last executing test programs: 3.620934474s ago: executing program 0 (id=22936): syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x29, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x11, "960605390006fff5800000b61af93a"}]}, @rr={0x7, 0xb, 0x57, [@rand_addr=0x64010101, @private=0xa010100]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3.381179085s ago: executing program 0 (id=22940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf254500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x14) 3.34041181s ago: executing program 0 (id=22943): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/19, 0x13}, 0xcf}], 0x1, 0x2023, 0x0) 3.181919304s ago: executing program 0 (id=22947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 2.991310849s ago: executing program 0 (id=22953): r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) 2.81116913s ago: executing program 0 (id=22959): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0xff, 0x7}, 0xff}, 0x18, &(0x7f00000004c0)={&(0x7f0000000000)="8719", 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4000110) 1.211240164s ago: executing program 3 (id=22991): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 1.12759481s ago: executing program 1 (id=22992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.03572359s ago: executing program 1 (id=22994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) 948.984556ms ago: executing program 1 (id=22996): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000001100)=""/4107, &(0x7f0000001080)=0x100b) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800000, 0x31, 0xffffffffffffffff, 0x0) 782.03994ms ago: executing program 4 (id=22999): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000480)=0x80000001, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfd, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x240c4044}, 0x0) 688.813616ms ago: executing program 4 (id=23001): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000ac0)=ANY=[], 0x0) 612.365833ms ago: executing program 3 (id=23002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2b, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 611.550012ms ago: executing program 2 (id=23003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 520.246417ms ago: executing program 2 (id=23004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 519.385219ms ago: executing program 1 (id=23005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c000100240001006270665f686173685f66756e6300000000ed3b72e10000000000000000000000050003000f8000000c"], 0x5c}}, 0x110) 472.527248ms ago: executing program 4 (id=23006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000040000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 452.488147ms ago: executing program 3 (id=23007): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000e00), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) close(r0) 398.934521ms ago: executing program 4 (id=23008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000000811"], 0xfdef) 347.67636ms ago: executing program 2 (id=23009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 347.425709ms ago: executing program 1 (id=23010): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100400208"], 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x19, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 336.461459ms ago: executing program 3 (id=23011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 265.301834ms ago: executing program 1 (id=23012): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000001540)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001580)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f00000015c0)=[{r0, 0x2402}], 0x1, 0x0, 0x0, 0x0) 260.042862ms ago: executing program 2 (id=23013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000300000004000000ff"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xe, 0x0, &(0x7f0000000780)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 177.136157ms ago: executing program 3 (id=23014): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) close(0x4) 176.842223ms ago: executing program 4 (id=23015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 119.939377ms ago: executing program 2 (id=23016): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d40)={r2, &(0x7f0000000740), 0x0}, 0x20) 106.964188ms ago: executing program 3 (id=23017): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0xc7, 0x1}, 0xc) 271.698µs ago: executing program 2 (id=23018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x19, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e80)={r2, r0}, 0xc) 0s ago: executing program 4 (id=23019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x48004}, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.0.14866'. [ 643.952073][ T272] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.952991][ T272] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.953028][ T272] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.953061][ T272] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.014307][ T4795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14862'. [ 644.134656][ T4804] netlink: 'syz.4.14868': attribute type 322 has an invalid length. [ 644.487085][ T4825] nbd: couldn't find a device at index 0 [ 644.684641][ T4840] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14885'. [ 644.684698][ T4840] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14885'. [ 645.209538][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14903'. [ 645.398568][T26385] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.440106][ T4888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 645.720540][ T4908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14918'. [ 645.913072][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14923'. [ 645.913108][ T4924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14923'. [ 646.016944][ T4927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14930'. [ 646.374128][ T4955] Bluetooth: hci0: unsupported parameter 5135 [ 646.374151][ T4955] Bluetooth: hci0: unsupported parameter 8192 [ 646.374165][ T4955] Bluetooth: hci0: unsupported parameter 5135 [ 646.374176][ T4955] Bluetooth: hci0: unsupported parameter 8192 [ 646.400197][T26385] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.829692][T26385] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.848940][T26384] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.862591][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.864667][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.911877][T26385] wg2 speed is unknown, defaulting to 1000 [ 646.940454][T26386] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 646.945593][T26386] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 647.028882][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 647.518498][T26386] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 647.518518][T26386] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.820468][ T5018] netlink: 'syz.0.14965': attribute type 4 has an invalid length. [ 647.839432][T26386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 647.919468][T26386] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 648.063626][ T5026] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 649.242999][ T5063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.299767][ T5063] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 649.890935][ T5099] __nla_validate_parse: 3 callbacks suppressed [ 649.890956][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15004'. [ 650.892875][ T5125] ip6gretap0: entered promiscuous mode [ 651.215090][ T5143] ip_tables: iptables: counters copy to user failed while replacing table [ 651.384783][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15031'. [ 651.623730][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15040'. [ 651.623773][ T5171] netlink: 1 bytes leftover after parsing attributes in process `syz.1.15040'. [ 652.036075][ T5199] vlan5: entered promiscuous mode [ 652.036100][ T5199] macvlan0: entered promiscuous mode [ 652.270793][ T5212] sctp: [Deprecated]: syz.3.15060 (pid 5212) Use of int in max_burst socket option deprecated. [ 652.270793][ T5212] Use struct sctp_assoc_value instead [ 652.396482][ T5215] gretap0: entered promiscuous mode [ 653.258478][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15090'. [ 653.723383][ T5305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15101'. [ 653.897236][ T5314] Bluetooth: hci0: Invalid link key type 10 for 66:55:44:33:22:11 [ 654.059233][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15109'. [ 654.059259][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15109'. [ 654.082818][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15110'. [ 654.352987][ T5322] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 654.433852][ T5334] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 654.682528][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15122'. [ 656.109340][ T5443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15163'. [ 656.264292][ T5453] netlink: 'syz.2.15169': attribute type 29 has an invalid length. [ 656.267397][ T5453] netlink: 'syz.2.15169': attribute type 29 has an invalid length. [ 656.440073][ T5459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15172'. [ 656.440102][ T5459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15172'. [ 656.773424][ T5484] netlink: 272 bytes leftover after parsing attributes in process `syz.4.15180'. [ 657.060580][ T5503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15193'. [ 657.060610][ T5503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15193'. [ 657.856983][ T5525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15204'. [ 657.857008][ T5525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15204'. [ 657.857034][ T5525] netlink: 'syz.0.15204': attribute type 12 has an invalid length. [ 657.857049][ T5525] netlink: 'syz.0.15204': attribute type 11 has an invalid length. [ 658.378743][ T5554] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15219'. [ 658.384491][ T5554] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15219'. [ 658.673620][ T5574] macvlan2: entered promiscuous mode [ 658.673787][ T5574] macvlan2: entered allmulticast mode [ 658.677229][ T5574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.057950][ T5598] Bluetooth: hci0: unsupported parameter 5135 [ 659.060694][ T5598] Bluetooth: hci0: unsupported parameter 8192 [ 659.060713][ T5598] Bluetooth: hci0: unsupported parameter 5135 [ 659.060725][ T5598] Bluetooth: hci0: unsupported parameter 8192 [ 659.761658][ T5649] netlink: 'syz.4.15263': attribute type 25 has an invalid length. [ 660.036448][ T5666] netlink: 'syz.2.15272': attribute type 6 has an invalid length. [ 660.036471][ T5666] netlink: 'syz.2.15272': attribute type 5 has an invalid length. [ 661.468566][ T5757] __nla_validate_parse: 12 callbacks suppressed [ 661.468600][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15315'. [ 661.530013][ T5759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15316'. [ 661.812676][ T5772] netlink: 100 bytes leftover after parsing attributes in process `syz.4.15322'. [ 661.901407][ T5774] netlink: 'syz.4.15324': attribute type 3 has an invalid length. [ 662.416082][ T5801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.844057][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15352'. [ 663.328549][ T5865] netlink: 'syz.3.15361': attribute type 1 has an invalid length. [ 663.328589][ T5865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.956059][ T5905] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 665.335186][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15401'. [ 665.621266][T26386] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 665.785822][ T6025] sctp: [Deprecated]: syz.0.15414 (pid 6025) Use of int in max_burst socket option. [ 665.785822][ T6025] Use struct sctp_assoc_value instead [ 666.178237][ T6044] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15422'. [ 666.238553][ T5741] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 666.249004][T26386] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 666.271389][ T6050] nbd: couldn't find a device at index 0 [ 666.320465][ T6053] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15426'. [ 667.119500][ T5741] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 667.324157][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15458'. [ 668.042285][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15478'. [ 668.233958][ T6172] tipc: Enabled bearer , priority 10 [ 669.048956][ T6226] bridge_slave_0: default FDB implementation only supports local addresses [ 669.065389][ T6228] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15510'. [ 669.138949][ T6234] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 669.434182][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15523'. [ 670.042982][ T6296] sctp: [Deprecated]: syz.2.15542 (pid 6296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.042982][ T6296] Use struct sctp_sack_info instead [ 670.043148][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15543'. [ 670.043182][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15543'. [ 670.043198][ T6297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.155682][ T6359] ip_tables: iptables: counters copy to user failed while replacing table [ 671.553439][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15584'. [ 672.015013][ T6413] pim6reg: entered allmulticast mode [ 672.035483][ T6413] pim6reg: left allmulticast mode [ 672.227845][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15607'. [ 672.653514][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15620'. [ 673.596094][ T6481] smc: net device macvtap0 applied user defined pnetid SYZ0 [ 673.607412][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15634'. [ 673.791653][ T6496] netlink: 65 bytes leftover after parsing attributes in process `syz.0.15640'. [ 674.097592][ T6512] Bluetooth: hci0: unsupported parameter 5161 [ 674.097618][ T6512] Bluetooth: hci0: unsupported parameter 8192 [ 674.097631][ T6512] Bluetooth: hci0: unsupported parameter 5161 [ 674.097652][ T6512] Bluetooth: hci0: unsupported parameter 8192 [ 675.141409][ T6574] bond0: option lacp_rate: invalid value (128) [ 675.143125][ T6574] bond0 (unregistering): Released all slaves [ 675.469962][ T6596] netlink: 'syz.3.15689': attribute type 1 has an invalid length. [ 675.504660][ T6599] vcan1: entered promiscuous mode [ 675.504684][ T6599] vcan1: entered allmulticast mode [ 675.579751][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15690'. [ 675.732003][ T6610] netlink: 'syz.2.15694': attribute type 10 has an invalid length. [ 675.732034][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15694'. [ 675.732410][ T6610] bridge0: port 6(dummy0) entered blocking state [ 675.734098][ T6610] bridge0: port 6(dummy0) entered disabled state [ 675.734281][ T6610] dummy0: entered allmulticast mode [ 675.783390][ T6610] bridge0: mtu less than device minimum [ 676.030942][ T6626] ip_tables: iptables: counters copy to user failed while replacing table [ 676.105605][ T6632] Bluetooth: hci0: unsupported parameter 5135 [ 676.105628][ T6632] Bluetooth: hci0: unsupported parameter 8192 [ 676.105642][ T6632] Bluetooth: hci0: unsupported parameter 5135 [ 676.105655][ T6632] Bluetooth: hci0: unsupported parameter 8192 [ 676.729384][ T6669] netlink: 332 bytes leftover after parsing attributes in process `syz.3.15723'. [ 676.729433][ T6669] netlink: 'syz.3.15723': attribute type 9 has an invalid length. [ 676.729446][ T6669] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15723'. [ 676.729460][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15723'. [ 676.851815][ T6678] x_tables: unsorted entry at hook 2 [ 677.044988][ T6689] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 677.133142][ T6691] xt_hashlimit: size too large, truncated to 1048576 [ 677.155545][ T6698] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 678.975037][ T6807] netlink: 'syz.2.15787': attribute type 1 has an invalid length. [ 678.975061][ T6807] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15787'. [ 678.975096][ T6807] netlink: 'syz.2.15787': attribute type 1 has an invalid length. [ 679.180025][ T6820] netlink: 'syz.1.15793': attribute type 4 has an invalid length. [ 679.180049][ T6820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15793'. [ 679.959326][ T6871] netlink: 'syz.2.15819': attribute type 11 has an invalid length. [ 680.090977][ T6881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15825'. [ 680.300147][ T6896] netlink: 271 bytes leftover after parsing attributes in process `syz.3.15831'. [ 680.567639][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15837'. [ 680.581362][ T6913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15838'. [ 680.870610][ T6927] netlink: 'syz.4.15845': attribute type 32 has an invalid length. [ 680.870632][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15845'. [ 680.939429][ T6927] bond0: Setting coupled_control to off (0) [ 681.268271][ T6957] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.15859'. [ 681.735216][ T6989] netlink: 'syz.1.15874': attribute type 5 has an invalid length. [ 681.917341][ T6997] netlink: 220 bytes leftover after parsing attributes in process `syz.3.15877'. [ 682.243894][ T7020] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15887'. [ 682.577477][ T7035] ip_tables: iptables: counters copy to user failed while replacing table [ 682.931723][ T7061] netlink: 'syz.3.15907': attribute type 4 has an invalid length. [ 683.715691][ T7092] xt_hashlimit: overflow, try lower: 0/0 [ 684.302176][ T7125] __nla_validate_parse: 3 callbacks suppressed [ 684.302195][ T7125] netlink: 4380 bytes leftover after parsing attributes in process `syz.1.15938'. [ 684.302213][ T7125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15938'. [ 684.386861][ T7129] netlink: 'syz.2.15940': attribute type 33 has an invalid length. [ 684.810970][ T7161] Bluetooth: hci0: unsupported parameter 5135 [ 684.810995][ T7161] Bluetooth: hci0: invalid len left 9, exp >= 19 [ 686.156845][ T7205] atomic_op ffff8880373839e0 conn xmit_atomic 0000000000000000 [ 686.306757][ T7214] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15981'. [ 686.406730][ T7222] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 686.765505][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15995'. [ 686.765811][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15995'. [ 687.152992][ T7265] vlan2: entered promiscuous mode [ 687.168955][ T7271] rdma_op ffff8880368ff238 conn xmit_rdma 0000000000000000 [ 687.452479][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16019'. [ 687.656957][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16023'. [ 687.790774][ T7310] nbd: socks must be embedded in a SOCK_ITEM attr [ 687.893857][ T7317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16031'. [ 687.983859][ T7321] smc: smcd device lo applied user defined pnetid SYZ0 [ 688.372575][ T7343] netlink: 'syz.4.16043': attribute type 1 has an invalid length. [ 688.751921][ T7363] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16054'. [ 688.940647][ T7375] xt_cgroup: invalid path, errno=-2 [ 689.930212][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16082'. [ 690.057258][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16083'. [ 690.627460][ T7465] netlink: 100 bytes leftover after parsing attributes in process `syz.4.16102'. [ 690.685985][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16103'. [ 690.714368][ T7469] macsec2: entered promiscuous mode [ 690.813872][ T7479] netlink: 'syz.0.16109': attribute type 3 has an invalid length. [ 691.979038][ T7523] netlink: 'syz.0.16130': attribute type 1 has an invalid length. [ 692.466353][ T7543] netlink: 27 bytes leftover after parsing attributes in process `syz.2.16139'. [ 692.466384][ T7543] netlink: 'syz.2.16139': attribute type 1 has an invalid length. [ 693.524329][ T7612] xt_hashlimit: overflow, rate too high: 0 [ 694.091665][ T7642] netlink: 'syz.1.16189': attribute type 1 has an invalid length. [ 694.434240][ T7658] gretap0: invalid flags given to default FDB implementation [ 694.835920][ T7674] Bluetooth: hci0: unsupported parameter 5135 [ 694.835942][ T7674] Bluetooth: hci0: unsupported parameter 8192 [ 694.835978][ T7674] Bluetooth: hci0: unsupported parameter 5135 [ 694.835990][ T7674] Bluetooth: hci0: unsupported parameter 8192 [ 694.938740][ T7676] netlink: 'syz.1.16206': attribute type 6 has an invalid length. [ 696.509822][ T7749] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 696.510253][ T7750] netlink: 43 bytes leftover after parsing attributes in process `syz.2.16241'. [ 696.510275][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16241'. [ 696.510293][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16241'. [ 696.567920][ T7752] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16243'. [ 696.637640][ T7756] netlink: 165 bytes leftover after parsing attributes in process `syz.3.16245'. [ 697.822111][ T7832] netlink: 'syz.0.16282': attribute type 29 has an invalid length. [ 697.929563][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16284'. [ 698.910856][ T7903] netlink: 'syz.2.16313': attribute type 13 has an invalid length. [ 699.206923][ T30] audit: type=1800 audit(1793629146.878:7): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16322" name="memory.events" dev="tmpfs" ino=16087 res=0 errno=-22 [ 699.213664][ T30] audit: type=1804 audit(1793629146.888:8): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.16322" name="/newroot/3206/memory.events" dev="tmpfs" ino=16087 res=1 errno=0 [ 699.304157][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16325'. [ 699.500632][ T7938] lo: entered allmulticast mode [ 699.503873][ T7938] lo: left allmulticast mode [ 700.586872][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16363'. [ 700.659696][ T8007] macvtap1: entered allmulticast mode [ 700.661361][ T8007] veth0_to_bridge: entered allmulticast mode [ 700.668471][ T8007] veth0_to_bridge: left allmulticast mode [ 700.983806][ T8028] smc: net device macvtap0 erased user defined pnetid SYZ0 [ 700.983991][ T8028] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 700.984006][ T8028] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 700.984088][ T8028] smc: smcd device lo erased user defined pnetid SYZ0 [ 701.150473][ T8043] netlink: 'syz.4.16381': attribute type 4 has an invalid length. [ 702.113466][ T8104] tipc: Enabling of bearer rejected, media not registered [ 702.811304][ T8149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.811322][ T8149] IPv6: NLM_F_CREATE should be set when creating new route [ 702.811365][ T8149] IPv6: NLM_F_CREATE should be set when creating new route [ 702.811390][ T8149] IPv6: NLM_F_CREATE should be set when creating new route [ 702.814281][ T8149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.892399][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16433'. [ 703.287284][ T8178] tipc: MTU too low for tipc bearer [ 703.455929][ T8189] bridge0: port 1(syz_tun) entered disabled state [ 703.456453][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.503994][ T8189] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 703.545761][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16456'. [ 704.034446][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16468'. [ 704.695748][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16490'. [ 704.695834][ T8267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16490'. [ 704.800278][ T8270] netlink: 'syz.1.16491': attribute type 2 has an invalid length. [ 704.910021][ T8274] vlan3: entered allmulticast mode [ 704.910045][ T8274] bond0: entered allmulticast mode [ 705.096544][ T8291] netlink: 5 bytes leftover after parsing attributes in process `syz.2.16500'. [ 705.911835][ T8342] netlink: 'syz.1.16524': attribute type 4 has an invalid length. [ 705.911858][ T8342] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.16524'. [ 706.304067][ T8368] tipc: Enabled bearer , priority 10 [ 706.478154][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 706.478205][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 706.900210][ T8405] netlink: 9 bytes leftover after parsing attributes in process `syz.0.16555'. [ 707.393833][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16567'. [ 707.420032][T26386] tipc: Node number set to 4227989505 [ 707.607502][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16572'. [ 707.907479][ T8460] tipc: Enabled bearer , priority 5 [ 709.018166][ T5741] tipc: Node number set to 16777217 [ 709.161680][ T8518] tipc: Enabled bearer , priority 5 [ 709.225721][ T8520] veth0_to_bond: entered allmulticast mode [ 709.373295][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16613'. [ 710.146811][T26386] dummy0: entered promiscuous mode [ 710.156725][ T8563] macvtap0: entered allmulticast mode [ 710.156747][ T8563] dummy0: entered allmulticast mode [ 710.176834][ T8563] dummy0: left allmulticast mode [ 710.184151][ T8566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.255176][T26386] dummy0: left promiscuous mode [ 710.756443][ T8603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16650'. [ 710.756470][ T8603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16650'. [ 711.174781][ T8628] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.16662'. [ 711.598234][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 711.902479][ T8667] Bluetooth: hci0: unsupported parameter 5135 [ 711.902503][ T8667] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 712.046301][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16684'. [ 712.403567][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16690'. [ 712.743564][ T8710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16703'. [ 713.102325][ T8735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16715'. [ 713.104995][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16715'. [ 713.207006][ T30] audit: type=1804 audit(1793629160.878:9): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.16717" name="/newroot/3292/cgroup.controllers" dev="tmpfs" ino=16494 res=1 errno=0 [ 713.212967][ T30] audit: type=1800 audit(1793629160.888:10): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16717" name="cgroup.controllers" dev="tmpfs" ino=16494 res=0 errno=-22 [ 713.315229][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16720'. [ 713.922128][ T8792] netlink: 'syz.4.16743': attribute type 126 has an invalid length. [ 716.002610][ T8911] netlink: 'syz.1.16800': attribute type 8 has an invalid length. [ 716.349327][ T8935] netlink: 'syz.3.16813': attribute type 46 has an invalid length. [ 716.599885][ T8953] __nla_validate_parse: 8 callbacks suppressed [ 716.599905][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16823'. [ 716.727880][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16824'. [ 716.819527][ T8967] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 717.504820][ T8992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16842'. [ 718.576980][ T9059] netlink: 'syz.1.16874': attribute type 30 has an invalid length. [ 719.917030][ T9112] netlink: 'syz.3.16897': attribute type 6 has an invalid length. [ 720.010432][ T9117] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.16901'. [ 720.290960][ T9137] sctp: [Deprecated]: syz.1.16909 (pid 9137) Use of int in max_burst socket option. [ 720.290960][ T9137] Use struct sctp_assoc_value instead [ 720.567353][ T9153] netlink: 'syz.2.16916': attribute type 12 has an invalid length. [ 720.567374][ T9153] netlink: 'syz.2.16916': attribute type 29 has an invalid length. [ 720.567387][ T9153] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16916'. [ 720.567404][ T9153] netlink: 59 bytes leftover after parsing attributes in process `syz.2.16916'. [ 720.935043][ T9177] netlink: 'syz.4.16927': attribute type 2 has an invalid length. [ 720.935065][ T9177] netlink: 'syz.4.16927': attribute type 1 has an invalid length. [ 721.052464][ T9181] vlan2: entered promiscuous mode [ 721.052634][ T9181] vlan2: entered allmulticast mode [ 721.052649][ T9181] bridge0: entered allmulticast mode [ 723.475428][ T9321] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.835770][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17006'. [ 723.926222][ T9348] tipc: Enabling of bearer rejected, failed to enable media [ 724.245525][ T9366] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 724.458649][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17022'. [ 724.470436][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17024'. [ 724.907246][ T9405] lo speed is unknown, defaulting to 1000 [ 724.927205][ T9405] wg0 speed is unknown, defaulting to 1000 [ 725.255611][ T9405] wg2 speed is unknown, defaulting to 1000 [ 725.267424][ T9405] lo speed is unknown, defaulting to 1000 [ 725.669889][ T9438] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17050'. [ 725.870853][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17053'. [ 726.070293][ T9405] lo speed is unknown, defaulting to 1000 [ 726.264486][ T9460] macsec3: entered promiscuous mode [ 726.517134][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17066'. [ 726.517157][ T9471] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 727.312699][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17079'. [ 728.627088][ T9546] netlink: 165 bytes leftover after parsing attributes in process `syz.0.17102'. [ 728.661772][ T9549] sctp: [Deprecated]: syz.2.17101 (pid 9549) Use of int in max_burst socket option. [ 728.661772][ T9549] Use struct sctp_assoc_value instead [ 728.840194][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17106'. [ 728.840263][ T9557] tipc: Enabling of bearer rejected, failed to enable media [ 731.732790][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17174'. [ 731.732827][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17174'. [ 732.500202][ T9738] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.17194'. [ 732.889358][ T9764] tipc: Enabling of bearer rejected, failed to enable media [ 733.092797][ T9776] smc: net device lo applied user defined pnetid SYZ0 [ 733.798948][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17235'. [ 733.806041][ T9824] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17237'. [ 734.218294][ T9845] sch_fq: defrate 8 ignored. [ 734.654873][ T9868] smc: net device lo erased user defined pnetid SYZ0 [ 734.939371][ T9888] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 735.300830][ T9910] tipc: Enabled bearer , priority 10 [ 735.556518][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17287'. [ 735.935486][ T9948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17298'. [ 736.172547][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17308'. [ 736.232295][ T9968] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 736.329333][ T9974] netlink: 'syz.3.17311': attribute type 11 has an invalid length. [ 736.419447][ T5741] tipc: Node number set to 4278255617 [ 736.645891][ T9996] Bluetooth: ISO socket layer initialized [ 737.169409][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17333'. [ 737.577020][T10039] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17342'. [ 737.691701][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17347'. [ 737.692029][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17347'. [ 738.693051][T10108] vlan5: entered promiscuous mode [ 739.864093][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17407'. [ 739.934781][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17410'. [ 740.726631][T10212] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 740.726661][T10212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.223552][T10239] netlink: 'syz.3.17433': attribute type 2 has an invalid length. [ 741.436409][T10252] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 741.945316][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17450'. [ 742.247591][T10291] netlink: 'syz.3.17459': attribute type 3 has an invalid length. [ 742.247614][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17459'. [ 742.559351][T10307] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 743.361757][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17488'. [ 743.361789][T10348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17488'. [ 743.454410][T10352] ip_tables: iptables: counters copy to user failed while replacing table [ 743.784407][T10372] netlink: 'syz.3.17496': attribute type 1 has an invalid length. [ 743.784431][T10372] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17496'. [ 743.784468][T10372] netlink: 'syz.3.17496': attribute type 1 has an invalid length. [ 743.915625][T10379] vlan2: entered promiscuous mode [ 743.915647][T10379] macvlan0: entered promiscuous mode [ 744.314706][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17512'. [ 745.000759][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17536'. [ 745.000800][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17536'. [ 745.071660][T10453] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 745.705694][T10490] xt_LOG: level 16 >= 8 [ 745.757726][T10494] netlink: 'syz.1.17557': attribute type 10 has an invalid length. [ 745.766276][T10494] netlink: 'syz.1.17557': attribute type 10 has an invalid length. [ 745.886882][T10500] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11 [ 746.096290][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17564'. [ 746.539893][T10541] ip_tables: iptables: counters copy to user failed while replacing table [ 746.560093][T10543] netlink: 80 bytes leftover after parsing attributes in process `syz.1.17581'. [ 747.300881][T10579] __nla_validate_parse: 3 callbacks suppressed [ 747.300902][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17598'. [ 747.500876][T10579] bond6: (slave bond_slave_0): Device is not bonding slave [ 747.500899][T10579] bond6: option active_slave: invalid value (bond_slave_0) [ 747.520125][T10579] bond6 (unregistering): Released all slaves [ 747.587314][T10585] tipc: Enabling of bearer rejected, already enabled [ 747.792484][T10603] Bluetooth: hci0: unsupported parameter 5134 [ 747.792505][T10603] Bluetooth: hci0: unsupported parameter 8192 [ 747.792517][T10603] Bluetooth: hci0: unsupported parameter 5134 [ 747.792530][T10603] Bluetooth: hci0: unsupported parameter 8192 [ 748.551713][T12007] block nbd2: Receive control failed (result -32) [ 748.551861][ T53] block nbd2: Receive control failed (result -32) [ 749.465886][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17655'. [ 749.512116][T10708] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17657'. [ 749.701346][T10717] IPVS: Error connecting to the multicast addr [ 751.738844][T10839] sctp: [Deprecated]: syz.0.17719 (pid 10839) Use of int in max_burst socket option. [ 751.738844][T10839] Use struct sctp_assoc_value instead [ 752.392553][T10876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17737'. [ 752.455808][T10878] pimreg1: tun_chr_ioctl cmd 1074025677 [ 752.455936][T10878] pimreg1: linktype set to 825 [ 752.926457][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17748'. [ 753.264128][T10921] pim6reg: entered allmulticast mode [ 753.274492][T10917] pim6reg: left allmulticast mode [ 754.165396][T10969] netlink: 'syz.3.17779': attribute type 6 has an invalid length. [ 754.309424][T10979] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.17783'. [ 754.309452][T10979] netlink: 7164 bytes leftover after parsing attributes in process `syz.3.17783'. [ 754.374492][T10983] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17785'. [ 754.586661][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17792'. [ 754.586701][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17792'. [ 754.586996][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17792'. [ 754.587254][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17792'. [ 754.801023][T11006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.801050][T11006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.804469][T11006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.804493][T11006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.806687][T11006] tipc: Resetting bearer [ 754.854356][T11006] tipc: Disabling bearer [ 755.585491][T11050] batadv_slave_1: entered promiscuous mode [ 755.587285][T11050] batadv_slave_1: left promiscuous mode [ 755.760781][T11062] netlink: 'syz.2.17824': attribute type 1 has an invalid length. [ 755.763454][T11059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 755.807217][T11059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 756.363778][T11084] erspan0: entered promiscuous mode [ 756.434479][T11087] : option downdelay: invalid value (18446744073709547007) [ 756.434505][T11087] : option downdelay: allowed values 0 - 2147483647 [ 756.457229][T11087]  (unregistering): Released all slaves [ 756.834562][T11116] netlink: 'syz.1.17846': attribute type 2 has an invalid length. [ 756.934415][T11120] netlink: 964 bytes leftover after parsing attributes in process `syz.2.17848'. [ 758.364542][T11190] team0: Device vxcan2 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port [ 758.977502][T11229] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.17896'. [ 758.977632][T11229] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 759.397570][T11241] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17904'. [ 759.881768][T11229] 0ªX¹¦Dö»: entered allmulticast mode [ 760.736401][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17930'. [ 760.736432][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17930'. [ 761.626828][T11361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17958'. [ 761.740076][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17960'. [ 761.869575][T11371] netpci0: tun_chr_ioctl cmd 1074025678 [ 761.869598][T11371] netpci0: group set to 0 [ 762.286043][T11403] netlink: 'syz.0.17979': attribute type 1 has an invalid length. [ 762.540131][T11418] sctp: [Deprecated]: syz.2.17985 (pid 11418) Use of int in max_burst socket option. [ 762.540131][T11418] Use struct sctp_assoc_value instead [ 763.454753][T11439] bond1 (unregistering): Released all slaves [ 763.977237][T11478] batadv_slave_0: entered promiscuous mode [ 763.980979][T11474] batadv_slave_0: left promiscuous mode [ 764.263115][T12007] block nbd3: Receive control failed (result -32) [ 764.263543][T10648] block nbd3: Receive control failed (result -32) [ 764.341953][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18019'. [ 764.511726][T11500] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18022'. [ 764.957432][T11528] batadv_slave_1: entered promiscuous mode [ 764.964979][T11526] batadv_slave_1: left promiscuous mode [ 765.551521][T11565] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 765.721420][T11577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18058'. [ 766.181442][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18073'. [ 766.463755][T11622] netlink: 'syz.0.18079': attribute type 1 has an invalid length. [ 766.463778][T11622] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.18079'. [ 766.463792][T11622] netlink: 'syz.0.18079': attribute type 2 has an invalid length. [ 768.272635][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18132'. [ 769.550370][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18146'. [ 769.565788][T11770] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.912768][T11794] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 771.076936][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18183'. [ 771.076973][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18183'. [ 771.516365][T11866] tun0: tun_chr_ioctl cmd 1074812117 [ 771.559163][T10648] block nbd4: Receive control failed (result -32) [ 771.559759][T12007] block nbd4: Receive control failed (result -32) [ 771.763755][T11873] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18191'. [ 771.920020][T11879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18195'. [ 772.734699][T11921] netlink: 'syz.3.18215': attribute type 1 has an invalid length. [ 773.310745][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18232'. [ 774.382250][T12014] ip_tables: iptables: counters copy to user failed while replacing table [ 774.387721][T12014] ip_tables: iptables: counters copy to user failed while replacing table [ 774.609959][T12023] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 774.817873][T12029] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 775.684450][T12064] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 776.194040][T12091] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 776.558290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.963788][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18313'. [ 777.441718][T12165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18322'. [ 777.521007][T12173] netlink: 'syz.0.18325': attribute type 1 has an invalid length. [ 777.521030][T12173] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.18325'. [ 777.521046][T12173] netlink: 'syz.0.18325': attribute type 1 has an invalid length. [ 777.598102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.794577][T12187] netlink: 'syz.0.18333': attribute type 3 has an invalid length. [ 778.552328][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18356'. [ 778.638087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.156785][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18362'. [ 779.283396][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18363'. [ 779.678043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.923553][T12292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.923865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.924091][T12292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.924286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.924519][T12292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.924716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.924983][T12292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.925168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.925378][T12292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.649767][T12315] sctp: [Deprecated]: syz.2.18391 (pid 12315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.649767][T12315] Use struct sctp_sack_info instead [ 781.449918][T12365] tun0: tun_chr_ioctl cmd 2148553947 [ 781.686944][ T30] audit: type=1804 audit(1793629229.358:11): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18422" name="/newroot/3657/cgroup.controllers" dev="tmpfs" ino=18355 res=1 errno=0 [ 781.716297][ T30] audit: type=1800 audit(1793629229.388:12): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18422" name="cgroup.controllers" dev="tmpfs" ino=18355 res=0 errno=-22 [ 781.742969][ T30] audit: type=1800 audit(1793629229.418:13): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18422" name="cgroup.controllers" dev="tmpfs" ino=18355 res=0 errno=-22 [ 781.896836][T12393] tun0: tun_chr_ioctl cmd 1074025680 [ 782.441662][T12428] : renamed from bond0 [ 782.545979][T12435] netlink: 'syz.1.18444': attribute type 10 has an invalid length. [ 782.568339][ T5741] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 783.279087][ T5741] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 784.133242][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18478'. [ 784.736490][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18489'. [ 784.736519][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18489'. [ 784.737265][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18489'. [ 784.737285][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18489'. [ 784.737461][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18489'. [ 784.737478][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18489'. [ 784.878107][ C1] net_ratelimit: 2043 callbacks suppressed [ 784.878129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.905517][T12542] sctp: [Deprecated]: syz.4.18491 (pid 12542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 784.905517][T12542] Use struct sctp_sack_info instead [ 785.089117][T26385] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 785.490838][T12572] ip_tables: iptables: counters copy to user failed while replacing table [ 785.499439][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18504'. [ 785.513682][T12572] ip_tables: iptables: counters copy to user failed while replacing table [ 785.729659][T12583] IPVS: sh: TCP 127.0.0.1:5376 - no destination available [ 785.730113][T12583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.918022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.080819][T26385] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 786.187139][T12611] netlink: 'syz.0.18523': attribute type 11 has an invalid length. [ 786.958033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.225623][T12671] sctp: [Deprecated]: syz.1.18547 (pid 12671) Use of int in max_burst socket option. [ 787.225623][T12671] Use struct sctp_assoc_value instead [ 787.281175][T12670] tap0: tun_chr_ioctl cmd 2148553947 [ 787.575565][T12694] netlink: 'syz.1.18559': attribute type 1 has an invalid length. [ 787.824220][T12710] xt_hashlimit: size too large, truncated to 1048576 [ 787.881677][T12713] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.18564'. [ 787.881975][T12713] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 787.998036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.094936][T12718] netlink: 172 bytes leftover after parsing attributes in process `syz.1.18568'. [ 788.531510][T12721] netlink: 'syz.4.18571': attribute type 1 has an invalid length. [ 788.562533][T12721] geneve6: entered promiscuous mode [ 788.925744][T12743] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 789.038117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.066546][T12743] xt_CT: No such helper "syz0" [ 789.475807][T12784] block nbd5: Unsupported socket: should be TCP or UNIX. [ 789.552159][T12789] __nla_validate_parse: 3 callbacks suppressed [ 789.552180][T12789] netlink: 280 bytes leftover after parsing attributes in process `syz.1.18600'. [ 789.552198][T12789] netlink: 'syz.1.18600': attribute type 3 has an invalid length. [ 789.884499][T12808] blkio.reset_stats is deprecated [ 790.013149][T12820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.078466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.427531][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18623'. [ 791.118102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.501471][T12862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18630'. [ 791.556726][T12864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.131870][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18647'. [ 792.131896][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18647'. [ 792.131945][T12899] netlink: 'syz.0.18647': attribute type 18 has an invalid length. [ 792.158102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.192190][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18647'. [ 792.192228][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18647'. [ 792.192251][T12900] netlink: 'syz.0.18647': attribute type 18 has an invalid length. [ 792.238356][ T272] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.238658][ T218] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.238694][ T218] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 792.250244][ T218] netdevsim netdevsim0 €Â: set [0, 1] type 1 family 0 port 4352 - 0 [ 793.198034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.238014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.533128][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18696'. [ 794.533152][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18696'. [ 794.533169][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18696'. [ 794.533407][T13006] netlink: 'syz.2.18696': attribute type 6 has an invalid length. [ 794.628858][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.928512][T13026] __nla_validate_parse: 1 callbacks suppressed [ 794.928540][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18704'. [ 795.116925][T13042] netlink: 236 bytes leftover after parsing attributes in process `syz.2.18711'. [ 795.116953][T13042] netlink: 236 bytes leftover after parsing attributes in process `syz.2.18711'. [ 795.278033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.844999][T10648] block nbd5: Receive control failed (result -107) [ 796.016860][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18735'. [ 796.318046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.500522][T13112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.501313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.533478][T13124] ip_tables: iptables: counters copy to user failed while replacing table [ 796.910375][T13142] ip_tables: iptables: counters copy to user failed while replacing table [ 796.959180][T13143] netlink: 'syz.0.18757': attribute type 3 has an invalid length. [ 796.959203][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18757'. [ 797.049976][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18760'. [ 797.358116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.617449][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18774'. [ 797.723543][T13190] netlink: 84 bytes leftover after parsing attributes in process `syz.4.18778'. [ 798.363514][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18800'. [ 798.398024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.640031][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 798.814740][T13258] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 798.982880][T13264] bond0: entered promiscuous mode [ 798.991408][T13264] batadv0: entered promiscuous mode [ 798.997385][T13264] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 798.997408][T13264] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 799.015789][T13264] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 799.037074][T13264] bond0: left promiscuous mode [ 799.044930][T13264] batadv0: left promiscuous mode [ 799.047530][T13267] netlink: 277 bytes leftover after parsing attributes in process `syz.2.18813'. [ 799.217596][T13280] netlink: 'syz.2.18820': attribute type 11 has an invalid length. [ 799.433771][T13295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 799.438155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.297430][T13347] __nla_validate_parse: 1 callbacks suppressed [ 800.297450][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18851'. [ 800.478023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.631829][T13365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.333713][T13395] caif0: tun_chr_ioctl cmd 1074025681 [ 801.514240][T13402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18875'. [ 801.514722][T13402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18875'. [ 801.518051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.746513][T13413] netlink: 'syz.1.18881': attribute type 2 has an invalid length. [ 801.973502][T13427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.974134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.255600][T13445] sctp: [Deprecated]: syz.4.18895 (pid 13445) Use of int in max_burst socket option. [ 802.255600][T13445] Use struct sctp_assoc_value instead [ 802.282749][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18894'. [ 802.334237][T13451] netlink: 92 bytes leftover after parsing attributes in process `syz.4.18897'. [ 802.334882][T13451] netlink: 92 bytes leftover after parsing attributes in process `syz.4.18897'. [ 802.558123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.885588][T13487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18909'. [ 803.598031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.995792][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18931'. [ 804.397774][T13572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.638013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.058753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.678170][ C1] net_ratelimit: 1 callbacks suppressed [ 805.678192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.887852][T13651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18976'. [ 806.718139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.758073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.798044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.838009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.485067][T13786] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19038'. [ 810.485092][T13786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19038'. [ 810.878123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.918125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.507245][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19080'. [ 812.662150][T13895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 812.916186][T13909] caif0: tun_chr_ioctl cmd 2147767507 [ 812.958015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.998031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.792668][T14006] netlink: 'syz.2.19136': attribute type 32 has an invalid length. [ 814.792691][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19136'. [ 814.921651][T14006] bond10: option coupled_control: invalid value (10) [ 814.940124][T14006] bond10 (unregistering): Released all slaves [ 816.544645][T14095] netlink: 3604 bytes leftover after parsing attributes in process `syz.1.19175'. [ 816.593831][T14100] A link change request failed with some changes committed already. Interface 26±ÿ†ˆ¬hËdtÍ may have been left with an inconsistent configuration, please check. [ 817.355003][T14135] netlink: 'syz.1.19191': attribute type 6 has an invalid length. [ 817.753682][T14164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19205'. [ 817.818838][T14169] netlink: 112 bytes leftover after parsing attributes in process `syz.0.19208'. [ 817.993733][T14176] tap0: tun_chr_ioctl cmd 1074025676 [ 817.993756][T14176] tap0: owner set to 0 [ 818.667568][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19231'. [ 818.956232][T14237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.118880][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 820.277042][T14295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19269'. [ 820.616491][T14318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19283'. [ 820.616974][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19283'. [ 820.617010][T14318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19283'. [ 821.061141][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19292'. [ 821.782930][T14381] netlink: 'syz.1.19303': attribute type 1 has an invalid length. [ 821.782955][T14381] netlink: 92 bytes leftover after parsing attributes in process `syz.1.19303'. [ 822.043978][T14394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19308'. [ 823.296838][ T30] audit: type=1804 audit(1793629270.968:14): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19339" name="/newroot/3824/cgroup.controllers" dev="tmpfs" ino=19167 res=1 errno=0 [ 823.298781][ T30] audit: type=1800 audit(1793629270.978:15): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19339" name="cgroup.controllers" dev="tmpfs" ino=19167 res=0 errno=-22 [ 823.427857][T14475] netlink: 'syz.0.19344': attribute type 39 has an invalid length. [ 823.986314][T14504] xt_TPROXY: Can be used only with -p tcp or -p udp [ 824.274151][T14518] __nla_validate_parse: 1 callbacks suppressed [ 824.274172][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19365'. [ 824.274192][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19365'. [ 824.274255][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19365'. [ 825.097629][T14574] bond0: entered promiscuous mode [ 825.655599][T14607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 825.727557][T14607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 826.343070][T14652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19421'. [ 826.838912][T14676] netlink: 76 bytes leftover after parsing attributes in process `syz.3.19432'. [ 827.027163][T14692] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19439'. [ 828.843886][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19463'. [ 829.043575][T14758] netlink: 6060 bytes leftover after parsing attributes in process `syz.2.19467'. [ 829.314644][T14772] tipc: Enabling of bearer rejected, already enabled [ 829.421329][T14774] vlan6: entered allmulticast mode [ 829.421353][T14774] veth0_to_bond: entered allmulticast mode [ 830.046397][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19488'. [ 830.051929][T14808] netlink: 67 bytes leftover after parsing attributes in process `syz.2.19489'. [ 830.374875][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19497'. [ 831.130792][T14861] netlink: 'syz.1.19513': attribute type 2 has an invalid length. [ 831.438609][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19522'. [ 831.438637][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19522'. [ 831.438924][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19522'. [ 831.438942][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19522'. [ 832.237865][T14916] netlink: 88 bytes leftover after parsing attributes in process `syz.1.19540'. [ 832.240368][T14916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19540'. [ 832.292073][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19541'. [ 832.292105][T14917] nbd: socks must be embedded in a SOCK_ITEM attr [ 833.085519][T14965] netlink: 'syz.2.19564': attribute type 18 has an invalid length. [ 833.192806][T14971] Dead loop on virtual device ip6_vti0 (net 130), fix it urgently! [ 833.193341][T14971] Dead loop on virtual device ip6_vti0 (net 130), fix it urgently! [ 833.193804][T14971] Dead loop on virtual device ip6_vti0 (net 130), fix it urgently! [ 833.194244][T14971] Dead loop on virtual device ip6_vti0 (net 130), fix it urgently! [ 834.546276][T15053] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 834.806051][T15063] netlink: 'syz.4.19611': attribute type 8 has an invalid length. [ 835.222066][T15093] block nbd6: server does not support multiple connections per device. [ 835.222461][T15093] block nbd6: shutting down sockets [ 835.411281][T15099] pimreg0: tun_chr_ioctl cmd 1074025677 [ 835.411388][T15099] pimreg0: linktype set to 804 [ 835.922721][T15120] bond7 (unregistering): Released all slaves [ 835.969156][T15126] __nla_validate_parse: 9 callbacks suppressed [ 835.969175][T15126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19638'. [ 836.435051][T15149] netlink: 'syz.1.19650': attribute type 5 has an invalid length. [ 837.318287][ T272] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.318379][ T272] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.318448][ T272] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.318562][ T272] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 837.558480][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19671'. [ 837.757535][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19678'. [ 837.757567][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19678'. [ 838.074576][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19685'. [ 838.733093][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19702'. [ 839.367208][T15293] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.367248][T15293] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.484954][T15293] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.484996][T15293] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.539685][T15301] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19721'. [ 839.573901][T15293] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.576250][T15293] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.598620][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 839.652001][T15293] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.652038][T15293] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.958618][ T3359] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.958654][ T3359] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.988856][ T64] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.988915][ T64] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.988959][ T64] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.988983][ T64] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.989015][ T64] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.989040][ T64] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.202206][T15331] 8021q: VLANs not supported on gre0 [ 840.205844][T15329] RDS: rds_bind could not find a transport for 0:0:5d00::, load rds_tcp or rds_rdma? [ 840.281072][T15336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19738'. [ 840.281102][T15336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19738'. [ 840.282010][T15336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19738'. [ 841.005493][T15379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.467012][T15409] __nla_validate_parse: 1 callbacks suppressed [ 841.467033][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19773'. [ 841.956071][T10648] block nbd6: Receive control failed (result -32) [ 842.006629][T15450] batadv_slave_1: entered promiscuous mode [ 842.007377][T15449] batadv_slave_1: left promiscuous mode [ 842.246466][T15462] netlink: 'syz.4.19797': attribute type 15 has an invalid length. [ 842.759769][T15492] sctp: [Deprecated]: syz.0.19811 (pid 15492) Use of int in maxseg socket option. [ 842.759769][T15492] Use struct sctp_assoc_value instead [ 843.436562][T15527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19825'. [ 843.692910][T15537] bond7: ARP target 9.0.0.0 is already present [ 843.692936][T15537] bond7: option arp_ip_target: invalid value (9) [ 843.694579][T15537] bond7 (unregistering): Released all slaves [ 844.094255][T15565] netlink: 'syz.0.19840': attribute type 9 has an invalid length. [ 844.232315][T15572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 844.630714][T15593] netlink: 7 bytes leftover after parsing attributes in process `syz.3.19854'. [ 844.896501][T15604] tun0: tun_chr_ioctl cmd 1074025673 [ 844.929574][T15612] netlink: 'syz.0.19863': attribute type 2 has an invalid length. [ 845.513773][T15649] netlink: 'syz.2.19881': attribute type 11 has an invalid length. [ 846.301841][T15700] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19904'. [ 846.321351][T10648] block nbd7: Receive control failed (result -32) [ 847.007192][T15740] netlink: 'syz.1.19922': attribute type 6 has an invalid length. [ 847.837028][T15778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19939'. [ 848.260264][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19952'. [ 848.300342][ T5786] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 848.302024][T15803] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 848.359853][ T5786] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 848.403599][T15813] block nbd8: Unsupported socket: should be TCP or UNIX. [ 849.847718][T15883] netlink: 332 bytes leftover after parsing attributes in process `syz.1.19988'. [ 849.847787][T15883] netlink: 'syz.1.19988': attribute type 9 has an invalid length. [ 849.847802][T15883] netlink: 'syz.1.19988': attribute type 1 has an invalid length. [ 850.705611][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20006'. [ 850.986306][T15940] ip_tables: iptables: counters copy to user failed while replacing table [ 850.996598][T15942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 851.009751][T15940] xt_TCPMSS: Only works on TCP SYN packets [ 851.109359][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20015'. [ 851.109388][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20015'. [ 851.213589][T15951] pimreg0: tun_chr_ioctl cmd 1074025677 [ 851.213712][T15951] pimreg0: linktype set to 0 [ 851.216850][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20017'. [ 851.661205][T15979] sctp: [Deprecated]: syz.2.20031 (pid 15979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 851.661205][T15979] Use struct sctp_sack_info instead [ 851.814241][T15991] batadv_slave_1: entered promiscuous mode [ 851.814893][T15990] batadv_slave_1: left promiscuous mode [ 852.005468][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20043'. [ 852.283638][ T30] audit: type=1804 audit(1793629299.958:16): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.20050" name="/newroot/3974/cgroup.controllers" dev="tmpfs" ino=19923 res=1 errno=0 [ 852.283695][ T30] audit: type=1800 audit(1793629299.958:17): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20050" name="cgroup.controllers" dev="tmpfs" ino=19923 res=0 errno=-22 [ 852.667266][T16036] ip_tables: iptables: counters copy to user failed while replacing table [ 852.699140][T16035] batman_adv: batadv0: Adding interface: macvlan3 [ 852.699158][T16035] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.700849][T16035] batman_adv: batadv0: Interface activated: macvlan3 [ 852.706621][T16036] C: renamed from lo (while UP) [ 852.736543][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20059'. [ 852.765492][T16036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 853.923278][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20087'. [ 853.962783][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20087'. [ 854.097755][T16107] netlink: 'syz.0.20089': attribute type 8 has an invalid length. [ 854.097780][T16107] sch_fq: defrate 0 ignored. [ 854.395331][T16113] dummy0: entered allmulticast mode [ 854.795011][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20104'. [ 854.795048][T16137] netlink: 'syz.1.20104': attribute type 30 has an invalid length. [ 854.795064][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20104'. [ 854.809323][T16139] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20106'. [ 855.016587][T16150] ip_tables: iptables: counters copy to user failed while replacing table [ 855.162366][T16157] netlink: 156 bytes leftover after parsing attributes in process `syz.4.20115'. [ 855.325623][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20117'. [ 855.325648][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20117'. [ 855.325675][T16164] netlink: 'syz.4.20117': attribute type 18 has an invalid length. [ 855.327474][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20117'. [ 855.327494][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20117'. [ 855.327515][T16164] netlink: 'syz.4.20117': attribute type 18 has an invalid length. [ 857.577467][T16261] pimreg1: tun_chr_ioctl cmd 1074025677 [ 857.577588][T16261] pimreg1: linktype set to 6 [ 858.250992][T16302] nbd8: detected capacity change from 0 to 63 [ 858.255118][T10648] block nbd8: Receive control failed (result -32) [ 858.266564][ T2006] block nbd8: Dead connection, failed to find a fallback [ 858.266588][ T2006] block nbd8: shutting down sockets [ 858.266734][ T2006] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.266843][ T2006] Buffer I/O error on dev nbd8, logical block 0, async page read [ 858.307142][ T2006] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.307174][ T2006] Buffer I/O error on dev nbd8, logical block 1, async page read [ 858.307317][ T2006] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.307341][ T2006] Buffer I/O error on dev nbd8, logical block 2, async page read [ 858.307474][ T2006] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 858.307498][ T2006] Buffer I/O error on dev nbd8, logical block 3, async page read [ 858.348929][ T2006] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.348962][ T2006] Buffer I/O error on dev nbd8, logical block 0, async page read [ 858.348978][ T2006] Buffer I/O error on dev nbd8, logical block 1, async page read [ 858.348993][ T2006] Buffer I/O error on dev nbd8, logical block 2, async page read [ 858.349007][ T2006] Buffer I/O error on dev nbd8, logical block 3, async page read [ 858.361148][ T2006] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.361189][ T2006] Buffer I/O error on dev nbd8, logical block 0, async page read [ 858.361206][ T2006] Buffer I/O error on dev nbd8, logical block 1, async page read [ 858.368855][ T1983] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.371155][ T1983] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.371689][ T1983] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.371872][ T1983] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 858.375260][T16287] ldm_validate_partition_table(): Disk read failed. [ 858.375837][T16287] Dev nbd8: unable to read RDB block 0 [ 858.378842][T16287] nbd8: unable to read partition table [ 858.454160][T16287] ldm_validate_partition_table(): Disk read failed. [ 858.461197][T16287] Dev nbd8: unable to read RDB block 0 [ 858.468907][T16287] nbd8: unable to read partition table [ 858.814579][T16328] dvmrp0: entered allmulticast mode [ 858.829917][T16328] dvmrp0: left allmulticast mode [ 859.334118][T16362] __nla_validate_parse: 6 callbacks suppressed [ 859.334141][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20204'. [ 859.334171][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20204'. [ 859.616506][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20212'. [ 859.870854][T16394] IPVS: length: 119 != 8 [ 859.871237][T16394] nft_compat: unsupported protocol 1 [ 859.893223][T16398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20221'. [ 860.027271][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20224'. [ 860.036620][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20224'. [ 860.258766][T16416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20230'. [ 860.597324][T16438] tipc: New replicast peer: 127.0.0.1 [ 860.606846][T16438] tipc: Enabled bearer , priority 5 [ 860.815465][T16449] netlink: 'syz.4.20244': attribute type 1 has an invalid length. [ 860.815496][T16449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20244'. [ 861.523722][T16494] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 862.131995][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20282'. [ 862.458592][T16551] netlink: 'syz.2.20289': attribute type 10 has an invalid length. [ 862.682494][T16559] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 862.792511][T16567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20296'. [ 864.557573][T16667] xt_hashlimit: size too large, truncated to 1048576 [ 864.626824][T16669] xt_hashlimit: size too large, truncated to 1048576 [ 864.646072][T16669] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 865.093570][T16692] __nla_validate_parse: 5 callbacks suppressed [ 865.093591][T16692] netlink: 116 bytes leftover after parsing attributes in process `syz.3.20355'. [ 866.207539][ T30] audit: type=1804 audit(1793629313.878:18): pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.20386" name="/newroot/4062/cgroup.controllers" dev="tmpfs" ino=20368 res=1 errno=0 [ 866.207595][ T30] audit: type=1800 audit(1793629313.878:19): pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20386" name="cgroup.controllers" dev="tmpfs" ino=20368 res=0 errno=-22 [ 866.212325][ T30] audit: type=1800 audit(1793629313.888:20): pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20386" name="cgroup.controllers" dev="tmpfs" ino=20368 res=0 errno=-22 [ 866.602225][T16777] tipc: Resetting bearer [ 866.704957][T16777] bridge0: port 1(syz_tun) entered blocking state [ 866.705096][T16777] bridge0: port 1(syz_tun) entered listening state [ 866.705389][T16777] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.705519][T16777] bridge0: port 2(bridge_slave_1) entered listening state [ 867.434567][T16821] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 867.496682][T16827] netlink: 260 bytes leftover after parsing attributes in process `syz.4.20415'. [ 868.506074][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20437'. [ 868.506117][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20437'. [ 868.506403][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20437'. [ 868.506435][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20437'. [ 868.594301][T16884] netlink: 'syz.4.20439': attribute type 219 has an invalid length. [ 868.742896][T16891] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20443'. [ 868.938489][T16902] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 868.943468][T16902] bond7 (unregistering): Released all slaves [ 869.254804][T16925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.181738][T16965] ip_tables: iptables: counters copy to user failed while replacing table [ 870.202337][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20475'. [ 871.326335][T17017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 871.586031][T17034] netlink: 'syz.2.20504': attribute type 1 has an invalid length. [ 871.586056][T17034] netlink: 'syz.2.20504': attribute type 7 has an invalid length. [ 871.586070][T17034] netlink: 'syz.2.20504': attribute type 8 has an invalid length. [ 871.586083][T17034] netlink: 208 bytes leftover after parsing attributes in process `syz.2.20504'. [ 871.586099][T17034] NCSI netlink: No device for ifindex 1073545264 [ 872.081015][T17059] pimreg0: tun_chr_ioctl cmd 1074025677 [ 872.081128][T17059] pimreg0: linktype set to 1 [ 872.877395][T17101] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 874.517337][T17188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20574'. [ 874.517372][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20574'. [ 874.582249][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20574'. [ 874.721981][T17199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 874.909914][T17193] udevd[17193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 874.933250][T17193] udevd[17193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 874.935618][T17205] netlink: 156 bytes leftover after parsing attributes in process `syz.0.20581'. [ 875.082946][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20585'. [ 876.573993][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20610'. [ 877.237750][T17282] netlink: 116 bytes leftover after parsing attributes in process `syz.3.20616'. [ 878.036565][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20633'. [ 878.109243][T17324] bond10: invalid ARP target 0.0.0.0 specified for addition [ 878.109271][T17324] bond10: option arp_ip_target: invalid value (0) [ 878.111591][T17324] bond10 (unregistering): Released all slaves [ 878.142789][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20637'. [ 881.838280][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 881.838491][ C0] bridge0: port 1(syz_tun) entered learning state [ 882.840172][T17588] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 883.314209][T17613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20762'. [ 883.314235][T17613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20762'. [ 883.314256][T17613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20762'. [ 883.314439][T17613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20762'. [ 883.968771][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20782'. [ 883.968800][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20782'. [ 883.968872][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20782'. [ 884.726089][T17697] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 884.726235][T17697] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 884.933354][T17709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20809'. [ 885.065922][T17715] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20811'. [ 885.444441][T17734] netlink: 140 bytes leftover after parsing attributes in process `syz.1.20819'. [ 885.594413][T17738] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 885.594528][T17738] syzkaller1: linktype set to 773 [ 888.432616][T17905] bond8: Unable to set down delay as MII monitoring is disabled [ 888.472209][T17905] bond8 (unregistering): Released all slaves [ 889.147804][T17947] __nla_validate_parse: 9 callbacks suppressed [ 889.147827][T17947] netlink: 964 bytes leftover after parsing attributes in process `syz.0.20913'. [ 889.147843][T17947] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 889.190104][T17953] veth0_to_bridge: entered promiscuous mode [ 889.190300][T17953] macsec4: entered allmulticast mode [ 889.190316][T17953] veth0_to_bridge: entered allmulticast mode [ 889.195570][T17953] veth0_to_bridge: left allmulticast mode [ 889.195599][T17953] veth0_to_bridge: left promiscuous mode [ 889.747725][T17979] netlink: 'syz.2.20924': attribute type 8 has an invalid length. [ 890.094545][T17996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20934'. [ 890.267076][T18006] netlink: 1 bytes leftover after parsing attributes in process `syz.1.20937'. [ 890.295921][T18005] netlink: 1092 bytes leftover after parsing attributes in process `syz.3.20938'. [ 891.026398][T18039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20947'. [ 891.144555][T18049] netlink: 72 bytes leftover after parsing attributes in process `syz.3.20957'. [ 891.253936][T18056] sctp: [Deprecated]: syz.0.20962 (pid 18056) Use of int in maxseg socket option. [ 891.253936][T18056] Use struct sctp_assoc_value instead [ 892.220114][T18119] nbd9: detected capacity change from 0 to 63 [ 892.221651][T10648] block nbd9: Receive control failed (result -32) [ 892.226883][ T1983] block nbd9: Dead connection, failed to find a fallback [ 892.226905][ T1983] block nbd9: shutting down sockets [ 892.226918][ T1983] blk_print_req_error: 36 callbacks suppressed [ 892.226930][ T1983] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.226956][ T1983] buffer_io_error: 138 callbacks suppressed [ 892.226967][ T1983] Buffer I/O error on dev nbd9, logical block 0, async page read [ 892.227110][ T1983] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227134][ T1983] Buffer I/O error on dev nbd9, logical block 1, async page read [ 892.227227][ T1983] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227251][ T1983] Buffer I/O error on dev nbd9, logical block 2, async page read [ 892.227346][ T1983] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227370][ T1983] Buffer I/O error on dev nbd9, logical block 3, async page read [ 892.227473][ T1983] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227496][ T1983] Buffer I/O error on dev nbd9, logical block 0, async page read [ 892.227585][ T1983] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227608][ T1983] Buffer I/O error on dev nbd9, logical block 1, async page read [ 892.227695][ T1983] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227718][ T1983] Buffer I/O error on dev nbd9, logical block 2, async page read [ 892.227825][ T1983] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.227854][ T1983] Buffer I/O error on dev nbd9, logical block 3, async page read [ 892.374095][ T1983] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.374130][ T1983] Buffer I/O error on dev nbd9, logical block 0, async page read [ 892.378422][ T2006] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 892.378455][ T2006] Buffer I/O error on dev nbd9, logical block 1, async page read [ 892.382725][T17723] ldm_validate_partition_table(): Disk read failed. [ 892.386544][T17723] Dev nbd9: unable to read RDB block 0 [ 892.415966][T17723] nbd9: unable to read partition table [ 892.461377][T17723] ldm_validate_partition_table(): Disk read failed. [ 892.464993][T17723] Dev nbd9: unable to read RDB block 0 [ 892.473939][T17723] nbd9: unable to read partition table [ 892.516230][T18127] tap0: tun_chr_ioctl cmd 1074025681 [ 892.822205][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21002'. [ 893.023684][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21006'. [ 893.027568][T18156] netlink: 'syz.4.21006': attribute type 22 has an invalid length. [ 893.027592][T18156] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21006'. [ 893.219842][T18162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21009'. [ 894.635281][T18222] __nla_validate_parse: 6 callbacks suppressed [ 894.635302][T18222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.21035'. [ 894.784343][T18228] bond0: (slave macvlan3): Opening slave failed [ 895.004913][T18244] batman_adv: batadv0: Adding interface: veth0 [ 895.004932][T18244] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.004965][T18244] batman_adv: batadv0: Interface activated: veth0 [ 895.356080][T18268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21056'. [ 896.046341][T18306] netlink: 'syz.1.21073': attribute type 1 has an invalid length. [ 896.046364][T18306] netlink: 'syz.1.21073': attribute type 2 has an invalid length. [ 896.072797][T18308] ip6gretap2: entered allmulticast mode [ 896.100442][T18311] netlink: 'syz.1.21073': attribute type 1 has an invalid length. [ 896.100464][T18311] netlink: 'syz.1.21073': attribute type 2 has an invalid length. [ 896.348412][T18320] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21077'. [ 897.198089][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 897.198112][ C0] bridge0: topology change detected, propagating [ 897.198479][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.198495][ C0] bridge0: topology change detected, propagating [ 897.436546][T18382] netlink: 'syz.3.21108': attribute type 4 has an invalid length. [ 897.436570][T18382] netlink: 'syz.3.21108': attribute type 8 has an invalid length. [ 897.436584][T18382] netlink: 212 bytes leftover after parsing attributes in process `syz.3.21108'. [ 898.151726][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21128'. [ 898.219593][T18425] netlink: 27 bytes leftover after parsing attributes in process `syz.4.21130'. [ 898.941852][T18466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21148'. [ 899.533564][T18500] pimreg0: tun_chr_ioctl cmd 1074025677 [ 899.533677][T18500] pimreg0: linktype set to 778 [ 899.700274][T18510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21172'. [ 899.741060][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21170'. [ 900.247815][T18548] netlink: 144 bytes leftover after parsing attributes in process `syz.3.21187'. [ 900.251474][T18548] netlink: 144 bytes leftover after parsing attributes in process `syz.3.21187'. [ 900.716531][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21201'. [ 901.753152][T18623] tap0: tun_chr_ioctl cmd 1074025681 [ 902.757836][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21244'. [ 903.097234][T18691] sctp: [Deprecated]: syz.1.21252 (pid 18691) Use of int in max_burst socket option deprecated. [ 903.097234][T18691] Use struct sctp_assoc_value instead [ 903.306916][T18700] netlink: 'syz.3.21256': attribute type 14 has an invalid length. [ 903.439936][T18706] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 903.444991][T18706] ip_tables: iptables: counters copy to user failed while replacing table [ 904.055511][T18744] netlink: 'syz.0.21274': attribute type 83 has an invalid length. [ 904.107626][T18746] sctp: [Deprecated]: syz.2.21275 (pid 18746) Use of int in max_burst socket option. [ 904.107626][T18746] Use struct sctp_assoc_value instead [ 904.142912][T18748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21276'. [ 904.144009][T18748] netlink: 'syz.0.21276': attribute type 1 has an invalid length. [ 904.144029][T18748] netlink: 'syz.0.21276': attribute type 2 has an invalid length. [ 904.311139][T18758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21281'. [ 904.333525][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21280'. [ 904.333553][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21280'. [ 904.403097][T18763] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 904.913888][T18791] netlink: 'syz.4.21295': attribute type 2 has an invalid length. [ 905.324078][T18816] netlink: 'syz.4.21308': attribute type 8 has an invalid length. [ 906.960333][T18898] netlink: 'syz.3.21348': attribute type 1 has an invalid length. [ 906.960362][T18898] __nla_validate_parse: 1 callbacks suppressed [ 906.960374][T18898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21348'. [ 907.131845][T18908] sctp: [Deprecated]: syz.1.21354 (pid 18908) Use of int in max_burst socket option. [ 907.131845][T18908] Use struct sctp_assoc_value instead [ 907.384376][T18927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21362'. [ 907.416333][T18931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21363'. [ 908.357608][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21388'. [ 908.857486][T18996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21393'. [ 909.302523][T19020] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 909.401540][T19023] 1ªX¹¦Dö»: left allmulticast mode [ 909.426496][T19023] sit0: left promiscuous mode [ 909.437374][T19023] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 909.484719][T19028] pimreg: entered allmulticast mode [ 909.497077][T19025] pimreg: left allmulticast mode [ 909.742923][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21414'. [ 910.229626][T10648] block nbd10: Receive control failed (result -32) [ 910.462768][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21430'. [ 910.537935][T19082] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 910.629089][T19090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21434'. [ 910.744762][T19082] bond1 (unregistering): Released all slaves [ 910.933115][T19102] sctp: [Deprecated]: syz.2.21437 (pid 19102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 910.933115][T19102] Use struct sctp_sack_info instead [ 911.227836][T19119] netlink: 'syz.3.21444': attribute type 83 has an invalid length. [ 911.244520][T19117] 8021q: adding VLAN 0 to HW filter on device bond8 [ 911.272286][T19123] tipc: New replicast peer: 255.255.255.255 [ 911.277517][T19123] tipc: Enabled bearer , priority 5 [ 911.365031][T19130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21448'. [ 911.365066][T19130] netlink: 'syz.0.21448': attribute type 30 has an invalid length. [ 911.381293][T19130] vxlan2: entered promiscuous mode [ 911.381315][T19130] vxlan2: entered allmulticast mode [ 911.418501][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21448'. [ 911.418535][T19133] netlink: 'syz.0.21448': attribute type 30 has an invalid length. [ 911.472722][T19132] netlink: 'syz.3.21449': attribute type 10 has an invalid length. [ 911.515653][T19133] vxlan2: entered promiscuous mode [ 911.515677][T19133] vxlan2: entered allmulticast mode [ 911.849486][T19156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 911.973045][T19160] ip6erspan2: entered allmulticast mode [ 912.261013][T19178] syz_tun: entered allmulticast mode [ 912.261458][T19176] syz_tun: left allmulticast mode [ 912.582655][T19198] __nla_validate_parse: 1 callbacks suppressed [ 912.582678][T19198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21480'. [ 912.691406][T19206] netlink: 'syz.3.21481': attribute type 3 has an invalid length. [ 912.785091][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21484'. [ 913.409355][T19244] bond7: Unable to set down delay as MII monitoring is disabled [ 913.412717][T19244] bond7 (unregistering): Released all slaves [ 914.518142][T19294] bond10: Unable to set down delay as MII monitoring is disabled [ 914.803837][T19294] bond10 (unregistering): Released all slaves [ 915.096527][T19311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 915.359936][T19327] ip_tables: iptables: counters copy to user failed while replacing table [ 915.371151][T19328] bridge0: port 1(veth0) entered blocking state [ 915.373919][T19328] bridge0: port 1(veth0) entered disabled state [ 915.374091][T19328] veth0: entered allmulticast mode [ 915.380473][T19328] veth0: entered promiscuous mode [ 915.639253][T19344] siw: device registration error -23 [ 915.950105][T19366] netlink: 'syz.2.21553': attribute type 21 has an invalid length. [ 915.950127][T19366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21553'. [ 916.125666][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21557'. [ 916.125719][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21557'. [ 916.440228][T26386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.442257][T26384] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.467300][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.485661][ T5786] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 916.510953][T13178] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 916.542986][T13178] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.543387][T13178] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.550561][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 916.584282][T13178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 916.590897][T13178] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 916.716877][T19399] netlink: 'syz.4.21569': attribute type 1 has an invalid length. [ 916.716901][T19399] netlink: 1 bytes leftover after parsing attributes in process `syz.4.21569'. [ 917.085511][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21575'. [ 917.085548][T19417] netlink: 'syz.3.21575': attribute type 10 has an invalid length. [ 917.085564][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21575'. [ 917.110567][T19417] geneve7: entered promiscuous mode [ 917.110590][T19417] geneve7: entered allmulticast mode [ 917.139041][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21579'. [ 917.382347][T19430] batman_adv: batadv0: Adding interface: gretap2 [ 917.382366][T19430] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.382580][T19430] batman_adv: batadv0: Interface activated: gretap2 [ 917.632889][ T30] audit: type=1804 audit(1793629365.308:21): pid=19443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.21587" name="/newroot/4301/memory.events" dev="tmpfs" ino=21575 res=1 errno=0 [ 918.476953][ T30] audit: type=1800 audit(1793629366.148:22): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21612" name="blkio.bfq.time_recursive" dev="tmpfs" ino=21493 res=0 errno=-22 [ 918.712399][T19504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21618'. [ 919.000918][T19522] syzkaller1: entered promiscuous mode [ 919.000942][T19522] syzkaller1: entered allmulticast mode [ 919.150804][T19534] tap0: tun_chr_ioctl cmd 1074025675 [ 919.150830][T19534] tap0: persist enabled [ 919.171797][T19525] tap0: tun_chr_ioctl cmd 1074025681 [ 919.800918][T19573] openvswitch: netlink: Key type 31 is not supported [ 920.085768][T19588] ip_tables: iptables: counters copy to user failed while replacing table [ 921.603162][T19648] veth5: entered allmulticast mode [ 921.919960][T19669] netlink: 104 bytes leftover after parsing attributes in process `syz.1.21691'. [ 922.622406][T19703] netlink: 'syz.2.21707': attribute type 1 has an invalid length. [ 922.631914][T19705] vcan0: tx address claim with dest, not broadcast [ 922.729869][T19703] bond10: entered promiscuous mode [ 922.730320][T19703] 8021q: adding VLAN 0 to HW filter on device bond10 [ 922.852752][T19715] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 923.430139][T19747] netlink: 'syz.1.21726': attribute type 16 has an invalid length. [ 923.430164][T19747] netlink: 'syz.1.21726': attribute type 17 has an invalid length. [ 924.186881][T19747] bond0: left promiscuous mode [ 924.187504][T19747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.190095][T19747] team0: left promiscuous mode [ 924.190114][T19747] veth1_to_hsr: left promiscuous mode [ 924.190353][T19747] team0: left allmulticast mode [ 924.190366][T19747] veth1_to_hsr: left allmulticast mode [ 924.191401][T19747] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.200199][T19747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.278813][T19747] bridge_slave_1: entered promiscuous mode [ 924.286333][T19747] bond_slave_0: left promiscuous mode [ 924.286356][T19747] bond_slave_0: left allmulticast mode [ 924.312945][T19747] team_slave_0: left allmulticast mode [ 924.354426][T19747] batadv_slave_1: entered promiscuous mode [ 924.373952][T19747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.374016][T19747] hsr0: left promiscuous mode [ 924.384076][T19747] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 925.118651][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21746'. [ 925.118673][T19796] netlink: 11 bytes leftover after parsing attributes in process `syz.1.21746'. [ 925.118691][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21746'. [ 925.118704][T19796] netlink: 11 bytes leftover after parsing attributes in process `syz.1.21746'. [ 925.118719][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21746'. [ 925.775590][T19835] bond9: option tlb_dynamic_lb: invalid value (255) [ 925.789434][T19835] bond9 (unregistering): Released all slaves [ 926.248776][T19863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 926.378393][T19872] nbd: couldn't find a device at index 0 [ 926.605162][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21786'. [ 926.952119][T19908] netlink: 'syz.4.21792': attribute type 2 has an invalid length. [ 926.952145][T19908] netlink: 'syz.4.21792': attribute type 2 has an invalid length. [ 928.010659][T19966] ip6gre1: entered allmulticast mode [ 928.012776][ T43] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 928.012792][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 928.063168][T19968] tipc: Enabling of bearer rejected, already enabled [ 929.207718][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21843'. [ 929.450749][T20040] tap0: tun_chr_ioctl cmd 2147767520 [ 929.450950][T20040] tap0: tun_chr_ioctl cmd 1074025675 [ 929.450965][T20040] tap0: persist disabled [ 929.510818][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21850'. [ 929.510853][T20044] netlink: 'syz.2.21850': attribute type 20 has an invalid length. [ 929.510867][T20044] netlink: 'syz.2.21850': attribute type 21 has an invalid length. [ 931.113421][T20137] sctp: [Deprecated]: syz.1.21887 (pid 20137) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.113421][T20137] Use struct sctp_sack_info instead [ 931.426638][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21892'. [ 931.635206][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21895'. [ 931.635232][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21895'. [ 931.828519][T20167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21897'. [ 931.918044][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 932.300305][T20194] xt_hashlimit: size too large, truncated to 1048576 [ 932.924210][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21921'. [ 932.925353][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21921'. [ 933.097201][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21923'. [ 933.711437][T20258] netlink: 'syz.3.21938': attribute type 2 has an invalid length. [ 933.711461][T20258] netlink: 'syz.3.21938': attribute type 2 has an invalid length. [ 933.795256][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21937'. [ 933.843059][T20266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 934.103169][T20275] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 935.751332][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21987'. [ 935.929582][T20378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21991'. [ 935.984664][T20383] vcan0: tx address claim with different name [ 937.298747][ T5824] cgroup: fork rejected by pids controller in /syz3 [ 937.404175][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22026'. [ 937.620128][T20477] netlink: 'syz.1.22029': attribute type 4 has an invalid length. [ 937.710232][T20479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22030'. [ 937.715705][T20479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22030'. [ 937.744783][T20482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22031'. [ 937.744805][T20482] netlink: 468 bytes leftover after parsing attributes in process `syz.0.22031'. [ 937.744824][T20482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22031'. [ 938.224882][T12007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.237078][T12007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.239027][T12007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.260094][T12007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.262786][T12007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 938.385802][T10648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.397112][T10648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.407300][T10648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.420988][T10648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.426798][T10648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 939.016647][T20543] rdma_rxe: rxe_newlink: failed to add lo [ 939.373655][T20499] C speed is unknown, defaulting to 1000 [ 939.387597][T20499] wg0 speed is unknown, defaulting to 1000 [ 939.773828][T20499] wg2 speed is unknown, defaulting to 1000 [ 939.777812][T20499] C speed is unknown, defaulting to 1000 [ 940.078175][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 940.194371][T20499] lo speed is unknown, defaulting to 1000 [ 940.358347][T20594] syzkaller1: tun_chr_ioctl cmd 3229636669 [ 940.358785][T20594] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 940.478488][T10648] Bluetooth: hci2: command tx timeout [ 940.721453][T20499] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.721627][T20499] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.722085][T20499] bridge_slave_0: entered allmulticast mode [ 940.723962][T20499] bridge_slave_0: entered promiscuous mode [ 940.753529][T20616] sctp: [Deprecated]: syz.4.22076 (pid 20616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.753529][T20616] Use struct sctp_sack_info instead [ 940.753778][T20616] sctp: [Deprecated]: syz.4.22076 (pid 20616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.753778][T20616] Use struct sctp_sack_info instead [ 940.781431][T20499] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.785064][T20499] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.785238][T20499] bridge_slave_1: entered allmulticast mode [ 940.797148][T20499] bridge_slave_1: entered promiscuous mode [ 940.863229][T20618] A link change request failed with some changes committed already. Interface 26±ÿ†ˆ¬hËdtÍ may have been left with an inconsistent configuration, please check. [ 940.906965][T20499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.922576][T20499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.017764][T20499] team0: Port device team_slave_0 added [ 941.025981][T20499] team0: Port device team_slave_1 added [ 941.073257][T20499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.073275][T20499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.073300][T20499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.075391][T20499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.075404][T20499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.075429][T20499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.234344][T20499] hsr_slave_0: entered promiscuous mode [ 941.235390][T20499] hsr_slave_1: entered promiscuous mode [ 941.236170][T20499] debugfs: 'hsr0' already exists in 'hsr' [ 941.236189][T20499] Cannot create hsr debugfs directory [ 941.558323][T20499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.558358][T20499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.745009][T20650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 941.752598][T20499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.752632][T20499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.965442][T20499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 941.965480][T20499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.281487][T20653] syzkaller1: entered promiscuous mode [ 942.281512][T20653] syzkaller1: entered allmulticast mode [ 942.347390][T20499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.347427][T20499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.507126][T20667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22098'. [ 942.558541][T12007] Bluetooth: hci2: command tx timeout [ 942.650150][T20499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 942.669136][T20499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.670111][T20499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 942.698545][T20499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 942.703407][T20499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 942.730281][T20499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 942.731182][T20499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 942.743750][T20499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.886702][T20499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.919783][T20499] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.936785][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.936911][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.970225][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.970302][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.597471][T20700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 944.092607][T20499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.213923][T20499] veth0_vlan: entered promiscuous mode [ 944.237259][T20499] veth1_vlan: entered promiscuous mode [ 944.391235][T20499] veth0_macvtap: entered promiscuous mode [ 944.413145][T20734] netlink: 'syz.1.22119': attribute type 1 has an invalid length. [ 944.413284][T20499] veth1_macvtap: entered promiscuous mode [ 944.494390][T20734] bond9: entered promiscuous mode [ 944.494898][T20734] 8021q: adding VLAN 0 to HW filter on device bond9 [ 944.507563][T20499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.512536][T20499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.519994][ T272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.520070][ T272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.520134][ T272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.520223][ T272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.641395][T20740] 8021q: adding VLAN 0 to HW filter on device bond9 [ 944.641804][T20740] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 944.641825][T20740] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 944.650317][T20740] bond9: (slave gre1): Opening slave failed [ 945.012276][ T286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.012298][ T286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.089721][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.089741][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.664519][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22153'. [ 947.118182][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 947.194706][T20849] netlink: 83 bytes leftover after parsing attributes in process `syz.4.22168'. [ 947.784433][T20884] lo: entered allmulticast mode [ 947.786326][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22184'. [ 947.787200][T20883] lo: left allmulticast mode [ 949.240502][T20929] netlink: 'syz.3.22204': attribute type 1 has an invalid length. [ 949.245710][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22203'. [ 949.245738][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22203'. [ 953.727132][T21025] netlink: 9 bytes leftover after parsing attributes in process `syz.2.22251'. [ 953.815854][T21025] bridge0: port 3(gretap0) entered disabled state [ 953.883296][T21025] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22251'. [ 953.883429][T21025] 0ªî{X¹¦: renamed from gretap0 [ 953.905165][T21025] bridge0: port 3(30ªî{X¹¦) entered blocking state [ 953.905340][T21025] bridge0: port 3(30ªî{X¹¦) entered forwarding state [ 953.915282][T21025] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 954.226071][T21055] netlink: 'syz.4.22264': attribute type 5 has an invalid length. [ 954.226093][T21055] netlink: 'syz.4.22264': attribute type 9 has an invalid length. [ 954.226106][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22264'. [ 954.485882][T21067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 954.748103][T21084] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 955.100602][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22285'. [ 956.061896][T21149] ip_tables: iptables: counters copy to user failed while replacing table [ 956.079218][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 956.347618][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802afcd800: rx timeout, send abort [ 956.458658][T21168] lo: entered allmulticast mode [ 956.459259][T21167] lo: left allmulticast mode [ 956.469928][T21166] tun1: tun_chr_ioctl cmd 1074025675 [ 956.469949][T21166] tun1: persist enabled [ 956.471925][T21166] tun1: tun_chr_ioctl cmd 2148553947 [ 956.752409][T21186] IPVS: stopping backup sync thread 381 ... [ 956.848873][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802afcd800: abort rx timeout. Force session deactivation [ 957.289910][T21214] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 957.380429][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22340'. [ 957.752200][T21241] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 957.831909][T21241] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 958.191050][T21256] §: entered promiscuous mode [ 958.221203][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22351'. [ 958.424565][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22353'. [ 958.424591][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22353'. [ 959.005508][T21284] bridge0: port 5(ip6gretap0) entered disabled state [ 959.005887][T21284] bridge0: port 4(syz_tun) entered disabled state [ 959.006539][T21284] bridge0: port 3(30ªî{X¹¦) entered disabled state [ 959.006732][T21284] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.045928][T21273] syzkaller1: entered promiscuous mode [ 959.045953][T21273] syzkaller1: entered allmulticast mode [ 959.939351][T21322] syzkaller1: entered promiscuous mode [ 959.939376][T21322] syzkaller1: entered allmulticast mode [ 959.948585][T21322] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 961.030692][T21376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 961.307460][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22401'. [ 961.377419][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22401'. [ 961.735894][T21413] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 963.249657][T21466] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 963.396185][T21468] ip_tables: iptables: counters copy to user failed while replacing table [ 964.003908][T21498] 0ªX¹¦Dö»: left allmulticast mode [ 964.393102][T21526] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 964.793110][T21536] syz.4.22461 (21536) used greatest stack depth: 17992 bytes left [ 965.253446][T21568] netlink: 'syz.0.22477': attribute type 4 has an invalid length. [ 965.347440][T21571] syzkaller1: entered promiscuous mode [ 965.347464][T21571] syzkaller1: entered allmulticast mode [ 966.043355][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22493'. [ 966.043384][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22493'. [ 966.727767][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22513'. [ 966.727811][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22513'. [ 966.766354][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22513'. [ 966.766390][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22513'. [ 966.778079][ T218] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 966.778377][T13537] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 966.778410][T13537] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 966.778442][T13537] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 967.523572][T21692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22532'. [ 967.525197][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22532'. [ 967.525223][T21692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22532'. [ 967.525232][T21692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22532'. [ 968.419162][T21709] x_tables: duplicate entry at hook 1 [ 968.425372][T21709] sch_fq: defrate 8 ignored. [ 968.558261][T12007] Bluetooth: hci2: command 0x040f tx timeout [ 968.867750][T21736] netlink: 566 bytes leftover after parsing attributes in process `syz.3.22553'. [ 969.337534][T21766] xt_hashlimit: size too large, truncated to 1048576 [ 969.408721][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22564'. [ 970.639953][T12007] Bluetooth: hci2: command 0x040f tx timeout [ 970.777126][T21842] syzkaller1: entered allmulticast mode [ 971.919273][T21904] trusted_key: syz.3.22609 sent an empty control message without MSG_MORE. [ 972.720382][T12007] Bluetooth: hci2: command 0x040f tx timeout [ 972.798039][T21955] netlink: 'syz.0.22630': attribute type 1 has an invalid length. [ 972.798059][T21955] netlink: 'syz.0.22630': attribute type 2 has an invalid length. [ 973.505968][T21998] syzkaller1: entered promiscuous mode [ 973.505993][T21998] syzkaller1: entered allmulticast mode [ 973.508980][T22000] __nla_validate_parse: 3 callbacks suppressed [ 973.508996][T22000] netlink: 7 bytes leftover after parsing attributes in process `syz.3.22646'. [ 974.025758][T22026] xt_hashlimit: size too large, truncated to 1048576 [ 974.223859][T22038] netlink: 63 bytes leftover after parsing attributes in process `syz.4.22659'. [ 974.891360][T22069] sctp: [Deprecated]: syz.0.22674 (pid 22069) Use of int in maxseg socket option. [ 974.891360][T22069] Use struct sctp_assoc_value instead [ 976.572388][T22152] syzkaller0: entered promiscuous mode [ 976.572677][T22150] syzkaller0: left promiscuous mode [ 976.576751][T22154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22713'. [ 976.576786][T22154] bond0: ARP target 0.0.0.2 is already present [ 976.576807][T22154] bond0: option arp_ip_target: invalid value (33554432) [ 976.974756][T22174] tap1: tun_chr_ioctl cmd 1074025675 [ 976.974787][T22174] tap1: persist enabled [ 976.975179][T22174] tap1: tun_chr_ioctl cmd 1074025678 [ 976.975195][T22174] tap1: group set to 0 [ 977.135181][T22187] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 977.410532][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22734'. [ 977.667202][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22741'. [ 977.685352][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22741'. [ 977.971737][T22236] sctp: [Deprecated]: syz.1.22749 (pid 22236) Use of int in max_burst socket option. [ 977.971737][T22236] Use struct sctp_assoc_value instead [ 978.063777][T22242] netlink: 27 bytes leftover after parsing attributes in process `syz.2.22753'. [ 978.211379][T22252] nbd: socks must be embedded in a SOCK_ITEM attr [ 978.233692][T22252] block nbd11: shutting down sockets [ 978.436747][T22263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22763'. [ 978.436777][T22263] bond0: Unable to set up delay as MII monitoring is disabled [ 978.670971][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22769'. [ 978.671010][T22278] netlink: 'syz.2.22769': attribute type 30 has an invalid length. [ 978.708378][T22278] vxlan4: entered promiscuous mode [ 978.708401][T22278] vxlan4: entered allmulticast mode [ 978.728716][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22769'. [ 978.728749][T22279] netlink: 'syz.2.22769': attribute type 30 has an invalid length. [ 978.833514][T22279] vxlan4: entered promiscuous mode [ 978.833539][T22279] vxlan4: entered allmulticast mode [ 979.557684][T22319] batadv_slave_0: entered promiscuous mode [ 979.566901][T22318] batadv_slave_0: left promiscuous mode [ 979.919829][T22334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22793'. [ 980.365104][T22365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22808'. [ 980.365145][T22365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22808'. [ 980.894860][T22397] netlink: 'syz.1.22822': attribute type 11 has an invalid length. [ 981.048644][T22403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22828'. [ 981.048672][T22403] block nbd11: Unsupported socket: should be TCP or UNIX. [ 981.688920][ T30] audit: type=1800 audit(1793629429.368:23): pid=22440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22840" name=CB dev="tmpfs" ino=786 res=0 errno=-22 [ 981.773976][T22447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 981.985447][T22461] sctp: [Deprecated]: syz.3.22850 (pid 22461) Use of int in max_burst socket option. [ 981.985447][T22461] Use struct sctp_assoc_value instead [ 983.158053][T22518] sctp: [Deprecated]: syz.4.22870 (pid 22518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 983.158053][T22518] Use struct sctp_sack_info instead [ 983.395445][T22531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22877'. [ 983.616075][T22543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22879'. [ 983.895477][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22887'. [ 984.442624][T22590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 985.587664][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22926'. [ 985.608547][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22926'. [ 985.726681][T22653] netlink: 104 bytes leftover after parsing attributes in process `syz.2.22931'. [ 985.980199][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22936'. [ 986.241347][T22677] xt_LOG: level 115 >= 8 [ 986.528976][T22697] ip6gre7: entered promiscuous mode [ 986.529006][T22697] ip6gre7: entered allmulticast mode [ 986.592146][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22954'. [ 987.291106][T22724] netlink: 'syz.3.22965': attribute type 1 has an invalid length. [ 987.331523][T22725] tun0: tun_chr_ioctl cmd 1074025677 [ 987.331637][T22725] tun0: linktype set to 512 [ 987.332106][T22725] tun0: tun_chr_ioctl cmd 1074818700 [ 987.493205][T22733] syzkaller1: entered promiscuous mode [ 987.493229][T22733] syzkaller1: entered allmulticast mode [ 988.110691][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22986'. [ 988.110716][T22770] netlink: 'syz.2.22986': attribute type 5 has an invalid length. [ 988.110724][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22986'. [ 988.142864][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22986'. [ 988.142892][T22770] netlink: 'syz.2.22986': attribute type 5 has an invalid length. [ 988.142900][T22770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22986'. [ 988.579868][ T30] audit: type=1800 audit(1793629436.258:24): pid=22781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.22991" name="memory.events" dev="tmpfs" ino=993 res=0 errno=-22 [ 988.728166][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 989.486144][T22839] [ 989.488528][T22839] ====================================================== [ 989.495560][T22839] WARNING: possible circular locking dependency detected [ 989.502615][T22839] syzkaller #0 Not tainted [ 989.507028][T22839] ------------------------------------------------------ [ 989.514039][T22839] syz.4.23019/22839 is trying to acquire lock: [ 989.520176][T22839] ffffffff90094cc0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600 [ 989.529685][T22839] [ 989.529685][T22839] but task is already holding lock: [ 989.537047][T22839] ffffffff900771b8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x59/0x470 [ 989.546578][T22839] [ 989.546578][T22839] which lock already depends on the new lock. [ 989.546578][T22839] [ 989.556993][T22839] [ 989.556993][T22839] the existing dependency chain (in reverse order) is: [ 989.566000][T22839] [ 989.566000][T22839] -> #8 (slab_mutex){+.+.}-{4:4}: [ 989.573320][T22839] __mutex_lock+0x197/0x15a0 [ 989.578442][T22839] kmem_cache_destroy+0x73/0x180 [ 989.583954][T22839] nfsd_file_cache_shutdown+0x126/0x370 [ 989.590118][T22839] nfsd_svc+0x539/0x710 [ 989.594841][T22839] nfsd_nl_threads_set_doit+0xa6c/0xc30 [ 989.600902][T22839] genl_family_rcv_msg_doit+0x233/0x340 [ 989.606999][T22839] genl_rcv_msg+0x614/0x7a0 [ 989.612015][T22839] netlink_rcv_skb+0x226/0x4a0 [ 989.617297][T22839] genl_rcv+0x28/0x40 [ 989.621791][T22839] netlink_unicast+0x8ef/0xa80 [ 989.627072][T22839] netlink_sendmsg+0x7f0/0xb20 [ 989.632360][T22839] sock_sendmsg_nosec+0x14e/0x190 [ 989.637925][T22839] ____sys_sendmsg+0x54e/0x850 [ 989.643209][T22839] ___sys_sendmsg+0x2a5/0x360 [ 989.648494][T22839] __x64_sys_sendmsg+0x1b1/0x290 [ 989.654004][T22839] do_syscall_64+0x166/0x520 [ 989.659114][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.665524][T22839] [ 989.665524][T22839] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 989.673248][T22839] cpus_read_lock+0x3d/0x160 [ 989.678399][T22839] static_key_slow_inc+0x12/0x30 [ 989.683879][T22839] udp_tunnel_encap_enable+0x86/0xb0 [ 989.689775][T22839] udp_lib_setsockopt+0x2da/0x6b0 [ 989.695329][T22839] udpv6_setsockopt+0x67/0xb0 [ 989.700622][T22839] do_sock_setsockopt+0x17c/0x1b0 [ 989.706159][T22839] __x64_sys_setsockopt+0x13d/0x1b0 [ 989.711869][T22839] do_syscall_64+0x166/0x520 [ 989.716976][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.723382][T22839] [ 989.723382][T22839] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 989.731107][T22839] lock_sock_nested+0x41/0x100 [ 989.736466][T22839] inet_shutdown+0x6a/0x390 [ 989.741548][T22839] nbd_mark_nsock_dead+0x2cb/0x550 [ 989.747205][T22839] sock_shutdown+0x15e/0x260 [ 989.752303][T22839] nbd_clear_sock+0x24/0x170 [ 989.757407][T22839] nbd_config_put+0x477/0x7e0 [ 989.762593][T22839] nbd_genl_connect+0x19b8/0x1cd0 [ 989.768196][T22839] genl_family_rcv_msg_doit+0x233/0x340 [ 989.774252][T22839] genl_rcv_msg+0x614/0x7a0 [ 989.779266][T22839] netlink_rcv_skb+0x226/0x4a0 [ 989.784548][T22839] genl_rcv+0x28/0x40 [ 989.789039][T22839] netlink_unicast+0x8ef/0xa80 [ 989.794317][T22839] netlink_sendmsg+0x7f0/0xb20 [ 989.799600][T22839] sock_sendmsg_nosec+0x14e/0x190 [ 989.805142][T22839] ____sys_sendmsg+0x54e/0x850 [ 989.810418][T22839] ___sys_sendmsg+0x2a5/0x360 [ 989.815606][T22839] __x64_sys_sendmsg+0x1b1/0x290 [ 989.821059][T22839] do_syscall_64+0x166/0x520 [ 989.826164][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.832566][T22839] [ 989.832566][T22839] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 989.840202][T22839] __mutex_lock+0x197/0x15a0 [ 989.845310][T22839] nbd_queue_rq+0x373/0xff0 [ 989.850327][T22839] blk_mq_dispatch_rq_list+0x499/0x1990 [ 989.856500][T22839] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 989.863371][T22839] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 989.869864][T22839] blk_mq_run_work_fn+0x167/0x2f0 [ 989.875401][T22839] process_scheduled_works+0xc3d/0x1630 [ 989.881468][T22839] worker_thread+0xa47/0xfb0 [ 989.886581][T22839] kthread+0x38b/0x480 [ 989.891163][T22839] ret_from_fork+0x514/0xb70 [ 989.896301][T22839] ret_from_fork_asm+0x1a/0x30 [ 989.901576][T22839] [ 989.901576][T22839] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 989.908775][T22839] __mutex_lock+0x197/0x15a0 [ 989.913880][T22839] nbd_queue_rq+0xc1/0xff0 [ 989.918808][T22839] blk_mq_dispatch_rq_list+0x499/0x1990 [ 989.924874][T22839] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 989.931713][T22839] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 989.938211][T22839] blk_mq_run_work_fn+0x167/0x2f0 [ 989.943753][T22839] process_scheduled_works+0xc3d/0x1630 [ 989.949867][T22839] worker_thread+0xa47/0xfb0 [ 989.954978][T22839] kthread+0x38b/0x480 [ 989.959562][T22839] ret_from_fork+0x514/0xb70 [ 989.964664][T22839] ret_from_fork_asm+0x1a/0x30 [ 989.969938][T22839] [ 989.969938][T22839] -> #3 (set->srcu){.+.+}-{0:0}: [ 989.977052][T22839] __synchronize_srcu+0xca/0x2f0 [ 989.982504][T22839] elevator_switch+0x1e8/0x7b0 [ 989.987869][T22839] elevator_change+0x2fa/0x480 [ 989.993147][T22839] elevator_set_default+0x375/0x440 [ 989.998861][T22839] blk_register_queue+0x404/0x4f0 [ 990.004453][T22839] __add_disk+0x6b8/0xdb0 [ 990.009331][T22839] add_disk_fwnode+0x100/0x3a0 [ 990.014608][T22839] nbd_dev_add+0x733/0xb60 [ 990.019532][T22839] nbd_init+0x168/0x1f0 [ 990.024292][T22839] do_one_initcall+0x250/0x870 [ 990.029564][T22839] do_initcall_level+0x10a/0x1a0 [ 990.035081][T22839] do_initcalls+0x59/0xa0 [ 990.039933][T22839] kernel_init_freeable+0x29d/0x3e0 [ 990.045645][T22839] kernel_init+0x22/0x1d0 [ 990.050494][T22839] ret_from_fork+0x514/0xb70 [ 990.055596][T22839] ret_from_fork_asm+0x1a/0x30 [ 990.060875][T22839] [ 990.060875][T22839] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 990.068682][T22839] __mutex_lock+0x197/0x15a0 [ 990.073793][T22839] elevator_change+0x1af/0x480 [ 990.079082][T22839] elevator_set_none+0xb5/0x140 [ 990.084456][T22839] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 990.090776][T22839] nbd_start_device+0x189/0xb30 [ 990.096136][T22839] nbd_genl_connect+0x167d/0x1cd0 [ 990.101677][T22839] genl_family_rcv_msg_doit+0x233/0x340 [ 990.107735][T22839] genl_rcv_msg+0x614/0x7a0 [ 990.112761][T22839] netlink_rcv_skb+0x226/0x4a0 [ 990.118063][T22839] genl_rcv+0x28/0x40 [ 990.122568][T22839] netlink_unicast+0x8ef/0xa80 [ 990.127851][T22839] netlink_sendmsg+0x7f0/0xb20 [ 990.133138][T22839] sock_sendmsg_nosec+0x14e/0x190 [ 990.138680][T22839] ____sys_sendmsg+0x54e/0x850 [ 990.143955][T22839] ___sys_sendmsg+0x2a5/0x360 [ 990.149152][T22839] __x64_sys_sendmsg+0x1b1/0x290 [ 990.154604][T22839] do_syscall_64+0x166/0x520 [ 990.159707][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.166120][T22839] [ 990.166120][T22839] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 990.174803][T22839] blk_alloc_queue+0x544/0x690 [ 990.180092][T22839] __blk_mq_alloc_disk+0x194/0x390 [ 990.185717][T22839] nbd_dev_add+0x494/0xb60 [ 990.190647][T22839] nbd_init+0x168/0x1f0 [ 990.195311][T22839] do_one_initcall+0x250/0x870 [ 990.200585][T22839] do_initcall_level+0x10a/0x1a0 [ 990.206033][T22839] do_initcalls+0x59/0xa0 [ 990.210876][T22839] kernel_init_freeable+0x29d/0x3e0 [ 990.216588][T22839] kernel_init+0x22/0x1d0 [ 990.221433][T22839] ret_from_fork+0x514/0xb70 [ 990.226532][T22839] ret_from_fork_asm+0x1a/0x30 [ 990.231806][T22839] [ 990.231806][T22839] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 990.239013][T22839] __lock_acquire+0x164c/0x2de0 [ 990.244411][T22839] lock_acquire+0x115/0x350 [ 990.249425][T22839] fs_reclaim_acquire+0x71/0x100 [ 990.254878][T22839] kmem_cache_alloc_noprof+0x5f/0x600 [ 990.260761][T22839] __kmem_cache_create_args+0x30c/0x470 [ 990.266823][T22839] ieee80211_mesh_init_sdata+0x371/0x620 [ 990.273090][T22839] ieee80211_setup_sdata+0x858/0xc10 [ 990.278961][T22839] ieee80211_if_add+0xdd8/0x1600 [ 990.284424][T22839] ieee80211_add_iface+0xb4/0x5c0 [ 990.289977][T22839] nl80211_new_interface+0x7c5/0x1080 [ 990.295967][T22839] genl_family_rcv_msg_doit+0x233/0x340 [ 990.302027][T22839] genl_rcv_msg+0x614/0x7a0 [ 990.307041][T22839] netlink_rcv_skb+0x226/0x4a0 [ 990.312319][T22839] genl_rcv+0x28/0x40 [ 990.316810][T22839] netlink_unicast+0x8ef/0xa80 [ 990.322092][T22839] netlink_sendmsg+0x7f0/0xb20 [ 990.327374][T22839] sock_sendmsg_nosec+0x14e/0x190 [ 990.332916][T22839] ____sys_sendmsg+0x54e/0x850 [ 990.338194][T22839] ___sys_sendmsg+0x2a5/0x360 [ 990.343468][T22839] __x64_sys_sendmsg+0x1b1/0x290 [ 990.348920][T22839] do_syscall_64+0x166/0x520 [ 990.354034][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.360446][T22839] [ 990.360446][T22839] other info that might help us debug this: [ 990.360446][T22839] [ 990.370657][T22839] Chain exists of: [ 990.370657][T22839] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 990.370657][T22839] [ 990.382979][T22839] Possible unsafe locking scenario: [ 990.382979][T22839] [ 990.390414][T22839] CPU0 CPU1 [ 990.395766][T22839] ---- ---- [ 990.401114][T22839] lock(slab_mutex); [ 990.405088][T22839] lock(cpu_hotplug_lock); [ 990.412098][T22839] lock(slab_mutex); [ 990.418585][T22839] lock(fs_reclaim); [ 990.422557][T22839] [ 990.422557][T22839] *** DEADLOCK *** [ 990.422557][T22839] [ 990.430682][T22839] locks held by syz.4.23019/22839: 4, last CPU#1: [ 990.437193][T22839] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.445373][T22839] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x117/0xfa0 [ 990.454677][T22839] #2: ffff888073460800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xb9/0x1080 [ 990.464952][T22839] #3: ffffffff900771b8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x59/0x470 [ 990.474871][T22839] [ 990.474871][T22839] stack backtrace: [ 990.480752][T22839] CPU: 1 UID: 0 PID: 22839 Comm: syz.4.23019 Not tainted syzkaller #0 PREEMPT(full) [ 990.490201][T22839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 990.500244][T22839] Call Trace: [ 990.503513][T22839] [ 990.506437][T22839] dump_stack_lvl+0xe8/0x150 [ 990.511031][T22839] print_circular_bug+0x2e2/0x300 [ 990.516058][T22839] check_noncircular+0x12f/0x150 [ 990.520994][T22839] __lock_acquire+0x164c/0x2de0 [ 990.525846][T22839] ? __pfx___mutex_trylock_common+0x10/0x10 [ 990.531740][T22839] ? rcu_is_watching+0x16/0xb0 [ 990.536505][T22839] ? trace_contention_end+0x3d/0x140 [ 990.541788][T22839] lock_acquire+0x115/0x350 [ 990.546285][T22839] ? kmem_cache_alloc_noprof+0x5f/0x600 [ 990.551829][T22839] ? __kmem_cache_create_args+0x59/0x470 [ 990.557485][T22839] ? __kmem_cache_create_args+0x30c/0x470 [ 990.563205][T22839] fs_reclaim_acquire+0x71/0x100 [ 990.568140][T22839] ? kmem_cache_alloc_noprof+0x5f/0x600 [ 990.573686][T22839] kmem_cache_alloc_noprof+0x5f/0x600 [ 990.579057][T22839] ? __kmem_cache_create_args+0x30c/0x470 [ 990.584780][T22839] __kmem_cache_create_args+0x30c/0x470 [ 990.590327][T22839] ieee80211_mesh_init_sdata+0x371/0x620 [ 990.595963][T22839] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 990.602121][T22839] ? __raw_spin_lock_init+0x45/0x100 [ 990.607401][T22839] ieee80211_setup_sdata+0x858/0xc10 [ 990.612683][T22839] ieee80211_if_add+0xdd8/0x1600 [ 990.617625][T22839] ieee80211_add_iface+0xb4/0x5c0 [ 990.622638][T22839] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 990.629221][T22839] ? nl80211_new_interface+0x682/0x1080 [ 990.634764][T22839] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 990.640389][T22839] ? __alloc_skb+0x4d0/0x7a0 [ 990.644982][T22839] nl80211_new_interface+0x7c5/0x1080 [ 990.650350][T22839] ? __pfx_nl80211_new_interface+0x10/0x10 [ 990.656154][T22839] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 990.662481][T22839] genl_family_rcv_msg_doit+0x233/0x340 [ 990.668113][T22839] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 990.674187][T22839] ? bpf_lsm_capable+0x9/0x20 [ 990.678864][T22839] ? security_capable+0x7e/0x2c0 [ 990.683942][T22839] genl_rcv_msg+0x614/0x7a0 [ 990.688443][T22839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.693459][T22839] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 990.698820][T22839] ? __pfx_nl80211_new_interface+0x10/0x10 [ 990.704622][T22839] ? __pfx_nl80211_post_doit+0x10/0x10 [ 990.710076][T22839] netlink_rcv_skb+0x226/0x4a0 [ 990.714841][T22839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.719854][T22839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 990.725144][T22839] ? down_read+0x2b9/0x320 [ 990.729562][T22839] genl_rcv+0x28/0x40 [ 990.733540][T22839] netlink_unicast+0x8ef/0xa80 [ 990.738308][T22839] netlink_sendmsg+0x7f0/0xb20 [ 990.743088][T22839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.748396][T22839] ? aa_sock_msg_perm+0x144/0x210 [ 990.753486][T22839] ? apparmor_socket_sendmsg+0x98/0x360 [ 990.759107][T22839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.764397][T22839] sock_sendmsg_nosec+0x14e/0x190 [ 990.769418][T22839] ____sys_sendmsg+0x54e/0x850 [ 990.774181][T22839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.779461][T22839] ? import_iovec+0x73/0xa0 [ 990.784044][T22839] ___sys_sendmsg+0x2a5/0x360 [ 990.788714][T22839] ? __lock_acquire+0x747/0x2de0 [ 990.793646][T22839] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.798843][T22839] ? futex_wait+0x2a2/0x390 [ 990.803373][T22839] ? __fget_files+0x3a2/0x420 [ 990.808104][T22839] ? __fget_files+0x2a/0x420 [ 990.812692][T22839] __x64_sys_sendmsg+0x1b1/0x290 [ 990.817634][T22839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 990.823098][T22839] do_syscall_64+0x166/0x520 [ 990.827679][T22839] ? trace_irq_disable+0x3b/0x140 [ 990.832702][T22839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.838765][T22839] ? clear_bhb_loop+0x70/0xc0 [ 990.843439][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.849321][T22839] RIP: 0033:0x7f2adb99fb19 [ 990.853729][T22839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.873326][T22839] RSP: 002b:00007f2ad9bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.881737][T22839] RAX: ffffffffffffffda RBX: 00007f2adbc25fa0 RCX: 00007f2adb99fb19 [ 990.889703][T22839] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 990.897752][T22839] RBP: 00007f2adba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 990.905711][T22839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.913671][T22839] R13: 00007f2adbc26038 R14: 00007f2adbc25fa0 R15: 00007fff00a309d8 [ 990.921646][T22839]