last executing test programs: 3m53.375245032s ago: executing program 4 (id=1969): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) 3m53.169763292s ago: executing program 4 (id=1973): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) 3m53.107082961s ago: executing program 4 (id=1976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x3757f80800a7abc5) 3m52.937160388s ago: executing program 4 (id=1979): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f00000001c0), &(0x7f0000000080)=0xfffffde0) 3m52.758728969s ago: executing program 4 (id=1984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m52.538718505s ago: executing program 4 (id=1988): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3m37.398815852s ago: executing program 32 (id=1988): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m30.721222891s ago: executing program 3 (id=4019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m30.57244751s ago: executing program 3 (id=4024): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m30.484385s ago: executing program 3 (id=4027): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000a00)={{r0}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"}) 2m30.273701322s ago: executing program 3 (id=4033): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 2m30.085232422s ago: executing program 3 (id=4040): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff6) 2m29.847816759s ago: executing program 3 (id=4047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m14.761373765s ago: executing program 33 (id=4047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1.409365746s ago: executing program 0 (id=7909): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 1.048759351s ago: executing program 0 (id=7920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}}, 0x0) 931.95191ms ago: executing program 1 (id=7923): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 854.345794ms ago: executing program 0 (id=7924): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="11000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0) 854.097298ms ago: executing program 5 (id=7925): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) close(r1) 853.349939ms ago: executing program 6 (id=7926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r2, r0}) 781.544928ms ago: executing program 2 (id=7927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}, 0x80c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 763.135834ms ago: executing program 5 (id=7928): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 713.123449ms ago: executing program 1 (id=7929): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 699.97858ms ago: executing program 6 (id=7930): r0 = socket(0x1f, 0x5, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 643.68594ms ago: executing program 2 (id=7931): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) listen(r0, 0x0) 622.648047ms ago: executing program 5 (id=7932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 553.942904ms ago: executing program 0 (id=7933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) 518.991044ms ago: executing program 1 (id=7934): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 502.769261ms ago: executing program 6 (id=7935): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2022) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000002700)=""/4091, 0xffb}, {&(0x7f00000016c0)=""/63, 0x3f}, {&(0x7f0000005740)=""/4093, 0xffd}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000004700)=""/4087, 0xff7}, {&(0x7f0000001300)=""/155, 0x9b}, {&(0x7f00000013c0)=""/161, 0xa1}, {&(0x7f0000001280)=""/84, 0x54}], 0x8}, 0x10102) 419.40821ms ago: executing program 0 (id=7936): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 419.149638ms ago: executing program 1 (id=7937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 418.726047ms ago: executing program 2 (id=7938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) 338.033967ms ago: executing program 6 (id=7939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 326.590894ms ago: executing program 5 (id=7940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) 306.341771ms ago: executing program 2 (id=7941): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)={0x48, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xef99}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 247.093977ms ago: executing program 0 (id=7942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x800) shutdown(r0, 0x0) 147.783217ms ago: executing program 2 (id=7943): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) 146.930918ms ago: executing program 5 (id=7944): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) close(0x3) 144.924004ms ago: executing program 6 (id=7945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) 132.823739ms ago: executing program 1 (id=7946): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000002a80)=""/4084, &(0x7f0000000000)=0xff4) 10.18268ms ago: executing program 1 (id=7947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x4}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 9.556807ms ago: executing program 2 (id=7948): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.413042ms ago: executing program 6 (id=7949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) 0s ago: executing program 5 (id=7950): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): oth: hci0: command tx timeout [ 97.007933][ T5839] Bluetooth: hci4: command tx timeout [ 100.867240][ T6175] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 109.787190][ T6617] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 114.455274][ T6849] IPv6: addrconf: prefix option has invalid lifetime [ 116.064864][ T6931] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 120.979250][ T7197] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 125.286994][ T7427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.680687][ T7497] IPv6: addrconf: prefix option has invalid lifetime [ 127.828297][ T7555] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 129.502101][ T7642] delete_channel: no stack [ 130.834363][ T7720] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.307611][ T7797] IPv6: addrconf: prefix option has invalid lifetime [ 133.110500][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.118486][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.750958][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.873031][ T8210] can: request_module (can-proto-0) failed. [ 143.443792][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'. [ 143.874560][ T8425] netlink: 'syz.1.1235': attribute type 11 has an invalid length. [ 143.920553][ T8425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1235'. [ 144.197732][ T8439] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1242'. [ 144.797158][ T8471] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1258'. [ 145.259372][ T8493] xt_hashlimit: overflow, try lower: 3/0 [ 145.973873][ T8532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.083700][ T8538] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 146.333266][ T8547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.393224][ T8554] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.477530][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1300'. [ 146.820734][ T8575] netlink: 'syz.1.1309': attribute type 7 has an invalid length. [ 146.828890][ T8575] netlink: 'syz.1.1309': attribute type 8 has an invalid length. [ 147.445280][ T8606] openvswitch: netlink: Key type 30 is not supported [ 148.194755][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 148.255199][ T8651] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 148.303457][ T8651] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1344'. [ 148.454040][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 148.510952][ T8666] openvswitch: netlink: IP tunnel dst address not specified [ 148.813066][ T8671] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 148.954826][ T8680] netlink: 'syz.1.1355': attribute type 4 has an invalid length. [ 148.973872][ T8681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.997148][ T8680] netlink: 'syz.1.1355': attribute type 3 has an invalid length. [ 149.027796][ T8680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1355'. [ 149.215923][ T8692] netlink: 'syz.2.1361': attribute type 3 has an invalid length. [ 149.230983][ T8693] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 149.237977][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1361'. [ 149.602625][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 149.710320][ T8715] netlink: 'syz.1.1373': attribute type 10 has an invalid length. [ 149.718785][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 149.775776][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.843853][ T8715] bridge_slave_1: left allmulticast mode [ 149.849783][ T8715] bridge_slave_1: left promiscuous mode [ 149.902451][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.956869][ T8715] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 150.150988][ T8733] netlink: 'syz.0.1381': attribute type 21 has an invalid length. [ 150.175214][ T8733] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1381'. [ 150.263472][ T8739] netlink: 'syz.2.1385': attribute type 5 has an invalid length. [ 150.411102][ T8747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.532036][ T8751] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 150.785722][ T8765] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 151.186427][ T8784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.460211][ T8797] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 151.972832][ T8826] H: renamed from dummy0 (while UP) [ 151.992555][ T8829] Cannot find add_set index 0 as target [ 152.137923][ T8833] Cannot find add_set index 65532 as target [ 152.849319][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 153.376705][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 153.976319][ T8936] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1483'. [ 154.068145][ T8938] lo: entered promiscuous mode [ 154.085091][ T8938] tunl0: entered promiscuous mode [ 154.093110][ T8938] gre0: entered promiscuous mode [ 154.119899][ T8938] gretap0: entered promiscuous mode [ 154.142835][ T8938] erspan0: entered promiscuous mode [ 154.161188][ T8938] ip_vti0: entered promiscuous mode [ 154.200000][ T8936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.240072][ T8936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.259161][ T8936] bond0 (unregistering): Released all slaves [ 154.655031][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1497'. [ 154.807742][ T8973] syz.2.1500 uses obsolete (PF_INET,SOCK_PACKET) [ 154.823061][ T8976] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1499'. [ 155.090049][ T8986] sctp: [Deprecated]: syz.3.1505 (pid 8986) Use of int in max_burst socket option. [ 155.090049][ T8986] Use struct sctp_assoc_value instead [ 155.385726][ T9000] netlink: 'syz.4.1512': attribute type 1 has an invalid length. [ 156.065951][ T9038] netlink: 'syz.4.1529': attribute type 2 has an invalid length. [ 156.124804][ T9038] netlink: 'syz.4.1529': attribute type 8 has an invalid length. [ 156.146902][ T9038] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1529'. [ 156.988898][ T9083] ipt_ECN: cannot use operation on non-tcp rule [ 157.327602][ T9106] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 157.349960][ T9104] Driver unsupported XDP return value 0 on prog (id 200) dev N/A, expect packet loss! [ 157.599035][ T9116] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1570'. [ 158.043553][ T9141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.250870][ T9152] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 158.258671][ T9152] netlink: 'syz.4.1587': attribute type 11 has an invalid length. [ 158.285646][ T9152] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1587'. [ 158.629338][ T9170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.039705][ T9194] netlink: 'syz.1.1609': attribute type 21 has an invalid length. [ 159.070655][ T9194] netlink: 'syz.1.1609': attribute type 6 has an invalid length. [ 159.100555][ T9194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1609'. [ 159.519485][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1621'. [ 159.537190][ T9214] netlink: 'syz.2.1619': attribute type 1 has an invalid length. [ 159.789379][ T9232] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.882659][ T9237] netlink: 'syz.4.1630': attribute type 8 has an invalid length. [ 160.524722][ T9268] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 160.572997][ T9268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1646'. [ 160.813907][ T9282] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 161.378999][ T9310] Unknown options in mask b7f2 [ 161.608999][ T9323] netlink: 'syz.3.1670': attribute type 21 has an invalid length. [ 161.997368][ T9346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1682'. [ 162.148034][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 162.654496][ T9375] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 163.035319][ T9340] infiniband syz1: set down [ 163.050866][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 163.063329][ T9340] infiniband syz1: added ipvlan1 [ 163.092334][ T9394] openvswitch: netlink: Message has 8 unknown bytes. [ 163.099366][ T9394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.110108][ T9340] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 163.116827][ T9340] infiniband syz1: Couldn't open port 1 [ 163.267175][ T9340] RDS/IB: syz1: added [ 163.288370][ T9340] smc: adding ib device syz1 with port count 1 [ 163.311208][ T9340] smc: ib device syz1 port 1 has no pnetid [ 163.328586][ T9399] netlink: 'syz.4.1702': attribute type 39 has an invalid length. [ 163.795554][ T9422] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 163.833882][ T9422] netlink: 'syz.1.1713': attribute type 2 has an invalid length. [ 163.985818][ T9427] delete_channel: no stack [ 164.017996][ T9431] netlink: 'syz.2.1716': attribute type 3 has an invalid length. [ 164.261309][ T9438] xt_socket: unknown flags 0x50 [ 165.388850][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'. [ 165.448014][ T9477] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 165.457938][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'. [ 165.517892][ T9477] bond0 (unregistering): Released all slaves [ 166.629496][ T9522] xt_bpf: check failed: parse error [ 166.699986][ T9440] siw: device registration error -23 [ 167.096477][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 167.548188][ T9568] ipt_REJECT: ECHOREPLY no longer supported. [ 168.029934][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1796'. [ 168.340626][ T9609] netlink: 'syz.4.1803': attribute type 1 has an invalid length. [ 168.384533][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1805'. [ 168.405326][ T9609] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1803'. [ 168.415310][ T9614] openvswitch: netlink: Missing key (keys=40, expected=80) [ 169.007186][ T9646] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1818'. [ 169.028216][ T9646] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 169.629686][ T9676] warning: `syz.1.1833' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.773059][ T9678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1834'. [ 170.057114][ T9697] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1843'. [ 170.276867][ T9707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1848'. [ 170.330013][ T9711] SET target dimension over the limit! [ 170.895408][ T9743] netlink: 'syz.2.1864': attribute type 6 has an invalid length. [ 171.406153][ T9770] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 171.414890][ T9770] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 171.545388][ T9774] __nla_validate_parse: 1 callbacks suppressed [ 171.545411][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 171.579067][ T9776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1882'. [ 171.624579][ T9780] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 171.641920][ T9780] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1880'. [ 172.163181][ T9808] netlink: 'syz.1.1897': attribute type 21 has an invalid length. [ 172.180543][ T9808] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1897'. [ 172.255742][ T9810] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 172.270664][ T9810] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1898'. [ 172.292072][ T9812] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.328467][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 172.336675][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 172.362388][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 172.380894][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 172.413667][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 173.122293][ T9848] netlink: 'syz.1.1917': attribute type 21 has an invalid length. [ 173.166884][ T9848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1917'. [ 173.186818][ T9814] infiniband syz2: set active [ 173.196364][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 173.216729][ T9814] infiniband syz2: added vxcan1 [ 173.253240][ T9814] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 173.255470][ T9814] infiniband syz2: Couldn't open port 1 [ 173.422612][ T9814] RDS/IB: syz2: added [ 173.426719][ T9814] smc: adding ib device syz2 with port count 1 [ 173.460449][ T9814] smc: ib device syz2 port 1 has no pnetid [ 173.466676][ T42] vxcan1 speed is unknown, defaulting to 1000 [ 173.489132][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 173.612733][ T9869] netlink: 'syz.2.1927': attribute type 21 has an invalid length. [ 173.642544][ T9869] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.680761][ T9869] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 174.537361][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 174.743238][ T9918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.895542][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 174.950508][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 175.355817][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 175.521735][ T9950] netlink: 'syz.1.1966': attribute type 12 has an invalid length. [ 176.293637][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 176.532539][ T9993] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 176.835191][T10004] delete_channel: no stack [ 176.979570][ T9814] vxcan1 speed is unknown, defaulting to 1000 [ 177.187362][T10020] __nla_validate_parse: 2 callbacks suppressed [ 177.187386][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'. [ 177.508471][T10031] openvswitch: netlink: IPv4 tunnel dst address is zero [ 177.724596][T10040] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2011'. [ 177.959698][T10016] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 178.233647][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2024'. [ 179.160833][ T5839] Bluetooth: hci0: command 0x0c20 tx timeout [ 179.406096][T10117] x_tables: unsorted entry at hook 3 [ 179.628267][ T5836] IPVS: starting estimator thread 0... [ 179.730576][T10129] IPVS: using max 23 ests per chain, 55200 per kthread [ 179.931811][T10145] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 179.966450][T10145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 180.422548][T10173] x_tables: duplicate underflow at hook 3 [ 180.525578][T10175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 180.757867][T10189] bond0: option ad_select: unable to set because the bond device is up [ 181.206953][T10216] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2097'. [ 181.746524][T10246] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 181.767017][T10246] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2113'. [ 181.955514][T10254] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.179627][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 183.226246][T10318] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2146'. [ 183.256230][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 183.651873][T10341] veth5: entered promiscuous mode [ 183.663322][T10341] veth5: entered allmulticast mode [ 183.681267][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 183.915676][T10359] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2166'. [ 183.963084][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 183.987694][T10363] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 184.027429][T10363] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2168'. [ 184.639344][T10404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2189'. [ 184.811171][T10411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.843536][T10415] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 184.872974][T10415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2194'. [ 185.121771][T10430] xt_hashlimit: invalid interval [ 185.210240][T10435] ip6t_srh: unknown srh match flags 4000 [ 185.475155][T10446] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 185.487588][T10450] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 186.498981][T10506] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 186.676877][T10514] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.763421][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2242'. [ 187.322227][T10551] netlink: 'syz.2.2255': attribute type 1 has an invalid length. [ 187.441766][T10557] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 187.877881][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.930002][T10582] bond0: (slave rose0): Enslaving as an active interface with an up link [ 188.734532][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2290'. [ 188.775618][T10632] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2290'. [ 188.979290][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 189.395453][T10666] netlink: 'syz.0.2304': attribute type 10 has an invalid length. [ 189.475580][T10666] team0 (unregistering): Port device team_slave_0 removed [ 189.556298][T10666] team0 (unregistering): Port device team_slave_1 removed [ 190.086994][T10703] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.2319'. [ 190.208912][T10710] netlink: 'syz.3.2321': attribute type 8 has an invalid length. [ 190.820954][T10741] bond2: option mode: invalid value (133) [ 190.849594][T10741] bond2 (unregistering): Released all slaves [ 190.939366][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2338'. [ 191.057337][T10756] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 191.327335][T10770] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 191.336370][T10770] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 191.629754][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2354'. [ 191.794038][T10793] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2357'. [ 191.828923][T10793] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2357'. [ 191.891651][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.916649][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.924845][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.938392][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.953348][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.432726][T10820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.606747][T10798] vxcan1 speed is unknown, defaulting to 1000 [ 192.809468][T10843] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2381'. [ 192.838612][T10843] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2381'. [ 193.243592][T10858] bond2 (unregistering): Released all slaves [ 193.520861][T10875] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 193.748234][T10887] __nla_validate_parse: 2 callbacks suppressed [ 193.748257][T10887] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2399'. [ 193.762752][T10798] chnl_net:caif_netlink_parms(): no params data found [ 194.040664][ T5835] Bluetooth: hci5: command tx timeout [ 194.084376][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.123186][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.130742][T10798] bridge_slave_0: entered allmulticast mode [ 194.139035][T10798] bridge_slave_0: entered promiscuous mode [ 194.148278][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.155983][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.163821][T10798] bridge_slave_1: entered allmulticast mode [ 194.183432][T10798] bridge_slave_1: entered promiscuous mode [ 194.200777][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2408'. [ 194.233798][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2408'. [ 194.260191][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.289648][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.451215][T10798] team0: Port device team_slave_0 added [ 194.510077][T10798] team0: Port device team_slave_1 added [ 194.527101][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.534720][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.616109][T10928] x_tables: duplicate underflow at hook 1 [ 194.683028][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.690312][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.742932][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.762765][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.770626][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.869792][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.909258][T10946] x_tables: unsorted entry at hook 1 [ 195.011338][T10948] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 195.048934][T10798] hsr_slave_0: entered promiscuous mode [ 195.062331][T10798] hsr_slave_1: entered promiscuous mode [ 195.079642][T10798] debugfs: 'hsr0' already exists in 'hsr' [ 195.096376][T10798] Cannot create hsr debugfs directory [ 195.184727][T10950] bond1: Removing last arp target with arp_interval on [ 195.656506][T10976] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 195.706838][T10798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.769419][T10798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.832563][T10984] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2445'. [ 195.841935][T10798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.858092][T10798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.867487][T10984] unsupported nlmsg_type 40 [ 196.029601][T10998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.073776][T11002] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2450'. [ 196.123445][ T5835] Bluetooth: hci5: command tx timeout [ 196.202573][T11007] x_tables: duplicate entry at hook 1 [ 196.339586][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.399837][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.448071][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.455305][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.500176][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.507446][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.276045][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.016347][T10798] veth0_vlan: entered promiscuous mode [ 198.054887][T10798] veth1_vlan: entered promiscuous mode [ 198.153041][T10798] veth0_macvtap: entered promiscuous mode [ 198.173803][T11108] set match dimension is over the limit! [ 198.174903][T10798] veth1_macvtap: entered promiscuous mode [ 198.202491][ T5835] Bluetooth: hci5: command tx timeout [ 198.207274][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.229732][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.248916][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.285416][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.306768][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.323558][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.638394][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.660560][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.751005][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.758913][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.906773][T11137] netlink: 'syz.3.2511': attribute type 2 has an invalid length. [ 198.977943][T11137] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2511'. [ 199.204455][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 199.213620][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 199.247046][T11155] netlink: 'syz.1.2520': attribute type 3 has an invalid length. [ 199.376362][T11162] bond2: option miimon: invalid value (18446744073709551585) [ 199.384835][T11162] bond2: option miimon: allowed values 0 - 2147483647 [ 199.925718][T11162] bond2 (unregistering): Released all slaves [ 200.281259][ T5835] Bluetooth: hci5: command tx timeout [ 200.510557][T11202] x_tables: duplicate underflow at hook 4 [ 200.709577][T11210] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2547'. [ 201.345883][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'. [ 201.475303][T11255] netlink: 'syz.1.2568': attribute type 24 has an invalid length. [ 201.629079][ T42] IPVS: starting estimator thread 0... [ 201.733125][T11263] IPVS: using max 31 ests per chain, 74400 per kthread [ 202.115695][T11289] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2586'. [ 202.386213][T11303] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2592'. [ 202.643562][T11316] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 202.660586][T11316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.710635][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2601'. [ 202.819611][T11327] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.838568][T11327] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 203.136136][T11341] netlink: 'syz.1.2609': attribute type 64 has an invalid length. [ 204.394635][T11401] netlink: 'syz.3.2634': attribute type 64 has an invalid length. [ 204.442060][T11401] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2634'. [ 204.648352][T11412] bridge_slave_0: left allmulticast mode [ 204.666951][T11412] bridge_slave_0: left promiscuous mode [ 204.678420][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.773456][T11412] bridge_slave_1: left allmulticast mode [ 204.796363][T11412] bridge_slave_1: left promiscuous mode [ 204.803907][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.859173][T11412] bond0: (slave bond_slave_0): Releasing backup interface [ 204.876586][T11412] bond0: (slave bond_slave_1): Releasing backup interface [ 204.933692][T11412] team0: Port device team_slave_0 removed [ 204.955185][T11412] team0: Port device team_slave_1 removed [ 204.962747][T11412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.971039][T11412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.984206][T11412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.992402][T11412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.006011][T11412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.194150][T11438] openvswitch: netlink: IP tunnel dst address not specified [ 205.480929][T11454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 206.012956][T11484] xt_hashlimit: overflow, rate too high: 0 [ 206.290570][T11498] netlink: 'syz.3.2683': attribute type 30 has an invalid length. [ 206.442222][T11507] netlink: 'syz.5.2687': attribute type 4 has an invalid length. [ 206.471896][T11509] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 206.489986][T11509] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 206.948960][T11532] netlink: 'syz.5.2700': attribute type 1 has an invalid length. [ 207.087147][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 207.106679][T11540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.157227][T11545] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2706'. [ 207.157484][T11544] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 207.750563][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 208.125754][T11596] netlink: 'syz.0.2731': attribute type 8 has an invalid length. [ 208.381815][T11615] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 208.397685][T11613] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 208.743620][T11631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2748'. [ 209.205503][T11657] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 209.236844][T11657] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 209.471477][T11673] netlink: 'syz.2.2769': attribute type 2 has an invalid length. [ 209.592495][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2771'. [ 209.773362][T11689] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 210.432436][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2791'. [ 210.524354][T11718] netlink: 'syz.5.2793': attribute type 11 has an invalid length. [ 210.553901][T11721] netlink: 'syz.3.2794': attribute type 2 has an invalid length. [ 210.569275][T11718] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.2793'. [ 211.047573][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2805'. [ 211.356056][T11761] netlink: 'syz.5.2814': attribute type 11 has an invalid length. [ 211.390656][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2815'. [ 211.414089][T11765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2816'. [ 211.930214][T11794] gtp0: entered promiscuous mode [ 211.939676][T11794] gtp0: entered allmulticast mode [ 211.963232][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.969432][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.970847][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 211.977532][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 211.982392][ T5848] Bluetooth: hci0: command 0x0c20 tx timeout [ 212.224346][T11805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.315109][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 212.469416][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2844'. [ 212.512079][T11823] netlink: 'syz.2.2845': attribute type 12 has an invalid length. [ 212.678888][T11823] bond2: option primary_reselect: invalid value (255) [ 212.704645][T11823] bond2 (unregistering): Released all slaves [ 212.867971][T11838] xt_TCPMSS: Only works on TCP SYN packets [ 212.881203][T11837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'. [ 212.890319][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2851'. [ 212.943886][T11837] gretap1: entered promiscuous mode [ 212.949251][T11837] gretap1: entered allmulticast mode [ 213.566703][T11878] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 213.792432][T11890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.902647][T11892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.557945][T11923] Unsupported ieee802154 address type: 0 [ 215.396724][T11961] tipc: Can't bind to reserved service type 1 [ 215.921104][T11989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.186907][T12001] __nla_validate_parse: 3 callbacks suppressed [ 216.186930][T12001] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2933'. [ 216.234914][T12007] openvswitch: netlink: IP tunnel dst address not specified [ 216.235424][T12006] netlink: 'syz.2.2934': attribute type 2 has an invalid length. [ 216.421163][T12013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.476208][T12019] netlink: 'syz.2.2942': attribute type 10 has an invalid length. [ 216.530500][T12019] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2942'. [ 216.692011][T12029] netlink: 'syz.5.2947': attribute type 10 has an invalid length. [ 216.739119][T12029] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 217.780189][T12075] bond0: entered promiscuous mode [ 217.808209][T12075] bond_slave_0: entered promiscuous mode [ 217.839602][T12075] bond_slave_1: entered promiscuous mode [ 217.860805][T12075] bridge_slave_1: entered promiscuous mode [ 218.244934][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 218.857444][T12131] tunl0: entered promiscuous mode [ 218.879217][T12131] netlink: 'syz.1.2996': attribute type 3 has an invalid length. [ 218.913091][T12131] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2996'. [ 219.652873][T12174] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3018'. [ 219.799779][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 220.003198][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3027'. [ 220.118950][T12201] netlink: 'syz.0.3032': attribute type 10 has an invalid length. [ 220.235095][T12206] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3033'. [ 220.285339][T12208] netlink: 'syz.1.3035': attribute type 1 has an invalid length. [ 220.323529][T12208] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3035'. [ 220.346020][T12211] xt_ipcomp: unknown flags 1D [ 220.501231][T12217] xt_hashlimit: max too large, truncated to 1048576 [ 220.964074][T12244] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 221.016205][T12249] x_tables: duplicate entry at hook 2 [ 221.196870][T12256] IPVS: length: 239 != 24 [ 221.277779][T12264] netlink: 'syz.3.3062': attribute type 7 has an invalid length. [ 221.624072][T12282] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 222.038766][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 222.189637][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 222.438670][T12327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.461895][T12330] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3095'. [ 222.766926][T12350] netlink: 'syz.2.3105': attribute type 13 has an invalid length. [ 222.784610][T12350] gretap0: refused to change device tx_queue_len [ 222.800957][T12350] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.896896][T12352] bond2: entered promiscuous mode [ 222.902230][T12352] bond2: entered allmulticast mode [ 222.907913][T12352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.267428][T12372] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3116'. [ 223.321405][T12375] delete_channel: no stack [ 223.602639][T12391] IPv6: NLM_F_REPLACE set, but no existing node found! [ 223.944234][T12410] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3134'. [ 224.051156][T12415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3137'. [ 224.071560][T12415] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3137'. [ 225.460644][T12479] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 225.887604][T12501] netlink: 'syz.5.3180': attribute type 29 has an invalid length. [ 225.952671][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3180'. [ 225.989537][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 226.009526][T12511] openvswitch: netlink: Unknown nsh attribute 0 [ 226.137884][T12513] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 226.153417][T12515] netlink: 'syz.3.3186': attribute type 21 has an invalid length. [ 226.165299][T12519] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3188'. [ 226.174503][T12513] netlink: 'syz.1.3190': attribute type 1 has an invalid length. [ 226.449316][T12529] bond3: (slave gre0): Device is not bonding slave [ 226.456321][T12529] bond3: option active_slave: invalid value (gre0) [ 226.472469][T12529] bond3 (unregistering): Released all slaves [ 226.956620][T12558] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 227.152243][T12570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.538990][T12596] : renamed from team_slave_1 (while UP) [ 227.699000][T12602] __nla_validate_parse: 1 callbacks suppressed [ 227.699022][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3229'. [ 227.892193][T12612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3237'. [ 227.902830][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 228.304512][T12637] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 229.593789][T12708] x_tables: unsorted underflow at hook 4 [ 229.647659][T12713] xt_bpf: check failed: parse error [ 229.672888][T12714] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 229.864069][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3290'. [ 230.141563][T12737] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3296'. [ 230.167826][T12742] netlink: 'syz.1.3300': attribute type 11 has an invalid length. [ 230.179138][T12742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3300'. [ 230.328869][T12748] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3302'. [ 230.345075][T12748] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3302'. [ 230.397487][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3302'. [ 230.790979][T12770] openvswitch: netlink: IPv4 tun info is not correct [ 231.226563][T12794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.248937][T12797] openvswitch: netlink: Message has 4 unknown bytes. [ 231.403360][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 231.701729][T12821] netlink: 'syz.3.3339': attribute type 2 has an invalid length. [ 232.755301][T12881] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.268447][T12911] Cannot find set identified by id 65534 to match [ 233.273589][T12907] geneve2: entered promiscuous mode [ 233.280272][T12907] geneve2: entered allmulticast mode [ 233.320689][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.361543][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.390696][ T12] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.411903][ T12] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 234.207694][T12959] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 234.428625][T12972] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 234.569438][T12979] xt_recent: Unsupported userspace flags (000000b1) [ 235.156510][T13015] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 235.195370][T13015] netlink: 'syz.2.3434': attribute type 3 has an invalid length. [ 235.210523][T13015] __nla_validate_parse: 1 callbacks suppressed [ 235.210544][T13015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3434'. [ 235.736701][T13046] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3449'. [ 236.168547][T13067] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3461'. [ 236.234323][T13073] erspan0: entered allmulticast mode [ 237.057347][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3484'. [ 237.120322][T13122] openvswitch: netlink: IPv6 tunnel dst address is zero [ 237.140599][T13125] netlink: 'syz.2.3487': attribute type 4 has an invalid length. [ 237.879243][T13165] netlink: 'syz.1.3509': attribute type 1 has an invalid length. [ 238.195967][T13180] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3516'. [ 238.283822][T13188] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 238.368669][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 238.373398][T13188] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3520'. [ 238.388540][T13195] netlink: 'syz.0.3523': attribute type 4 has an invalid length. [ 238.857455][T13221] SET target dimension over the limit! [ 238.965785][T13224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3539'. [ 239.034050][T13231] xt_cluster: node mask cannot exceed total number of nodes [ 239.781271][T13270] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 239.986283][T13235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.999500][T13235] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 240.093117][T13235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.102806][T13235] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 240.177192][T13235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.220646][T13235] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 240.265417][T13235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.283755][T13235] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 240.372093][T13235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.396322][T13235] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 240.461321][T13302] dvmrp0: entered allmulticast mode [ 240.722195][T13313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.953917][T13323] x_tables: duplicate underflow at hook 2 [ 241.223117][T13235] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 241.263637][T13235] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 241.558571][T13349] netlink: 404 bytes leftover after parsing attributes in process `syz.5.3588'. [ 242.070707][T13378] Cannot find map_set index 65533 as target [ 242.297153][T13389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.347724][T13395] netlink: 'syz.5.3606': attribute type 1 has an invalid length. [ 242.373058][T13394] xt_ecn: cannot match TCP bits for non-tcp packets [ 242.761342][T13418] netlink: 'syz.3.3615': attribute type 13 has an invalid length. [ 243.732547][T13461] xt_l2tp: missing protocol rule (udp|l2tpip) [ 243.894282][T13474] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3638'. [ 244.220523][T13493] netlink: 'syz.3.3647': attribute type 1 has an invalid length. [ 244.245968][T13493] netlink: 476 bytes leftover after parsing attributes in process `syz.3.3647'. [ 244.301634][T13493] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3647'. [ 244.539050][T13508] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 244.719173][T13519] netlink: 'syz.2.3658': attribute type 1 has an invalid length. [ 245.880458][T13585] xt_l2tp: invalid flags combination: 8 [ 246.580760][T13623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.694433][T13630] openvswitch: netlink: Flow key attr not present in new flow. [ 246.850999][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3708'. [ 246.860039][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3708'. [ 247.563191][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3724'. [ 248.389085][T13722] netlink: 'syz.3.3744': attribute type 3 has an invalid length. [ 248.566576][T13732] netlink: 'syz.3.3748': attribute type 11 has an invalid length. [ 248.610457][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'. [ 248.685658][T13742] netlink: 'syz.3.3753': attribute type 1 has an invalid length. [ 249.194962][T13769] netlink: 'syz.2.3767': attribute type 5 has an invalid length. [ 249.564060][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3777'. [ 250.114018][T13824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3792'. [ 250.460123][T13844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3804'. [ 250.490799][T13844] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3804'. [ 250.631321][T13844] veth7: entered promiscuous mode [ 250.656225][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3808'. [ 250.956484][T13868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.448023][T13889] netlink: 'syz.0.3826': attribute type 21 has an invalid length. [ 251.471606][T13889] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3826'. [ 251.519535][T13893] netlink: 'syz.3.3828': attribute type 6 has an invalid length. [ 251.743783][T13905] openvswitch: netlink: IP tunnel dst address not specified [ 252.025957][T13919] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 252.149624][T13929] netlink: 'syz.2.3846': attribute type 2 has an invalid length. [ 252.158172][T13929] netlink: 'syz.2.3846': attribute type 11 has an invalid length. [ 252.168296][T13929] __nla_validate_parse: 2 callbacks suppressed [ 252.168313][T13929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3846'. [ 252.333169][T13936] netlink: 'syz.5.3849': attribute type 1 has an invalid length. [ 252.647959][T13957] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.651011][T13954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.740593][T13959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3861'. [ 252.799323][T13963] unsupported nla_type 33542 [ 253.026080][T13977] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 253.221758][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 253.268068][T13989] netlink: 'syz.1.3876': attribute type 5 has an invalid length. [ 253.285663][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3876'. [ 253.351888][T13989] geneve2: entered promiscuous mode [ 253.365861][T13989] geneve2: entered allmulticast mode [ 253.382486][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 253.397183][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 253.427263][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 253.474443][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 253.554482][T14004] bond0: entered allmulticast mode [ 253.566595][T14004] bond_slave_0: entered allmulticast mode [ 253.576896][T14005] openvswitch: netlink: Missing key (keys=40, expected=100) [ 253.585453][T14004] bond_slave_1: entered allmulticast mode [ 253.593327][T14004] bridge_slave_1: entered allmulticast mode [ 253.785754][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3890'. [ 254.127246][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'. [ 254.180132][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'. [ 254.964483][T14088] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 254.980577][T14088] bond2: option packets_per_slave: allowed values 0 - 65535 [ 255.066714][T14088] bond2 (unregistering): Released all slaves [ 255.277552][T14107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3933'. [ 255.501050][T14118] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3940'. [ 255.578583][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3944'. [ 255.605456][T14124] netlink: 'syz.5.3943': attribute type 32 has an invalid length. [ 255.684160][T14131] openvswitch: netlink: Multiple metadata blocks provided [ 255.966182][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.972787][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011099][T14149] netlink: 'syz.3.3953': attribute type 1 has an invalid length. [ 256.519720][T14179] netlink: 'syz.0.3966': attribute type 8 has an invalid length. [ 256.829420][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.859775][T14200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.887318][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.908727][T14200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.993423][T14208] ipt_ECN: cannot use operation on non-tcp rule [ 257.280319][T14222] netlink: 'syz.2.3988': attribute type 10 has an invalid length. [ 257.361963][T14222] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 257.498221][T14235] netlink: 'syz.1.3994': attribute type 5 has an invalid length. [ 257.792616][T14254] openvswitch: netlink: IP tunnel dst address not specified [ 258.288315][T14284] netlink: 'syz.0.4017': attribute type 1 has an invalid length. [ 258.658714][T14308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.302387][T14346] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 259.506760][T14358] geneve3: entered promiscuous mode [ 259.649652][T14366] __nla_validate_parse: 5 callbacks suppressed [ 259.649687][T14366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4059'. [ 260.138753][T14392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.789347][T14428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4089'. [ 260.930848][T14439] --map-set only usable from mangle table [ 261.214656][T14456] netlink: 'syz.5.4102': attribute type 24 has an invalid length. [ 261.526026][T14474] netlink: 'syz.5.4111': attribute type 2 has an invalid length. [ 261.544898][T14474] netlink: 119 bytes leftover after parsing attributes in process `syz.5.4111'. [ 261.936305][T14499] netlink: 'syz.0.4122': attribute type 2 has an invalid length. [ 262.222161][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4129'. [ 262.287455][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4131'. [ 262.527545][T14531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.463996][T14588] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 263.773613][T14609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.894773][T14616] netlink: 'syz.0.4178': attribute type 64 has an invalid length. [ 263.978665][T14622] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4181'. [ 263.983572][ T42] vxcan1 speed is unknown, defaulting to 1000 [ 264.275840][T14634] IPv6: sit1: Disabled Multicast RS [ 264.284535][T14638] netlink: 'syz.5.4189': attribute type 11 has an invalid length. [ 264.294490][T14638] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4189'. [ 264.305904][T14634] sit1: entered allmulticast mode [ 264.536348][T14650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4195'. [ 264.757584][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 264.896739][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4206'. [ 264.913179][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'. [ 264.937679][T14672] geneve2: entered promiscuous mode [ 264.943325][T14672] geneve2: entered allmulticast mode [ 265.159974][T14685] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 265.188621][T14685] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 265.207048][T14685] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 265.225286][T14685] netlink: 'syz.2.4214': attribute type 2 has an invalid length. [ 265.241007][T14685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4214'. [ 265.363218][T14695] netlink: 'syz.5.4219': attribute type 1 has an invalid length. [ 265.387125][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4219'. [ 265.678420][T14708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 265.685279][T14708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 265.837629][T14715] ip6t_srh: unknown srh invflags 4000 [ 266.083881][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4233'. [ 266.293670][T14740] netlink: 'syz.2.4239': attribute type 1 has an invalid length. [ 266.309191][T14739] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4240'. [ 266.422113][T14747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.955343][T14781] netlink: 'syz.2.4260': attribute type 21 has an invalid length. [ 266.990537][T14781] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.213156][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 267.233324][T14803] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 267.346251][T14809] tc_dump_action: action bad kind [ 267.856074][T14835] veth3: entered allmulticast mode [ 268.003687][T14847] bond0: Error: Cannot enslave bond to itself. [ 268.003711][T14850] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.126876][T14858] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4296'. [ 268.252070][T14865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.344696][T14871] bridge5: entered promiscuous mode [ 268.349976][T14871] bridge5: entered allmulticast mode [ 268.383405][T14875] netlink: 'syz.0.4306': attribute type 10 has an invalid length. [ 268.854221][T14903] netlink: 'syz.2.4321': attribute type 15 has an invalid length. [ 268.867613][T14903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4321'. [ 269.152485][T14925] netlink: 'syz.0.4330': attribute type 21 has an invalid length. [ 269.880246][T14973] lo: entered promiscuous mode [ 269.900910][T14973] netlink: 'syz.1.4354': attribute type 2 has an invalid length. [ 269.908844][T14973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.249417][T14996] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 270.281878][T14999] openvswitch: netlink: Message has -2 unknown bytes. [ 270.488936][T15011] openvswitch: netlink: Multiple metadata blocks provided [ 270.565219][T15017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.699899][T15023] openvswitch: netlink: Key type 346 is out of range max 32 [ 270.853676][T15034] netlink: 'syz.0.4382': attribute type 13 has an invalid length. [ 270.888940][T15034] netlink: 'syz.0.4382': attribute type 58 has an invalid length. [ 270.914618][T15034] __nla_validate_parse: 1 callbacks suppressed [ 270.914648][T15034] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4382'. [ 270.982495][T15041] netlink: 'syz.2.4385': attribute type 2 has an invalid length. [ 271.738330][T15084] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4408'. [ 271.889463][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4410'. [ 271.905786][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4410'. [ 272.135933][T15104] ipt_REJECT: TCP_RESET invalid for non-tcp [ 272.681065][T15139] openvswitch: netlink: Flow key attribute not present in set flow. [ 272.837953][T15148] netlink: 'syz.2.4439': attribute type 1 has an invalid length. [ 273.471573][T15191] delete_channel: no stack [ 273.498952][T15193] netlink: 'syz.1.4461': attribute type 4 has an invalid length. [ 273.627649][T15201] xt_addrtype: ipv6 does not support BROADCAST matching [ 273.728724][T15209] netlink: 'syz.1.4467': attribute type 1 has an invalid length. [ 273.766022][T15209] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4467'. [ 273.801052][T15209] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4467'. [ 273.809975][T15209] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4467'. [ 273.844584][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4471'. [ 274.020020][T15221] bond3 (unregistering): Released all slaves [ 274.184338][T15234] netlink: 'syz.2.4480': attribute type 2 has an invalid length. [ 274.192637][T15234] netlink: 'syz.2.4480': attribute type 2 has an invalid length. [ 274.287039][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4484'. [ 274.344590][T15243] openvswitch: netlink: Duplicate key (type 2). [ 274.497060][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.507080][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.516774][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.537100][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.545485][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.604449][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.622020][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.632362][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.650653][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.664278][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.757844][T15266] Cannot find del_set index 4 as target [ 274.910605][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4497'. [ 275.355593][T15250] vxcan1 speed is unknown, defaulting to 1000 [ 276.153400][T15324] __nla_validate_parse: 1 callbacks suppressed [ 276.153422][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 276.314217][T15250] chnl_net:caif_netlink_parms(): no params data found [ 276.328910][T15333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4524'. [ 276.513581][T15250] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.521859][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.529360][T15250] bridge_slave_0: entered allmulticast mode [ 276.542884][T15250] bridge_slave_0: entered promiscuous mode [ 276.552409][T15250] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.559720][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.567256][T15250] bridge_slave_1: entered allmulticast mode [ 276.576026][T15250] bridge_slave_1: entered promiscuous mode [ 276.628576][T15250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.641866][T15250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.719833][T15250] team0: Port device team_slave_0 added [ 276.754657][T15250] team0: Port device team_slave_1 added [ 276.760920][ T5835] Bluetooth: hci6: command tx timeout [ 276.816927][T15250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.824204][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.856325][T15250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.869546][T15250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.877063][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.923937][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4538'. [ 276.945817][T15250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.082988][T15250] hsr_slave_0: entered promiscuous mode [ 277.089887][T15250] hsr_slave_1: entered promiscuous mode [ 277.111337][T15250] debugfs: 'hsr0' already exists in 'hsr' [ 277.117225][T15250] Cannot create hsr debugfs directory [ 277.421983][T15389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4551'. [ 277.454864][T15385] bond3: invalid ARP target 0.0.0.0 specified for addition [ 277.462306][T15385] bond3: option arp_ip_target: invalid value (0) [ 277.475728][T15385] bond3 (unregistering): Released all slaves [ 277.637071][T15396] netlink: 'syz.5.4554': attribute type 21 has an invalid length. [ 277.659216][T15396] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.679316][T15396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.686646][T15396] IPv6: NLM_F_CREATE should be set when creating new route [ 277.694001][T15396] IPv6: NLM_F_CREATE should be set when creating new route [ 277.701288][T15396] IPv6: NLM_F_CREATE should be set when creating new route [ 277.756139][T15250] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.815950][T15250] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.864480][T15250] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.868985][T15408] netlink: 'syz.0.4560': attribute type 1 has an invalid length. [ 277.899957][T15408] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4560'. [ 277.917941][T15250] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.139234][T15250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.190253][T15250] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.208634][T15432] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 278.242962][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.250168][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.303483][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.310673][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.335949][T15435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4570'. [ 278.843592][ T5835] Bluetooth: hci6: command tx timeout [ 278.898364][T15250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.025246][T15475] netlink: 'syz.2.4586': attribute type 3 has an invalid length. [ 279.052299][T15475] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4586'. [ 279.228780][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4592'. [ 279.514799][T15250] veth0_vlan: entered promiscuous mode [ 279.528123][T15250] veth1_vlan: entered promiscuous mode [ 279.603374][T15250] veth0_macvtap: entered promiscuous mode [ 279.637748][T15250] veth1_macvtap: entered promiscuous mode [ 279.684313][T15250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.739393][T15250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.771305][ T1013] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.780637][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.789560][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.830179][T15514] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 279.850627][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.990050][T15522] lo: entered promiscuous mode [ 280.031203][T15522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.067230][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.075847][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.184359][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.206432][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.230648][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4614'. [ 280.606928][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4623'. [ 280.789500][T15562] openvswitch: netlink: Missing valid actions attribute. [ 280.809075][T15562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.827971][T15566] netlink: 'syz.6.4630': attribute type 2 has an invalid length. [ 280.921665][ T5835] Bluetooth: hci6: command tx timeout [ 280.987804][T15578] openvswitch: netlink: EtherType 50a is less than min 600 [ 281.158530][T15587] netlink: 'syz.0.4641': attribute type 1 has an invalid length. [ 281.171416][T15588] netlink: 'syz.5.4640': attribute type 4 has an invalid length. [ 281.177883][T15587] __nla_validate_parse: 4 callbacks suppressed [ 281.177902][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 281.219460][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 281.338793][T15595] SET target dimension over the limit! [ 282.131817][T15640] netlink: 'syz.2.4667': attribute type 2 has an invalid length. [ 282.156860][T15640] netlink: 'syz.2.4667': attribute type 2 has an invalid length. [ 282.314237][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 282.346504][T15653] netlink: 'syz.0.4673': attribute type 1 has an invalid length. [ 282.381486][T15653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4673'. [ 282.699253][T15674] SET target dimension over the limit! [ 282.846788][T15681] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4687'. [ 283.001206][ T5835] Bluetooth: hci6: command tx timeout [ 283.275270][T15710] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 283.576684][T15726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.075617][T15758] netlink: 'syz.1.4726': attribute type 11 has an invalid length. [ 284.083873][T15758] netlink: 'syz.1.4726': attribute type 11 has an invalid length. [ 284.092329][T15758] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4726'. [ 284.334328][ T5900] IPVS: starting estimator thread 0... [ 284.434027][T15771] IPVS: using max 31 ests per chain, 74400 per kthread [ 284.469185][T15778] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 284.596596][T15786] netlink: 412 bytes leftover after parsing attributes in process `syz.2.4739'. [ 284.689172][T15793] bridge0: port 3(gretap0) entered blocking state [ 284.715179][T15793] bridge0: port 3(gretap0) entered disabled state [ 284.731004][T15793] gretap0: entered allmulticast mode [ 284.765565][T15793] gretap0: entered promiscuous mode [ 284.779411][T15793] bridge0: port 3(gretap0) entered blocking state [ 284.786154][T15793] bridge0: port 3(gretap0) entered forwarding state [ 285.280503][T15827] netlink: 'syz.5.4760': attribute type 4 has an invalid length. [ 285.288300][T15827] netlink: 'syz.5.4760': attribute type 1 has an invalid length. [ 285.345736][T15827] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4760'. [ 285.617778][T15849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4770'. [ 285.930124][T15866] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4779'. [ 285.948920][T15869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.280163][T15886] netlink: 'syz.2.4788': attribute type 21 has an invalid length. [ 286.310726][T15886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4788'. [ 286.340976][T15886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4788'. [ 286.349217][T15889] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4790'. [ 286.533889][T15896] netlink: 'syz.2.4793': attribute type 23 has an invalid length. [ 286.927008][T15915] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4800'. [ 287.143299][T15928] netlink: 'syz.6.4807': attribute type 16 has an invalid length. [ 287.163392][T15928] netlink: 'syz.6.4807': attribute type 17 has an invalid length. [ 287.229182][T15928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.316385][T15933] bond3 (unregistering): Released all slaves [ 287.543471][T15947] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4814'. [ 287.576847][T15947] netlink: 21 bytes leftover after parsing attributes in process `syz.5.4814'. [ 287.610711][T15947] netlink: 21 bytes leftover after parsing attributes in process `syz.5.4814'. [ 287.833188][T15964] netlink: 'syz.0.4823': attribute type 11 has an invalid length. [ 288.376517][T15996] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4839'. [ 288.852175][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4852'. [ 289.042541][T16038] Zero length message leads to an empty skb [ 289.769325][T16081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.965469][T16090] IPVS: length: 8 != 1152 [ 290.389047][T16115] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.629241][T16132] netlink: 'syz.2.4903': attribute type 1 has an invalid length. [ 290.647603][T16132] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4903'. [ 290.824722][T16141] netlink: 'syz.5.4909': attribute type 2 has an invalid length. [ 290.956776][T16150] xt_time: unknown flags 0xf4 [ 291.508492][T16178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.238075][T16214] __nla_validate_parse: 1 callbacks suppressed [ 292.238098][T16214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4942'. [ 292.270572][T16214] tipc: Invalid UDP bearer configuration [ 292.270639][T16214] tipc: Enabling of bearer rejected, failed to enable media [ 292.332387][T16216] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4944'. [ 292.675304][T16233] Bluetooth: MGMT ver 1.23 [ 292.687667][ T5835] Bluetooth: hci6: command tx timeout [ 293.441596][T16278] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4974'. [ 294.059210][T16312] xt_hashlimit: size too large, truncated to 1048576 [ 294.105643][T16316] tipc: Started in network mode [ 294.125324][T16316] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 294.152061][T16316] tipc: Enabled bearer , priority 10 [ 294.914530][T16355] xt_l2tp: v2 sid > 0xffff: 1114112 [ 295.247347][T16376] netlink: 'syz.0.5020': attribute type 29 has an invalid length. [ 295.272432][ T5836] tipc: Node number set to 4269801492 [ 296.104661][T16424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5044'. [ 296.411679][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5052'. [ 296.460484][T16440] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5052'. [ 296.480923][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5052'. [ 296.714795][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5060'. [ 296.764850][T16461] netlink: 'syz.1.5061': attribute type 4 has an invalid length. [ 296.821990][T16461] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5061'. [ 296.879471][T16465] tipc: Enabling of bearer rejected, failed to enable media [ 297.015580][ T5938] IPVS: starting estimator thread 0... [ 297.134281][T16474] IPVS: using max 28 ests per chain, 67200 per kthread [ 298.378299][T16538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5097'. [ 298.424972][T16545] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 298.796741][T16559] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 298.817727][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5107'. [ 298.841635][T16559] netlink: 'syz.0.5107': attribute type 1 has an invalid length. [ 298.861222][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5108'. [ 299.229588][T16573] netlink: 'syz.1.5114': attribute type 1 has an invalid length. [ 299.485373][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5122'. [ 299.509828][T16587] netlink: 'syz.5.5122': attribute type 3 has an invalid length. [ 299.653215][T16597] Bluetooth: MGMT ver 1.23 [ 299.793886][T16604] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5130'. [ 300.253281][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5144'. [ 300.690231][T16659] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5158'. [ 301.357447][T16697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5175'. [ 301.905434][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'. [ 302.030577][T16739] netlink: 'syz.0.5195': attribute type 10 has an invalid length. [ 302.636132][T16771] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5211'. [ 303.452132][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5231'. [ 303.669736][T16828] pim6reg: entered allmulticast mode [ 303.716424][T16828] pim6reg: left allmulticast mode [ 303.927523][T16841] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 304.254210][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5251'. [ 305.006164][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5268'. [ 305.584039][T16926] netlink: 'syz.6.5285': attribute type 25 has an invalid length. [ 306.697924][T16996] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 307.203562][T17026] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5333'. [ 307.801762][T17054] netlink: 'syz.1.5346': attribute type 2 has an invalid length. [ 308.632340][T17101] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5369'. [ 308.652978][T17101] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5369'. [ 308.833480][T17111] tipc: Enabling of bearer rejected, failed to enable media [ 309.071847][T17125] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5380'. [ 309.145277][T17125] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5380'. [ 309.330125][T17135] tipc: Enabling of bearer rejected, failed to enable media [ 309.686730][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5395'. [ 309.696451][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5394'. [ 309.699054][T17157] block nbd0: not configured, cannot reconfigure [ 309.708679][T17152] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 309.950167][T17170] netlink: 'syz.5.5403': attribute type 25 has an invalid length. [ 310.214599][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5411'. [ 310.375897][T17195] tipc: MTU too low for tipc bearer [ 310.755519][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5422'. [ 311.043911][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'. [ 311.100593][T17236] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 311.280209][ T5893] IPVS: starting estimator thread 0... [ 311.287856][T17249] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 311.371136][T17250] IPVS: using max 23 ests per chain, 55200 per kthread [ 313.102850][T17331] netlink: 'syz.1.5478': attribute type 1 has an invalid length. [ 313.423246][T17347] netlink: zone id is out of range [ 313.428513][T17347] netlink: zone id is out of range [ 313.491279][T17347] netlink: zone id is out of range [ 313.496474][T17347] netlink: zone id is out of range [ 313.511025][T17347] netlink: zone id is out of range [ 313.516461][T17347] netlink: zone id is out of range [ 313.524038][T17347] netlink: zone id is out of range [ 313.529660][T17347] netlink: zone id is out of range [ 314.094449][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5505'. [ 314.222424][T17393] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5508'. [ 314.342847][T17398] netlink: 'syz.0.5513': attribute type 1 has an invalid length. [ 315.478204][T17469] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5547'. [ 315.503868][T17472] block nbd6: not configured, cannot reconfigure [ 315.663671][T17479] tipc: Enabled bearer , priority 24 [ 315.968449][T17496] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5561'. [ 316.218603][T17511] netlink: 'syz.1.5567': attribute type 1 has an invalid length. [ 316.484208][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5574'. [ 316.484610][T17526] net_ratelimit: 187 callbacks suppressed [ 316.484625][T17526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.966072][T17549] tipc: Failed to obtain node identity [ 316.980470][T17549] tipc: Enabling of bearer rejected, failed to enable media [ 317.100551][T17553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.408768][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416847][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.596210][T17575] netlink: 'syz.0.5599': attribute type 12 has an invalid length. [ 317.631039][T17577] netlink: 'syz.2.5600': attribute type 1 has an invalid length. [ 317.650741][T17577] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5600'. [ 317.660080][T17577] netlink: 'syz.2.5600': attribute type 1 has an invalid length. [ 317.669117][T17577] netlink: 'syz.2.5600': attribute type 8 has an invalid length. [ 317.677778][T17577] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5600'. [ 317.694089][T17577] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5600'. [ 318.294022][T17621] tipc: Enabling of bearer rejected, media not registered [ 318.630998][T17639] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 318.678581][T17643] IPVS: ip_vs_edit_dest(): server weight less than zero [ 318.686655][ T5900] IPVS: starting estimator thread 0... [ 318.830498][T17645] IPVS: using max 23 ests per chain, 55200 per kthread [ 318.927296][T17656] dvmrp0: left allmulticast mode [ 319.072398][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5641'. [ 319.193225][T17667] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 321.189529][T17769] netlink: 'syz.0.5687': attribute type 2 has an invalid length. [ 321.429416][T17786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.574973][T17795] sctp: [Deprecated]: syz.0.5699 (pid 17795) Use of int in max_burst socket option. [ 321.574973][T17795] Use struct sctp_assoc_value instead [ 322.445660][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5721'. [ 322.456001][T17844] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5721'. [ 322.493306][T17844] netlink: 'syz.2.5721': attribute type 5 has an invalid length. [ 323.117009][T17876] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 323.145431][T17876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.747922][T17908] xt_limit: Overflow, try lower: 604147548/4200216962 [ 323.997138][T17919] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5759'. [ 324.020932][T17919] netlink: 'syz.5.5759': attribute type 9 has an invalid length. [ 324.463946][T17941] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5771'. [ 324.677943][T17952] netlink: 'syz.0.5777': attribute type 83 has an invalid length. [ 324.984274][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5784'. [ 325.656896][T18014] tipc: Started in network mode [ 325.665384][T18014] tipc: Node identity ac141441, cluster identity 4711 [ 325.674452][T18014] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.683497][T18014] tipc: Enabled bearer , priority 10 [ 325.810979][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 325.903533][T18026] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5811'. [ 325.946453][T18026] nbd: illegal input index -8454144 [ 325.951952][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.090497][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.230549][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.293991][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5818'. [ 326.380633][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.520911][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.660469][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.751845][T18072] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 326.804029][ T10] tipc: Node number set to 2886997057 [ 327.583121][T18118] nbd: socks must be embedded in a SOCK_ITEM attr [ 328.760387][ C0] net_ratelimit: 3 callbacks suppressed [ 328.760409][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.769999][T18177] netlink: 'syz.2.5883': attribute type 3 has an invalid length. [ 328.810592][T18177] netlink: 'syz.2.5883': attribute type 1 has an invalid length. [ 328.828116][T18177] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5883'. [ 329.548939][T18222] veth3: entered allmulticast mode [ 329.773754][T18234] xt_l2tp: unknown flags: 10 [ 329.800480][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.323689][T18263] lo: entered allmulticast mode [ 330.338144][T18263] lo: left allmulticast mode [ 330.338451][T18262] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5925'. [ 330.356218][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5925'. [ 330.744634][T18283] Bluetooth: MGMT ver 1.23 [ 330.840528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.986020][T18293] netlink: 'syz.6.5942': attribute type 32 has an invalid length. [ 331.009665][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5942'. [ 331.152100][T18293] bond1: Setting coupled_control to off (0) [ 331.729952][T18336] netlink: 'syz.2.5959': attribute type 13 has an invalid length. [ 331.742130][T18336] veth0_macvtap: left promiscuous mode [ 331.770517][T18336] macvtap0: entered allmulticast mode [ 331.811806][T18336] macvtap0: refused to change device tx_queue_len [ 331.880396][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.002145][T18348] tipc: Invalid UDP bearer configuration [ 332.002204][T18348] tipc: Enabling of bearer rejected, failed to enable media [ 332.152859][T18356] netlink: 'syz.5.5970': attribute type 32 has an invalid length. [ 332.194357][T18356] netlink: 776 bytes leftover after parsing attributes in process `syz.5.5970'. [ 332.439122][T18373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5979'. [ 332.814444][T18396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5990'. [ 332.920500][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.190620][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5997'. [ 333.240676][T18416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.722759][T18441] rdma_op ffff88807e5ff9f0 conn xmit_rdma 0000000000000000 [ 333.960474][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 335.000499][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 335.287527][T18527] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 336.040390][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.415661][T18586] netlink: 'syz.6.6079': attribute type 58 has an invalid length. [ 336.427621][T18586] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6079'. [ 336.744792][T18603] vlan3: entered promiscuous mode [ 336.753514][T18603] bridge0: entered promiscuous mode [ 337.080485][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.105411][T18623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6097'. [ 337.476631][T18643] netlink: 'syz.1.6105': attribute type 1 has an invalid length. [ 337.505007][T18643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.921900][T18668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6119'. [ 338.120500][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.266189][T18688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6128'. [ 338.805746][T18717] netlink: 'syz.0.6143': attribute type 1 has an invalid length. [ 338.953608][T18725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6148'. [ 339.161240][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.335185][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6158'. [ 340.049272][T18784] netlink: 'syz.6.6174': attribute type 10 has an invalid length. [ 340.200384][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.240503][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.546778][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'. [ 342.280392][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.468204][T18927] netlink: 13 bytes leftover after parsing attributes in process `syz.6.6245'. [ 342.513782][ T5835] Bluetooth: hci6: link tx timeout [ 342.519451][ T5835] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.689347][T18941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6254'. [ 342.707163][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'. [ 342.732196][T18941] netlink: 'syz.2.6254': attribute type 14 has an invalid length. [ 342.740149][T18941] netlink: 'syz.2.6254': attribute type 13 has an invalid length. [ 343.069718][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6262'. [ 343.109144][T18963] netlink: 272 bytes leftover after parsing attributes in process `syz.5.6264'. [ 343.320498][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.377663][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6270'. [ 343.442719][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6270'. [ 343.522787][T18983] tipc: Enabling of bearer rejected, failed to enable media [ 343.569307][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6275'. [ 343.600766][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 343.641276][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 343.650575][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.360532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.366306][T19034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6299'. [ 344.377035][ T5836] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.602220][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 344.681991][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.784439][T19054] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 344.860801][T19054] bond3 (unregistering): Released all slaves [ 345.400477][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.124269][T19139] xt_l2tp: missing protocol rule (udp|l2tpip) [ 346.440386][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.624370][T19166] tipc: Started in network mode [ 346.636499][T19166] tipc: Node identity , cluster identity 4711 [ 346.650502][T19166] tipc: Failed to set node id, please configure manually [ 346.659268][T19166] tipc: Enabling of bearer rejected, failed to enable media [ 346.754216][T19174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.480806][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.800517][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.048605][T19250] netlink: 'syz.5.6404': attribute type 1 has an invalid length. [ 348.057123][T19250] netlink: 'syz.5.6404': attribute type 1 has an invalid length. [ 348.070191][T19251] __nla_validate_parse: 3 callbacks suppressed [ 348.070209][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6403'. [ 348.520490][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.875491][T19275] "syz.5.6417" (19275) uses obsolete ecb(arc4) skcipher [ 349.377375][T19324] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 349.560389][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.699225][T19338] xt_hashlimit: size too large, truncated to 1048576 [ 349.805226][T19345] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6448'. [ 350.188978][T19361] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6455'. [ 350.203962][T19361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6455'. [ 350.223659][T19361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6455'. [ 350.469539][T19371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6460'. [ 350.499175][T19371] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6460'. [ 350.509795][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6460'. [ 350.587136][T19373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.600399][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.714508][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6466'. [ 350.726812][T19373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.727284][T19384] smc: removing ib device syz1 [ 350.859171][T19373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.046692][T19373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.109296][T19392] netlink: 'syz.2.6470': attribute type 1 has an invalid length. [ 351.339323][ T142] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.361579][T19402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6475'. [ 351.518768][ T1013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.621669][ T142] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.640560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.696977][ T142] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.939708][T19419] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 352.407168][T19433] netlink: 'syz.2.6489': attribute type 11 has an invalid length. [ 352.680410][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.169878][T19460] __nla_validate_parse: 2 callbacks suppressed [ 353.169899][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6502'. [ 353.291294][T19465] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6506'. [ 353.667163][T19481] xt_limit: Overflow, try lower: 271964/0 [ 353.720480][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.130849][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6523'. [ 354.532014][T19521] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6534'. [ 354.723737][T19535] netlink: 332 bytes leftover after parsing attributes in process `syz.6.6542'. [ 354.760483][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.765478][T19534] bridge0: port 3(ipvlan2) entered blocking state [ 354.800918][T19534] bridge0: port 3(ipvlan2) entered disabled state [ 354.833400][T19534] ipvlan2: entered allmulticast mode [ 354.864875][T19534] bridge0: entered allmulticast mode [ 354.883638][T19534] ipvlan2: left allmulticast mode [ 354.899080][T19534] bridge0: left allmulticast mode [ 355.112159][T19554] delete_channel: no stack [ 355.444647][T19574] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6561'. [ 355.715533][T19590] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6567'. [ 355.767778][T19590] netlink: 'syz.5.6567': attribute type 1 has an invalid length. [ 355.776089][T19590] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6567'. [ 355.800508][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.408867][T19628] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6585'. [ 356.440537][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 356.840493][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.635958][T19698] syz.1.6615 (19698) used obsolete PPPIOCDETACH ioctl [ 357.880502][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.228943][T19733] block nbd0: not configured, cannot reconfigure [ 358.334297][T19739] netlink: 'syz.1.6634': attribute type 11 has an invalid length. [ 358.342618][T19739] netlink: 'syz.1.6634': attribute type 4 has an invalid length. [ 358.350975][T19739] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.6634'. [ 358.503477][T19747] netlink: 'syz.0.6637': attribute type 3 has an invalid length. [ 358.844128][T19768] wireguard: wg2: Could not create IPv4 socket [ 358.920382][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.129237][T19784] pimreg: entered allmulticast mode [ 359.167820][T19788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.227066][T19791] xt_socket: unknown flags 0xe4 [ 359.375914][T19801] netlink: 'syz.2.6663': attribute type 2 has an invalid length. [ 359.406359][T19801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6663'. [ 359.546206][T19811] bridge0: Device is already in use. [ 359.960381][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.089632][T19838] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6683'. [ 360.651237][T19870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.831004][T19878] netlink: 2 bytes leftover after parsing attributes in process `syz.6.6701'. [ 361.000568][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.033663][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6709'. [ 361.469609][T19911] netlink: 'syz.5.6717': attribute type 3 has an invalid length. [ 361.644289][T19918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6721'. [ 361.814373][T19928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.040375][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.233682][ T142] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.258860][ T142] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.290424][ T142] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.299204][ T142] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.377321][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6743'. [ 362.601490][T19975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6749'. [ 362.737184][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6753'. [ 362.908964][T19993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6755'. [ 363.080499][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.120511][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.906490][T20109] netlink: 'syz.2.6811': attribute type 1 has an invalid length. [ 364.937210][T20109] netlink: 'syz.2.6811': attribute type 3 has an invalid length. [ 364.975831][T20109] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6811'. [ 365.010088][T20109] NCSI netlink: No device for ifindex 813332851 [ 365.050187][T20119] netlink: 'syz.5.6815': attribute type 4 has an invalid length. [ 365.066019][T20119] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6815'. [ 365.115496][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6816'. [ 365.160598][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.223769][T20126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6818'. [ 365.233086][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6819'. [ 365.259912][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6819'. [ 365.297902][T20127] netlink: 'syz.5.6819': attribute type 12 has an invalid length. [ 365.320603][T20127] netlink: 'syz.5.6819': attribute type 11 has an invalid length. [ 365.581058][T20146] netlink: 'syz.1.6828': attribute type 62 has an invalid length. [ 365.771704][T20158] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 366.200379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.481656][T20196] syz.5.6852 (20196) used greatest stack depth: 17472 bytes left [ 366.542457][T20204] netlink: 'syz.5.6855': attribute type 32 has an invalid length. [ 366.551715][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6855'. [ 366.625435][T20204] bond2: option coupled_control: invalid value (192) [ 366.635479][T20204] bond2 (unregistering): Released all slaves [ 366.985852][T20225] netlink: 'syz.2.6863': attribute type 1 has an invalid length. [ 367.101563][T20227] netlink: 'syz.0.6866': attribute type 18 has an invalid length. [ 367.143445][ T142] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.164923][ T142] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.200111][ T1013] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.229441][ T1013] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.240542][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.475652][T20246] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6875'. [ 368.005425][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6894'. [ 368.254037][T20295] macsec1: entered promiscuous mode [ 368.280519][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.300007][T20301] netlink: 'syz.6.6902': attribute type 1 has an invalid length. [ 368.332577][T20301] netlink: 'syz.6.6902': attribute type 3 has an invalid length. [ 368.342688][T20301] netlink: 172 bytes leftover after parsing attributes in process `syz.6.6902'. [ 368.364549][T20301] NCSI netlink: No device for ifindex 813332851 [ 368.493143][T20309] vcan0: entered allmulticast mode [ 369.039311][T20344] netlink: 'syz.5.6923': attribute type 2 has an invalid length. [ 369.090582][T20344] netlink: 'syz.5.6923': attribute type 1 has an invalid length. [ 369.320551][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.169127][T20417] __nla_validate_parse: 4 callbacks suppressed [ 370.169150][T20417] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6959'. [ 370.360506][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.672125][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6976'. [ 371.110755][T20480] netlink: 'syz.2.6990': attribute type 83 has an invalid length. [ 371.400575][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.416813][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6996'. [ 371.427764][T20496] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6996'. [ 371.654789][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7002'. [ 372.091542][T20538] netlink: 'syz.6.7016': attribute type 1 has an invalid length. [ 372.130515][T20538] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7016'. [ 372.170569][T20538] netlink: 'syz.6.7016': attribute type 1 has an invalid length. [ 372.198880][T20538] netlink: 'syz.6.7016': attribute type 8 has an invalid length. [ 372.230487][T20538] netlink: 582 bytes leftover after parsing attributes in process `syz.6.7016'. [ 372.240859][T20538] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7016'. [ 372.440630][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.989634][T20579] netlink: 'syz.2.7034': attribute type 83 has an invalid length. [ 373.080488][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.480383][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.333255][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7071'. [ 374.405983][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7073'. [ 374.449148][T20666] hsr0: entered promiscuous mode [ 374.470875][T20666] macvlan2: entered allmulticast mode [ 374.486710][T20666] hsr0: entered allmulticast mode [ 374.510581][T20666] hsr_slave_0: entered allmulticast mode [ 374.520383][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.534559][T20666] hsr_slave_1: entered allmulticast mode [ 374.902647][T20698] TCP: TCP_TX_DELAY enabled [ 375.560374][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.703478][T20743] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7109'. [ 376.346352][T20774] bond2 (unregistering): Released all slaves [ 376.600599][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.180819][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b1c1000: rx timeout, send abort [ 377.526873][T20836] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7153'. [ 377.640371][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.690234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b1c1000: abort rx timeout. Force session deactivation [ 378.431154][ T35] tipc: Subscription rejected, illegal request [ 378.680371][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.734586][T20907] veth1_macvtap: left promiscuous mode [ 378.849416][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.859003][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.865736][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.167638][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7198'. [ 379.605892][T20959] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7212'. [ 379.720461][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.865698][T20976] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 379.906895][ T5938] hid-generic 0005:0458:5505.0001: item fetching failed at offset 0/1 [ 379.926083][T20976] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 379.953547][ T5938] hid-generic 0005:0458:5505.0001: probe with driver hid-generic failed with error -22 [ 379.980836][T20985] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 380.030997][T20985] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 380.061166][T20985] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 380.072502][T20985] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 380.101486][T20985] netlink: 'syz.1.7219': attribute type 29 has an invalid length. [ 380.133750][T20989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7225'. [ 380.321690][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7231'. [ 380.380448][T21001] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7231'. [ 380.413955][T21001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7231'. [ 380.622844][T21016] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7238'. [ 380.717501][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7237'. [ 380.761120][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.905047][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7242'. [ 381.121302][T21032] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7245'. [ 381.355877][T21048] netlink: 'syz.1.7253': attribute type 30 has an invalid length. [ 381.511479][T21059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7258'. [ 381.800462][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.923296][T21076] tap0: tun_chr_ioctl cmd 1074025676 [ 381.928751][T21076] tap0: owner set to 0 [ 382.195353][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7273'. [ 382.484955][T21106] netlink: 'syz.5.7280': attribute type 83 has an invalid length. [ 382.758780][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7284'. [ 382.841525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.524485][T21153] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7301'. [ 383.864078][T21176] netlink: 'syz.6.7311': attribute type 2 has an invalid length. [ 383.880377][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.074732][T21187] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.7317'. [ 384.412455][T21209] tap0: tun_chr_ioctl cmd 1074025672 [ 384.418055][T21209] tap0: ignored: set checksum disabled [ 384.920368][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.944291][T21241] validate_nla: 1 callbacks suppressed [ 384.944315][T21241] netlink: 'syz.1.7345': attribute type 19 has an invalid length. [ 385.332694][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7353'. [ 385.392014][T21264] team0: Cannot enslave team device to itself [ 385.466295][T21266] netlink: 'syz.6.7357': attribute type 2 has an invalid length. [ 385.551144][T21270] tipc: New replicast peer: 255.255.255.255 [ 385.566352][T21270] tipc: Enabled bearer , priority 10 [ 385.581023][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7358'. [ 385.960637][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.297752][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7379'. [ 386.331309][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7381'. [ 386.352574][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7381'. [ 386.485998][ T5835] block nbd0: Receive control failed (result -32) [ 386.563160][T21329] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.563768][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7385'. [ 387.000378][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.012341][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7397'. [ 387.195277][T21364] veth0: entered promiscuous mode [ 387.211924][T21362] veth0: left promiscuous mode [ 387.371150][T21376] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7408'. [ 387.530663][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7413'. [ 387.724537][T21398] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.7418'. [ 388.040484][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.146033][T21421] veth0_macvtap: entered promiscuous mode [ 388.169626][T21421] macvtap1: entered allmulticast mode [ 388.183125][T21421] veth0_macvtap: entered allmulticast mode [ 388.363117][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7437'. [ 388.375355][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7437'. [ 388.554033][T21445] Bluetooth: hci1: too big key_count value 32778 [ 388.911970][T21465] netlink: 'syz.6.7452': attribute type 14 has an invalid length. [ 389.081710][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.114288][T21478] netlink: 'syz.2.7458': attribute type 28 has an invalid length. [ 389.140511][T21478] netlink: 'syz.2.7458': attribute type 3 has an invalid length. [ 389.336973][T21491] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.780263][T21519] netlink: 'syz.1.7477': attribute type 1 has an invalid length. [ 389.797321][T21519] netlink: 'syz.1.7477': attribute type 2 has an invalid length. [ 390.120388][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.842790][T21580] netlink: 'syz.2.7508': attribute type 1 has an invalid length. [ 390.857872][T21580] netlink: 'syz.2.7508': attribute type 2 has an invalid length. [ 390.877741][T21580] netlink: 'syz.2.7508': attribute type 1 has an invalid length. [ 391.160521][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.200371][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.605341][ T5835] block nbd1: Receive control failed (result -32) [ 392.718156][ T5834] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 392.850581][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 392.850614][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.850626][ T5834] Call Trace: [ 392.850635][ T5834] [ 392.850644][ T5834] dump_stack_lvl+0xe8/0x150 [ 392.850678][ T5834] dump_header+0xd3/0x4c0 [ 392.850709][ T5834] oom_kill_process+0x3ab/0x970 [ 392.850748][ T5834] out_of_memory+0x106c/0x1410 [ 392.850771][ T5834] ? percpu_ref_put+0x19/0x180 [ 392.850807][ T5834] ? __pfx___mutex_lock+0x10/0x10 [ 392.850843][ T5834] ? __pfx_out_of_memory+0x10/0x10 [ 392.850863][ T5834] ? do_raw_spin_unlock+0xf5/0x210 [ 392.850897][ T5834] try_charge_memcg+0xc53/0x1560 [ 392.850945][ T5834] ? __pfx_try_charge_memcg+0x10/0x10 [ 392.850977][ T5834] ? get_mem_cgroup_from_mm+0x38/0x290 [ 392.851014][ T5834] ? get_mem_cgroup_from_mm+0x38/0x290 [ 392.851041][ T5834] ? get_mem_cgroup_from_mm+0x38/0x290 [ 392.851070][ T5834] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 392.851102][ T5834] __mem_cgroup_charge+0xab/0x1e0 [ 392.851129][ T5834] filemap_add_folio+0x152/0x530 [ 392.851159][ T5834] __filemap_get_folio_mpol+0x500/0xb00 [ 392.851193][ T5834] filemap_fault+0x9ac/0x1320 [ 392.851230][ T5834] ? __pfx_filemap_fault+0x10/0x10 [ 392.851259][ T5834] ? __pfx_filemap_map_pages+0x10/0x10 [ 392.851300][ T5834] __do_fault+0x138/0x390 [ 392.851328][ T5834] do_pte_missing+0x228f/0x3490 [ 392.851350][ T5834] ? do_pte_missing+0x130a/0x3490 [ 392.851386][ T5834] ? handle_mm_fault+0xee/0x3310 [ 392.851423][ T5834] handle_mm_fault+0x1bec/0x3310 [ 392.851470][ T5834] ? handle_mm_fault+0xee/0x3310 [ 392.851509][ T5834] ? __pfx_handle_mm_fault+0x10/0x10 [ 392.851536][ T5834] ? lock_vma_under_rcu+0x45a/0x500 [ 392.851589][ T5834] do_user_addr_fault+0xa73/0x1340 [ 392.851623][ T5834] ? rcu_is_watching+0x15/0xb0 [ 392.851651][ T5834] ? trace_page_fault_user+0x84/0x210 [ 392.851680][ T5834] exc_page_fault+0x6a/0xc0 [ 392.851705][ T5834] asm_exc_page_fault+0x26/0x30 [ 392.851723][ T5834] RIP: 0033:0x7f2ed526a834 [ 392.851753][ T5834] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 [ 392.851769][ T5834] RSP: 002b:00007ffdc7a5eb60 EFLAGS: 00010202 [ 392.851788][ T5834] RAX: 0000001b30524000 RBX: 0000000000000c31 RCX: 000000000005fb40 [ 392.851802][ T5834] RDX: 000000000598eb6f RSI: 00007ffdc7a5ebf0 RDI: 00000000155a279c [ 392.851815][ T5834] RBP: 00007ffdc7a5eb9c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 392.851828][ T5834] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 392.851840][ T5834] R13: 00000000000927c0 R14: 000000000005f93d R15: 00007ffdc7a5ebf0 [ 392.851874][ T5834] [ 392.851883][ T5834] memory: usage 307200kB, limit 307200kB, failcnt 555 [ 393.208710][ T5834] memory+swap: usage 296920kB, limit 9007199254740988kB, failcnt 0 [ 393.217533][ T5834] kmem: usage 296564kB, limit 9007199254740988kB, failcnt 0 [ 393.250365][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.286876][ T5834] Memory cgroup stats for /syz1: [ 393.287320][ T5834] cache 0 [ 393.297253][ T5834] rss 24576 [ 393.300823][ T5834] rss_huge 0 [ 393.304039][ T5834] shmem 0 [ 393.307123][ T5834] mapped_file 0 [ 393.368288][ T5834] dirty 0 [ 393.377511][ T5834] writeback 0 [ 393.395741][ T5834] workingset_refault_anon 18 [ 393.430342][ T5834] workingset_refault_file 0 [ 393.458068][ T5834] swap 122880 [ 393.478547][ T5834] swapcached 192512 [ 393.504382][ T5834] pgpgin 62652 [ 393.531155][ T5834] pgpgout 62635 [ 393.549159][ T5834] pgfault 172146 [ 393.569591][ T5834] pgmajfault 8 [ 393.585220][ T5834] inactive_anon 0 [ 393.595758][ T5834] active_anon 69632 [ 393.612074][ T5834] inactive_file 0 [ 393.619132][ T5834] active_file 0 [ 393.630852][ T5834] unevictable 0 [ 393.649310][ T5834] hierarchical_memory_limit 314572800 [ 393.678448][ T5834] hierarchical_memsw_limit 9223372036854771712 [ 393.707649][ T5834] total_cache 0 [ 393.730950][ T5834] total_rss 24576 [ 393.748721][ T5834] total_rss_huge 0 [ 393.764980][ T5834] total_shmem 0 [ 393.773078][ T5834] total_mapped_file 0 [ 393.788781][ T5834] total_dirty 0 [ 393.806301][ T5834] total_writeback 0 [ 393.814682][ T5834] total_workingset_refault_anon 18 [ 393.826656][ T5834] total_workingset_refault_file 0 [ 393.837762][ T5834] total_swap 122880 [ 393.846330][ T5834] total_swapcached 192512 [ 393.858540][ T5834] total_pgpgin 62652 [ 393.865564][ T5834] total_pgpgout 62635 [ 393.876056][ T5834] total_pgfault 172146 [ 393.884539][ T5834] total_pgmajfault 8 [ 393.902864][ T5834] total_inactive_anon 0 [ 393.907222][ T5834] total_active_anon 69632 [ 393.918427][ T5834] total_inactive_file 0 [ 393.927513][ T5834] total_active_file 0 [ 393.935208][ T5834] total_unevictable 0 [ 393.959731][ T5834] anon_cost 0 [ 393.963650][ T5834] file_cost 0 [ 393.967419][ T5834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7504,pid=21570,uid=0 [ 393.990657][ T5834] Memory cgroup out of memory: OOM victim 21570 (syz.1.7504) is already exiting. Skip killing the task [ 394.026405][T21693] __nla_validate_parse: 13 callbacks suppressed [ 394.026424][T21693] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7561'. [ 394.244502][T21701] netlink: 'syz.5.7564': attribute type 4 has an invalid length. [ 394.280375][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.321838][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7567'. [ 394.358231][T21705] block nbd2: Unsupported socket: should be TCP or UNIX. [ 394.641388][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7572'. [ 394.805918][T21722] sctp: [Deprecated]: syz.0.7574 (pid 21722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.805918][T21722] Use struct sctp_sack_info instead [ 394.814559][T21723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7575'. [ 394.866002][T21723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7575'. [ 395.320366][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.619017][T21751] IPVS: persistence engine module ip_vs_pe_ not found [ 396.174972][T21777] block nbd2: Unsupported socket: should be TCP or UNIX. [ 396.234873][T21781] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7600'. [ 396.360367][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.521361][T21793] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.7605'. [ 397.234028][T21824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.358015][T21824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.400540][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.466976][T21824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.547335][T21843] netlink: 'syz.5.7629': attribute type 1 has an invalid length. [ 397.562166][T21843] netlink: 'syz.5.7629': attribute type 7 has an invalid length. [ 397.570190][T21843] netlink: 'syz.5.7629': attribute type 8 has an invalid length. [ 397.581502][T21843] netlink: 208 bytes leftover after parsing attributes in process `syz.5.7629'. [ 397.587053][T21824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.590978][T21843] NCSI netlink: No device for ifindex 65584 [ 397.757534][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.791601][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.817075][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.864711][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.424378][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7650'. [ 398.440500][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.664447][T21902] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7657'. [ 399.118812][T21927] bridge0: port 1(syz_tun) entered blocking state [ 399.146150][T21927] bridge0: port 1(syz_tun) entered disabled state [ 399.157635][T21927] syz_tun: entered allmulticast mode [ 399.170046][T21927] syz_tun: entered promiscuous mode [ 399.480367][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.599828][T21958] tipc: Enabling of bearer rejected, already enabled [ 400.090133][T21988] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7699'. [ 400.205637][T21997] : renamed from bond0 [ 400.427141][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7710'. [ 400.520362][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.663554][T22019] netlink: 'syz.5.7712': attribute type 4 has an invalid length. [ 400.716475][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7714'. [ 401.053978][T22041] netlink: 'syz.0.7722': attribute type 1 has an invalid length. [ 401.069874][T22041] netlink: 'syz.0.7722': attribute type 2 has an invalid length. [ 401.104984][T22041] netlink: 'syz.0.7722': attribute type 1 has an invalid length. [ 401.134990][T22041] netlink: 'syz.0.7722': attribute type 3 has an invalid length. [ 401.143713][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7722'. [ 401.212644][T22050] netlink: 'syz.6.7727': attribute type 4 has an invalid length. [ 401.362061][T22061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7733'. [ 401.560376][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.787372][T22089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7746'. [ 401.981266][T22098] netlink: 'syz.6.7750': attribute type 5 has an invalid length. [ 402.250562][T22117] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7759'. [ 402.600372][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.259399][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7791'. [ 403.280548][T22180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7791'. [ 403.591667][T22199] netlink: 'syz.6.7799': attribute type 9 has an invalid length. [ 403.640495][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.058783][T22225] netlink: 'syz.0.7813': attribute type 8 has an invalid length. [ 404.092568][T22225] sch_fq: defrate 0 ignored. [ 404.114799][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7815'. [ 404.517464][T22255] netlink: 'syz.1.7828': attribute type 1 has an invalid length. [ 404.680379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.248293][T22298] __nla_validate_parse: 3 callbacks suppressed [ 405.248316][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7851'. [ 405.298482][T22298] netlink: 'syz.2.7851': attribute type 30 has an invalid length. [ 405.327258][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7845'. [ 405.348482][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7851'. [ 405.577875][T22310] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7855'. [ 405.705498][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7859'. [ 405.720495][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.955206][T22328] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7864'. [ 406.275388][T22352] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7875'. [ 406.306459][T22347] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 406.319022][T22347] syzkaller1: linktype set to 823 [ 406.437655][T22354] bond0: ARP target 1.0.0.0 is already present [ 406.472645][T22354] bond0: option arp_ip_target: invalid value (1) [ 406.513258][T22354] bond0 (unregistering): Released all slaves [ 406.760362][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.608759][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7909'. [ 407.640622][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 407.655098][T22423] bond0: entered promiscuous mode [ 407.665052][T22423] bond_slave_0: entered promiscuous mode [ 407.678459][T22423] bond_slave_1: entered promiscuous mode [ 407.714650][T22423] bond0: left promiscuous mode [ 407.719609][T22423] bond_slave_0: left promiscuous mode [ 407.741255][T22423] bond_slave_1: left promiscuous mode [ 407.800370][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.931378][T22442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7919'. [ 407.975990][T22447] netlink: 'syz.6.7921': attribute type 1 has an invalid length. [ 407.985304][T22447] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7921'. [ 407.995436][T22447] netlink: 'syz.6.7921': attribute type 1 has an invalid length. [ 408.025957][T22447] netlink: 'syz.6.7921': attribute type 8 has an invalid length. [ 408.840537][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.921610][ T30] INFO: task syz.3.4047:14340 blocked for more than 143 seconds. [ 408.929483][ T30] Not tainted syzkaller #0 [ 408.952505][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.980361][ T30] task:syz.3.4047 state:D stack:27144 pid:14340 tgid:14339 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 408.997276][ T30] Call Trace: [ 409.006049][ T30] [ 409.009136][ T30] __schedule+0x15dd/0x52d0 [ 409.022891][ T30] ? __pfx___schedule+0x10/0x10 [ 409.028202][ T30] ? schedule+0x90/0x360 [ 409.033621][ T30] schedule+0x164/0x360 [ 409.038707][ T30] schedule_preempt_disabled+0x13/0x30 [ 409.043686][T22510] netlink: 'syz.2.7948': attribute type 1 has an invalid length. [ 409.045895][ T30] __mutex_lock+0x7fe/0x1300 [ 409.053147][T22510] netlink: 'syz.2.7948': attribute type 3 has an invalid length. [ 409.065211][T22510] netlink: 'syz.2.7948': attribute type 7 has an invalid length. [ 409.073197][T22510] netlink: 'syz.2.7948': attribute type 8 has an invalid length. [ 409.078771][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.081393][T22510] NCSI netlink: No device for ifindex 131092 [ 409.095739][ T30] ? __mutex_lock+0x5ac/0x1300 [ 409.100930][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 409.110531][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.119106][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 409.126057][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 409.132632][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 409.139131][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 409.144959][ T30] ? __asan_memcpy+0x40/0x70 [ 409.149583][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 409.155971][ T30] ? bpf_lsm_capable+0x9/0x20 [ 409.161032][ T30] ? security_capable+0x7e/0x2c0 [ 409.166033][ T30] genl_rcv_msg+0x61c/0x7a0 [ 409.170875][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.175933][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 409.182174][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.187175][ T30] netlink_rcv_skb+0x232/0x4b0 [ 409.192276][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.197336][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.203108][ T30] ? down_read+0x272/0x2e0 [ 409.208078][ T30] ? genl_rcv+0xd/0x40 [ 409.212285][ T30] genl_rcv+0x28/0x40 [ 409.216304][ T30] netlink_unicast+0x80f/0x9b0 [ 409.221256][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 409.226584][ T30] ? netlink_sendmsg+0x650/0xb40 [ 409.231777][ T30] ? skb_put+0x11b/0x210 [ 409.236090][ T30] netlink_sendmsg+0x813/0xb40 [ 409.241128][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.246563][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.251771][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.257370][ T30] ____sys_sendmsg+0x972/0x9f0 [ 409.262296][ T30] ? futex_unqueue+0x211/0x240 [ 409.267103][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.272567][ T30] ? import_iovec+0x73/0xa0 [ 409.277113][ T30] ___sys_sendmsg+0x2a5/0x360 [ 409.282193][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.287541][ T30] ? futex_wait+0x29a/0x380 [ 409.292239][ T30] ? __fget_files+0x2a/0x420 [ 409.296883][ T30] ? __fget_files+0x3a0/0x420 [ 409.301786][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.306770][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.312924][ T30] ? rcu_is_watching+0x15/0xb0 [ 409.317841][ T30] do_syscall_64+0x14d/0xf80 [ 409.322676][ T30] ? trace_irq_disable+0x3b/0x150 [ 409.327834][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.334118][ T30] ? clear_bhb_loop+0x40/0x90 [ 409.338826][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.344925][ T30] RIP: 0033:0x7fd02319c819 [ 409.349377][ T30] RSP: 002b:00007fd023faf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.357916][ T30] RAX: ffffffffffffffda RBX: 00007fd023415fa0 RCX: 00007fd02319c819 [ 409.366275][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 409.374463][ T30] RBP: 00007fd023232c91 R08: 0000000000000000 R09: 0000000000000000 [ 409.382771][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.392315][ T30] R13: 00007fd023416038 R14: 00007fd023415fa0 R15: 00007ffca616eca8 [ 409.403954][ T30] [ 409.407128][ T30] [ 409.407128][ T30] Showing all locks held in the system: [ 409.417634][ T30] 2 locks held by ksoftirqd/1/23: [ 409.432192][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 409.442434][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 409.451781][ T30] 1 lock held by khungtaskd/30: [ 409.456884][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 409.466954][ T30] 3 locks held by kworker/u8:2/35: [ 409.472328][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 409.484510][ T30] #1: ffffc90000ab7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 409.495909][ T30] #2: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 409.505094][ T30] 2 locks held by getty/5580: [ 409.509790][ T30] #0: ffff888035f3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 409.520509][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 409.530911][ T30] 2 locks held by syz.4.1988/9991: [ 409.536066][ T30] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.544594][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 409.555117][ T30] 2 locks held by syz.3.4047/14340: [ 409.568948][ T30] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 409.577728][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 409.588123][ T30] 2 locks held by syz.1.7947/22504: [ 409.593399][ T30] #0: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 409.602683][ T30] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 409.613827][ T30] 2 locks held by syz.5.7950/22511: [ 409.619619][ T30] #0: ffffffff90136848 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 409.629327][ T30] #1: ffffffff8fbcf1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 409.638544][ T30] [ 409.643265][ T30] ============================================= [ 409.643265][ T30] [ 409.651904][ T30] NMI backtrace for cpu 0 [ 409.651923][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.651945][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.651956][ T30] Call Trace: [ 409.651964][ T30] [ 409.651971][ T30] dump_stack_lvl+0xe8/0x150 [ 409.652004][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 409.652034][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 409.652063][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 409.652096][ T30] sys_info+0x135/0x170 [ 409.652123][ T30] watchdog+0xfd9/0x1030 [ 409.652147][ T30] ? watchdog+0x21a/0x1030 [ 409.652173][ T30] kthread+0x388/0x470 [ 409.652196][ T30] ? __pfx_watchdog+0x10/0x10 [ 409.652213][ T30] ? __pfx_kthread+0x10/0x10 [ 409.652235][ T30] ret_from_fork+0x51e/0xb90 [ 409.652266][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 409.652291][ T30] ? __switch_to+0xc7d/0x1450 [ 409.652318][ T30] ? __pfx_kthread+0x10/0x10 [ 409.652340][ T30] ret_from_fork_asm+0x1a/0x30 [ 409.652385][ T30] [ 409.652403][ T30] Sending NMI from CPU 0 to CPUs 1: [ 409.763964][ C1] NMI backtrace for cpu 1 [ 409.763987][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 409.764005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.764015][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 409.764039][ C1] Code: 1e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 52 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 409.764054][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 409.764070][ C1] RAX: 0000000000053943 RBX: ffffffff819a913a RCX: 0000000080000001 [ 409.764082][ C1] RDX: 0000000000000001 RSI: ffffffff8def97e8 RDI: ffffffff8c27cb00 [ 409.764093][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 409.764105][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 409.764115][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 1ffff11003ad9000 [ 409.764127][ C1] FS: 0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 409.764140][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.764151][ C1] CR2: 00007ff127de92f8 CR3: 0000000078550000 CR4: 00000000003526f0 [ 409.764168][ C1] Call Trace: [ 409.764175][ C1] [ 409.764181][ C1] default_idle+0x9/0x20 [ 409.764201][ C1] default_idle_call+0x72/0xb0 [ 409.764223][ C1] do_idle+0x36a/0x5f0 [ 409.764243][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 409.764262][ C1] ? __pfx_do_idle+0x10/0x10 [ 409.764284][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 409.764302][ C1] cpu_startup_entry+0x43/0x60 [ 409.764323][ C1] start_secondary+0x101/0x110 [ 409.764341][ C1] common_startup_64+0x13e/0x147 [ 409.764365][ C1] [ 409.885340][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.946935][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 409.953812][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 409.962919][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.972988][ T30] Call Trace: [ 409.976278][ T30] [ 409.979220][ T30] vpanic+0x56c/0xa60 [ 409.983209][ T30] ? __pfx___schedule+0x10/0x10 [ 409.988062][ T30] ? __pfx_vpanic+0x10/0x10 [ 409.992573][ T30] ? __pfx_console_unlock+0x10/0x10 [ 409.997792][ T30] panic+0xc5/0xd0 [ 410.001529][ T30] ? __pfx_panic+0x10/0x10 [ 410.005963][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 410.011344][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 410.017610][ T30] watchdog+0x1023/0x1030 [ 410.021946][ T30] ? watchdog+0x21a/0x1030 [ 410.026498][ T30] kthread+0x388/0x470 [ 410.030703][ T30] ? __pfx_watchdog+0x10/0x10 [ 410.035481][ T30] ? __pfx_kthread+0x10/0x10 [ 410.040084][ T30] ret_from_fork+0x51e/0xb90 [ 410.044689][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 410.050000][ T30] ? __switch_to+0xc7d/0x1450 [ 410.054720][ T30] ? __pfx_kthread+0x10/0x10 [ 410.059350][ T30] ret_from_fork_asm+0x1a/0x30 [ 410.064155][ T30] [ 410.067660][ T30] Kernel Offset: disabled [ 410.071987][ T30] Rebooting in 86400 seconds..