x27b/0x3c0 [ 508.467670][T22227] swapin_readahead+0x196/0xc50 [ 508.467716][T22227] ? __pfx_swapin_readahead+0x10/0x10 [ 508.467751][T22227] ? swap_table_get+0x1e/0x260 [ 508.467780][T22227] ? swap_table_get+0x1e/0x260 [ 508.467808][T22227] ? swap_table_get+0x1e/0x260 [ 508.467839][T22227] ? swap_table_get+0x216/0x260 [ 508.467871][T22227] ? swap_cache_get_folio+0x513/0x520 [ 508.467910][T22227] do_swap_page+0x56f/0x5a20 [ 508.467965][T22227] ? do_swap_page+0x127/0x5a20 [ 508.467994][T22227] ? __pfx_do_swap_page+0x10/0x10 [ 508.468021][T22227] ? __pte_offset_map+0x1ae/0x240 [ 508.468060][T22227] ? pte_offset_map_rw_nolock+0xea/0x160 [ 508.468097][T22227] handle_mm_fault+0x12d2/0x3310 [ 508.468152][T22227] ? handle_mm_fault+0xee/0x3310 [ 508.468194][T22227] ? __pfx_handle_mm_fault+0x10/0x10 [ 508.468226][T22227] ? lock_vma_under_rcu+0x45a/0x500 [ 508.468278][T22227] do_user_addr_fault+0xa73/0x1340 [ 508.468315][T22227] ? rcu_is_watching+0x15/0xb0 [ 508.468345][T22227] ? trace_page_fault_user+0x84/0x210 [ 508.468376][T22227] exc_page_fault+0x6a/0xc0 [ 508.468443][T22227] asm_exc_page_fault+0x26/0x30 [ 508.468466][T22227] RIP: 0033:0x7fcfe7665a04 [ 508.468488][T22227] Code: 3d f3 fc ed 00 00 74 2e 80 3d f6 fc ed 00 00 74 2e 80 3d de fc ed 00 00 75 25 53 48 8d 1d 44 05 3b 00 48 89 df e8 5c e3 fe ff <8b> 05 3a 05 3b 00 85 c0 75 12 5b c3 80 3d bd fc ed 00 00 75 c9 c3 [ 508.468507][T22227] RSP: 002b:00007fff3fa75d40 EFLAGS: 00010206 [ 508.468527][T22227] RAX: 00007fcfe61f9000 RBX: 00007fcfe7a15f40 RCX: 00007fcfe69f9000 [ 508.468543][T22227] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fcfe7a15f40 [ 508.468556][T22227] RBP: 00007fcfe7a17da0 R08: 0000000000000006 R09: 0000000000000000 [ 508.468569][T22227] R10: 00007fcfe7a17cb0 R11: 0000000000000246 R12: 000000000007bf86 [ 508.468584][T22227] R13: 00007fcfe7a1609c R14: 000000000007bd5e R15: 00007fcfe7a16090 [ 508.468619][T22227] [ 508.473195][T22227] memory: usage 307200kB, limit 307200kB, failcnt 581 [ 508.894223][T22227] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 508.906206][T22227] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 508.932563][T22227] Memory cgroup stats for /syz4 [ 508.945632][T22290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4413'. [ 508.947964][T22227] : [ 508.995398][T22227] cache 0 [ 509.011070][T22227] rss 0 [ 509.021549][T22227] rss_huge 0 [ 509.029306][T22227] shmem 0 [ 509.042251][T22227] mapped_file 0 [ 509.051212][T22227] dirty 0 [ 509.059787][T22227] writeback 0 [ 509.063145][T22227] workingset_refault_anon 25 [ 509.077279][T22227] workingset_refault_file 4 [ 509.104088][T22227] swap 151552 [ 509.107455][T22227] swapcached 204800 [ 509.121506][T22227] pgpgin 81643 [ 509.125508][T22227] pgpgout 81630 [ 509.129002][T22227] pgfault 155036 [ 509.161974][T22227] pgmajfault 16 [ 509.170025][T22227] inactive_anon 0 [ 509.173725][T22227] active_anon 53248 [ 509.183997][T22227] inactive_file 0 [ 509.195185][T22227] active_file 0 [ 509.204334][T22227] unevictable 0 [ 509.207846][T22227] hierarchical_memory_limit 314572800 [ 509.223453][T22296] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4415'. [ 509.249037][T22227] hierarchical_memsw_limit 9223372036854771712 [ 509.304026][T22227] total_cache 0 [ 509.307566][T22227] total_rss 0 [ 509.310880][T22227] total_rss_huge 0 [ 509.335606][T22227] total_shmem 0 [ 509.339155][T22227] total_mapped_file 0 [ 509.343178][T22227] total_dirty 0 [ 509.348104][T22227] total_writeback 0 [ 509.351970][T22227] total_workingset_refault_anon 25 [ 509.358790][T22227] total_workingset_refault_file 4 [ 509.364148][T22227] total_swap 151552 [ 509.368000][T22227] total_swapcached 204800 [ 509.372345][T22227] total_pgpgin 81643 [ 509.414102][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 509.420987][T22227] total_pgpgout 81630 [ 509.435053][T22227] total_pgfault 155036 [ 509.439181][T22227] total_pgmajfault 16 [ 509.483418][T22227] total_inactive_anon 0 [ 509.502674][T22227] total_active_anon 53248 [ 509.524239][T22227] total_inactive_file 0 [ 509.534331][T22227] total_active_file 0 [ 509.538368][T22227] total_unevictable 0 [ 509.551404][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4416'. [ 509.564086][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4416'. [ 509.570855][T22227] anon_cost 0 [ 509.594055][T22227] file_cost 0 [ 509.597449][T22227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4393,pid=22227,uid=0 [ 509.696886][T22227] Memory cgroup out of memory: Killed process 22227 (syz.4.4393) total-vm:102288kB, anon-rss:1248kB, file-rss:23248kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 509.805542][T22312] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4420'. [ 509.981426][T22322] netlink: 'syz.1.4423': attribute type 1 has an invalid length. [ 510.021773][T22319] tipc: Enabled bearer , priority 0 [ 510.079693][T22326] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 510.155482][T22319] tipc: Disabling bearer [ 510.454660][T22346] sctp: [Deprecated]: syz.3.4430 (pid 22346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.454660][T22346] Use struct sctp_sack_info instead [ 510.521207][T22355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4431'. [ 510.958330][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4437'. [ 511.185907][T22381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.821173][T22396] team0: Port device team_slave_0 removed [ 511.965573][T22412] netlink: 'syz.3.4446': attribute type 7 has an invalid length. [ 512.982344][T22469] veth0: entered promiscuous mode [ 513.034880][T22466] veth0: left promiscuous mode [ 537.663295][T22495] netlink: 'syz.4.4470': attribute type 1 has an invalid length. [ 537.781175][T22495] bond7: entered promiscuous mode [ 537.803459][T22495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 537.936946][T22507] 8021q: adding VLAN 0 to HW filter on device bond7 [ 537.954714][T22507] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 537.984034][T22507] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 538.028222][T22507] bond7: (slave vti0): making interface the new active one [ 538.054641][T22507] vti0: entered promiscuous mode [ 538.061539][T22507] bond7: (slave vti0): Enslaving as an active interface with an up link [ 538.158835][T22530] __nla_validate_parse: 4 callbacks suppressed [ 538.158855][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4477'. [ 538.180240][T22517] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 538.197200][T22517] bond4 (unregistering): Released all slaves [ 538.851448][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4491'. [ 538.912254][T22577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4491'. [ 538.921735][T22583] veth0: entered promiscuous mode [ 538.940188][T22584] Cannot find map_set index 65533 as target [ 539.059810][T22581] veth0: left promiscuous mode [ 539.707022][T22630] openvswitch: netlink: Message has -2 unknown bytes. [ 540.016574][T22642] netlink: 'syz.4.4509': attribute type 7 has an invalid length. [ 540.038128][T22642] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4509'. [ 540.058851][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4509'. [ 540.425861][T22664] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4512'. [ 540.468720][T22664] netlink: 'syz.1.4512': attribute type 1 has an invalid length. [ 540.477219][T22664] netlink: 'syz.1.4512': attribute type 4 has an invalid length. [ 540.485191][T22664] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4512'. [ 540.523030][T22666] netlink: 'syz.4.4515': attribute type 1 has an invalid length. [ 540.537833][T22666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4515'. [ 540.567377][T22666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4515'. [ 540.596462][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4515'. [ 540.712871][T22674] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 540.887650][T22683] bond5: entered promiscuous mode [ 540.892956][T22683] bond5: entered allmulticast mode [ 540.898858][T22683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.162882][T22699] netem: change failed [ 541.322326][T22710] bond4: option resend_igmp: invalid value (32767) [ 541.331672][T22710] bond4: option resend_igmp: allowed values 0 - 255 [ 541.343252][T22710] bond4 (unregistering): Released all slaves [ 541.375359][T22714] netlink: 'syz.4.4526': attribute type 1 has an invalid length. [ 541.567740][T22722] tc action pedit offset 128 out of bounds [ 541.574108][T22722] tc action pedit offset 128 out of bounds [ 541.579970][T22722] tc action pedit offset 128 out of bounds [ 541.585880][T22722] tc action pedit offset 128 out of bounds [ 541.591729][T22722] tc action pedit offset 128 out of bounds [ 541.597646][T22722] tc action pedit offset 128 out of bounds [ 541.603500][T22722] tc action pedit offset 128 out of bounds [ 541.609423][T22722] tc action pedit offset 128 out of bounds [ 541.615350][T22722] tc action pedit offset 128 out of bounds [ 541.621193][T22722] tc action pedit offset 128 out of bounds [ 541.627127][T22722] TC_ACT_REPEAT abuse ? [ 541.773657][T22734] netlink: 'syz.3.4538': attribute type 2 has an invalid length. [ 541.817399][T22739] netlink: 'syz.3.4538': attribute type 2 has an invalid length. [ 542.394790][T22779] syzkaller0: entered promiscuous mode [ 542.400355][T22779] syzkaller0: entered allmulticast mode [ 542.428742][T22787] syzkaller0: entered promiscuous mode [ 542.437391][T22787] syzkaller0: entered allmulticast mode [ 543.173981][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 544.981817][T22754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.348678][T22833] __nla_validate_parse: 15 callbacks suppressed [ 545.348698][T22833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4562'. [ 545.827883][T22875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4567'. [ 546.045094][T22894] netlink: 'syz.2.4574': attribute type 1 has an invalid length. [ 546.089570][T22894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4574'. [ 546.118150][T22894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.192681][T22899] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4573'. [ 546.329138][T22901] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 546.361718][T22906] netlink: 'syz.0.4578': attribute type 10 has an invalid length. [ 546.377728][T22901] syzkaller1: entered promiscuous mode [ 546.383438][T22901] syzkaller1: entered allmulticast mode [ 546.405921][T22912] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4579'. [ 546.781836][T22938] netlink: 'syz.3.4586': attribute type 16 has an invalid length. [ 546.803562][T22938] netlink: 'syz.3.4586': attribute type 17 has an invalid length. [ 546.850452][T22938] tunl0: left promiscuous mode [ 546.907284][T22938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.992079][T22951] netlink: 'syz.1.4590': attribute type 11 has an invalid length. [ 547.014541][T22951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4590'. [ 547.106893][T22960] 8021q: VLANs not supported on lo [ 547.121171][T22964] netlink: 'syz.4.4594': attribute type 1 has an invalid length. [ 547.132147][T22960] netlink: 'syz.2.4593': attribute type 1 has an invalid length. [ 547.147680][T22966] netlink: 'syz.0.4595': attribute type 10 has an invalid length. [ 547.158376][T22964] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4594'. [ 547.237434][T22966] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 547.279662][T22960] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 547.294764][T22960] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 547.305293][T22960] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 547.394969][T22973] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 547.419022][T22973] bond7: (slave vcan1): making interface the new active one [ 547.427438][T22973] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 547.514678][T22983] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4598'. [ 547.860589][T23008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4605'. [ 547.884446][T23008] netlink: 'syz.2.4605': attribute type 7 has an invalid length. [ 547.892262][T23008] netlink: 'syz.2.4605': attribute type 8 has an invalid length. [ 547.927702][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4605'. [ 547.960147][T23014] netlink: 'syz.2.4605': attribute type 1 has an invalid length. [ 548.205554][T23021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.498736][T23052] IPv6: sit2: Disabled Multicast RS [ 548.588177][T23057] ip6tnl2: entered allmulticast mode [ 548.719106][T23064] syzkaller0: entered promiscuous mode [ 548.725480][T23064] syzkaller0: entered allmulticast mode [ 549.040117][T23084] : entered promiscuous mode [ 549.114202][T23090] IPv6: NLM_F_CREATE should be specified when creating new route [ 549.188868][T23098] x_tables: duplicate entry at hook 3 [ 549.332959][T23106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.328874][T23176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 550.436513][T23184] __nla_validate_parse: 6 callbacks suppressed [ 550.436536][T23184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4657'. [ 551.036778][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.055956][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.062854][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.130875][T23225] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 551.166450][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.174449][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.185202][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.235338][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.241938][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 551.261653][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.267965][T23193] validate_nla: 1 callbacks suppressed [ 551.267983][T23193] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 551.268001][T23193] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4661'. [ 551.269289][T23193] sctp: [Deprecated]: syz.3.4661 (pid 23193) Use of int in max_burst socket option. [ 551.269289][T23193] Use struct sctp_assoc_value instead [ 551.306539][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.316334][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.336616][T23225] hsr0 speed is unknown, defaulting to 1000 [ 551.410513][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4671'. [ 551.715819][T23241] hsr0 speed is unknown, defaulting to 1000 [ 551.739248][T23245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4674'. [ 552.034385][T23257] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4676'. [ 552.043411][T23257] netlink: 'syz.0.4676': attribute type 1 has an invalid length. [ 552.285701][T23273] bond0: entered promiscuous mode [ 552.290830][T23273] bond_slave_0: entered promiscuous mode [ 552.342403][T23273] bond_slave_1: entered promiscuous mode [ 553.028382][T23319] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4691'. [ 553.247225][T23330] netlink: 'syz.2.4694': attribute type 16 has an invalid length. [ 553.258058][T23334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4696'. [ 553.270441][T23330] netlink: 'syz.2.4694': attribute type 17 has an invalid length. [ 553.295311][T23315] netlink: 83 bytes leftover after parsing attributes in process `syz.4.4690'. [ 553.306371][T23318] nft_compat: unsupported protocol 0 [ 553.312173][T23315] nft_compat: unsupported protocol 0 [ 553.435827][T23330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.465346][T23330] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.472990][T23349] netlink: 'syz.4.4699': attribute type 23 has an invalid length. [ 553.487877][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'. [ 553.509383][T23350] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 553.518785][T23330] bridge0: port 1(dummy0) entered blocking state [ 553.525564][T23330] bridge0: port 1(dummy0) entered forwarding state [ 553.556978][T23330] bridge0: port 1(dummy0) entered disabled state [ 553.591671][T23330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.706567][T23361] ip_vti0: entered promiscuous mode [ 553.990976][T23383] bond8: entered promiscuous mode [ 554.377085][T23409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 554.424528][T23412] ipt_REJECT: ECHOREPLY no longer supported. [ 554.487009][T23409] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 557.413270][T23423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.621606][T23456] netlink: 'syz.0.4731': attribute type 1 has an invalid length. [ 557.704068][T23455] netlink: 'syz.3.4729': attribute type 1 has an invalid length. [ 557.712648][T23455] __nla_validate_parse: 3 callbacks suppressed [ 557.712668][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4729'. [ 557.730219][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4729'. [ 557.771503][T23460] syzkaller0: left promiscuous mode [ 557.841548][T23469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4737'. [ 557.884481][T23472] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4738'. [ 557.937725][T23472] bond4 (unregistering): Released all slaves [ 557.970454][T23460] sch_fq: defrate 4 ignored. [ 557.975880][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4735'. [ 558.084805][T23476] syzkaller0: entered promiscuous mode [ 558.149357][T23487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4741'. [ 558.151657][T23488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4741'. [ 558.179256][T23486] xfrm1: entered allmulticast mode [ 558.412441][T23502] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4743'. [ 558.453104][T23504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4745'. [ 558.517226][T23506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4745'. [ 558.842695][T23509] netlink: 'syz.1.4746': attribute type 2 has an invalid length. [ 559.911254][T23498] hsr0 speed is unknown, defaulting to 1000 [ 559.987134][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 560.290651][T23528] syzkaller0: entered promiscuous mode [ 560.306997][T23528] syzkaller0: entered allmulticast mode [ 560.603667][T23533] bond9: down delay (53) is not a multiple of miimon (2147483647), value rounded to 0 ms [ 560.644717][T23533] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 560.681112][T23533] bond9 (unregistering): Released all slaves [ 560.775233][T23548] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 560.900481][T23554] netlink: 'syz.1.4757': attribute type 3 has an invalid length. [ 560.942728][T23549] ip_vti0: left promiscuous mode [ 560.981528][T23556] xt_hashlimit: size too large, truncated to 1048576 [ 561.185379][T23568] syzkaller0: entered promiscuous mode [ 561.315767][T23572] veth1_to_bond: entered allmulticast mode [ 561.347333][T23572] veth1_to_bond: left allmulticast mode [ 561.374889][T23576] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.568849][T23583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.868159][T23601] openvswitch: netlink: Message has 16 unknown bytes. [ 562.038809][T23608] tipc: Enabling of bearer rejected, failed to enable media [ 562.306245][T23619] netlink: 'syz.4.4774': attribute type 1 has an invalid length. [ 562.384961][T23624] bond8: (slave gretap2): making interface the new active one [ 562.397208][T23624] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 562.819046][T23657] __nla_validate_parse: 5 callbacks suppressed [ 562.819068][T23657] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4781'. [ 562.882040][T23656] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4784'. [ 562.900045][T23656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4784'. [ 562.968709][T23656] bond5: entered promiscuous mode [ 563.012148][T23654] syzkaller0: left promiscuous mode [ 563.028935][T23654] syzkaller0: left allmulticast mode [ 563.067515][T23670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 563.076824][T23670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4788'. [ 563.591641][T23708] syzkaller0: entered promiscuous mode [ 563.612145][T23708] syzkaller0: entered allmulticast mode [ 563.690343][T12171] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 564.006975][T23738] hsr0 speed is unknown, defaulting to 1000 [ 564.351932][T23761] gre1: entered promiscuous mode [ 564.369177][T23761] gre1: entered allmulticast mode [ 564.634950][T23777] x_tables: duplicate underflow at hook 4 [ 564.954834][T23799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4823'. [ 565.236157][T23814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4828'. [ 565.301653][T23814] netlink: 'syz.3.4828': attribute type 11 has an invalid length. [ 565.313028][T23814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4828'. [ 565.392339][T23820] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 565.403808][T23820] bond9 (unregistering): Released all slaves [ 565.468194][T23790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4819'. [ 565.604218][T18116] IPVS: starting estimator thread 0... [ 565.694026][T23835] IPVS: using max 25 ests per chain, 60000 per kthread [ 565.918120][ T6836] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.933115][ T6836] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.969848][ T6836] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.005458][ T6836] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.079186][T23859] netlink: 'syz.3.4842': attribute type 13 has an invalid length. [ 566.088439][T23859] netlink: 'syz.3.4842': attribute type 58 has an invalid length. [ 566.099949][T23859] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4842'. [ 566.976191][T23897] syzkaller0: entered promiscuous mode [ 566.981844][T23897] syzkaller0: entered allmulticast mode [ 567.054631][T23914] bond9 (unregistering): Released all slaves [ 568.891501][T23926] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 569.039552][T23975] __nla_validate_parse: 5 callbacks suppressed [ 569.039574][T23975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4869'. [ 569.066145][T23978] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4868'. [ 569.075837][T23980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4869'. [ 569.405096][T24003] openvswitch: netlink: IP tunnel dst address not specified [ 570.188420][T24029] netlink: 'syz.4.4882': attribute type 3 has an invalid length. [ 570.308900][T24040] netlink: 'syz.4.4885': attribute type 17 has an invalid length. [ 570.320728][T24040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4885'. [ 570.332572][T24040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4885'. [ 570.541416][T24052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.560539][T24044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.786702][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4896'. [ 570.849686][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4897'. [ 570.959098][T24077] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4898'. [ 570.990369][T24086] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4901'. [ 571.003154][T24086] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 571.046377][T24084] nbd: must specify an index to disconnect [ 571.095276][T24090] netlink: 'syz.0.4903': attribute type 12 has an invalid length. [ 571.197686][T24096] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 571.207990][T24093] syz.0.4903 (24093) used greatest stack depth: 17472 bytes left [ 571.209407][T24096] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 571.276872][T24094] netlink: 368 bytes leftover after parsing attributes in process `syz.4.4904'. [ 571.357436][T24100] nbd: socks must be embedded in a SOCK_ITEM attr [ 571.464677][T24107] erspan0: entered promiscuous mode [ 571.736287][T24122] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 571.760592][T24122] bond8 (unregistering): Released all slaves [ 571.967146][T24135] bond0: entered allmulticast mode [ 571.972549][T24135] #: entered allmulticast mode [ 571.979545][T24135] bond_slave_1: entered allmulticast mode [ 572.118943][T24141] ip6gre0: Master is either lo or non-ether device [ 572.119887][T24142] netlink: 'syz.2.4920': attribute type 49 has an invalid length. [ 572.455895][T24156] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 572.561252][T24159] syzkaller0: entered promiscuous mode [ 572.580539][T24159] syzkaller0: entered allmulticast mode [ 572.667097][T24177] hsr_slave_0: left promiscuous mode [ 572.682406][T24177] hsr_slave_1: left promiscuous mode [ 572.756670][T18134] hsr0 speed is unknown, defaulting to 1000 [ 572.766499][T18134] infiniband syz2: ib_query_port failed (-19) [ 574.568411][T24195] syzkaller0: entered promiscuous mode [ 574.574156][T24195] syzkaller0: entered allmulticast mode [ 574.688088][T24223] netlink: 'syz.4.4937': attribute type 1 has an invalid length. [ 574.891319][T24232] __nla_validate_parse: 7 callbacks suppressed [ 574.891338][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4940'. [ 574.986363][T24236] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4943'. [ 575.102097][T24241] netlink: 'syz.4.4945': attribute type 3 has an invalid length. [ 575.160618][T24253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4949'. [ 575.202826][T24251] netlink: 'syz.1.4948': attribute type 1 has an invalid length. [ 575.227877][T24251] netlink: 'syz.1.4948': attribute type 4 has an invalid length. [ 575.238005][T24251] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4948'. [ 575.328901][T24259] bridge0: port 3(gretap0) entered blocking state [ 575.337293][T24259] bridge0: port 3(gretap0) entered disabled state [ 575.345355][T24259] gretap0: entered allmulticast mode [ 575.356241][T24259] gretap0: left allmulticast mode [ 575.370227][T24266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4951'. [ 575.473243][T24273] bridge0: entered allmulticast mode [ 575.500268][T24275] netlink: 'syz.2.4956': attribute type 1 has an invalid length. [ 575.510650][T24277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 575.520104][T24277] netlink: 'syz.0.4955': attribute type 30 has an invalid length. [ 575.664110][T24287] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4959'. [ 575.736820][T24290] pim6reg527: entered allmulticast mode [ 575.890216][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 576.418983][T24341] tipc: Enabling of bearer rejected, already enabled [ 576.436977][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4978'. [ 576.471263][T24350] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4979'. [ 576.540550][ T5839] block nbd2: Receive control failed (result -107) [ 576.584055][T24352] nbd2: detected capacity change from 0 to 127 [ 576.599513][T24313] block nbd2: Dead connection, failed to find a fallback [ 576.613417][T24313] block nbd2: shutting down sockets [ 576.651833][T24313] blk_print_req_error: 138 callbacks suppressed [ 576.651856][T24313] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.673494][T24313] buffer_io_error: 138 callbacks suppressed [ 576.673514][T24313] Buffer I/O error on dev nbd2, logical block 0, async page read [ 576.732346][T24313] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.743378][T24313] Buffer I/O error on dev nbd2, logical block 1, async page read [ 576.785084][T24313] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.809333][T24313] Buffer I/O error on dev nbd2, logical block 2, async page read [ 576.817242][T24365] netlink: 'syz.0.4984': attribute type 11 has an invalid length. [ 576.817278][T24365] netlink: 'syz.0.4984': attribute type 11 has an invalid length. [ 576.876609][T24313] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.914329][T24313] Buffer I/O error on dev nbd2, logical block 3, async page read [ 576.922229][T24313] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 576.981422][T24313] Buffer I/O error on dev nbd2, logical block 0, async page read [ 577.002458][T24313] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.035254][T24313] Buffer I/O error on dev nbd2, logical block 1, async page read [ 577.043131][T24313] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.098466][T24313] Buffer I/O error on dev nbd2, logical block 2, async page read [ 577.115488][T24313] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.135382][T24313] Buffer I/O error on dev nbd2, logical block 3, async page read [ 577.155569][T24313] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.184561][T24313] Buffer I/O error on dev nbd2, logical block 0, async page read [ 577.202908][T24313] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.241524][T24313] Buffer I/O error on dev nbd2, logical block 1, async page read [ 577.285860][T24313] ldm_validate_partition_table(): Disk read failed. [ 577.293052][T24313] Dev nbd2: unable to read RDB block 0 [ 577.327820][T24390] tipc: Started in network mode [ 577.333568][T24390] tipc: Node identity , cluster identity 4711 [ 577.335742][T24313] nbd2: unable to read partition table [ 577.340419][T24390] tipc: Failed to obtain node identity [ 577.364397][T24390] tipc: Enabling of bearer rejected, failed to enable media [ 577.407293][T24313] ldm_validate_partition_table(): Disk read failed. [ 577.438837][T24313] Dev nbd2: unable to read RDB block 0 [ 577.446809][T24313] nbd2: unable to read partition table [ 577.452868][T24396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.500967][T24395] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 577.539924][T24395] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 577.586128][T24403] bond0: Error: Cannot enslave bond to itself. [ 577.798183][T24420] netlink: 'syz.3.4997': attribute type 9 has an invalid length. [ 578.630833][T24450] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 579.051806][T24460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.076187][T24460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.355793][T24467] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 579.368967][T24467] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 579.385924][T24467] gretap2: entered promiscuous mode [ 579.419107][T24467] gretap2: entered allmulticast mode [ 579.979402][T24494] netlink: 'syz.3.5016': attribute type 21 has an invalid length. [ 579.992416][T24494] __nla_validate_parse: 14 callbacks suppressed [ 579.992434][T24494] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5016'. [ 580.023588][T24494] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5016'. [ 580.816753][T24520] bridge_slave_0: left allmulticast mode [ 580.822761][T24520] bridge_slave_0: left promiscuous mode [ 580.832659][T24520] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.860587][T24521] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5026'. [ 580.871143][T24523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5026'. [ 580.881882][T24520] bridge_slave_1: left allmulticast mode [ 580.914652][T24520] bridge_slave_1: left promiscuous mode [ 580.929935][T24520] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.947412][T24520] bond0: (slave bond_slave_0): Releasing backup interface [ 580.957520][T24520] bond_slave_0: left promiscuous mode [ 580.977278][T24520] bond0: (slave bond_slave_1): Releasing backup interface [ 581.006903][T24520] bond_slave_1: left promiscuous mode [ 581.071730][T24520] team0: Port device team_slave_1 removed [ 581.096919][T24520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.104874][T24520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.116357][T24520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.124511][T24520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.133069][T24535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 581.138532][T24520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.187422][T24537] netem: unknown loss type 0 [ 581.192525][T24537] netem: change failed [ 581.353034][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'. [ 581.370378][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'. [ 581.503075][T24548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.514970][T24562] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 581.522888][T24545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.570975][T24565] netlink: 'syz.4.5036': attribute type 19 has an invalid length. [ 581.970454][T24575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5039'. [ 582.246346][T24597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5046'. [ 582.376194][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5050'. [ 582.384333][T24616] netlink: 'syz.3.5051': attribute type 3 has an invalid length. [ 582.400365][T24615] xfrm1: entered promiscuous mode [ 582.405868][T24615] xfrm1: entered allmulticast mode [ 582.413373][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5050'. [ 582.436499][T24615] wireguard0: entered promiscuous mode [ 582.442146][T24615] wireguard0: entered allmulticast mode [ 582.453802][T24615] team0: Port device wireguard0 added [ 582.773476][T24635] bridge0: port 2(ipvlan3) entered blocking state [ 582.786667][T24635] bridge0: port 2(ipvlan3) entered disabled state [ 582.793376][T24635] ipvlan3: entered allmulticast mode [ 582.799342][T24635] bridge0: entered allmulticast mode [ 582.806650][T24635] ipvlan3: left allmulticast mode [ 582.811763][T24635] bridge0: left allmulticast mode [ 582.952155][T24647] x_tables: duplicate underflow at hook 3 [ 582.959745][T24644] syzkaller0: entered promiscuous mode [ 582.966801][T24644] syzkaller0: entered allmulticast mode [ 583.072544][T24653] macvtap1: entered promiscuous mode [ 583.078436][T24653] macvtap1: entered allmulticast mode [ 583.084224][T24653] veth1_vlan: entered allmulticast mode [ 583.238776][T24661] sctp: [Deprecated]: syz.1.5060 (pid 24661) Use of int in max_burst socket option deprecated. [ 583.238776][T24661] Use struct sctp_assoc_value instead [ 583.336273][T24666] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 583.500196][T24682] netlink: 'syz.2.5069': attribute type 1 has an invalid length. [ 583.568201][T24682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 583.590228][T24693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.630979][T24690] bond11: (slave geneve2): making interface the new active one [ 583.642322][T24690] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 583.653443][ T6836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.663731][ T6836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.684175][ T6836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.693200][ T6836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.704744][T24689] x_tables: duplicate underflow at hook 2 [ 583.743934][T24695] ip6gre1: entered promiscuous mode [ 583.958605][T24709] netlink: 'syz.2.5077': attribute type 29 has an invalid length. [ 583.990576][T24709] syzkaller0: entered promiscuous mode [ 584.004480][T24709] syzkaller0: entered allmulticast mode [ 584.518782][T24749] netlink: 'syz.1.5087': attribute type 1 has an invalid length. [ 584.541859][T24750] netlink: 'syz.3.5090': attribute type 7 has an invalid length. [ 584.654075][T24739] syzkaller0: entered promiscuous mode [ 584.661332][T24739] syzkaller0: entered allmulticast mode [ 584.674698][T24750] netlink: 'syz.3.5090': attribute type 7 has an invalid length. [ 586.227486][T24757] netlink: 'syz.2.5091': attribute type 4 has an invalid length. [ 586.536514][T24792] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 586.588330][T24792] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 586.596593][T24792] __nla_validate_parse: 7 callbacks suppressed [ 586.596614][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'. [ 586.615241][T24792] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 586.693763][T24802] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5105'. [ 586.710428][T24799] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5102'. [ 586.728054][T24799] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5102'. [ 587.060492][T24829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.128718][T24824] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5107'. [ 587.260791][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5109'. [ 587.570967][T24855] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5117'. [ 587.884105][T24882] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.5124'. [ 588.068334][T24899] netlink: 'syz.1.5130': attribute type 8 has an invalid length. [ 588.273478][T24911] syzkaller0: entered promiscuous mode [ 588.712994][T24944] netlink: 'syz.1.5141': attribute type 1 has an invalid length. [ 588.767417][T24947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5141'. [ 588.824958][T24944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 588.833129][T24947] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 588.844213][T24947] bond6: entered allmulticast mode [ 588.908657][T24944] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 588.957531][T24962] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5144'. [ 588.969756][T24946] syzkaller1: entered promiscuous mode [ 588.989679][T24946] syzkaller1: entered allmulticast mode [ 589.070319][T24946] openvswitch: netlink: Flow key attr not present in new flow. [ 589.102930][T24964] syzkaller0: entered promiscuous mode [ 589.116216][T24964] syzkaller0: entered allmulticast mode [ 589.143133][T24966] syzkaller1: entered promiscuous mode [ 589.149082][T24966] syzkaller1: entered allmulticast mode [ 589.190408][T24966] netlink: 'syz.0.5146': attribute type 1 has an invalid length. [ 589.195003][T24974] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 589.598962][T24998] netlink: 'syz.1.5154': attribute type 3 has an invalid length. [ 589.675344][T25002] netlink: 'syz.4.5159': attribute type 1 has an invalid length. [ 589.757819][T25008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 590.021752][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.028299][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.034559][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.040749][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.046977][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.053338][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.059574][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.065812][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.072001][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.078244][T25023] tc action pedit 'at' offset 82 out of bounds [ 590.084478][T25023] 0: reclassify loop, rule prio 0, protocol 800 [ 591.145534][T25061] syzkaller0: entered promiscuous mode [ 591.151081][T25061] syzkaller0: entered allmulticast mode [ 591.161224][T25061] tc action pedit offset must be on 32 bit boundaries [ 593.253354][T25039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.270241][T25057] netlink: 'syz.1.5174': attribute type 1 has an invalid length. [ 593.505819][T25079] __nla_validate_parse: 10 callbacks suppressed [ 593.505839][T25079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5182'. [ 593.673587][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5184'. [ 593.737615][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5184'. [ 594.426159][T25154] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5206'. [ 594.633504][T25169] netlink: 'syz.3.5207': attribute type 3 has an invalid length. [ 594.658815][T25169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5207'. [ 594.780203][T25172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5208'. [ 594.839689][T25172] netlink: 'syz.1.5208': attribute type 1 has an invalid length. [ 594.855348][T25174] openvswitch: netlink: Flow key attr not present in new flow. [ 594.873792][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5208'. [ 594.886406][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5208'. [ 595.130157][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5213'. [ 595.343231][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5216'. [ 595.372187][T25200] openvswitch: netlink: Flow actions attr not present in new flow. [ 595.619010][T25219] netlink: 'syz.1.5222': attribute type 21 has an invalid length. [ 595.990339][T25245] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 596.247820][T25264] sit0: entered promiscuous mode [ 596.276434][T25264] netlink: 'syz.4.5237': attribute type 1 has an invalid length. [ 596.630361][T25276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.162258][T25303] sctp: [Deprecated]: syz.1.5246 (pid 25303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.162258][T25303] Use struct sctp_sack_info instead [ 597.190547][T25305] netlink: 'syz.2.5247': attribute type 1 has an invalid length. [ 597.260347][T25305] bond12: entered promiscuous mode [ 597.270379][T25305] 8021q: adding VLAN 0 to HW filter on device bond12 [ 597.320229][T25305] 8021q: adding VLAN 0 to HW filter on device bond12 [ 597.334350][T25305] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 597.344983][T25305] bond12: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 597.359705][T25305] bond12: (slave vti0): making interface the new active one [ 597.367319][T25305] vti0: entered promiscuous mode [ 597.376196][T25305] bond12: (slave vti0): Enslaving as an active interface with an up link [ 597.842955][T25354] netlink: 'syz.2.5261': attribute type 1 has an invalid length. [ 597.934730][T25359] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 598.143483][T25373] dvmrp0: left allmulticast mode [ 598.150819][T25371] netlink: 'syz.0.5268': attribute type 2 has an invalid length. [ 598.413796][T25389] netlink: 'syz.3.5274': attribute type 29 has an invalid length. [ 598.422700][T25389] netlink: 'syz.3.5274': attribute type 29 has an invalid length. [ 598.447511][T25389] netlink: 'syz.3.5274': attribute type 32 has an invalid length. [ 598.479876][T25389] x_tables: duplicate underflow at hook 3 [ 598.682028][T25404] __nla_validate_parse: 18 callbacks suppressed [ 598.682050][T25404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5278'. [ 598.710873][T25404] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5278'. [ 598.983257][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5284'. [ 598.993451][T25428] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 599.233601][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5289'. [ 599.313246][T25440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5289'. [ 599.323759][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5289'. [ 599.428076][T25445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 599.693732][T25461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 599.783641][T25458] netlink: 'syz.3.5292': attribute type 5 has an invalid length. [ 599.931193][T25467] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 599.947687][T25467] netlink: 211760 bytes leftover after parsing attributes in process `syz.4.5297'. [ 600.041317][T25476] netlink: 'syz.0.5298': attribute type 2 has an invalid length. [ 600.074808][T25476] netlink: 119 bytes leftover after parsing attributes in process `syz.0.5298'. [ 600.109068][T25482] netlink: 'syz.4.5300': attribute type 1 has an invalid length. [ 600.529060][T25498] : entered promiscuous mode [ 600.717171][T25511] ksmbd: Unknown IPC event: 3, ignore. [ 601.084629][T25532] xt_hashlimit: size too large, truncated to 1048576 [ 601.189406][T25537] openvswitch: netlink: Missing key (keys=40, expected=100) [ 601.600008][T25554] netlink: 'syz.0.5321': attribute type 15 has an invalid length. [ 603.224252][T25617] tipc: Enabling of bearer rejected, failed to enable media [ 603.284648][T25618] tipc: Enabling of bearer rejected, failed to enable media [ 603.284667][T25620] xt_connbytes: Forcing CT accounting to be enabled [ 603.820932][T25659] atomic_op ffff88807d9bd198 conn xmit_atomic 0000000000000000 [ 604.043810][T25667] __nla_validate_parse: 8 callbacks suppressed [ 604.050410][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5354'. [ 604.301732][T25673] xt_hashlimit: size too large, truncated to 1048576 [ 604.359729][T25674] : renamed from vxcan1 [ 604.402324][T25674] !: renamed from dummy0 (while UP) [ 605.044907][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5363'. [ 605.185875][T25716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5368'. [ 605.294855][T25723] netlink: 'syz.0.5370': attribute type 3 has an invalid length. [ 605.330026][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5370'. [ 605.345559][T25727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5371'. [ 605.364612][T25727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5371'. [ 605.395397][T25731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5373'. [ 605.463185][T25727] gretap1: entered promiscuous mode [ 605.479726][T25727] gretap1: entered allmulticast mode [ 606.528120][T25784] tipc: Started in network mode [ 606.541082][T25783] netlink: 'syz.0.5388': attribute type 1 has an invalid length. [ 606.548902][T25784] tipc: Node identity 6, cluster identity 4711 [ 606.548921][T25784] tipc: Node number set to 6 [ 606.633119][T25783] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5388'. [ 606.661808][T25783] macvlan4: entered promiscuous mode [ 606.667462][T25783] macvlan4: entered allmulticast mode [ 606.685840][T25793] netlink: 'syz.3.5390': attribute type 4 has an invalid length. [ 606.694348][T25793] netlink: 'syz.3.5390': attribute type 1 has an invalid length. [ 606.702167][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5390'. [ 606.860981][T25805] syzkaller0: entered promiscuous mode [ 606.867143][T25805] syzkaller0: entered allmulticast mode [ 607.080131][T25821] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5397'. [ 607.368718][T25835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.127903][T25871] netlink: 'syz.0.5413': attribute type 1 has an invalid length. [ 609.248238][T25871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 609.264445][T25873] veth0_to_bond: left promiscuous mode [ 609.270976][T25873] veth0_to_bond: entered promiscuous mode [ 609.307215][T25873] bond5: (slave veth0_to_bond): making interface the new active one [ 609.326021][T25871] __nla_validate_parse: 8 callbacks suppressed [ 609.326046][T25871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5413'. [ 609.355197][T25873] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 609.442693][T25879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.494986][T25879] bond5: (slave bond6): Enslaving as an active interface with a down link [ 609.836844][T25907] syzkaller0: entered promiscuous mode [ 609.842530][T25907] syzkaller0: entered allmulticast mode [ 609.861018][T25909] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5422'. [ 610.130065][T25925] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5426'. [ 611.595398][T25935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5431'. [ 611.624334][T25935] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5431'. [ 611.644245][T25935] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5431'. [ 611.748347][T25943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5432'. [ 611.767833][T25939] syzkaller1: entered promiscuous mode [ 611.773369][T25939] syzkaller1: entered allmulticast mode [ 611.782684][T25945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5432'. [ 611.841197][T25948] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5436'. [ 611.956251][T25957] syzkaller0: entered promiscuous mode [ 611.972534][T25957] syzkaller0: entered allmulticast mode [ 611.989182][T25948] netlink: 'syz.2.5436': attribute type 33 has an invalid length. [ 612.020979][T25957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5438'. [ 612.194472][T25960] syzkaller0: entered promiscuous mode [ 612.200850][T25960] syzkaller0: entered allmulticast mode [ 612.396888][T25990] netlink: 'syz.1.5446': attribute type 1 has an invalid length. [ 612.406939][T25990] netlink: 'syz.1.5446': attribute type 1 has an invalid length. [ 613.806250][T25990] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 613.994481][T26006] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 614.366510][T26040] __nla_validate_parse: 4 callbacks suppressed [ 614.366532][T26040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5457'. [ 614.423935][T26040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5457'. [ 614.466608][T26040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5457'. [ 614.546872][T26046] xt_TCPMSS: Only works on TCP SYN packets [ 614.648163][T26053] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 614.690321][T26057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5461'. [ 614.912716][T26073] syzkaller1: entered allmulticast mode [ 615.008183][T26083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5470'. [ 615.024658][T26083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5470'. [ 615.066574][T26087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5471'. [ 615.225570][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5474'. [ 615.258184][T26099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5474'. [ 615.305236][T26106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5475'. [ 615.457047][T26112] lo: entered promiscuous mode [ 615.469136][T26112] tunl0: entered promiscuous mode [ 615.485381][T26112] gre0: entered promiscuous mode [ 615.499126][T26112] gretap0: entered promiscuous mode [ 615.518593][T26112] erspan0: entered promiscuous mode [ 615.525437][T26112] ip_vti0: entered promiscuous mode [ 615.712627][T26136] Cannot find del_set index 49151 as target [ 615.720773][T26136] Cannot find del_set index 49151 as target [ 615.728447][T26136] Cannot find del_set index 49151 as target [ 615.736227][T26136] Cannot find del_set index 49151 as target [ 615.742342][T26136] Cannot find del_set index 49151 as target [ 615.750016][T26137] netlink: 'syz.4.5485': attribute type 1 has an invalid length. [ 615.758395][T26137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.759045][T26136] Cannot find del_set index 49151 as target [ 615.824818][T26141] netlink: 'syz.2.5486': attribute type 12 has an invalid length. [ 616.391450][T26171] netlink: 'syz.4.5497': attribute type 5 has an invalid length. [ 616.572696][T26185] syzkaller0: entered allmulticast mode [ 616.706508][T26199] syzkaller0 (unregistering): left allmulticast mode [ 616.720247][T26201] netlink: 'syz.4.5505': attribute type 1 has an invalid length. [ 617.047945][T26214] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 617.095313][T26214] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 617.119041][T26214] gretap3: entered promiscuous mode [ 617.135845][T26214] gretap3: entered allmulticast mode [ 617.335059][T26228] netlink: 'syz.3.5514': attribute type 3 has an invalid length. [ 617.501423][T26246] bond0: entered promiscuous mode [ 617.550902][T26246] bond0: left promiscuous mode [ 617.587026][T26253] netlink: 'syz.2.5516': attribute type 10 has an invalid length. [ 618.088794][T26281] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 618.129314][T26286] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 618.571071][T26324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 618.578429][T26324] IPv6: NLM_F_CREATE should be set when creating new route [ 618.585764][T26324] IPv6: NLM_F_CREATE should be set when creating new route [ 618.593009][T26324] IPv6: NLM_F_CREATE should be set when creating new route [ 618.699234][ C0] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 16 [ 618.714760][T26336] netlink: 'syz.3.5543': attribute type 10 has an invalid length. [ 618.812788][T26344] ip6t_srh: unknown srh invflags 4000 [ 619.382293][T26368] xt_hashlimit: size too large, truncated to 1048576 [ 619.644980][T26342] delete_channel: no stack [ 619.697301][T26381] __nla_validate_parse: 27 callbacks suppressed [ 619.697324][T26381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5559'. [ 619.783772][T26386] netlink: 'syz.0.5558': attribute type 10 has an invalid length. [ 619.822195][T26386] team0: Device vxcan1 is of different type [ 619.930158][T26397] netlink: 81 bytes leftover after parsing attributes in process `syz.0.5564'. [ 619.967329][T26403] netlink: 'syz.1.5565': attribute type 21 has an invalid length. [ 620.009827][T26404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 620.075136][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5565'. [ 620.202244][T26414] netlink: 460 bytes leftover after parsing attributes in process `syz.1.5568'. [ 620.229251][T26414] openvswitch: netlink: Flow key attr not present in new flow. [ 620.413711][T26426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5572'. [ 620.470292][ T6820] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.498478][T18119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.509026][ T6820] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 620.854614][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5582'. [ 620.882435][T26454] Cannot find map_set index 65533 as target [ 621.081900][T26465] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5585'. [ 621.172281][T26475] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5589'. [ 621.199745][T26476] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5589'. [ 621.338633][T18119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 621.424235][T18119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 621.476071][T26492] syzkaller0: entered promiscuous mode [ 621.481628][T26492] syzkaller0: entered allmulticast mode [ 621.659650][T26503] netlink: 'syz.4.5598': attribute type 1 has an invalid length. [ 621.671037][T26510] netlink: 'syz.2.5599': attribute type 1 has an invalid length. [ 621.711145][T26510] 8021q: adding VLAN 0 to HW filter on device bond13 [ 621.772313][T26505] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 621.904499][T26507] syzkaller1: entered promiscuous mode [ 621.910041][T26507] syzkaller1: entered allmulticast mode [ 624.454190][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 632.614161][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 649.895452][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 670.383534][ T6823] bridge_slave_1: left promiscuous mode [ 670.389617][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.398569][ T6823] bridge_slave_0: left allmulticast mode [ 670.404752][ T6823] bridge_slave_0: left promiscuous mode [ 670.412005][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.556164][ T6823] bond9 (unregistering): (slave vti0): Releasing backup interface [ 670.564116][ T6823] vti0 (unregistering): left promiscuous mode [ 670.618016][ T6823] bond4 (unregistering): (slave gretap1): Releasing active interface [ 670.802109][T26534] __nla_validate_parse: 2 callbacks suppressed [ 670.802129][T26534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5603'. [ 670.834113][T26534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5603'. [ 670.855559][T26534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5603'. [ 670.933563][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 670.950250][T26545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5608'. [ 670.959586][T26548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5604'. [ 670.996398][ T6823] bond11 (unregistering): (slave bridge5): Releasing backup interface [ 671.007583][ T6823] bridge5 (unregistering): left promiscuous mode [ 671.098299][ T6823]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.110663][ T6823] bond_slave_0: left promiscuous mode [ 671.132545][ T6823]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.143008][ T6823] bond_slave_1: left promiscuous mode [ 671.152328][ T6823]  (unregistering): Released all slaves [ 671.166830][ T6823] bond1 (unregistering): Released all slaves [ 671.206923][ T6823] bond2 (unregistering): Released all slaves [ 671.256226][ T6823] bond3 (unregistering): Released all slaves [ 671.306515][ T6823] bond4 (unregistering): Released all slaves [ 671.366692][ T6823] bond5 (unregistering): Released all slaves [ 671.391374][ T6823] bond6 (unregistering): Released all slaves [ 671.413233][ T6823] bond7 (unregistering): Released all slaves [ 671.471508][ T6823] bond8 (unregistering): Released all slaves [ 671.521356][ T6823] bond9 (unregistering): Released all slaves [ 671.551954][ T6823] bond10 (unregistering): Released all slaves [ 671.580652][ T6823] bond11 (unregistering): Released all slaves [ 671.625275][T26541] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 671.642670][T26541] bond7 (unregistering): Released all slaves [ 671.965628][ T6823] IPVS: stopping backup sync thread 12575 ... [ 673.869964][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5619'. [ 673.880222][T26624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5619'. [ 674.290971][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5615'. [ 674.300746][T26587] netlink: 'syz.1.5615': attribute type 20 has an invalid length. [ 674.309104][T26587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5615'. [ 674.357694][T26587] netlink: 'syz.1.5615': attribute type 20 has an invalid length. [ 674.366198][ T6835] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.386877][ T6835] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.433336][ T6835] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.470797][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.726602][T26654] netlink: 'syz.4.5627': attribute type 23 has an invalid length. [ 674.962678][T26665] netlink: 'syz.4.5631': attribute type 1 has an invalid length. [ 675.164775][ T6823] hsr0: left allmulticast mode [ 675.169693][ T6823] veth1_vlan: left allmulticast mode [ 675.194281][ T6823] veth0_macvtap: left promiscuous mode [ 675.199966][ T6823] veth1_vlan: left promiscuous mode [ 675.214588][ T6823] veth0_vlan: left promiscuous mode [ 675.220192][T26683] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 675.399890][T26689] netlink: 'syz.3.5638': attribute type 2 has an invalid length. [ 675.438617][T26689] netlink: 'syz.3.5638': attribute type 1 has an invalid length. [ 676.046833][T26711] __nla_validate_parse: 5 callbacks suppressed [ 676.046855][T26711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5641'. [ 676.271848][T26730] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 676.285182][T26730] bond9 (unregistering): Released all slaves [ 676.379283][T26730] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 676.398799][T26730] bond9 (unregistering): Released all slaves [ 676.443479][ T6823] IPVS: stop unused estimator thread 0... [ 676.500120][T26730] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 676.513783][T26730] bond9 (unregistering): Released all slaves [ 676.619590][T26730] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 676.632558][T26730] bond9 (unregistering): Released all slaves [ 676.662415][ T6823] bridge_slave_1: left allmulticast mode [ 676.676412][ T6823] bridge_slave_1: left promiscuous mode [ 676.682278][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.708150][ T6823] bridge_slave_0: left promiscuous mode [ 676.714451][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.758705][T26748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.837375][T26750] netlink: 'syz.2.5652': attribute type 1 has an invalid length. [ 676.846130][T26750] netlink: 'syz.2.5652': attribute type 3 has an invalid length. [ 676.855305][T26750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5652'. [ 676.899862][ T6823] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 676.909908][ T6823] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - e6:a1:5c:c0:df:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 677.051425][ T6823] bond2 (unregistering): (slave geneve2): Releasing active interface [ 677.091166][ T6823] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 677.138053][ T6823] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 677.146449][ T6823] bridge1 (unregistering): left promiscuous mode [ 677.230010][ T6823] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 677.238325][ T6823] bridge3 (unregistering): left promiscuous mode [ 677.268957][ T6823] bond11 (unregistering): (slave bridge4): Releasing backup interface [ 677.277460][ T6823] bridge4 (unregistering): left promiscuous mode [ 677.441482][ T6823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.452887][ T6823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.463598][ T6823] bond0 (unregistering): Released all slaves [ 677.476699][ T6823] bond1 (unregistering): (slave veth3): Releasing backup interface [ 677.486817][ T6823] bond1 (unregistering): Released all slaves [ 677.502842][ T6823] bond2 (unregistering): Released all slaves [ 677.519530][ T6823] bond3 (unregistering): Released all slaves [ 677.543116][ T6823] bond4 (unregistering): Released all slaves [ 677.560695][ T6823] bond5 (unregistering): Released all slaves [ 677.579931][ T6823] bond6 (unregistering): Released all slaves [ 677.598644][ T6823] bond7 (unregistering): (slave lo): Releasing backup interface [ 677.606891][ T6823] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 677.623348][ T6823] bond7 (unregistering): Released all slaves [ 677.642071][ T6823] bond8 (unregistering): left allmulticast mode [ 677.648582][ T6823] bond8 (unregistering): left promiscuous mode [ 677.658609][ T6823] team0: Port device macvlan2 removed [ 677.668594][ T6823] bond8 (unregistering): Released all slaves [ 677.685790][ T6823] bond9 (unregistering): Released all slaves [ 677.700861][ T6823] bond10 (unregistering): Released all slaves [ 677.727646][ T6823] bond11 (unregistering): Released all slaves [ 677.742603][ T6823] bond12 (unregistering): Released all slaves [ 677.758703][ T6823] bond13 (unregistering): Released all slaves [ 677.779851][ T6823] bond14 (unregistering): Released all slaves [ 677.795248][T26730] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 677.989549][ T6823] tipc: Disabling bearer [ 678.015770][ T6823] tipc: Disabling bearer [ 678.022792][ T6823] tipc: Left network mode [ 678.182885][T26766] sctp: [Deprecated]: syz.2.5656 (pid 26766) Use of int in maxseg socket option. [ 678.182885][T26766] Use struct sctp_assoc_value instead [ 678.264944][ T6823] hsr_slave_1: left promiscuous mode [ 678.276696][ T6823] veth1_vlan: left promiscuous mode [ 678.282132][ T6823] veth0_vlan: left promiscuous mode [ 678.701724][T26706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.912430][ T6823] team0 (unregistering): Port device team_slave_1 removed [ 678.958507][ T6823] team0 (unregistering): Port device team_slave_0 removed [ 679.441872][T26821] netlink: 'syz.1.5662': attribute type 4 has an invalid length. [ 679.486963][T26828] 8021q: VLANs not supported on sit0 [ 679.599670][T26833] delete_channel: no stack [ 679.673145][T26817] syzkaller0: entered promiscuous mode [ 679.678980][T26817] syzkaller0: entered allmulticast mode [ 679.916926][T26847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5669'. [ 680.104455][ T6823] IPVS: stop unused estimator thread 0... [ 680.174333][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5673'. [ 680.196082][T26863] netlink: 'syz.1.5672': attribute type 1 has an invalid length. [ 680.204825][T26863] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5672'. [ 680.483237][T26865] netlink: 'syz.2.5674': attribute type 10 has an invalid length. [ 680.538830][T26865] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 680.582899][T26882] veth1_vlan: left promiscuous mode [ 680.591461][T26882] netlink: 'syz.4.5679': attribute type 2 has an invalid length. [ 680.803183][T26895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5683'. [ 680.837933][T26895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5683'. [ 680.876645][ T6836] nci: nci_rx_work: unknown MT 0x6 [ 681.401037][T26932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5688'. [ 681.443418][T26932] netlink: 'syz.3.5688': attribute type 1 has an invalid length. [ 682.340512][T26985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5695'. [ 683.597023][T26885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 683.813999][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 683.942782][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5706'. [ 683.983007][T27059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5705'. [ 684.032989][T27059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5705'. [ 684.134505][T27072] netlink: 'syz.2.5710': attribute type 1 has an invalid length. [ 684.229605][T27072] 8021q: adding VLAN 0 to HW filter on device bond14 [ 684.251674][T27075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 684.413219][T27080] bond14: (slave veth5): Enslaving as an active interface with a down link [ 684.514223][T27072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 684.666967][T27106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5723'. [ 685.329355][T27147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5743'. [ 685.354444][T27147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5743'. [ 685.538683][T27160] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5750'. [ 685.554628][T27160] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5750'. [ 686.250435][T27210] bridge9: entered allmulticast mode [ 687.489462][T27295] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 687.548283][T27294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.061428][T27323] __nla_validate_parse: 2 callbacks suppressed [ 688.061451][T27323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5823'. [ 688.725816][T27353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5834'. [ 688.769759][T27355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5835'. [ 689.675401][T27401] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5855'. [ 690.847795][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5875'. [ 690.904779][T27450] ip6gre1: entered allmulticast mode [ 690.912566][ T6836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.946476][T18124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.955646][ T6836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 690.988100][T27450] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.044469][T18124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.256372][T18124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.673499][T27497] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5896'. [ 691.683765][T27497] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5896'. [ 691.858319][T27504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5899'. [ 691.891256][T27504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5899'. [ 691.917445][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5901'. [ 692.745027][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.779787][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.789669][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.806186][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.814981][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.993521][ T6820] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.024265][ T6820] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54042 - 0 [ 693.048570][ T6820] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 693.140782][ T6820] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.151614][ T6820] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54042 - 0 [ 693.171111][ T6820] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 693.227561][T27575] __nla_validate_parse: 1 callbacks suppressed [ 693.227581][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'. [ 693.317216][ T6820] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.344380][ T6820] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54042 - 0 [ 693.356096][ T6820] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 693.467503][ T6820] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.497716][ T6820] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54042 - 0 [ 693.540856][ T6820] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 693.664106][T27596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5938'. [ 693.812560][ T6821] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.875722][ T6836] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.954054][T27608] openvswitch: netlink: Flow key attr not present in new flow. [ 694.033094][ T6836] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.102918][ T6836] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.155741][T27553] chnl_net:caif_netlink_parms(): no params data found [ 694.280199][T27619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5948'. [ 694.466827][ T6820] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 694.477634][ T6820] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - c6:1a:2c:b5:20:2d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 694.665350][ T6820] gretap0 (unregistering): left promiscuous mode [ 694.836358][ T6820] bond0 (unregistering): left promiscuous mode [ 694.843758][ T6820] #: left promiscuous mode [ 694.849671][ T6820] bond_slave_1: left promiscuous mode [ 694.855246][ T5829] Bluetooth: hci3: command tx timeout [ 694.884731][ T6820] bond0 (unregistering): (slave 7#): Releasing backup interface [ 694.893669][ T6820] #: left allmulticast mode [ 694.904835][ T6820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.918731][ T6820] bond_slave_1: left allmulticast mode [ 694.926349][ T6820] bond0 (unregistering): Released all slaves [ 694.946129][ T6820] bond1 (unregistering): Released all slaves [ 694.984496][ T6820] bond2 (unregistering): (slave lo): Releasing backup interface [ 694.992964][ T6820] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 695.010337][ T6820] bond2 (unregistering): Released all slaves [ 695.035367][ T6820] bond3 (unregistering): (slave batadv1): Releasing active interface [ 695.046071][ T6820] bond3 (unregistering): Released all slaves [ 695.073013][ T6820] bond4 (unregistering): Released all slaves [ 695.092133][ T6820] bond5 (unregistering): (slave veth5): Releasing backup interface [ 695.100353][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.111869][ T6820] bond5 (unregistering): Released all slaves [ 695.133137][ T6820] bond6 (unregistering): Released all slaves [ 695.161323][ T6820] bond7 (unregistering): (slave vcan0): Releasing backup interface [ 695.169579][ T6820] vcan0: left promiscuous mode [ 695.176778][ T6820] bond7 (unregistering): Released all slaves [ 695.199692][ T6820] bond8 (unregistering): Released all slaves [ 695.273565][T27630] [ 695.275966][T27630] ====================================================== [ 695.283007][T27630] WARNING: possible circular locking dependency detected [ 695.290052][T27630] syzkaller #0 Not tainted [ 695.294474][T27630] ------------------------------------------------------ [ 695.301503][T27630] syz.4.5952/27630 is trying to acquire lock: [ 695.307578][T27630] ffffffff8fd49b78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 695.317196][T27630] [ 695.317196][T27630] but task is already holding lock: [ 695.324575][T27630] ffffffff8fd49b18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 695.334181][T27630] [ 695.334181][T27630] which lock already depends on the new lock. [ 695.334181][T27630] [ 695.344593][T27630] [ 695.344593][T27630] the existing dependency chain (in reverse order) is: [ 695.353621][T27630] [ 695.353621][T27630] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 695.361552][T27630] _raw_spin_lock_bh+0x36/0x50 [ 695.366892][T27630] nr_rt_ioctl+0x40c/0xf90 [ 695.371848][T27630] sock_do_ioctl+0x101/0x320 [ 695.377007][T27630] sock_ioctl+0x5c6/0x7f0 [ 695.381881][T27630] __se_sys_ioctl+0xfc/0x170 [ 695.387014][T27630] do_syscall_64+0x14d/0xf80 [ 695.392137][T27630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.398568][T27630] [ 695.398568][T27630] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 695.406580][T27630] _raw_spin_lock_bh+0x36/0x50 [ 695.411886][T27630] nr_rt_ioctl+0x215/0xf90 [ 695.416841][T27630] sock_do_ioctl+0x101/0x320 [ 695.421968][T27630] sock_ioctl+0x5c6/0x7f0 [ 695.426845][T27630] __se_sys_ioctl+0xfc/0x170 [ 695.431973][T27630] do_syscall_64+0x14d/0xf80 [ 695.437094][T27630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.443518][T27630] [ 695.443518][T27630] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 695.451356][T27630] __lock_acquire+0x15a5/0x2cf0 [ 695.456751][T27630] lock_acquire+0xf0/0x2e0 [ 695.461705][T27630] _raw_spin_lock_bh+0x36/0x50 [ 695.467009][T27630] nr_rt_device_down+0xbe/0x860 [ 695.472390][T27630] nr_device_event+0x137/0x150 [ 695.477765][T27630] notifier_call_chain+0x1be/0x400 [ 695.483419][T27630] __dev_notify_flags+0x16d/0x310 [ 695.489048][T27630] netif_change_flags+0xe8/0x1a0 [ 695.494530][T27630] dev_change_flags+0x130/0x260 [ 695.499968][T27630] dev_ioctl+0x7b4/0x1150 [ 695.504889][T27630] sock_do_ioctl+0x23e/0x320 [ 695.510020][T27630] sock_ioctl+0x5c6/0x7f0 [ 695.514888][T27630] __se_sys_ioctl+0xfc/0x170 [ 695.520014][T27630] do_syscall_64+0x14d/0xf80 [ 695.525139][T27630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.531566][T27630] [ 695.531566][T27630] other info that might help us debug this: [ 695.531566][T27630] [ 695.541802][T27630] Chain exists of: [ 695.541802][T27630] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 695.541802][T27630] [ 695.555647][T27630] Possible unsafe locking scenario: [ 695.555647][T27630] [ 695.563104][T27630] CPU0 CPU1 [ 695.568475][T27630] ---- ---- [ 695.573846][T27630] lock(nr_neigh_list_lock); [ 695.578554][T27630] lock(&nr_node->node_lock); [ 695.585852][T27630] lock(nr_neigh_list_lock); [ 695.593069][T27630] lock(nr_node_list_lock); [ 695.597678][T27630] [ 695.597678][T27630] *** DEADLOCK *** [ 695.597678][T27630] [ 695.605827][T27630] 2 locks held by syz.4.5952/27630: [ 695.611030][T27630] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 695.619855][T27630] #1: ffffffff8fd49b18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 695.629883][T27630] [ 695.629883][T27630] stack backtrace: [ 695.635785][T27630] CPU: 1 UID: 0 PID: 27630 Comm: syz.4.5952 Not tainted syzkaller #0 PREEMPT(full) [ 695.635807][T27630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.635820][T27630] Call Trace: [ 695.635827][T27630] [ 695.635835][T27630] dump_stack_lvl+0xe8/0x150 [ 695.635864][T27630] print_circular_bug+0x2e1/0x300 [ 695.635895][T27630] check_noncircular+0x12e/0x150 [ 695.635925][T27630] __lock_acquire+0x15a5/0x2cf0 [ 695.635952][T27630] ? __lock_acquire+0x6b5/0x2cf0 [ 695.635980][T27630] lock_acquire+0xf0/0x2e0 [ 695.636000][T27630] ? nr_rt_device_down+0xbe/0x860 [ 695.636020][T27630] ? nr_rt_device_down+0xbe/0x860 [ 695.636036][T27630] _raw_spin_lock_bh+0x36/0x50 [ 695.636060][T27630] ? nr_rt_device_down+0xbe/0x860 [ 695.636076][T27630] nr_rt_device_down+0xbe/0x860 [ 695.636091][T27630] ? nr_device_event+0x12f/0x150 [ 695.636121][T27630] nr_device_event+0x137/0x150 [ 695.636147][T27630] notifier_call_chain+0x1be/0x400 [ 695.636178][T27630] __dev_notify_flags+0x16d/0x310 [ 695.636207][T27630] ? __pfx___dev_notify_flags+0x10/0x10 [ 695.636232][T27630] ? __dev_change_flags+0x4c6/0x690 [ 695.636261][T27630] ? __pfx___dev_change_flags+0x10/0x10 [ 695.636289][T27630] ? full_name_hash+0x92/0xe0 [ 695.636330][T27630] netif_change_flags+0xe8/0x1a0 [ 695.636359][T27630] dev_change_flags+0x130/0x260 [ 695.636389][T27630] dev_ioctl+0x7b4/0x1150 [ 695.636414][T27630] sock_do_ioctl+0x23e/0x320 [ 695.636437][T27630] ? __pfx_sock_do_ioctl+0x10/0x10 [ 695.636456][T27630] ? do_futex+0x333/0x420 [ 695.636484][T27630] sock_ioctl+0x5c6/0x7f0 [ 695.636504][T27630] ? __pfx_sock_ioctl+0x10/0x10 [ 695.636524][T27630] ? __fget_files+0x2a/0x420 [ 695.636548][T27630] ? __fget_files+0x3a0/0x420 [ 695.636573][T27630] ? __fget_files+0x2a/0x420 [ 695.636599][T27630] ? bpf_lsm_file_ioctl+0x9/0x20 [ 695.636622][T27630] ? __pfx_sock_ioctl+0x10/0x10 [ 695.636640][T27630] __se_sys_ioctl+0xfc/0x170 [ 695.636661][T27630] do_syscall_64+0x14d/0xf80 [ 695.636676][T27630] ? trace_irq_disable+0x3b/0x150 [ 695.636702][T27630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.636719][T27630] ? clear_bhb_loop+0x40/0x90 [ 695.636739][T27630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.636756][T27630] RIP: 0033:0x7fcfe779c799 [ 695.636774][T27630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 695.636790][T27630] RSP: 002b:00007fcfe8716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.636809][T27630] RAX: ffffffffffffffda RBX: 00007fcfe7a15fa0 RCX: 00007fcfe779c799 [ 695.636825][T27630] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 695.636836][T27630] RBP: 00007fcfe7832c99 R08: 0000000000000000 R09: 0000000000000000 [ 695.636847][T27630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.636858][T27630] R13: 00007fcfe7a16038 R14: 00007fcfe7a15fa0 R15: 00007fff3fa75be8 [ 695.636879][T27630] [ 695.993011][ T6820] : left promiscuous mode [ 696.314115][ T6820] tipc: Left network mode [ 696.744655][ T6820] hsr_slave_1: left promiscuous mode [ 696.755281][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.762717][ T6820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.792259][ T6820] veth0_macvtap: left promiscuous mode [ 696.804193][ T6820] veth1_vlan: left promiscuous mode [ 696.809468][ T6820] veth0_vlan: left promiscuous mode [ 697.452531][ T6820] IPVS: stop unused estimator thread 0... [ 697.631165][ T6820] bond0 (unregistering): Released all slaves [ 703.654022][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!