last executing test programs: 3m1.662517023s ago: executing program 1 (id=4196): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) 3m1.532861841s ago: executing program 1 (id=4200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596cf"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 3m1.373637566s ago: executing program 1 (id=4205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) 3m1.287043857s ago: executing program 1 (id=4209): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) 3m1.152017598s ago: executing program 1 (id=4212): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffc, 0x4) 3m0.996462757s ago: executing program 1 (id=4217): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) 2m45.941591168s ago: executing program 32 (id=4217): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000014) 2m36.691319061s ago: executing program 2 (id=4956): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x8, 0x0, 0x0) 2m36.662799878s ago: executing program 2 (id=4958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0) 2m36.453870814s ago: executing program 2 (id=4963): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 2m36.213110086s ago: executing program 2 (id=4968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 2m35.952124553s ago: executing program 2 (id=4974): r0 = socket(0x840000000002, 0x3, 0x100) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0}}, 0x80) 2m35.793354386s ago: executing program 2 (id=4978): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) 2m20.762330766s ago: executing program 33 (id=4978): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004) 2.02607452s ago: executing program 3 (id=8750): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) 1.813455336s ago: executing program 3 (id=8756): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) 1.642100069s ago: executing program 3 (id=8760): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 1.577663797s ago: executing program 5 (id=8762): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 1.504891895s ago: executing program 3 (id=8764): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1.403267429s ago: executing program 5 (id=8766): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.337973576s ago: executing program 6 (id=8768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.25481174s ago: executing program 0 (id=8769): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xcb5) accept4$unix(r0, 0x0, 0x0, 0x0) 1.133340919s ago: executing program 0 (id=8770): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, r2, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r2, 0x25, 0x0, @val=@netkit}, 0x1c) 1.125294839s ago: executing program 4 (id=8771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) 888.490932ms ago: executing program 5 (id=8772): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 833.15626ms ago: executing program 4 (id=8773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) close(r1) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x53}, 0x0) 772.016448ms ago: executing program 0 (id=8774): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) 675.241369ms ago: executing program 6 (id=8775): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae7", 0x20}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 673.988225ms ago: executing program 5 (id=8776): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa348100000086dd60910100004d11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22004d90780203000000000000489bb4867c"], 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x9009}, {r0, 0x100}, {0xffffffffffffffff, 0x10}], 0x3, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x3]}, 0x8) 597.520031ms ago: executing program 4 (id=8777): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff09, 0x0) 596.180016ms ago: executing program 5 (id=8778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x4, "d631f9fe"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) 556.660387ms ago: executing program 0 (id=8779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001111ff001400000000000000000000000000014f194e20001190787e11980813972fb74a000000000000000000000000000000001aa50c84b440e9"], 0x4b) 529.030829ms ago: executing program 6 (id=8780): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 426.979477ms ago: executing program 5 (id=8781): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x21) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) 367.550002ms ago: executing program 4 (id=8782): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) 367.187187ms ago: executing program 6 (id=8783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) 312.864515ms ago: executing program 3 (id=8784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'pimreg1\x00'}}, 0x1e) 253.808935ms ago: executing program 6 (id=8785): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) close(0x3) 191.847987ms ago: executing program 4 (id=8786): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2060, 0x0) 183.646724ms ago: executing program 0 (id=8787): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5dc, 0x0, 0x0, 0x0) 96.853932ms ago: executing program 4 (id=8788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0xfffffffc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0xfd, 0x2, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0x7, 0xff, 0x0, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x4000080) 82.951624ms ago: executing program 3 (id=8789): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 82.183343ms ago: executing program 6 (id=8790): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2}, &(0x7f0000000080)=0x8) 0s ago: executing program 0 (id=8791): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="9f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0c1) kernel console output (not intermixed with test programs): ng to 1000 [ 156.320118][ T9339] wlan0 speed is unknown, defaulting to 1000 [ 156.340679][ T9339] wlan0 speed is unknown, defaulting to 1000 [ 156.374193][ T9339] wlan0 speed is unknown, defaulting to 1000 [ 156.385449][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1680'. [ 156.805127][ T9376] openvswitch: netlink: Duplicate or invalid key (type 0). [ 156.812744][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.199332][ T9389] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 157.775231][ T9419] xt_connbytes: Forcing CT accounting to be enabled [ 157.796369][ T9417] netlink: 'syz.1.1710': attribute type 26 has an invalid length. [ 158.279316][ T9450] warning: `syz.4.1724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.698814][ T9474] tipc: Can't bind to reserved service type 2 [ 158.746364][ T9475] netlink: 'syz.3.1739': attribute type 10 has an invalid length. [ 158.786654][ T9475] team0: Device ipvlan1 failed to register rx_handler [ 159.092149][ T9495] openvswitch: netlink: Key type 48 is out of range max 32 [ 159.888253][ T9540] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 159.951828][ T9547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.581691][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1791'. [ 160.622429][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1791'. [ 160.944211][ T9599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.326084][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 161.471961][ T9628] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 161.496009][ T9628] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 161.508560][ T9628] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 161.517634][ T9628] netlink: 'syz.3.1813': attribute type 2 has an invalid length. [ 161.526822][ T9628] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1813'. [ 161.683134][ T9640] syz.4.1818 uses obsolete (PF_INET,SOCK_PACKET) [ 162.011506][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 162.023390][ T9663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1829'. [ 162.156064][ T9668] netlink: 'syz.1.1831': attribute type 13 has an invalid length. [ 162.167216][ T9668] netlink: 'syz.1.1831': attribute type 58 has an invalid length. [ 162.175782][ T9668] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1831'. [ 162.230766][ T9671] netlink: 'syz.0.1833': attribute type 1 has an invalid length. [ 162.263691][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 162.572071][ T9693] netlink: 'syz.1.1845': attribute type 16 has an invalid length. [ 162.613298][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1845'. [ 163.723008][ T9762] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.003472][ T9779] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 164.465941][ T9806] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1901'. [ 164.861306][ T9832] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 165.519088][ T9868] netlink: 'syz.4.1930': attribute type 11 has an invalid length. [ 165.553879][ T9872] x_tables: unsorted entry at hook 3 [ 166.644936][ T9936] delete_channel: no stack [ 166.767517][ T9940] ip6t_REJECT: ECHOREPLY is not supported [ 166.909341][ T9951] __nla_validate_parse: 4 callbacks suppressed [ 166.909362][ T9951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1972'. [ 166.940674][ T9952] validate_nla: 1 callbacks suppressed [ 166.940695][ T9952] netlink: 'syz.2.1971': attribute type 8 has an invalid length. [ 167.032636][ T9954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.189142][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 167.407450][ T9976] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 167.672831][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1991'. [ 167.775137][T10000] netlink: 'syz.0.1997': attribute type 7 has an invalid length. [ 167.842003][T10004] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 167.850045][T10004] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1998'. [ 167.901170][T10007] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 168.070393][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.079687][T10013] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.087029][T10013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.897159][T10056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2024'. [ 168.953364][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 169.251973][T10074] wg1: entered promiscuous mode [ 169.282338][T10074] wg1: entered allmulticast mode [ 169.869352][T10114] openvswitch: netlink: IP tunnel TTL not specified. [ 170.033117][T10123] netlink: 'syz.1.2056': attribute type 6 has an invalid length. [ 170.420614][T10144] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 170.767354][T10167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.845858][T10171] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.302138][T10198] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2093'. [ 171.450055][T10207] x_tables: unsorted underflow at hook 1 [ 172.014721][T10239] geneve2: entered promiscuous mode [ 172.301778][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 172.402444][T10261] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2125'. [ 172.555681][T10261] bond2 (unregistering): Released all slaves [ 172.603341][T10271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.811144][T10282] netlink: 'syz.3.2135': attribute type 4 has an invalid length. [ 173.005912][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 173.133742][T10302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2145'. [ 173.371282][T10314] xt_hashlimit: max too large, truncated to 1048576 [ 173.486229][T10324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2156'. [ 173.527495][T10324] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2156'. [ 173.543430][T10324] netlink: 'syz.3.2156': attribute type 6 has an invalid length. [ 173.574810][T10326] openvswitch: netlink: Message has 4 unknown bytes. [ 173.592508][T10324] netlink: 'syz.3.2156': attribute type 5 has an invalid length. [ 173.613589][T10324] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2156'. [ 173.932833][T10348] nbd: illegal input index 2958377 [ 174.033825][T10351] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2169'. [ 174.290795][T10367] netlink: 'syz.0.2176': attribute type 12 has an invalid length. [ 174.370585][T10367] bond2: option primary_reselect: invalid value (255) [ 174.385880][T10367] bond2 (unregistering): Released all slaves [ 174.552294][T10383] ip6t_srh: unknown srh invflags 4000 [ 174.878506][T10402] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2194'. [ 174.911639][T10402] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.2194'. [ 175.338447][T10428] xt_NFQUEUE: number of total queues is 0 [ 175.655626][T10442] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 175.666743][T10444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 175.843715][T10454] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 175.897589][T10459] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.925092][T10459] SET target dimension over the limit! [ 176.340854][T10484] netlink: 'syz.3.2236': attribute type 13 has an invalid length. [ 176.797060][T10507] netlink: 'syz.1.2248': attribute type 3 has an invalid length. [ 176.807586][T10484] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 176.891838][T10484] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 177.048010][T10516] netlink: 'syz.1.2251': attribute type 10 has an invalid length. [ 177.108554][T10516] batman_adv: batadv0: Adding interface: netdevsim0 [ 177.126528][T10516] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.192000][T10516] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 177.538475][T10542] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.566966][T10542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.574608][T10542] IPv6: NLM_F_CREATE should be set when creating new route [ 177.787268][T10555] netlink: 'syz.3.2270': attribute type 11 has an invalid length. [ 177.795993][T10555] __nla_validate_parse: 5 callbacks suppressed [ 177.796014][T10555] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2270'. [ 177.905146][T10562] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2274'. [ 177.996734][T10569] netlink: 'syz.4.2276': attribute type 23 has an invalid length. [ 178.147875][T10573] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 178.267812][T10583] netlink: 'syz.2.2284': attribute type 21 has an invalid length. [ 178.281627][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 178.816004][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 178.853326][T10622] netlink: 412 bytes leftover after parsing attributes in process `syz.0.2303'. [ 179.660952][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 179.672160][T10671] netlink: 'syz.0.2327': attribute type 3 has an invalid length. [ 179.941586][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'. [ 179.983358][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 180.069499][T10695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2340'. [ 180.554973][T10724] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2355'. [ 180.847382][T10743] x_tables: duplicate entry at hook 2 [ 181.434214][T10783] netlink: 'syz.4.2383': attribute type 16 has an invalid length. [ 181.442425][T10783] netlink: 'syz.4.2383': attribute type 17 has an invalid length. [ 181.522215][T10783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.090417][T10821] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 182.612570][T10852] xt_bpf: check failed: parse error [ 182.973347][T10866] __nla_validate_parse: 6 callbacks suppressed [ 182.973371][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2424'. [ 183.053602][T10870] veth3: entered promiscuous mode [ 183.059013][T10870] veth3: entered allmulticast mode [ 183.344237][T10887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2434'. [ 183.795101][T10916] netlink: 'syz.1.2449': attribute type 21 has an invalid length. [ 183.811756][T10916] netlink: 'syz.1.2449': attribute type 6 has an invalid length. [ 183.820840][T10916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2449'. [ 184.019792][T10929] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.041540][T10929] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.652708][T10968] openvswitch: netlink: IP tunnel dst address not specified [ 185.160334][T11003] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 185.478578][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2497'. [ 185.552933][T11026] xfrm0: entered allmulticast mode [ 185.886649][T11047] netlink: 'syz.1.2509': attribute type 8 has an invalid length. [ 186.222449][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 186.267780][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2520'. [ 186.669993][T11094] IPVS: Unknown mcast interface: pim6reg0 [ 186.764492][T11102] Illegal XDP return value 3070850284 on prog (id 264) dev N/A, expect packet loss! [ 187.005801][T11116] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 187.667147][T11128] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 187.902385][T11150] C: renamed from team_slave_0 (while UP) [ 187.928218][T11150] netlink: 'syz.3.2550': attribute type 1 has an invalid length. [ 187.969929][T11150] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 188.094297][T11158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.252653][T11170] openvswitch: netlink: Missing key (keys=40, expected=100) [ 188.296512][T11173] openvswitch: netlink: EtherType 50a is less than min 600 [ 188.569919][T11188] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 188.585406][T11188] bond1 (unregistering): Released all slaves [ 188.694142][T11195] @0: renamed from bond_slave_1 (while UP) [ 188.887744][T11204] netlink: 'syz.3.2577': attribute type 61 has an invalid length. [ 188.902546][T11204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2577'. [ 189.101048][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 189.676980][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2601'. [ 189.756770][T11260] openvswitch: netlink: EtherType 0 is less than min 600 [ 190.111253][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 190.366841][T11292] C: renamed from lo (while UP) [ 190.381756][T11292] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 190.433981][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'. [ 190.575643][T11302] openvswitch: netlink: Flow key attribute not present in set flow. [ 190.588965][T11304] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 190.717539][T11311] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2629'. [ 190.727506][T11311] unsupported nlmsg_type 40 [ 190.864960][T11319] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2633'. [ 190.878580][T11319] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2633'. [ 191.009552][T11326] SET target dimension over the limit! [ 191.094933][T11331] bond0: Error: Cannot enslave bond to itself. [ 191.790888][T11375] xt_TCPMSS: Only works on TCP SYN packets [ 192.063652][T11389] Cannot find del_set index 49151 as target [ 192.166963][T11401] netlink: 'syz.2.2672': attribute type 1 has an invalid length. [ 192.282890][T11406] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2673'. [ 192.303098][T11406] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2673'. [ 192.736022][T11433] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 193.038188][T11453] delete_channel: no stack [ 193.482220][T11480] netlink: 'syz.3.2711': attribute type 21 has an invalid length. [ 193.619863][T11480] netlink: 'syz.3.2711': attribute type 5 has an invalid length. [ 193.774621][T11493] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 193.782630][T11493] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 193.813367][T11493] netlink: 'syz.3.2717': attribute type 2 has an invalid length. [ 194.243007][T11519] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 194.281332][T11519] team0: Device veth0_macvtap failed to register rx_handler [ 194.374178][T11527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.739462][T11553] __nla_validate_parse: 6 callbacks suppressed [ 194.739481][T11553] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2746'. [ 194.910381][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.018858][T11569] netlink: 'syz.4.2755': attribute type 21 has an invalid length. [ 195.047918][T11569] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2755'. [ 195.082988][T11571] SET target dimension over the limit! [ 195.230119][T11581] netlink: 'syz.2.2762': attribute type 1 has an invalid length. [ 195.261461][T11583] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 195.273378][T11583] netlink: 'syz.1.2761': attribute type 2 has an invalid length. [ 195.294549][T11583] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 195.436941][T11589] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2765'. [ 195.438868][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 195.455983][T11589] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2765'. [ 195.744971][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 195.972397][T11619] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 196.028675][T11621] netlink: 'syz.3.2781': attribute type 9 has an invalid length. [ 196.254220][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2786'. [ 196.299444][T11635] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2788'. [ 196.416508][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2791'. [ 196.463882][T11645] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 196.535782][T11647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2795'. [ 197.340064][T11698] openvswitch: netlink: IP tunnel dst address not specified [ 197.379081][T11701] netlink: 'syz.0.2821': attribute type 39 has an invalid length. [ 197.498994][T11709] xt_l2tp: v2 doesn't support IP mode [ 198.538558][T11771] netlink: 'syz.2.2856': attribute type 1 has an invalid length. [ 198.682559][T11779] Unsupported ieee802154 address type: 0 [ 199.480944][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.487424][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.021926][T11865] netlink: 'syz.3.2902': attribute type 7 has an invalid length. [ 200.523130][T11897] netlink: 'syz.1.2917': attribute type 8 has an invalid length. [ 200.684088][T11906] netlink: 'syz.4.2922': attribute type 24 has an invalid length. [ 200.856432][T11918] xt_TCPMSS: Only works on TCP SYN packets [ 201.073419][T11926] __nla_validate_parse: 4 callbacks suppressed [ 201.073439][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 201.224621][T11933] bond3: option mode: invalid value (133) [ 201.254565][T11933] bond3 (unregistering): Released all slaves [ 201.332304][T11937] bridge_slave_0: left allmulticast mode [ 201.339970][T11937] bridge_slave_0: left promiscuous mode [ 201.345997][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.361854][T11937] bridge_slave_1: left allmulticast mode [ 201.372019][T11937] bridge_slave_1: left promiscuous mode [ 201.392983][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.406857][T11947] Cannot find add_set index 65532 as target [ 201.428671][T11937] bond0: (slave bond_slave_0): Releasing backup interface [ 201.447025][T11937] bond_slave_0: left allmulticast mode [ 201.461137][T11937] bond0: (slave bond_slave_1): Releasing backup interface [ 201.489693][T11937] bond_slave_1: left allmulticast mode [ 201.514975][T11937] team0: Port device team_slave_0 removed [ 201.536266][T11937] team0: Port device team_slave_1 removed [ 201.543177][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.574811][T11937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.596109][T11937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.615802][T11937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.636198][T11937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.708648][T11955] lo: entered promiscuous mode [ 201.735152][T11955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.768738][T11959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.775586][T11959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.876922][T11963] netlink: 'syz.3.2950': attribute type 1 has an invalid length. [ 201.969133][T11970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.976470][T11970] IPv6: NLM_F_CREATE should be set when creating new route [ 201.983869][T11970] IPv6: NLM_F_CREATE should be set when creating new route [ 202.112744][T11977] netlink: 'syz.2.2955': attribute type 1 has an invalid length. [ 202.131418][T11977] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2955'. [ 202.646884][T12014] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2975'. [ 202.674424][T12014] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2975'. [ 202.705687][T12014] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2975'. [ 203.028067][T12035] netlink: 'syz.4.2986': attribute type 6 has an invalid length. [ 203.045451][T12032] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 203.055529][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 203.403605][T12058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2992'. [ 203.551846][T12062] wg1: left allmulticast mode [ 203.690491][T12062] bridge1: left allmulticast mode [ 203.932628][T12090] bond0: option ad_select: unable to set because the bond device is up [ 203.952746][T12091] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 204.650944][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3020'. [ 204.805987][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'. [ 205.032112][T12148] bond3: option min_links: invalid value (18446744073709551614) [ 205.043695][T12148] bond3: option min_links: allowed values 0 - 2147483647 [ 205.111455][T12148] bond3 (unregistering): Released all slaves [ 205.637846][T12191] openvswitch: netlink: Message has -2 unknown bytes. [ 205.792860][T12202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.858400][T12206] netlink: 'syz.4.3058': attribute type 1 has an invalid length. [ 206.395564][T12240] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 206.417409][T12240] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3074'. [ 206.587967][T12252] x_tables: duplicate entry at hook 1 [ 206.983492][T12274] netlink: 'syz.2.3091': attribute type 2 has an invalid length. [ 206.991378][T12274] netlink: 'syz.2.3091': attribute type 8 has an invalid length. [ 207.035184][T12274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3091'. [ 207.392964][T12297] netlink: 'syz.4.3103': attribute type 1 has an invalid length. [ 207.407512][T12297] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3103'. [ 208.121321][T12344] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3125'. [ 208.492019][T12363] nftables ruleset with unbound chain [ 208.524030][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 208.613564][T12321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.619835][T12321] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 208.726937][T12321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.773841][T12321] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 208.887419][T12321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.905241][T12321] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 209.022322][T12321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.043338][T12321] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 209.120680][T12321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.163391][T12321] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 209.377171][T12413] netlink: 'syz.4.3151': attribute type 7 has an invalid length. [ 209.394857][T12412] x_tables: duplicate underflow at hook 1 [ 209.422948][T12413] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3151'. [ 209.462968][ T5997] wlan0 speed is unknown, defaulting to 1000 [ 209.493741][ T5997] syz0: Port: 1 Link DOWN [ 209.820632][T12434] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 210.070224][T12445] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3162'. [ 210.079877][T12440] netlink: 'syz.4.3163': attribute type 1 has an invalid length. [ 210.129919][T12440] netlink: 476 bytes leftover after parsing attributes in process `syz.4.3163'. [ 210.153388][T12440] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3163'. [ 210.382404][T12460] netlink: 'syz.4.3170': attribute type 1 has an invalid length. [ 210.413631][T12460] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3170'. [ 210.625040][T12469] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 211.093351][T12492] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 211.646831][T12524] __nla_validate_parse: 4 callbacks suppressed [ 211.646854][T12524] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3195'. [ 212.581635][T12585] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.000494][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 213.039501][T12610] netlink: 'syz.0.3231': attribute type 5 has an invalid length. [ 213.074413][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3231'. [ 213.122558][T12610] geneve3: entered promiscuous mode [ 213.143411][T12610] geneve3: entered allmulticast mode [ 213.162228][ T2960] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 213.206522][ T2960] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 213.246819][ T2960] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 213.274014][ T2960] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 213.561593][T12641] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 213.610742][T12646] netlink: 'syz.3.3246': attribute type 1 has an invalid length. [ 213.621033][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3245'. [ 214.258952][T12684] openvswitch: netlink: Multiple metadata blocks provided [ 214.322022][T12686] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3262'. [ 214.542605][T12703] netlink: 'syz.4.3269': attribute type 12 has an invalid length. [ 214.586819][T12705] Unknown options in mask b7f2 [ 214.660944][T12710] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 214.715866][T12710] netlink: 'syz.3.3273': attribute type 2 has an invalid length. [ 214.801787][T12719] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3276'. [ 215.203350][T12744] delete_channel: no stack [ 215.589196][T12762] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.672086][T12770] netlink: 'syz.2.3299': attribute type 9 has an invalid length. [ 215.761446][T12776] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 215.877444][T12779] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 216.170257][T12795] netlink: 'syz.4.3311': attribute type 32 has an invalid length. [ 216.257569][T12790] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 216.310259][T12790] bond1 (unregistering): Released all slaves [ 216.600333][T12819] ip6erspan0: entered promiscuous mode [ 216.606082][T12819] ip6erspan0: entered allmulticast mode [ 217.044276][T12845] openvswitch: netlink: IP tunnel dst address not specified [ 217.161530][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3342'. [ 217.293118][T12861] openvswitch: netlink: IPv4 tunnel dst address is zero [ 217.392281][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3346'. [ 217.426350][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3346'. [ 217.620657][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3353'. [ 218.106963][T12915] bond0: entered promiscuous mode [ 218.112556][T12915] bond_slave_0: entered promiscuous mode [ 218.125174][T12914] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 218.134769][T12915] @0: entered promiscuous mode [ 218.190091][T12917] netlink: 'syz.0.3370': attribute type 15 has an invalid length. [ 218.713583][T12951] SET target dimension over the limit! [ 218.824460][T12958] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.959919][T12967] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 219.662406][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 219.825369][T13021] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 219.877464][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3425'. [ 219.987381][T13033] tunl0: entered promiscuous mode [ 220.002845][T13035] netlink: 'syz.1.3428': attribute type 10 has an invalid length. [ 220.021092][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 220.032639][T13033] netlink: 'syz.4.3427': attribute type 3 has an invalid length. [ 220.057120][T13033] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3427'. [ 220.150852][T13040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 220.653622][T13068] netlink: 'syz.2.3445': attribute type 2 has an invalid length. [ 220.683350][T13068] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3445'. [ 221.290253][T13108] netlink: 'syz.2.3466': attribute type 3 has an invalid length. [ 221.589022][T13126] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 221.626761][T13131] xt_CONNSECMARK: invalid mode: 0 [ 222.665524][T13191] !: renamed from dummy0 (while UP) [ 222.717695][T13165] infiniband : set down [ 222.732431][T13165] infiniband : added ipvlan0 [ 222.871732][T13165] RDS/IB: : added [ 222.876378][T13165] smc: adding ib device  with port count 1 [ 222.882612][T13165] smc: ib device  port 1 has no pnetid [ 223.581153][T13241] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 223.841266][T13252] xt_l2tp: v2 doesn't support IP mode [ 224.186087][T13271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.396252][T13282] netlink: 'syz.0.3551': attribute type 11 has an invalid length. [ 224.404457][T13282] __nla_validate_parse: 5 callbacks suppressed [ 224.404473][T13282] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3551'. [ 224.938651][T13310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3565'. [ 226.205373][T13379] netlink: 'syz.1.3599': attribute type 9 has an invalid length. [ 226.302490][T13381] bond2: Unable to set down delay as MII monitoring is disabled [ 226.315332][T13381] bond2 (unregistering): Released all slaves [ 226.354916][T13384] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3601'. [ 226.403317][T13384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 226.432818][T13384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'. [ 226.483157][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3601'. [ 227.070062][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'. [ 227.131658][T13436] netlink: 'syz.2.3627': attribute type 1 has an invalid length. [ 227.568297][T13465] netlink: 'syz.1.3641': attribute type 11 has an invalid length. [ 227.592845][T13465] netlink: 'syz.1.3641': attribute type 11 has an invalid length. [ 227.601259][T13465] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3641'. [ 227.618161][T13467] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.660696][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3643'. [ 228.054671][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 228.478736][T13520] openvswitch: netlink: Message has 1 unknown bytes. [ 228.503455][T13520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.979182][T13562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.005260][ T2937] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.021361][ T2937] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.037377][ T2937] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.063330][ T2937] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.234509][T13599] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 230.286065][T13599] bond1 (unregistering): Released all slaves [ 230.579086][T13616] netlink: 'syz.4.3707': attribute type 1 has an invalid length. [ 231.191988][T13654] __nla_validate_parse: 3 callbacks suppressed [ 231.192008][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3726'. [ 231.823595][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 231.843890][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 231.883523][T13699] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 232.919877][T13764] xt_hashlimit: invalid interval [ 233.070183][T13773] openvswitch: netlink: IP tunnel dst address not specified [ 233.336799][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 233.378126][T13792] netlink: 'syz.3.3788': attribute type 2 has an invalid length. [ 234.090611][T13836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.445634][T13864] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 234.447013][T13867] rdma_rxe: rxe_newlink: failed to add lo [ 234.477536][T13864] netlink: 'syz.1.3821': attribute type 2 has an invalid length. [ 234.727826][T13882] netlink: 'syz.2.3831': attribute type 1 has an invalid length. [ 234.757937][T13882] netlink: 'syz.2.3831': attribute type 2 has an invalid length. [ 234.867327][T13892] netlink: 'syz.0.3836': attribute type 1 has an invalid length. [ 234.892833][T13892] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3836'. [ 234.976961][T13900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.053625][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.306599][T13922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.474673][T13928] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 235.503413][T13928] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 236.108592][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 236.243860][T13985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3884'. [ 236.275714][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3884'. [ 236.304565][T13985] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3884'. [ 236.328884][T13985] netlink: 'syz.0.3884': attribute type 2 has an invalid length. [ 236.338045][T13985] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3884'. [ 236.528275][T14002] xt_hashlimit: max too large, truncated to 1048576 [ 237.232360][T14052] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3916'. [ 238.008118][T14107] netlink: 'syz.3.3936': attribute type 10 has an invalid length. [ 238.021325][T14107] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 238.266376][T14120] netlink: 'syz.0.3942': attribute type 2 has an invalid length. [ 238.282701][T14120] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3942'. [ 238.295717][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 238.323640][T14124] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3944'. [ 238.560679][T14143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.568404][T14143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.578150][T14143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.586513][T14143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.342186][T14194] netlink: 'syz.1.3979': attribute type 3 has an invalid length. [ 239.610688][T14213] netlink: 'syz.4.3987': attribute type 10 has an invalid length. [ 239.677392][T14213] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 240.158587][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.166677][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.212959][ T1147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.235795][ T1147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.279950][ T1147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.303857][ T1147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.638907][T14276] nftables ruleset with unbound set [ 240.769578][T14286] netlink: 'syz.1.4025': attribute type 1 has an invalid length. [ 240.820941][T14292] netlink: 'syz.4.4027': attribute type 1 has an invalid length. [ 240.833348][T14292] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4027'. [ 240.974468][T14303] openvswitch: netlink: IP tunnel TTL not specified. [ 241.167966][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'. [ 241.263716][T14323] netlink: 'syz.3.4043': attribute type 1 has an invalid length. [ 241.507000][T14338] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 241.641081][T14348] netlink: 'syz.0.4054': attribute type 10 has an invalid length. [ 241.655533][T14348] bond0: (slave wlan1): Opening slave failed [ 242.092285][T14380] openvswitch: netlink: Message has 93 unknown bytes. [ 242.109870][T14380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.222002][T14388] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 242.361773][T14396] Cannot find set identified by id 65534 to match [ 242.566288][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4084'. [ 242.730457][T14421] openvswitch: netlink: Unknown key attributes 2 [ 242.892828][T14433] xt_ipcomp: unknown flags 1D [ 243.620300][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4125'. [ 243.630573][T14488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4125'. [ 243.641508][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4125'. [ 243.669067][T14488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4125'. [ 243.695492][T14488] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4125'. [ 243.943653][T14506] ipt_REJECT: TCP_RESET invalid for non-tcp [ 243.999790][T14503] bond2: option all_slaves_active: invalid value (222) [ 244.019705][T14513] netlink: 'syz.4.4135': attribute type 1 has an invalid length. [ 244.031112][T14513] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4135'. [ 244.046522][T14503] bond2 (unregistering): Released all slaves [ 244.070981][T14514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4137'. [ 244.199733][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 244.495814][T14540] ipt_REJECT: ECHOREPLY no longer supported. [ 244.649097][T14552] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4159'. [ 244.728402][T14560] netlink: 'syz.1.4160': attribute type 2 has an invalid length. [ 244.741203][ T43] IPVS: starting estimator thread 0... [ 244.835802][T14561] IPVS: using max 28 ests per chain, 67200 per kthread [ 245.027055][T14579] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.167846][T14589] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 245.209662][T14595] openvswitch: netlink: Missing key (keys=40, expected=100) [ 245.558232][T14617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.593033][T14619] openvswitch: netlink: Multiple metadata blocks provided [ 245.784666][T14635] lo: left promiscuous mode [ 245.789551][T14635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.232229][T14665] tipc: Trying to set illegal importance in message [ 246.276263][T14668] netlink: 'syz.3.4213': attribute type 1 has an invalid length. [ 246.549005][T14688] netlink: 'syz.4.4222': attribute type 1 has an invalid length. [ 246.677077][T14697] netlink: 'syz.0.4226': attribute type 11 has an invalid length. [ 246.904865][T14714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.914442][T14712] s5: renamed from vlan1 (while UP) [ 247.596315][T14762] __nla_validate_parse: 6 callbacks suppressed [ 247.596339][T14762] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4257'. [ 247.628978][T14764] netlink: 'syz.0.4259': attribute type 4 has an invalid length. [ 248.160044][T14800] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4276'. [ 248.235454][T14806] netlink: 'syz.2.4279': attribute type 1 has an invalid length. [ 248.254143][T14806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4279'. [ 248.262636][T14808] netlink: 'syz.3.4280': attribute type 5 has an invalid length. [ 248.320289][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4282'. [ 248.328075][T14810] bond1: option miimon: invalid value (18446744073709551585) [ 248.337744][T14810] bond1: option miimon: allowed values 0 - 2147483647 [ 248.350973][T14810] bond1 (unregistering): Released all slaves [ 249.149348][T14870] x_tables: unsorted entry at hook 2 [ 249.253573][T14875] x_tables: unsorted entry at hook 1 [ 249.319427][T14883] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4316'. [ 249.480005][T14887] bond5: Removing last arp target with arp_interval on [ 249.498858][T14894] xt_TCPMSS: Only works on TCP SYN packets [ 249.669523][T14906] netlink: 'syz.3.4327': attribute type 4 has an invalid length. [ 249.678662][T14906] netlink: 'syz.3.4327': attribute type 1 has an invalid length. [ 249.689717][T14906] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4327'. [ 249.773149][T14908] bond6 (unregistering): Released all slaves [ 249.801839][T14912] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4329'. [ 250.466630][T14961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.667337][T14974] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 250.706423][T14976] netlink: 'syz.2.4361': attribute type 6 has an invalid length. [ 250.892409][T14990] SET target dimension over the limit! [ 250.930185][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4369'. [ 250.942664][T14994] netlink: 'syz.2.4370': attribute type 3 has an invalid length. [ 250.958256][T14994] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4370'. [ 250.990053][T14992] geneve2: entered promiscuous mode [ 251.170135][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4376'. [ 251.436350][T15024] openvswitch: netlink: Missing key (keys=40, expected=80) [ 251.505255][T15028] netlink: 'syz.4.4387': attribute type 10 has an invalid length. [ 252.079080][T15069] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 252.592916][T15106] xt_hashlimit: overflow, try lower: 3/0 [ 252.625652][T15108] netlink: 'syz.3.4427': attribute type 11 has an invalid length. [ 252.644047][T15108] __nla_validate_parse: 5 callbacks suppressed [ 252.644075][T15108] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4427'. [ 252.676881][T15110] netlink: 'syz.2.4428': attribute type 75 has an invalid length. [ 252.789669][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4431'. [ 252.987899][T15130] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4437'. [ 253.013418][T15130] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4437'. [ 253.033359][T15130] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4437'. [ 253.311570][T15153] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 253.634548][T15175] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 253.821488][T15191] netlink: 'syz.4.4469': attribute type 12 has an invalid length. [ 254.339328][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.353837][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.360483][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.402810][T15226] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 254.444874][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.452896][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.461836][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.470183][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.479109][T15226] wg1 speed is unknown, defaulting to 1000 [ 254.589773][T15241] netlink: 'syz.3.4491': attribute type 1 has an invalid length. [ 254.611050][T15241] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4491'. [ 255.439944][T15295] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 255.831142][T15325] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 256.235390][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4541'. [ 256.260252][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4541'. [ 256.735714][T15387] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.926415][T15401] SET target dimension over the limit! [ 257.098893][T15412] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4571'. [ 257.358618][T15431] netlink: 'syz.0.4581': attribute type 21 has an invalid length. [ 257.367787][T15431] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.483447][T15439] geneve4: entered promiscuous mode [ 257.766063][T15459] xt_hashlimit: invalid rate [ 258.551052][T15514] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4623'. [ 258.652201][T15521] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 258.674092][T15521] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 259.202806][T15559] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.233819][T15561] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4645'. [ 259.249566][T15561] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4645'. [ 259.261854][T15561] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4645'. [ 259.547840][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4655'. [ 259.661765][T15592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4660'. [ 260.016923][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4674'. [ 260.408098][T15647] netlink: 5496 bytes leftover after parsing attributes in process `syz.3.4688'. [ 260.551792][T15655] netlink: 'syz.3.4693': attribute type 1 has an invalid length. [ 260.786976][T15669] SET target dimension over the limit! [ 260.917884][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.093775][T15687] openvswitch: netlink: IP tunnel dst address not specified [ 261.192371][T15694] netlink: 'syz.2.4712': attribute type 8 has an invalid length. [ 261.488392][T15712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4719'. [ 261.516459][T15712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4719'. [ 261.666226][T15723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.756821][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.771955][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.781010][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.808280][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.826200][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.850790][ T5148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.862201][ T5148] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.869772][ T5148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.878615][ T5148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.913459][ T5148] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.987881][T15739] syz.3.4729 uses old SIOCAX25GETINFO [ 262.058844][T15726] wlan0 speed is unknown, defaulting to 1000 [ 262.090673][T15746] erspan0: entered allmulticast mode [ 262.586285][T15726] wg1 speed is unknown, defaulting to 1000 [ 263.090854][T15726] chnl_net:caif_netlink_parms(): no params data found [ 263.330468][T15726] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.339992][T15726] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.349111][T15726] bridge_slave_0: entered allmulticast mode [ 263.358755][T15726] bridge_slave_0: entered promiscuous mode [ 263.368361][T15726] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.377085][T15726] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.385344][T15726] bridge_slave_1: entered allmulticast mode [ 263.395384][T15726] bridge_slave_1: entered promiscuous mode [ 263.449767][T15726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.467474][T15726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.571881][T15726] team0: Port device team_slave_0 added [ 263.597706][T15726] team0: Port device team_slave_1 added [ 263.689540][T15726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.706417][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.741493][T15726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.755956][T15726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.763069][T15726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.838084][T15726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.950087][T15847] netlink: 'syz.4.4778': attribute type 1 has an invalid length. [ 263.960244][ T5843] Bluetooth: hci5: command tx timeout [ 263.977950][T15726] hsr_slave_0: entered promiscuous mode [ 263.985440][T15726] hsr_slave_1: entered promiscuous mode [ 263.992341][T15726] debugfs: 'hsr0' already exists in 'hsr' [ 263.998257][T15726] Cannot create hsr debugfs directory [ 264.165876][T15858] __nla_validate_parse: 3 callbacks suppressed [ 264.165896][T15858] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4784'. [ 264.539411][T15726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.576111][T15726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.608699][T15726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.626587][T15726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.707929][T15893] openvswitch: netlink: IP tunnel dst address not specified [ 264.849841][T15726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.890833][T15726] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.920481][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.927768][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.983397][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.990582][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.061842][T15905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4806'. [ 265.093680][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4804'. [ 265.145958][T15726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.426497][T15928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4814'. [ 265.648096][T15726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.039419][ T5843] Bluetooth: hci5: command tx timeout [ 266.236023][T15726] veth0_vlan: entered promiscuous mode [ 266.251152][T15726] veth1_vlan: entered promiscuous mode [ 266.336786][T15726] veth0_macvtap: entered promiscuous mode [ 266.350952][T15726] veth1_macvtap: entered promiscuous mode [ 266.383865][T15982] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4834'. [ 266.422508][T15726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.485446][T15726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.535720][ T2960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.553983][ T2960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.563001][ T2960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.604819][ T2960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.631318][T15994] sctp: [Deprecated]: syz.0.4842 (pid 15994) Use of int in max_burst socket option. [ 266.631318][T15994] Use struct sctp_assoc_value instead [ 266.785241][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.806714][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.886177][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.896538][T16004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.916665][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.338326][T16027] netlink: 'syz.5.4859': attribute type 1 has an invalid length. [ 267.623275][T16041] netlink: 'syz.4.4865': attribute type 5 has an invalid length. [ 267.659664][T16044] netlink: 'syz.3.4867': attribute type 7 has an invalid length. [ 267.696478][T16047] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 268.019896][T16063] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4877'. [ 268.021681][T16061] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 268.052558][T16063] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 268.081626][T16065] netlink: 'syz.2.4876': attribute type 4 has an invalid length. [ 268.113885][ T5843] Bluetooth: hci5: command tx timeout [ 268.849812][T16113] netlink: 'syz.5.4899': attribute type 21 has an invalid length. [ 268.887206][T16115] netlink: 'syz.0.4901': attribute type 1 has an invalid length. [ 268.897030][T16113] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4899'. [ 269.107181][T16128] xt_hashlimit: size too large, truncated to 1048576 [ 269.131206][T16131] xt_socket: unknown flags 0x50 [ 269.395321][T16146] netlink: 'syz.3.4916': attribute type 1 has an invalid length. [ 269.403122][T16146] netlink: 'syz.3.4916': attribute type 11 has an invalid length. [ 269.443321][T16146] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4916'. [ 269.619177][T16163] netlink: 'syz.4.4923': attribute type 15 has an invalid length. [ 269.629960][T16163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4923'. [ 269.819477][T16175] sctp: [Deprecated]: syz.3.4929 (pid 16175) Use of int in maxseg socket option. [ 269.819477][T16175] Use struct sctp_assoc_value instead [ 270.194093][ T5843] Bluetooth: hci5: command tx timeout [ 270.263304][T16195] bond2: Unable to set up delay as MII monitoring is disabled [ 270.302594][T16195] bond2 (unregistering): Released all slaves [ 270.444377][T16215] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4949'. [ 270.454995][T16214] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.4948'. [ 270.465505][T16214] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 270.809703][T16236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4958'. [ 270.963762][T16246] netlink: 294 bytes leftover after parsing attributes in process `syz.0.4962'. [ 271.003267][T16246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.406017][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.444948][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.491472][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.533629][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.581198][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.613430][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.644344][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 271.675371][T16266] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 272.374717][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4990'. [ 272.470528][T16310] netlink: 'syz.0.4994': attribute type 9 has an invalid length. [ 272.701778][T16322] netlink: 'syz.4.5000': attribute type 1 has an invalid length. [ 274.240073][T16408] Zero length message leads to an empty skb [ 274.491992][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5043'. [ 274.567115][T16418] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5044'. [ 274.599637][T16422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.636275][T16426] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5048'. [ 274.933539][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5056'. [ 274.962643][T16446] nbd: must specify a device to reconfigure [ 275.354684][T16468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5070'. [ 275.373566][T16470] netlink: 'syz.5.5069': attribute type 2 has an invalid length. [ 275.565775][T16482] netlink: 'syz.4.5076': attribute type 1 has an invalid length. [ 275.611914][T16486] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.264415][T16524] Bluetooth: MGMT ver 1.23 [ 276.458337][T16536] pim6reg: entered allmulticast mode [ 276.469105][T16536] pim6reg: left allmulticast mode [ 277.088469][T16575] veth0_virt_wifi: default FDB implementation only supports local addresses [ 277.210987][T16582] netlink: 'syz.0.5124': attribute type 1 has an invalid length. [ 277.219541][T16582] netlink: 'syz.0.5124': attribute type 3 has an invalid length. [ 277.229937][T16582] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5124'. [ 277.239629][T16582] NCSI netlink: No device for ifindex 813332851 [ 277.893798][T16620] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5142'. [ 277.945412][T16620] vlan1: entered allmulticast mode [ 277.950597][T16620] gretap0: entered allmulticast mode [ 278.245301][T16641] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 278.386105][T16648] netlink: 'syz.5.5154': attribute type 4 has an invalid length. [ 278.403239][T16648] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5154'. [ 278.694222][T16666] net_ratelimit: 3722 callbacks suppressed [ 278.694244][T16666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.967073][T16682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5170'. [ 279.633602][ T5843] Bluetooth: hci5: command tx timeout [ 279.656239][T16720] tipc: Started in network mode [ 279.661497][T16720] tipc: Node identity ac14140f, cluster identity 4711 [ 279.713089][T16720] tipc: Enabling of bearer rejected, failed to enable media [ 279.900243][T16736] netlink: 'syz.0.5194': attribute type 3 has an invalid length. [ 280.166436][T16749] netlink: 'syz.5.5200': attribute type 10 has an invalid length. [ 280.641961][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5215'. [ 280.768630][T16786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.155998][T16811] tipc: Enabling of bearer rejected, failed to enable media [ 282.155453][T16870] netlink: 'syz.3.5260': attribute type 83 has an invalid length. [ 282.266666][T16879] bridge0: port 3(bond0) entered blocking state [ 282.291909][T16879] bridge0: port 3(bond0) entered disabled state [ 282.308643][T16879] bond0: entered allmulticast mode [ 282.321785][T16879] bond_slave_0: entered allmulticast mode [ 282.338292][T16879] @0: entered allmulticast mode [ 283.557781][T16953] veth0_to_bond: entered allmulticast mode [ 283.906104][T16973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.973890][T16977] tipc: Started in network mode [ 283.979764][T16977] tipc: Node identity , cluster identity 4711 [ 284.003297][T16977] tipc: Failed to obtain node identity [ 284.009892][T16977] tipc: Enabling of bearer rejected, failed to enable media [ 284.650384][T17023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5335'. [ 284.887276][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5344'. [ 285.148758][T17053] netlink: 'syz.3.5350': attribute type 1 has an invalid length. [ 285.287409][T17062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5355'. [ 285.325945][T17062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5355'. [ 285.404475][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5356'. [ 285.415173][T17069] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 285.666886][T17082] veth7: entered allmulticast mode [ 285.897845][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.972250][T17103] tipc: Started in network mode [ 285.980973][T17103] tipc: Node identity 7220ed71e3b, cluster identity 4711 [ 285.989605][T17103] tipc: Enabled bearer , priority 11 [ 286.353911][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5384'. [ 286.859766][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.869522][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.878126][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.886603][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.894645][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.919190][T17154] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5399'. [ 287.008574][T17148] wlan0 speed is unknown, defaulting to 1000 [ 287.105135][ T43] tipc: Node number set to 2442194289 [ 287.151550][T17165] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5404'. [ 287.306704][T17169] Bluetooth: MGMT ver 1.23 [ 287.312687][T17167] rdma_op ffff8880345b01f0 conn xmit_rdma 0000000000000000 [ 287.636801][T17148] wg1 speed is unknown, defaulting to 1000 [ 288.013719][T17148] chnl_net:caif_netlink_parms(): no params data found [ 288.349869][T17148] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.357824][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.365769][T17148] bridge_slave_0: entered allmulticast mode [ 288.374533][T17148] bridge_slave_0: entered promiscuous mode [ 288.384475][T17148] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.396864][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.404950][T17148] bridge_slave_1: entered allmulticast mode [ 288.412471][T17148] bridge_slave_1: entered promiscuous mode [ 288.451478][T17148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.467907][T17148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.540586][T17148] team0: Port device team_slave_0 added [ 288.569401][T17148] team0: Port device team_slave_1 added [ 288.585390][T17235] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 288.642386][T17241] netlink: 'syz.3.5438': attribute type 29 has an invalid length. [ 288.663446][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5438'. [ 288.684874][T17241] netlink: 'syz.3.5438': attribute type 29 has an invalid length. [ 288.692963][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5438'. [ 288.711971][T17148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.739312][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.805249][T17148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.835348][T17148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.842483][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.893743][T17148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.913460][ T5843] Bluetooth: hci6: command tx timeout [ 288.998801][T17253] lo: entered allmulticast mode [ 289.060357][T17148] hsr_slave_0: entered promiscuous mode [ 289.081182][T17148] hsr_slave_1: entered promiscuous mode [ 289.088502][T17148] debugfs: 'hsr0' already exists in 'hsr' [ 289.095711][T17148] Cannot create hsr debugfs directory [ 289.242640][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5450'. [ 289.346476][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5453'. [ 289.484081][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5455'. [ 289.561754][T17148] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.588948][T17148] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.608050][T17148] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.631217][T17148] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.900863][T17148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.958701][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.997683][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.004958][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.046456][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.053795][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.105806][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5465'. [ 290.283085][T17311] Bluetooth: MGMT ver 1.23 [ 290.576769][T17322] netlink: 'syz.4.5471': attribute type 1 has an invalid length. [ 290.594207][T17322] netlink: 'syz.4.5471': attribute type 3 has an invalid length. [ 290.612234][T17322] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5471'. [ 290.650094][T17322] NCSI netlink: No device for ifindex 813332851 [ 290.709265][T17148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.994014][ T5843] Bluetooth: hci6: command tx timeout [ 291.350175][T17148] veth0_vlan: entered promiscuous mode [ 291.390177][T17148] veth1_vlan: entered promiscuous mode [ 291.473726][T17361] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5487'. [ 291.486855][T17148] veth0_macvtap: entered promiscuous mode [ 291.517076][T17148] veth1_macvtap: entered promiscuous mode [ 291.592155][T17148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.658180][T17148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.724568][ T2937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.733852][ T2937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.878772][ T2937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.900436][ T2937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.128836][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.153837][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.263411][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.295661][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.073751][ T5843] Bluetooth: hci6: command tx timeout [ 293.271233][T17435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5524'. [ 293.548498][T17451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5531'. [ 293.996131][T17473] tipc: Enabling not permitted [ 294.006486][T17473] tipc: Enabling of bearer rejected, failed to enable media [ 294.061173][T17478] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 294.078239][T17478] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 294.557661][T17503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.093982][T17536] wlan0 speed is unknown, defaulting to 1000 [ 295.153752][ T5843] Bluetooth: hci6: command tx timeout [ 295.292413][T17548] netlink: 'syz.4.5576': attribute type 4 has an invalid length. [ 295.311567][T17548] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5576'. [ 296.465440][T17608] tipc: Enabling of bearer rejected, failed to enable media [ 296.583567][T17615] netlink: 'syz.4.5608': attribute type 13 has an invalid length. [ 296.602623][T17615] veth0_macvtap: left promiscuous mode [ 296.656865][T17615] macvtap0: entered allmulticast mode [ 296.687519][T17615] macvtap0: refused to change device tx_queue_len [ 296.949293][T17632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5616'. [ 297.124676][T17639] netlink: 'syz.6.5620': attribute type 1 has an invalid length. [ 297.238292][T17645] netlink: 'syz.5.5621': attribute type 2 has an invalid length. [ 297.255189][T17645] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5621'. [ 297.434533][T17655] IPVS: length: 8 != 1152 [ 297.689963][ T2937] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.709196][ T2937] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.713105][T17662] "syz.6.5630" (17662) uses obsolete ecb(arc4) skcipher [ 297.738906][ T2937] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.763298][ T2937] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.133798][T17693] netlink: 'syz.5.5643': attribute type 25 has an invalid length. [ 299.719903][T17775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5682'. [ 299.734322][T17770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5682'. [ 299.788824][T17777] netlink: 332 bytes leftover after parsing attributes in process `syz.5.5684'. [ 300.270349][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5697'. [ 300.308578][T17803] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5697'. [ 300.318688][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5697'. [ 300.753936][T17829] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5708'. [ 300.773495][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5708'. [ 301.278232][ T5920] IPVS: starting estimator thread 0... [ 301.393636][T17856] IPVS: using max 27 ests per chain, 64800 per kthread [ 301.574226][ T5884] IPVS: starting estimator thread 0... [ 301.581646][T17872] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 301.664255][T17873] IPVS: using max 24 ests per chain, 57600 per kthread [ 301.694241][T17877] lo: left allmulticast mode [ 302.883937][T17930] netlink: 'syz.3.5757': attribute type 6 has an invalid length. [ 302.924253][T17935] netlink: 'syz.3.5757': attribute type 6 has an invalid length. [ 303.028049][T17939] netlink: 'syz.4.5760': attribute type 7 has an invalid length. [ 305.747218][T18087] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 306.040985][T18101] netlink: 'syz.4.5839': attribute type 10 has an invalid length. [ 306.559722][T18133] sock: sock_timestamping_bind_phc: sock not bind to device [ 307.328873][T18177] __nla_validate_parse: 1 callbacks suppressed [ 307.328896][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5876'. [ 307.381640][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5876'. [ 307.410888][T18177] netlink: 'syz.3.5876': attribute type 6 has an invalid length. [ 307.809414][T18201] netlink: 'syz.3.5889': attribute type 3 has an invalid length. [ 307.956549][T18211] netlink: zone id is out of range [ 307.961896][T18211] netlink: zone id is out of range [ 307.971814][T18211] netlink: zone id is out of range [ 307.978408][T18211] netlink: zone id is out of range [ 307.986717][T18211] netlink: zone id is out of range [ 308.003464][T18211] netlink: zone id is out of range [ 308.008643][T18211] netlink: zone id is out of range [ 308.023448][T18211] netlink: zone id is out of range [ 308.028745][T18211] netlink: zone id is out of range [ 308.048803][T18211] netlink: zone id is out of range [ 308.114142][T18217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5897'. [ 308.981925][T18262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.077573][T18321] pim6reg527: entered allmulticast mode [ 310.838538][T18356] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.179470][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5968'. [ 311.200005][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5968'. [ 312.466891][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6000'. [ 312.714707][T18450] netlink: 'syz.0.6008': attribute type 1 has an invalid length. [ 312.746389][T18450] netlink: 'syz.0.6008': attribute type 2 has an invalid length. [ 312.812183][T18450] netlink: 'syz.0.6008': attribute type 1 has an invalid length. [ 312.828049][T18450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6008'. [ 313.455927][T18490] net_ratelimit: 14 callbacks suppressed [ 313.455948][T18490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.447517][T18536] netlink: 'syz.3.6049': attribute type 11 has an invalid length. [ 314.476945][T18536] netlink: 'syz.3.6049': attribute type 11 has an invalid length. [ 314.513301][T18536] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6049'. [ 315.029360][T18569] netlink: 'syz.5.6066': attribute type 142 has an invalid length. [ 315.411224][T18593] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6078'. [ 315.535324][T18597] netlink: zone id is out of range [ 315.545584][T18597] netlink: zone id is out of range [ 315.550951][T18597] netlink: zone id is out of range [ 315.567728][T18597] netlink: zone id is out of range [ 315.573080][T18597] netlink: zone id is out of range [ 315.614376][T18597] netlink: zone id is out of range [ 315.621620][T18604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.643954][T18597] netlink: zone id is out of range [ 315.649290][T18597] netlink: zone id is out of range [ 316.158548][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6098'. [ 316.329063][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6102'. [ 316.489056][T18649] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6104'. [ 316.532684][T18652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6108'. [ 316.650421][T18655] : entered promiscuous mode [ 317.502697][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6134'. [ 318.106767][T18745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6151'. [ 319.914702][T18837] nbd: must specify an index to disconnect [ 320.454714][T18871] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6209'. [ 320.721722][T18888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6218'. [ 320.915008][ T5843] Bluetooth: hci6: command tx timeout [ 321.143898][T18910] netlink: 'syz.0.6225': attribute type 29 has an invalid length. [ 321.165150][T18910] netlink: 'syz.0.6225': attribute type 29 has an invalid length. [ 321.263791][T18915] netlink: 'syz.6.6229': attribute type 1 has an invalid length. [ 321.533977][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6235'. [ 321.626218][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6238'. [ 321.698618][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6241'. [ 321.780650][T18943] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.6242'. [ 321.918539][T18948] netlink: 'syz.0.6244': attribute type 1 has an invalid length. [ 321.933433][T18950] tipc: Enabling of bearer rejected, failed to enable media [ 321.946555][T18948] net_ratelimit: 47 callbacks suppressed [ 321.946573][T18948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.359209][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.596082][T18988] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6265'. [ 322.630200][T18988] bond1: (slave gretap0): Device is not bonding slave [ 322.638129][T18988] bond1: option active_slave: invalid value (gretap0) [ 322.665347][T18988] bond1 (unregistering): Released all slaves [ 322.717959][T18993] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6269'. [ 323.024519][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6275'. [ 323.043913][T19009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6275'. [ 323.064181][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6275'. [ 323.531604][T19038] wireguard0: entered promiscuous mode [ 323.537422][T19038] wireguard0: entered allmulticast mode [ 323.579087][T19038] team0: Device wireguard0 is of different type [ 324.286813][T19075] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6306'. [ 324.431625][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6310'. [ 324.537799][T19087] netlink: 'syz.5.6312': attribute type 8 has an invalid length. [ 325.456743][T19142] netlink: 'syz.4.6337': attribute type 1 has an invalid length. [ 325.909263][T19170] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.6350'. [ 325.985003][T19170] openvswitch: netlink: Message has 6 unknown bytes. [ 326.773924][T19221] net veth1_virt_wifi .: renamed from virt_wifi0 [ 326.883600][T19227] netlink: 'syz.3.6379': attribute type 3 has an invalid length. [ 327.104386][T19234] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6382'. [ 328.027557][T19284] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.224377][T19293] netlink: 'syz.6.6411': attribute type 13 has an invalid length. [ 328.244691][T19294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.257998][T19293] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6411'. [ 328.287119][T19293] syz_tun: refused to change device tx_queue_len [ 328.934536][T19324] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6426'. [ 328.978625][T19328] netem: change failed [ 329.029411][T19329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6427'. [ 329.138912][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6431'. [ 329.301656][T19333] syz.3.6430 (19333) used greatest stack depth: 16928 bytes left [ 329.358149][T19343] ipvlan0: entered promiscuous mode [ 329.671526][T19360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6443'. [ 329.711960][T19360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6443'. [ 330.001949][T19378] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 330.052229][T19382] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 330.406029][T19402] netlink: 'syz.3.6464': attribute type 1 has an invalid length. [ 330.563846][T19411] netlink: 'syz.3.6469': attribute type 1 has an invalid length. [ 330.580605][T19411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.781317][T19421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6474'. [ 331.769685][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6504'. [ 331.770873][T19484] netlink: 'syz.6.6503': attribute type 1 has an invalid length. [ 331.791705][T19484] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6503'. [ 331.802333][T19484] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6503'. [ 331.813759][T19484] netlink: 'syz.6.6503': attribute type 1 has an invalid length. [ 331.834123][T19484] netlink: 'syz.6.6503': attribute type 8 has an invalid length. [ 332.165215][T19502] netlink: 'syz.5.6513': attribute type 3 has an invalid length. [ 333.616790][T19575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.811003][T19587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.278620][T19609] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.543741][T19625] __nla_validate_parse: 2 callbacks suppressed [ 334.543763][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6572'. [ 334.560013][T19626] netlink: 'syz.0.6574': attribute type 4 has an invalid length. [ 334.578644][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6572'. [ 334.584366][T19626] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6574'. [ 335.100800][T19657] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6589'. [ 335.461466][ T9] IPVS: starting estimator thread 0... [ 335.552036][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6601'. [ 335.563437][T19680] IPVS: using max 29 ests per chain, 69600 per kthread [ 335.950571][T19700] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6609'. [ 335.967592][T19700] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6609'. [ 335.981306][T19700] netlink: 'syz.4.6609': attribute type 5 has an invalid length. [ 335.981338][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6610'. [ 335.989561][T19700] netlink: 'syz.4.6609': attribute type 6 has an invalid length. [ 336.009199][T19700] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6609'. [ 336.246582][T19710] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6614'. [ 337.699378][T19795] vlan2: entered promiscuous mode [ 337.717787][T19795] bridge0: entered promiscuous mode [ 338.795871][T19852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.812565][T19852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 338.977291][T19852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.989119][T19852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 339.218369][T19852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.238185][T19852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 339.446550][T19852] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.479656][T19852] netdevsim netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 339.889776][ T1147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 339.913505][ T1147] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.931253][ T1147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 339.940352][ T1147] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.997009][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 340.005986][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 340.031193][T19909] __nla_validate_parse: 2 callbacks suppressed [ 340.031212][T19909] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6706'. [ 340.047401][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 340.063247][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 340.081506][T19909] netlink: 'syz.4.6706': attribute type 8 has an invalid length. [ 340.099665][T19909] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 340.707102][T19945] netlink: 'syz.3.6724': attribute type 1 has an invalid length. [ 340.742393][T19945] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6724'. [ 340.938433][T19959] netlink: 'syz.0.6732': attribute type 1 has an invalid length. [ 340.950761][T19959] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6732'. [ 341.229773][T19975] netlink: 'syz.4.6739': attribute type 16 has an invalid length. [ 341.243327][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6739'. [ 341.434586][T19986] netlink: 'syz.6.6744': attribute type 3 has an invalid length. [ 341.442393][T19986] netlink: 'syz.6.6744': attribute type 1 has an invalid length. [ 341.489693][T19986] netlink: 204 bytes leftover after parsing attributes in process `syz.6.6744'. [ 341.863508][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6754'. [ 342.006004][T20013] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6757'. [ 342.271321][T20026] netlink: 272 bytes leftover after parsing attributes in process `syz.6.6763'. [ 342.958672][T20063] syz.5.6780 (20063) used obsolete PPPIOCDETACH ioctl [ 343.179492][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6788'. [ 343.401468][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6795'. [ 343.661550][T20104] delete_channel: no stack [ 344.162506][T20136] netlink: 'syz.4.6816': attribute type 1 has an invalid length. [ 344.805039][T20168] xt_hashlimit: size too large, truncated to 1048576 [ 345.528101][T20206] __nla_validate_parse: 2 callbacks suppressed [ 345.528124][T20206] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6845'. [ 345.956349][T20223] IPVS: Error connecting to the multicast addr [ 346.241663][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6864'. [ 346.388439][T20248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6868'. [ 346.569534][T20255] smc: net device wlan0 applied user defined pnetid SYZ0 [ 346.666032][T20262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6874'. [ 346.782952][T20266] netlink: 'syz.4.6876': attribute type 2 has an invalid length. [ 347.271392][T20298] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6890'. [ 348.221087][T20349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6916'. [ 348.361195][T20358] netlink: 'syz.3.6920': attribute type 33 has an invalid length. [ 348.541923][T20367] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6926'. [ 348.706338][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6931'. [ 348.920078][T20389] smc: net device team0 applied user defined pnetid SYZ2 [ 348.953527][T20391] netlink: 'syz.6.6937': attribute type 3 has an invalid length. [ 349.865354][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6962'. [ 350.531509][T20484] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6983'. [ 350.737149][T20497] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 350.833349][T20501] tipc: Enabled bearer , priority 10 [ 350.971590][T20509] netlink: 'syz.6.6996': attribute type 10 has an invalid length. [ 350.994761][T20509] bridge0: port 3(team0) entered blocking state [ 351.022020][T20509] bridge0: port 3(team0) entered disabled state [ 351.051291][T20509] team0: entered allmulticast mode [ 351.057602][T20509] team_slave_0: entered allmulticast mode [ 351.080406][T20509] team_slave_1: entered allmulticast mode [ 351.119275][T20509] team0: entered promiscuous mode [ 351.153756][T20509] team_slave_0: entered promiscuous mode [ 351.165083][T20509] team_slave_1: entered promiscuous mode [ 351.192109][T20509] bridge0: port 3(team0) entered blocking state [ 351.198690][T20509] bridge0: port 3(team0) entered forwarding state [ 351.516737][T20539] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.7011'. [ 351.884320][T20559] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7021'. [ 352.100970][T20572] netlink: 256 bytes leftover after parsing attributes in process `syz.6.7025'. [ 354.397398][T20675] netem: change failed [ 354.711150][T20693] netlink: 'syz.5.7084': attribute type 1 has an invalid length. [ 354.768677][T20693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7084'. [ 355.456949][T20728] vxcan0: tx address claim with dlc 0 [ 355.608182][T20741] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'. [ 355.983800][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7114'. [ 356.211853][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7122'. [ 356.771288][T20806] netlink: 'syz.4.7137': attribute type 11 has an invalid length. [ 357.302293][T20826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7146'. [ 357.316758][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7145'. [ 357.359264][T20824] vlan2: entered allmulticast mode [ 357.370232][T20824] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 358.034927][T20854] netlink: 340 bytes leftover after parsing attributes in process `syz.5.7158'. [ 358.140673][T20862] netlink: 'syz.6.7163': attribute type 2 has an invalid length. [ 358.595291][T20889] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.630966][T20889] bridge0: entered allmulticast mode [ 359.761828][T20954] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7206'. [ 359.829861][T20954] erspan0: entered promiscuous mode [ 360.017180][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7212'. [ 360.044533][T20962] netlink: 'syz.0.7211': attribute type 1 has an invalid length. [ 360.056338][T20962] nbd: error processing sock list [ 360.083631][T20962] block nbd0: shutting down sockets [ 360.333781][T20984] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7222'. [ 360.406643][T20985] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7221'. [ 361.096183][T21022] netlink: 'syz.5.7240': attribute type 83 has an invalid length. [ 362.130207][T21072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7264'. [ 362.806430][T21115] netlink: 'syz.3.7283': attribute type 10 has an invalid length. [ 362.858286][T21115] team0: Port device dummy0 added [ 363.207693][T21134] TCP: TCP_TX_DELAY enabled [ 363.221774][T21135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7294'. [ 363.344113][T21143] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7298'. [ 363.655932][T21158] tap0: tun_chr_ioctl cmd 1074025672 [ 363.661301][T21158] tap0: ignored: set checksum disabled [ 363.849353][T21170] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.7311'. [ 364.049168][T21178] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7315'. [ 364.612936][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7332'. [ 364.638678][T21210] erspan0: entered promiscuous mode [ 365.088095][T21233] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7341'. [ 365.945189][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7365'. [ 365.975815][T21282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7366'. [ 366.006205][T21279] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7365'. [ 366.026778][T21285] netlink: 'syz.5.7368': attribute type 83 has an invalid length. [ 366.082994][T21288] netlink: 'syz.3.7367': attribute type 16 has an invalid length. [ 366.132085][T21288] netlink: 'syz.3.7367': attribute type 17 has an invalid length. [ 366.408038][T21288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.418237][T21288] bridge0: port 3(bond0) entered blocking state [ 366.424820][T21288] bridge0: port 3(bond0) entered forwarding state [ 366.437782][T21288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.461360][T21296] netlink: 'syz.6.7373': attribute type 2 has an invalid length. [ 366.470004][T21296] netlink: 'syz.6.7373': attribute type 4 has an invalid length. [ 366.479926][T21302] veth0_to_bridge: entered promiscuous mode [ 366.490621][T21306] netlink: 'syz.5.7377': attribute type 3 has an invalid length. [ 366.499830][T21306] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7377'. [ 366.513662][T21306] block nbd0: not configured, cannot reconfigure [ 366.530662][T21300] veth0_to_bridge: left promiscuous mode [ 367.209640][T21342] netlink: 'syz.5.7395': attribute type 1 has an invalid length. [ 368.149944][T21389] bridge0: port 3(team0) entered disabled state [ 368.156950][T21389] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.165525][T21389] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.318062][T21398] __nla_validate_parse: 6 callbacks suppressed [ 368.318081][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7423'. [ 368.363873][T21398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7423'. [ 369.193935][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7444'. [ 369.263007][T21446] hsr_slave_0: left promiscuous mode [ 369.269805][T21446] hsr_slave_1: left promiscuous mode [ 369.574354][T21468] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 370.061825][T21498] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7469'. [ 370.592707][T21529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7483'. [ 370.917146][T21548] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7492'. [ 371.363963][T21569] netlink: 81 bytes leftover after parsing attributes in process `syz.0.7502'. [ 371.682623][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7512'. [ 371.714556][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7512'. [ 371.753810][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7512'. [ 372.294651][T21617] sctp: [Deprecated]: syz.4.7525 (pid 21617) Use of int in max_burst socket option deprecated. [ 372.294651][T21617] Use struct sctp_assoc_value instead [ 372.677281][T21643] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 373.539306][T21689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 374.242455][T21727] tipc: Started in network mode [ 374.269839][T21727] tipc: Node identity ac14140f, cluster identity 4711 [ 374.289713][T21727] tipc: New replicast peer: 255.255.255.255 [ 374.297845][T21727] tipc: Enabled bearer , priority 10 [ 374.774818][T21760] __nla_validate_parse: 1 callbacks suppressed [ 374.774838][T21760] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7588'. [ 374.926742][T21767] netlink: 'syz.3.7593': attribute type 28 has an invalid length. [ 374.989655][T21767] netlink: 'syz.3.7593': attribute type 3 has an invalid length. [ 375.009279][T21767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7593'. [ 375.341173][T21784] block nbd5: not configured, cannot reconfigure [ 375.414904][ T5941] tipc: Node number set to 2886997007 [ 375.533477][T21798] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7608'. [ 375.555701][T21798] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7608'. [ 377.018396][T21860] netem: incorrect ge model size [ 377.049359][T21860] netem: change failed [ 377.146921][T21868] netlink: 'syz.3.7640': attribute type 1 has an invalid length. [ 377.155240][T21868] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7640'. [ 377.165821][T21868] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7640'. [ 377.180065][T21868] netlink: 'syz.3.7640': attribute type 1 has an invalid length. [ 377.197738][T21868] netlink: 'syz.3.7640': attribute type 8 has an invalid length. [ 377.223281][T21868] netlink: 582 bytes leftover after parsing attributes in process `syz.3.7640'. [ 377.237172][T21872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7642'. [ 377.816092][T21903] team0: Cannot enslave team device to itself [ 378.510671][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7676'. [ 379.292357][T21991] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.7699'. [ 379.395583][T21995] netlink: 'syz.0.7701': attribute type 3 has an invalid length. [ 379.899400][T22021] veth1_macvtap: left promiscuous mode [ 380.177239][T22036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7721'. [ 380.235395][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7725'. [ 380.402705][T22052] netlink: 'syz.5.7728': attribute type 21 has an invalid length. [ 380.443896][T22052] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7728'. [ 380.473668][T22052] netlink: 'syz.5.7728': attribute type 4 has an invalid length. [ 380.494936][T22057] netlink: 'syz.5.7728': attribute type 21 has an invalid length. [ 380.502833][T22057] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7728'. [ 380.522308][T22052] netlink: 'syz.5.7728': attribute type 5 has an invalid length. [ 380.530645][T22052] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7728'. [ 380.546934][T22057] netlink: 'syz.5.7728': attribute type 4 has an invalid length. [ 380.562171][T22057] netlink: 'syz.5.7728': attribute type 5 has an invalid length. [ 380.572877][T22061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7733'. [ 380.583484][T22057] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7728'. [ 380.994752][T22070] netlink: 'syz.5.7737': attribute type 2 has an invalid length. [ 381.020087][T22070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7737'. [ 381.062747][T22070] block nbd0: not configured, cannot reconfigure [ 381.270799][T22083] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7743'. [ 381.410097][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7744'. [ 381.602393][T22095] syz.0.7750: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.618894][T22095] CPU: 0 UID: 0 PID: 22095 Comm: syz.0.7750 Not tainted syzkaller #0 PREEMPT(full) [ 381.618923][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 381.618946][T22095] Call Trace: [ 381.618955][T22095] [ 381.618964][T22095] dump_stack_lvl+0xe8/0x150 [ 381.618999][T22095] warn_alloc+0x249/0x340 [ 381.619024][T22095] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.619063][T22095] ? __pfx_warn_alloc+0x10/0x10 [ 381.619093][T22095] ? kasan_save_track+0x4f/0x80 [ 381.619111][T22095] ? kasan_save_track+0x3e/0x80 [ 381.619128][T22095] ? __kasan_kmalloc+0x93/0xb0 [ 381.619146][T22095] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 381.619173][T22095] ? xskq_create+0x56/0x170 [ 381.619192][T22095] ? xsk_setsockopt+0x54c/0x990 [ 381.619220][T22095] ? do_sock_setsockopt+0x17c/0x1b0 [ 381.619245][T22095] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 381.619270][T22095] ? do_syscall_64+0xe2/0xf80 [ 381.619296][T22095] __vmalloc_node_range_noprof+0x132/0x1730 [ 381.619355][T22095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.619384][T22095] ? __kasan_kmalloc+0x93/0xb0 [ 381.619412][T22095] vmalloc_user_noprof+0xad/0xe0 [ 381.619433][T22095] ? xskq_create+0xbf/0x170 [ 381.619453][T22095] xskq_create+0xbf/0x170 [ 381.619477][T22095] xsk_init_queue+0xad/0x110 [ 381.619512][T22095] xsk_setsockopt+0x54c/0x990 [ 381.619547][T22095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.619577][T22095] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.619606][T22095] ? aa_sock_opt_perm+0xff/0x1a0 [ 381.619635][T22095] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 381.619658][T22095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 381.619692][T22095] do_sock_setsockopt+0x17c/0x1b0 [ 381.619724][T22095] __x64_sys_setsockopt+0x13d/0x1b0 [ 381.619757][T22095] do_syscall_64+0xe2/0xf80 [ 381.619779][T22095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.619800][T22095] ? trace_irq_disable+0x37/0x100 [ 381.619820][T22095] ? clear_bhb_loop+0x60/0xb0 [ 381.619846][T22095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.619873][T22095] RIP: 0033:0x7f56ee99aeb9 [ 381.619897][T22095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.619916][T22095] RSP: 002b:00007f56ef8f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.619939][T22095] RAX: ffffffffffffffda RBX: 00007f56eec15fa0 RCX: 00007f56ee99aeb9 [ 381.619955][T22095] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 381.619968][T22095] RBP: 00007f56eea08c1f R08: 0000000000000004 R09: 0000000000000000 [ 381.619981][T22095] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.619994][T22095] R13: 00007f56eec16038 R14: 00007f56eec15fa0 R15: 00007ffcb18a9268 [ 381.620031][T22095] [ 381.620045][T22095] Mem-Info: [ 381.927549][T22095] active_anon:6561 inactive_anon:12 isolated_anon:0 [ 381.927549][T22095] active_file:2378 inactive_file:40808 isolated_file:0 [ 381.927549][T22095] unevictable:768 dirty:312 writeback:0 [ 381.927549][T22095] slab_reclaimable:11579 slab_unreclaimable:145280 [ 381.927549][T22095] mapped:39408 shmem:1506 pagetables:1327 [ 381.927549][T22095] sec_pagetables:0 bounce:0 [ 381.927549][T22095] kernel_misc_reclaimable:0 [ 381.927549][T22095] free:1254555 free_pcp:13115 free_cma:0 [ 381.982381][T22095] Node 0 active_anon:26624kB inactive_anon:48kB active_file:9512kB inactive_file:163032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157672kB dirty:1272kB writeback:0kB shmem:4608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13340kB pagetables:5308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.062796][T22095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 382.155192][T22095] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.230951][T22095] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 382.248940][T22095] Node 0 DMA32 free:1118216kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31424kB inactive_anon:48kB active_file:9512kB inactive_file:163032kB unevictable:1536kB writepending:1272kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:36640kB local_pcp:16816kB free_cma:0kB [ 382.334140][T22095] lowmem_reserve[]: 0 0 1 1 1 [ 382.338965][T22095] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 382.414490][T22095] lowmem_reserve[]: 0 0 0 0 0 [ 382.422485][T22115] vcan0: tx address claim with dest, not broadcast [ 382.443334][T22095] Node 1 Normal free:3879912kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14816kB local_pcp:7232kB free_cma:0kB [ 382.551771][T22095] lowmem_reserve[]: 0 0 0 0 0 [ 382.583732][T22095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 382.633326][T22121] xfrm1: entered promiscuous mode [ 382.653471][T22095] Node 0 DMA32: 3135*4kB (UME) 2762*8kB (UME) 1282*16kB (UM) 544*32kB (UME) 109*64kB (UME) 156*128kB (UME) 203*256kB (UME) 147*512kB (U) 134*1024kB (UM) 80*2048kB (UM) 145*4096kB (UM) = 1121708kB [ 382.674289][T22121] xfrm1: entered allmulticast mode [ 382.709992][T22095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 382.752499][T22095] Node 1 Normal: 190*4kB (UM) 54*8kB (UME) 36*16kB (UME) 138*32kB (UME) 39*64kB (UME) 10*128kB (UME) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3879912kB [ 382.778746][T22095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.793247][T22095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.802900][T22095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 382.862380][T22095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 382.873437][T22095] 44568 total pagecache pages [ 382.881393][T22095] 0 pages in swap cache [ 382.886176][T22095] Free swap = 124996kB [ 382.890381][T22095] Total swap = 124996kB [ 382.895108][T22095] 2097051 pages RAM [ 382.899094][T22095] 0 pages HighMem/MovableOnly [ 382.929432][T22095] 426622 pages reserved [ 382.943599][T22095] 0 pages cma reserved [ 383.135975][T22139] ipvlan2: entered allmulticast mode [ 383.141654][T22139] batadv_slave_1: entered allmulticast mode [ 383.150983][T22139] batman_adv: batadv0: Adding interface: ipvlan2 [ 383.193474][T22139] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.225281][T22139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.239356][T22139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.250794][T22139] batman_adv: batadv0: Interface activated: ipvlan2 [ 383.798386][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.050898][T22244] netlink: 'syz.6.7817': attribute type 2 has an invalid length. [ 385.218829][T22252] __nla_validate_parse: 11 callbacks suppressed [ 385.218851][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7821'. [ 385.730433][T22283] netlink: 'syz.4.7836': attribute type 4 has an invalid length. [ 385.802452][T22286] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.7837'. [ 385.945932][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7841'. [ 386.173528][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7845'. [ 386.182662][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7845'. [ 386.472599][T22323] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 386.587054][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7859'. [ 386.701711][T22336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7862'. [ 386.882193][T22346] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.892357][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7866'. [ 386.901895][T22344] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7865'. [ 387.093415][T22353] netlink: 'syz.5.7869': attribute type 9 has an invalid length. [ 387.262303][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7876'. [ 388.124075][T22410] netlink: 'syz.0.7895': attribute type 18 has an invalid length. [ 388.670857][T22434] netlink: 'syz.3.7907': attribute type 3 has an invalid length. [ 388.703323][T22434] netlink: 'syz.3.7907': attribute type 1 has an invalid length. [ 388.725894][T22434] NCSI netlink: No device for ifindex 813332851 [ 391.034274][T22569] __nla_validate_parse: 7 callbacks suppressed [ 391.034295][T22569] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.7967'. [ 392.467811][T22642] netlink: 'syz.6.8000': attribute type 1 has an invalid length. [ 392.486367][T22642] netlink: 'syz.6.8000': attribute type 7 has an invalid length. [ 392.495462][T22642] netlink: 'syz.6.8000': attribute type 8 has an invalid length. [ 392.504123][T22642] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8000'. [ 392.630061][T22650] sctp: [Deprecated]: syz.5.8005 (pid 22650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.630061][T22650] Use struct sctp_sack_info instead [ 393.009695][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8012'. [ 393.188607][T22676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8015'. [ 393.818124][T22711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8032'. [ 393.827883][T22711] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8032'. [ 394.241584][T22729] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8040'. [ 395.148364][T22773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8062'. [ 395.194202][T22773] block nbd0: not configured, cannot reconfigure [ 395.362695][T22789] sctp: [Deprecated]: syz.4.8068 (pid 22789) Use of int in maxseg socket option. [ 395.362695][T22789] Use struct sctp_assoc_value instead [ 395.877855][T22817] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8082'. [ 395.908496][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8083'. [ 396.426564][T22845] netlink: 'syz.3.8096': attribute type 10 has an invalid length. [ 396.511317][T22851] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8098'. [ 396.921617][T22863] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8104'. [ 397.117053][T22871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8107'. [ 397.649038][T22901] netlink: 'syz.6.8122': attribute type 9 has an invalid length. [ 398.038831][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8130'. [ 398.104145][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8130'. [ 398.271051][T22931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 398.580523][T22944] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 399.300554][T22981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8159'. [ 399.327195][T22983] block nbd0: Unsupported socket: should be TCP or UNIX. [ 400.078487][T23019] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8177'. [ 400.308795][T23035] netlink: 'syz.3.8186': attribute type 83 has an invalid length. [ 400.660118][T23054] netlink: 'syz.4.8191': attribute type 83 has an invalid length. [ 400.683978][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8193'. [ 400.887216][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 401.197628][T23085] netlink: 'syz.4.8206': attribute type 83 has an invalid length. [ 401.233433][T22974] Bluetooth: hci5: command 0x0406 tx timeout [ 401.503893][T23100] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8214'. [ 402.044107][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8225'. [ 402.166602][T23135] netlink: 'syz.3.8228': attribute type 33 has an invalid length. [ 402.219668][T23135] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 402.236176][T23135] bond2 (unregistering): Released all slaves [ 402.284639][T23140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8232'. [ 402.855739][T23167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8243'. [ 403.004790][T23170] netlink: 'syz.5.8245': attribute type 1 has an invalid length. [ 403.022926][T23170] netlink: 'syz.5.8245': attribute type 2 has an invalid length. [ 403.031738][T23170] netlink: 'syz.5.8245': attribute type 1 has an invalid length. [ 403.074432][T23170] netlink: 'syz.5.8245': attribute type 3 has an invalid length. [ 403.090962][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8245'. [ 403.562311][T23194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.573058][T23194] bond0: (slave bond2): Enslaving as an active interface with an up link [ 404.144963][T23228] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8275'. [ 404.625588][T23252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8285'. [ 404.742052][T23257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8287'. [ 404.820043][T23260] tap0: tun_chr_ioctl cmd 2148553947 [ 405.474730][T23296] netlink: 'syz.0.8307': attribute type 12 has an invalid length. [ 405.492894][T23296] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.8307'. [ 406.056902][T23326] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8322'. [ 406.094122][T23326] netem: invalid attributes len -24 [ 406.121902][T23326] netem: change failed [ 406.234060][T23335] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8326'. [ 407.848564][T23420] netlink: 'syz.6.8364': attribute type 4 has an invalid length. [ 408.090236][T23429] __nla_validate_parse: 2 callbacks suppressed [ 408.090258][T23429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8369'. [ 408.526559][T23442] netlink: 'syz.5.8375': attribute type 14 has an invalid length. [ 409.140297][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8388'. [ 409.203698][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8388'. [ 409.559808][T23491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8399'. [ 410.044292][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8413'. [ 410.132475][T23522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.154631][T23522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.187955][T23522] bond0 (unregistering): Released all slaves [ 410.607109][T23553] tipc: Failed to obtain node identity [ 410.619763][T23553] tipc: Enabling of bearer rejected, failed to enable media [ 411.547602][T23606] netlink: 564 bytes leftover after parsing attributes in process `syz.3.8453'. [ 411.735313][T23613] bond1 (unregistering): Released all slaves [ 412.072274][T23632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8464'. [ 412.255033][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805bff2000: rx timeout, send abort [ 412.265668][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805bff2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 413.397722][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8489'. [ 415.455389][ T5843] Bluetooth: hci6: link tx timeout [ 415.462000][ T5843] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 415.491577][T23793] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8536'. [ 415.693524][T23806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8541'. [ 416.609548][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8560'. [ 416.754847][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.830706][T23865] netlink: 'syz.6.8564': attribute type 13 has an invalid length. [ 416.868603][T23865] netlink: 'syz.6.8564': attribute type 17 has an invalid length. [ 416.884299][T23848] team0: Port device C removed [ 416.915013][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.924127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.074957][T23865] bridge0: port 3(team0) entered blocking state [ 417.081434][T23865] bridge0: port 3(team0) entered forwarding state [ 417.088380][T23865] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.095837][T23865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.107285][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.116161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.145733][T23865] bridge0: left allmulticast mode [ 417.189252][T23878] netlink: 'syz.3.8571': attribute type 1 has an invalid length. [ 417.197647][T23878] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8571'. [ 417.208739][T23878] netlink: 'syz.3.8571': attribute type 1 has an invalid length. [ 417.217061][T23878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8571'. [ 417.232509][T23865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.553678][T22974] Bluetooth: hci6: command 0x0406 tx timeout [ 417.762994][T23901] dvmrp6: entered allmulticast mode [ 417.770439][T23907] sctp: [Deprecated]: syz.6.8580 (pid 23907) Use of int in max_burst socket option deprecated. [ 417.770439][T23907] Use struct sctp_assoc_value instead [ 417.798822][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.810163][T23906] gre0: entered promiscuous mode [ 417.835297][T23906] gre0: entered allmulticast mode [ 418.238011][T23925] netlink: 'syz.3.8588': attribute type 1 has an invalid length. [ 418.270463][T23929] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 418.295302][ T5884] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 418.834947][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.979412][T23972] vxcan1: tx drop: invalid da for name 0x0000000080000001 [ 419.754272][T24001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8621'. [ 419.783332][T24001] block nbd0: Unsupported socket: should be TCP or UNIX. [ 420.222547][T24027] syzkaller1: entered promiscuous mode [ 420.237238][T24027] syzkaller1: entered allmulticast mode [ 420.907537][T24058] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8650'. [ 421.375056][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8661'. [ 421.423010][T24088] gtp0: entered promiscuous mode [ 421.433313][T24088] gtp0: entered allmulticast mode [ 421.707033][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8667'. [ 421.954290][ T43] net_ratelimit: 7 callbacks suppressed [ 421.954309][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.430523][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8686'. [ 422.753681][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.768326][T24162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.790265][T24165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8695'. [ 422.842369][T24165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8695'. [ 423.263852][T24183] netlink: 'syz.0.8701': attribute type 29 has an invalid length. [ 423.309324][T24183] netlink: 'syz.0.8701': attribute type 29 has an invalid length. [ 423.344634][T24183] netlink: 500 bytes leftover after parsing attributes in process `syz.0.8701'. [ 423.373551][T24183] unsupported nla_type 58 [ 423.748423][T24200] syzkaller1: entered promiscuous mode [ 423.759165][T24200] syzkaller1: entered allmulticast mode [ 423.799515][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.873625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.882563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.891259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.050603][T24224] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.060468][T24223] netlink: 'syz.5.8722': attribute type 1 has an invalid length. [ 424.072633][T24220] syzkaller1: entered promiscuous mode [ 424.079198][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8722'. [ 424.089505][T24220] syzkaller1: entered allmulticast mode [ 424.097172][T24224] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.123845][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.672362][T24250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8733'. [ 424.759806][T23875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.768639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.799035][T24254] sctp: [Deprecated]: syz.4.8735 (pid 24254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.799035][T24254] Use struct sctp_sack_info instead [ 425.546879][T24297] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 425.675990][T24302] __nla_validate_parse: 2 callbacks suppressed [ 425.676023][T24302] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8758'. [ 425.715589][T24302] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8758'. [ 425.883961][T24313] erspan0: entered promiscuous mode [ 425.899908][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8762'. [ 426.112244][T24327] bridge0: port 3(team0) entered disabled state [ 426.323849][T24327] team0 (unregistering): left allmulticast mode [ 426.341914][T24327] team_slave_0: left allmulticast mode [ 426.351829][T24327] team_slave_1: left allmulticast mode [ 426.358326][T24327] team0 (unregistering): left promiscuous mode [ 426.371539][T24327] team_slave_0: left promiscuous mode [ 426.381103][T24327] team_slave_1: left promiscuous mode [ 426.387548][T24327] bridge0: port 3(team0) entered disabled state [ 426.423928][T24327] team0 (unregistering): Port device team_slave_0 removed [ 426.479566][T24327] team0 (unregistering): Port device team_slave_1 removed [ 426.755743][T24345] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8775'. [ 427.158727][ T5919] net_ratelimit: 9 callbacks suppressed [ 427.158749][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.173165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.234390][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.325159][ T31] INFO: task syz.2.4978:16280 blocked for more than 143 seconds. [ 427.332959][ T31] Not tainted syzkaller #0 [ 427.357448][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.374648][T24372] GRED: DP 9 does not have a prio setting default to 8 [ 427.385608][ T31] task:syz.2.4978 state:D stack:27104 pid:16280 tgid:16279 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 427.419380][ T31] Call Trace: [ 427.422838][ T31] [ 427.449831][ T31] __schedule+0x14ea/0x5050 [ 427.473597][ T31] ? __pfx___schedule+0x10/0x10 [ 427.478676][ T31] ? schedule+0x90/0x360 [ 427.487218][ T31] schedule+0x164/0x360 [ 427.491457][ T31] schedule_preempt_disabled+0x13/0x30 [ 427.497790][ T31] __mutex_lock+0x7fe/0x1300 [ 427.502547][ T31] ? __mutex_lock+0x5ac/0x1300 [ 427.508006][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 427.514890][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 427.520096][ T31] ? __nlmsg_put+0xef/0x1b0 [ 427.525867][ T31] ? genlmsg_put+0x137/0x2e0 [ 427.530718][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 427.536682][ T31] ? kmem_cache_free+0x195/0x610 [ 427.541835][ T31] ? nlmon_xmit+0xb0/0x100 [ 427.547161][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 427.553907][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 427.560166][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.566051][ T31] ? __asan_memcpy+0x40/0x70 [ 427.570791][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.577428][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 427.583918][ T31] genl_rcv_msg+0x61c/0x7a0 [ 427.588559][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.594168][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 427.600675][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 427.606645][ T31] ? __skb_clone+0x63/0x7a0 [ 427.611557][ T31] netlink_rcv_skb+0x232/0x4b0 [ 427.616640][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.621823][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.628043][ T31] ? genl_rcv+0x19/0x40 [ 427.632327][ T31] ? down_read+0x272/0x2e0 [ 427.637747][ T31] ? genl_rcv+0xd/0x40 [ 427.641864][ T31] genl_rcv+0x28/0x40 [ 427.645953][ T31] netlink_unicast+0x80f/0x9b0 [ 427.650873][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 427.656409][ T31] ? __alloc_skb+0x193/0x390 [ 427.661175][ T31] ? netlink_sendmsg+0x650/0xb40 [ 427.667035][ T31] ? skb_put+0x11b/0x210 [ 427.671357][ T31] netlink_sendmsg+0x813/0xb40 [ 427.676702][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.682061][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.687260][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.692599][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.698777][ T31] ____sys_sendmsg+0xa68/0xad0 [ 427.703681][ T31] ? __might_fault+0xaf/0x130 [ 427.708435][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.714361][ T31] ? import_iovec+0x73/0xa0 [ 427.719197][ T31] ___sys_sendmsg+0x2a5/0x360 [ 427.724790][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.730485][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.736005][ T31] ? futex_wait+0x29a/0x380 [ 427.740772][ T31] ? __fget_files+0x2a/0x420 [ 427.745602][ T31] ? __fget_files+0x3a0/0x420 [ 427.750430][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.755804][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.761399][ T31] ? rcu_is_watching+0x15/0xb0 [ 427.766325][ T31] do_syscall_64+0xe2/0xf80 [ 427.770902][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.777195][ T31] ? trace_irq_disable+0x37/0x100 [ 427.782278][ T31] ? clear_bhb_loop+0x60/0xb0 [ 427.788053][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.794258][ T31] RIP: 0033:0x7f4242f9aeb9 [ 427.799604][ T31] RSP: 002b:00007f4243e79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.808159][ T31] RAX: ffffffffffffffda RBX: 00007f4243215fa0 RCX: 00007f4242f9aeb9 [ 427.817102][ T31] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000003 [ 427.825363][ T31] RBP: 00007f4243008c1f R08: 0000000000000000 R09: 0000000000000000 [ 427.834227][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.842258][ T31] R13: 00007f4243216038 R14: 00007f4243215fa0 R15: 00007ffd16e40ce8 [ 427.851215][ T31] [ 427.854466][ T31] [ 427.854466][ T31] Showing all locks held in the system: [ 427.862350][ T31] 1 lock held by khungtaskd/31: [ 427.869839][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 427.880784][ T31] 2 locks held by getty/5581: [ 427.884274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.896780][ T31] #0: ffff88803440a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 427.908444][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 427.919257][ T31] 2 locks held by syz.1.4217/14683: [ 427.924985][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.935955][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 427.946785][ T31] 2 locks held by syz.2.4978/16280: [ 427.952141][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 427.961060][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.970667][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 427.981204][ T31] [ 427.983959][ T31] ============================================= [ 427.983959][ T31] [ 427.992416][ T31] NMI backtrace for cpu 1 [ 427.992434][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.992457][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 427.992470][ T31] Call Trace: [ 427.992478][ T31] [ 427.992487][ T31] dump_stack_lvl+0xe8/0x150 [ 427.992520][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 427.992550][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.992585][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 427.992616][ T31] sys_info+0x135/0x170 [ 427.992640][ T31] watchdog+0xf90/0xfe0 [ 427.992667][ T31] ? watchdog+0x209/0xfe0 [ 427.992697][ T31] kthread+0x726/0x8b0 [ 427.992724][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.992745][ T31] ? __pfx_kthread+0x10/0x10 [ 427.992771][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.992803][ T31] ? __pfx_kthread+0x10/0x10 [ 427.992834][ T31] ret_from_fork+0x51b/0xa40 [ 427.992867][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 427.992898][ T31] ? __switch_to+0xc82/0x1410 [ 427.992928][ T31] ? __pfx_kthread+0x10/0x10 [ 427.992952][ T31] ret_from_fork_asm+0x1a/0x30 [ 427.992995][ T31] [ 427.993002][ T31] Sending NMI from CPU 1 to CPUs 0: [ 428.119801][ C0] NMI backtrace for cpu 0 [ 428.119818][ C0] CPU: 0 UID: 0 PID: 15729 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 428.119838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 428.119849][ C0] RIP: 0010:kasan_byte_accessible+0x16/0x30 [ 428.119876][ C0] Code: 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 <3c> 08 0f 92 c0 e9 d0 34 6d 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 [ 428.119891][ C0] RSP: 0018:ffffc90003eff7c0 EFLAGS: 00000802 [ 428.119908][ C0] RAX: 0000000000000000 RBX: ffffffff8b9998c0 RCX: 0000000080000002 [ 428.119921][ C0] RDX: 0000000000000000 RSI: ffffffff8b9998c0 RDI: 1ffffffff345b7d0 [ 428.119933][ C0] RBP: ffffffff84aacf25 R08: 0000000000000001 R09: 0000000000000000 [ 428.119944][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000000 [ 428.119957][ C0] R13: ffffffff9a2dbe80 R14: ffffffff9a2dbe80 R15: 0000000000000001 [ 428.119969][ C0] FS: 00007f4c64fb9880(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 428.119983][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.119995][ C0] CR2: 00007f1ad9be0ad8 CR3: 000000002753c000 CR4: 00000000003526f0 [ 428.120010][ C0] Call Trace: [ 428.120017][ C0] [ 428.120023][ C0] __kasan_check_byte+0x12/0x40 [ 428.120044][ C0] lock_acquire+0x84/0x330 [ 428.120068][ C0] ? kernfs_root+0x1c/0x230 [ 428.120098][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 428.120125][ C0] ? debug_check_no_obj_freed+0x145/0x550 [ 428.120145][ C0] debug_check_no_obj_freed+0x145/0x550 [ 428.120168][ C0] ? kernfs_dop_revalidate+0x3fc/0x5d0 [ 428.120187][ C0] ? path_openat+0x7e6/0x3e20 [ 428.120211][ C0] kfree+0x139/0x650 [ 428.120237][ C0] ? __pfx_kfree_link+0x10/0x10 [ 428.120254][ C0] path_openat+0x7e6/0x3e20 [ 428.120295][ C0] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 428.120319][ C0] ? getname_flags+0xb7/0x540 [ 428.120338][ C0] ? __pfx_path_openat+0x10/0x10 [ 428.120363][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 428.120395][ C0] do_filp_open+0x22d/0x490 [ 428.120420][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 428.120449][ C0] ? __pfx_kfree_link+0x10/0x10 [ 428.120472][ C0] ? _raw_spin_unlock+0x28/0x50 [ 428.120496][ C0] ? alloc_fd+0x64b/0x6c0 [ 428.120520][ C0] do_sys_openat2+0x12f/0x220 [ 428.120543][ C0] ? __pfx_lo_ioctl+0x10/0x10 [ 428.120570][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 428.120589][ C0] ? blkdev_ioctl+0x5e3/0x740 [ 428.120610][ C0] ? __pfx_blkdev_ioctl+0x10/0x10 [ 428.120633][ C0] __x64_sys_openat+0x138/0x170 [ 428.120656][ C0] do_syscall_64+0xe2/0xf80 [ 428.120674][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.120692][ C0] ? clear_bhb_loop+0x60/0xb0 [ 428.120712][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.120729][ C0] RIP: 0033:0x7f4c650a7407 [ 428.120742][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 428.120757][ C0] RSP: 002b:00007ffe18cc7770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 428.120774][ C0] RAX: ffffffffffffffda RBX: 00007f4c64fb9880 RCX: 00007f4c650a7407 [ 428.120786][ C0] RDX: 0000000000080000 RSI: 000055c98b2a03f0 RDI: ffffffffffffff9c [ 428.120799][ C0] RBP: 000055c98b2a03f0 R08: 0000000000000000 R09: 0000000000000000 [ 428.120811][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 428.120821][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 428.120842][ C0] [ 428.490600][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 428.497577][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 428.506727][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 428.516892][ T31] Call Trace: [ 428.520188][ T31] [ 428.523221][ T31] vpanic+0x1e0/0x670 [ 428.527252][ T31] panic+0xc5/0xd0 [ 428.530993][ T31] ? __pfx_panic+0x10/0x10 [ 428.535469][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 428.540915][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 428.547198][ T31] watchdog+0xfda/0xfe0 [ 428.551397][ T31] ? watchdog+0x209/0xfe0 [ 428.556185][ T31] kthread+0x726/0x8b0 [ 428.560297][ T31] ? __pfx_watchdog+0x10/0x10 [ 428.564992][ T31] ? __pfx_kthread+0x10/0x10 [ 428.569628][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.574979][ T31] ? __pfx_kthread+0x10/0x10 [ 428.580044][ T31] ret_from_fork+0x51b/0xa40 [ 428.585121][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 428.590773][ T31] ? __switch_to+0xc82/0x1410 [ 428.595497][ T31] ? __pfx_kthread+0x10/0x10 [ 428.600309][ T31] ret_from_fork_asm+0x1a/0x30 [ 428.605120][ T31] [ 428.608691][ T31] Kernel Offset: disabled [ 428.613029][ T31] Rebooting in 86400 seconds..