last executing test programs: 3.928171287s ago: executing program 4 (id=13206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 3.253369123s ago: executing program 4 (id=13210): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f00"], 0x5c}, 0x1, 0x620b}, 0x0) 3.0553406s ago: executing program 3 (id=13211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x8000003, 0x1, 0x1, 0x8, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9e, 0x7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2.513754772s ago: executing program 2 (id=13213): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) 2.502234361s ago: executing program 1 (id=13214): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x30, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2040}, 0x40040) 2.419377921s ago: executing program 3 (id=13215): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x5, {{0xa, 0x4e21, 0x4042, @mcast1, 0x6}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.398876097s ago: executing program 4 (id=13216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.317587664s ago: executing program 0 (id=13217): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="eaf9035cbf7b"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) 2.162381475s ago: executing program 1 (id=13218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff09, 0x110c2300fe) 2.058716498s ago: executing program 2 (id=13219): r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 2.051548479s ago: executing program 3 (id=13220): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.801248031s ago: executing program 0 (id=13221): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x9, 0x0) close(0x3) 1.339246107s ago: executing program 1 (id=13222): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.320561671s ago: executing program 2 (id=13223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) close(r0) 1.308554475s ago: executing program 4 (id=13224): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) 1.270048587s ago: executing program 0 (id=13225): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000380)=0x84) 1.245274708s ago: executing program 3 (id=13226): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 953.667203ms ago: executing program 4 (id=13227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "00b612e6ff3f8d1d55039e47600ea0db29796bf6c144cd3e348922a64aeff881a389e2316d372ad60fce86c25fdb8c4b6051138bdfd581ea115df03fe52254be6474874a45f103c2ad74b1bc0ea79d909cc106ae451440a0cfba3f8bb4e1cf9ba96a2f700e40d22c044e8168733756d7cd604f2b710b51582d5993307f5848889af681be589ef67367cc933f6b6f27251d088a8442f8b772595449821de0198f87aff72bac262bd1e570f825de245024012ced791673b66cc8b23d253a35ea8cc2efd4d87f940316098196fd5ac75a4f091211ead07bef63aa948590132e7e671e96ea35ab8a9ab2b05ca9a4c6b3f28262f91f05305e56b1a2d0f3fdc06aa085"}]}}]}, 0x170}}, 0x24040004) 897.674701ms ago: executing program 1 (id=13228): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 862.287357ms ago: executing program 2 (id=13229): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x0, 0x0, 0x6, 0x2008, 0xfffd}, 0x20) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) 817.463063ms ago: executing program 0 (id=13230): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) 558.943676ms ago: executing program 1 (id=13231): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, &(0x7f0000000840)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x400000, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 534.570815ms ago: executing program 2 (id=13232): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) pread64(r1, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) 533.522288ms ago: executing program 0 (id=13233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 337.759129ms ago: executing program 3 (id=13234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x40c0) 269.54763ms ago: executing program 4 (id=13235): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) 70.46956ms ago: executing program 2 (id=13236): r0 = socket(0x1d, 0x2, 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="1a000000000000", 0xfffffe6e}, 0x1, 0x0, 0x0, 0x8884}, 0x90) 56.116663ms ago: executing program 1 (id=13237): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 6.631343ms ago: executing program 0 (id=13238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28) 0s ago: executing program 3 (id=13239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ave_1): link status definitely down, disabling slave [ 313.296503][T16988] openvswitch: netlink: Flow key attr not present in new flow. [ 313.728162][T17008] ipt_REJECT: TCP_RESET invalid for non-tcp [ 314.596609][T17060] __nla_validate_parse: 7 callbacks suppressed [ 314.596630][T17060] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5434'. [ 314.596651][T17060] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5434'. [ 314.596678][T17060] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5434'. [ 314.671405][T17064] netlink: 'syz.3.5436': attribute type 1 has an invalid length. [ 315.304685][T17099] netlink: 'syz.2.5454': attribute type 11 has an invalid length. [ 315.304710][T17099] netlink: 'syz.2.5454': attribute type 11 has an invalid length. [ 315.304724][T17099] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5454'. [ 315.875244][T17133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5470'. [ 315.923849][T17134] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 316.031032][T17143] netlink: 'syz.0.5476': attribute type 10 has an invalid length. [ 316.057990][T17143] .`: (slave bridge0): Enslaving as an active interface with an up link [ 316.102682][T17145] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5474'. [ 316.196021][T17150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5477'. [ 316.549779][T17170] netlink: 'syz.3.5488': attribute type 21 has an invalid length. [ 316.787467][T17186] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5493'. [ 317.162291][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464902][T17227] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.483203][T17230] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5517'. [ 317.623731][T17234] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 317.993410][T17260] --map-set only usable from mangle table [ 318.376764][T17281] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5543'. [ 319.567965][T17352] netlink: 'syz.3.5578': attribute type 2 has an invalid length. [ 319.855494][T17370] __nla_validate_parse: 1 callbacks suppressed [ 319.855525][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5588'. [ 319.905869][T17373] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 319.905905][T17373] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 319.905923][T17373] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 320.062451][T17383] netlink: 'syz.1.5593': attribute type 64 has an invalid length. [ 320.062477][T17383] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5593'. [ 320.931479][T17433] netlink: 'syz.1.5618': attribute type 39 has an invalid length. [ 321.069406][T17441] nft_compat: unsupported protocol 0 [ 321.168698][T17446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 321.286764][T17451] netlink: 'syz.2.5631': attribute type 21 has an invalid length. [ 321.632561][T17475] sctp: [Deprecated]: syz.2.5639 (pid 17475) Use of int in maxseg socket option. [ 321.632561][T17475] Use struct sctp_assoc_value instead [ 321.637499][T17472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5638'. [ 321.826441][T17484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5643'. [ 321.922405][T17491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5650'. [ 321.922430][T17491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5650'. [ 321.996093][T17493] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 322.505009][T17525] netlink: 'syz.4.5665': attribute type 21 has an invalid length. [ 322.505032][T17525] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5665'. [ 322.505101][T17525] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5665'. [ 322.555932][T17524] openvswitch: netlink: Duplicate or invalid key (type 0). [ 322.976458][T17550] netlink: 'syz.2.5678': attribute type 10 has an invalid length. [ 323.200969][T17563] vlan0: entered promiscuous mode [ 323.201152][T17563] vlan0: entered allmulticast mode [ 323.201167][T17563] veth0_vlan: entered allmulticast mode [ 323.273795][T17571] netlink: 'syz.3.5686': attribute type 10 has an invalid length. [ 323.273832][T17571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.304688][T17568] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.457816][T17579] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.5690'. [ 324.341156][T17631] netlink: 'syz.4.5718': attribute type 2 has an invalid length. [ 325.040950][T17670] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5737'. [ 325.130705][T17672] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.167285][T17676] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 325.587186][T17702] netlink: 'syz.1.5753': attribute type 10 has an invalid length. [ 325.631369][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.652138][T17702] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 326.064012][T17729] tipc: Enabling not permitted [ 326.064049][T17729] tipc: Enabling of bearer rejected, failed to enable media [ 326.107910][T17730] x_tables: unsorted entry at hook 2 [ 326.242284][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'. [ 326.372055][T17746] netlink: 'syz.2.5776': attribute type 3 has an invalid length. [ 326.372085][T17746] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5776'. [ 326.513582][T17755] netlink: 'syz.4.5778': attribute type 10 has an invalid length. [ 326.551141][T17755] team0: Device veth0_macvtap failed to register rx_handler [ 326.821035][T17770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5785'. [ 326.926592][T17777] tipc: Started in network mode [ 326.926629][T17777] tipc: Node identity ac14142f, cluster identity 4711 [ 326.927336][T17777] tipc: Enabling of bearer rejected, failed to enable media [ 327.034951][T17782] x_tables: unsorted underflow at hook 4 [ 327.124271][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5794'. [ 327.244066][T17792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.364056][T17805] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.402207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 327.474594][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5807'. [ 327.474625][T17811] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 328.346018][T17859] netlink: 'syz.0.5830': attribute type 3 has an invalid length. [ 328.544482][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5834'. [ 328.761237][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5843'. [ 328.895828][T17891] Bluetooth: MGMT ver 1.23 [ 329.277445][T17914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.693123][T17936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5868'. [ 330.118820][T17964] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 330.118845][T17964] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5882'. [ 330.118864][T17964] netlink: 'syz.2.5882': attribute type 1 has an invalid length. [ 330.285847][T17972] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5885'. [ 330.294407][T17970] openvswitch: netlink: Missing valid actions attribute. [ 330.365290][ T31] audit: type=1800 audit(1789454966.385:2): pid=17974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5887" name="memory.events" dev="tmpfs" ino=6037 res=0 errno=0 [ 330.365344][ T31] audit: type=1804 audit(1789454966.385:3): pid=17974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5887" name="/newroot/1203/memory.events" dev="tmpfs" ino=6037 res=1 errno=0 [ 330.830098][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 330.830139][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5897'. [ 331.278691][T18025] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5907'. [ 331.278722][T18025] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5907'. [ 331.522970][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5914'. [ 331.561542][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.561770][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.589588][ T5761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.006602][T18062] netlink: 'syz.1.5921': attribute type 9 has an invalid length. [ 332.011351][ T5761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.049329][ T190] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.108082][T18066] netlink: 'syz.0.5922': attribute type 11 has an invalid length. [ 334.776035][T18207] openvswitch: netlink: Missing key (keys=40, expected=100) [ 334.828582][T18210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5979'. [ 335.130121][T18226] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 335.246579][T18234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.247012][T18235] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 335.247030][T18235] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5989'. [ 335.247046][T18235] netlink: 'syz.1.5989': attribute type 1 has an invalid length. [ 335.472058][T18245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5995'. [ 335.472871][T18245] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5995'. [ 335.719280][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.795611][T18256] Zero length message leads to an empty skb [ 336.147024][T18266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.417717][T18266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.555571][T18291] netlink: 'syz.4.6017': attribute type 10 has an invalid length. [ 336.663237][T18266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.794350][T18266] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.310004][ T388] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.310052][ T388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.310088][ T388] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.320375][ T388] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.394828][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6035'. [ 337.519535][T18332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 338.323592][T18378] Bluetooth: MGMT ver 1.23 [ 338.511963][T18384] Bluetooth: MGMT ver 1.23 [ 338.724021][T18393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6067'. [ 338.766394][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6066'. [ 339.152190][T18415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6077'. [ 339.152240][T18415] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 339.272819][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6080'. [ 339.315442][T18426] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6082'. [ 339.318399][T18420] macsec1: entered promiscuous mode [ 339.318420][T18420] bridge0: entered promiscuous mode [ 339.318639][T18420] macsec1: entered allmulticast mode [ 339.318654][T18420] bridge0: entered allmulticast mode [ 339.352376][T18426] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6082'. [ 339.383842][T18420] bridge0: port 3(macsec1) entered blocking state [ 339.384035][T18420] bridge0: port 3(macsec1) entered disabled state [ 339.429728][T18420] bridge0: left allmulticast mode [ 339.503309][ T190] bridge0: left promiscuous mode [ 340.632185][T18500] __nla_validate_parse: 1 callbacks suppressed [ 340.632204][T18500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6120'. [ 340.632218][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6120'. [ 340.632236][T18500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6120'. [ 340.632249][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6120'. [ 340.632263][T18500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6120'. [ 340.748016][T18504] IPVS: ip_vs_edit_dest(): server weight less than zero [ 340.757837][ T388] IPVS: starting estimator thread 0... [ 340.840517][T18505] IPVS: using max 29 ests per chain, 69600 per kthread [ 341.520421][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6137'. [ 341.747242][T18550] ip_tables: iptables: counters copy to user failed while replacing table [ 342.105181][T18574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6154'. [ 342.242748][T18576] netlink: 'syz.3.6155': attribute type 1 has an invalid length. [ 342.590709][T18591] C: entered promiscuous mode [ 342.591343][T18591] C: left promiscuous mode [ 342.687045][T18596] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 343.594004][T18632] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 343.906391][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6192'. [ 343.906429][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6192'. [ 344.039322][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.576598][T18685] macsec1: entered promiscuous mode [ 344.753457][T18695] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6215'. [ 345.177996][T18719] ip_tables: iptables: counters copy to user failed while replacing table [ 345.277672][T18722] netlink: 'syz.0.6227': attribute type 2 has an invalid length. [ 345.626484][T18743] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.734998][T18751] tipc: Started in network mode [ 345.735039][T18751] tipc: Node identity ac141441, cluster identity 4711 [ 345.737799][T18751] tipc: Enabled bearer , priority 10 [ 346.385482][T18786] __nla_validate_parse: 2 callbacks suppressed [ 346.385504][T18786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6259'. [ 346.385540][T18786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6259'. [ 346.892815][ T30] tipc: Node number set to 2886997057 [ 346.905027][ T1006] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.905076][ T1006] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.905114][ T1006] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.905150][ T1006] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.960901][T18813] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6273'. [ 347.670273][T18855] IPVS: ip_vs_add_dest(): server weight less than zero [ 347.877735][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6298'. [ 348.774567][T18921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.984563][T18933] sctp: [Deprecated]: syz.3.6332 (pid 18933) Use of int in maxseg socket option. [ 348.984563][T18933] Use struct sctp_assoc_value instead [ 349.018778][T18935] ip_tables: iptables: counters copy to user failed while replacing table [ 349.058596][T18937] netlink: 'syz.0.6333': attribute type 49 has an invalid length. [ 349.169921][T18939] pim6reg: entered allmulticast mode [ 349.189798][T18939] pim6reg: left allmulticast mode [ 349.493438][T18953] ovs-s: entered promiscuous mode [ 349.523080][T18960] openvswitch: ovs-s: Dropping previously announced user features [ 349.603799][T18964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6346'. [ 349.603831][T18964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6346'. [ 349.603849][T18964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6346'. [ 349.960504][T18983] team0: Device veth1_macvtap failed to register rx_handler [ 350.246236][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6362'. [ 350.246261][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6362'. [ 350.493272][T19012] Bluetooth: hci0: unsupported parameter 5134 [ 350.493294][T19012] Bluetooth: hci0: unsupported parameter 8192 [ 350.493319][T19012] Bluetooth: hci0: unsupported parameter 5134 [ 350.493331][T19012] Bluetooth: hci0: unsupported parameter 8192 [ 350.858345][T19033] Bluetooth: hci0: unsupported parameter 5135 [ 350.858370][T19033] Bluetooth: hci0: unsupported parameter 8192 [ 350.858383][T19033] Bluetooth: hci0: unsupported parameter 5135 [ 350.858396][T19033] Bluetooth: hci0: unsupported parameter 8192 [ 351.247338][T19051] tipc: Started in network mode [ 351.247371][T19051] tipc: Node identity fe514d53f6dd, cluster identity 4711 [ 351.247594][T19051] tipc: Enabled bearer , priority 11 [ 351.294739][T19054] ip_tables: iptables: counters copy to user failed while replacing table [ 351.354200][T19057] ip_tables: iptables: counters copy to user failed while replacing table [ 352.033753][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6404'. [ 352.136929][T19100] pimreg3: entered allmulticast mode [ 352.175636][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6410'. [ 352.178031][T19104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6410'. [ 352.359925][ T9] tipc: Node number set to 143412563 [ 353.271579][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6435'. [ 353.378142][T19165] tipc: Enabled bearer , priority 0 [ 353.718342][T19183] ip_tables: iptables: counters copy to user failed while replacing table [ 353.748703][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6448'. [ 353.970368][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 354.268980][T19212] openvswitch: netlink: Missing valid actions attribute. [ 354.269016][T19212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.450132][T19222] netlink: 'syz.0.6463': attribute type 142 has an invalid length. [ 354.626986][T19229] netlink: zone id is out of range [ 354.627004][T19229] netlink: zone id is out of range [ 354.627156][T19229] netlink: zone id is out of range [ 355.010641][T19246] vlan1: entered promiscuous mode [ 355.010665][T19246] geneve1: entered promiscuous mode [ 355.010848][T19246] vlan1: entered allmulticast mode [ 355.010862][T19246] geneve1: entered allmulticast mode [ 355.194059][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6479'. [ 355.286853][T19262] tipc: Enabling of bearer rejected, failed to enable media [ 355.668638][T19274] gretap0: entered promiscuous mode [ 355.678649][T19274] vlan2: entered promiscuous mode [ 356.683369][T19325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6511'. [ 356.872146][T19333] netlink: 'syz.4.6515': attribute type 11 has an invalid length. [ 356.911448][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6517'. [ 356.972003][T19341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.192515][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6549'. [ 358.272514][T19406] lo: entered allmulticast mode [ 359.151337][T19454] xt_IDLETIMER: label is empty or not nul-terminated [ 359.323030][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6579'. [ 359.323053][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6579'. [ 359.508148][T19475] netlink: 'syz.0.6586': attribute type 1 has an invalid length. [ 359.508172][T19475] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6586'. [ 359.508188][T19475] netlink: 'syz.0.6586': attribute type 1 has an invalid length. [ 359.734661][T19484] netlink: 'syz.0.6591': attribute type 2 has an invalid length. [ 359.945257][T19494] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6594'. [ 359.984326][T19496] netlink: 'syz.0.6595': attribute type 33 has an invalid length. [ 360.039341][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.499448][T19518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'. [ 360.574655][T19522] netlink: 'syz.2.6608': attribute type 1 has an invalid length. [ 360.574680][T19522] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6608'. [ 360.574698][T19522] netlink: 'syz.2.6608': attribute type 1 has an invalid length. [ 360.809849][T19537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6613'. [ 360.809880][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6613'. [ 361.940641][T19605] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6649'. [ 362.334133][T19629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.845976][T19711] __nla_validate_parse: 2 callbacks suppressed [ 363.845996][T19711] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6699'. [ 363.914321][T19717] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6702'. [ 363.914350][T19717] nbd: illegal input index 65508 [ 363.952882][T19721] netlink: NAT attribute has 4 unknown bytes [ 363.952919][T19721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.080497][T19725] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6708'. [ 364.170371][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6709'. [ 364.193742][T19729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.286777][T19735] Cannot find add_set index 46338 as target [ 365.238446][T19792] ip_tables: iptables: counters copy to user failed while replacing table [ 365.286152][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6741'. [ 365.286537][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6741'. [ 365.319980][T19797] nbd: socks must be embedded in a SOCK_ITEM attr [ 365.325742][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6740'. [ 365.378651][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6744'. [ 365.574918][T19811] netlink: 'syz.0.6749': attribute type 4 has an invalid length. [ 365.574941][T19811] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6749'. [ 365.716702][T19818] bridge_slave_1: default FDB implementation only supports local addresses [ 365.795935][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6754'. [ 366.814576][T19878] netlink: 'syz.0.6782': attribute type 14 has an invalid length. [ 366.814619][T19878] netlink: 'syz.0.6782': attribute type 13 has an invalid length. [ 367.192990][T19899] netlink: 'syz.4.6793': attribute type 4 has an invalid length. [ 367.915058][T19937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.915080][T19937] IPv6: NLM_F_CREATE should be set when creating new route [ 368.164312][T19949] tipc: MTU too low for tipc bearer [ 368.473767][T19964] Bluetooth: hci0: unsupported parameter 5135 [ 368.473794][T19964] Bluetooth: hci0: unsupported parameter 8192 [ 368.473810][T19964] Bluetooth: hci0: unsupported parameter 5135 [ 368.473824][T19964] Bluetooth: hci0: unsupported parameter 8192 [ 368.601344][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 368.686349][T19976] netlink: 'syz.2.6829': attribute type 1 has an invalid length. [ 369.037115][T19997] __nla_validate_parse: 9 callbacks suppressed [ 369.037137][T19997] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6839'. [ 369.037154][T19997] netlink: 'syz.2.6839': attribute type 9 has an invalid length. [ 369.258109][T20012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.258130][T20012] IPv6: NLM_F_CREATE should be set when creating new route [ 369.258179][T20012] IPv6: NLM_F_CREATE should be set when creating new route [ 369.258206][T20012] IPv6: NLM_F_CREATE should be set when creating new route [ 369.258879][T20010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6847'. [ 369.258950][T20012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.276180][T20013] netlink: 'syz.4.6848': attribute type 4 has an invalid length. [ 369.848932][T20041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6862'. [ 370.085761][T20062] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6872'. [ 370.437840][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6882'. [ 370.821981][T20098] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6890'. [ 371.380097][T20131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6906'. [ 371.381333][T20131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6906'. [ 371.586262][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6911'. [ 371.809674][T20156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.936480][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6924'. [ 372.388216][T20192] netlink: 'syz.1.6937': attribute type 25 has an invalid length. [ 372.753361][T20216] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 373.227600][T20241] netlink: 'syz.4.6960': attribute type 62 has an invalid length. [ 374.290039][T20297] netlink: Invalid conntrack timeout [ 374.290071][T20297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.296732][T20295] Bluetooth: hci0: unsupported parameter 5135 [ 374.296751][T20295] Bluetooth: hci0: unsupported parameter 8192 [ 374.296763][T20295] Bluetooth: hci0: unsupported parameter 5135 [ 374.296776][T20295] Bluetooth: hci0: unsupported parameter 8192 [ 374.682987][T20321] netlink: 'syz.1.6997': attribute type 8 has an invalid length. [ 374.683010][T20321] __nla_validate_parse: 2 callbacks suppressed [ 374.683023][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6997'. [ 374.683062][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6997'. [ 374.870931][T20329] ip_tables: iptables: counters copy to user failed while replacing table [ 375.326219][T20358] openvswitch: netlink: Unknown nsh attribute 0 [ 375.567301][T20372] xt_l2tp: v2 sid > 0xffff: 1114112 [ 375.627034][T20376] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 375.627068][T20376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.711595][T20381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7026'. [ 375.712544][T20381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7026'. [ 375.869336][T20391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7030'. [ 375.992119][T20397] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7033'. [ 376.405036][T20420] tipc: Enabling of bearer rejected, media not registered [ 376.522927][T20425] netlink: 'syz.3.7046': attribute type 2 has an invalid length. [ 376.564084][T20425] : entered promiscuous mode [ 376.639521][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7049'. [ 376.826801][T20445] smc: net device lo applied user defined pnetid SYZ0 [ 376.826949][T20445] smc: smcd device lo applied user defined pnetid SYZ0 [ 376.928513][T20449] netlink: 'syz.3.7057': attribute type 7 has an invalid length. [ 376.928538][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7057'. [ 376.928573][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7057'. [ 376.982504][T20448] ip_tables: iptables: counters copy to user failed while replacing table [ 377.413287][T20474] sctp: [Deprecated]: syz.4.7068 (pid 20474) Use of int in max_burst socket option deprecated. [ 377.413287][T20474] Use struct sctp_assoc_value instead [ 377.701630][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7076'. [ 378.165537][T20522] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 378.607021][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.704480][T20581] netlink: 'syz.4.7122': attribute type 1 has an invalid length. [ 379.704508][T20581] __nla_validate_parse: 2 callbacks suppressed [ 379.704528][T20581] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.7122'. [ 379.747629][T20582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7120'. [ 379.941540][T20584] xt_hashlimit: size too large, truncated to 1048576 [ 379.998182][T20590] netlink: 'syz.2.7124': attribute type 25 has an invalid length. [ 380.677042][T20616] netlink: 'syz.0.7137': attribute type 2 has an invalid length. [ 381.536471][T20643] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 382.045174][T20663] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 382.045213][T20663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.173107][T20667] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.375520][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7167'. [ 382.535355][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7170'. [ 383.081658][T20706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7179'. [ 383.083077][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 383.475867][T20721] netlink: 'syz.3.7188': attribute type 1 has an invalid length. [ 383.475889][T20721] netlink: 'syz.3.7188': attribute type 3 has an invalid length. [ 383.475903][T20721] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7188'. [ 383.475919][T20721] NCSI netlink: No device for ifindex 813332851 [ 385.181700][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7220'. [ 385.451311][T20798] Bluetooth: hci0: unsupported parameter 5161 [ 385.451337][T20798] Bluetooth: hci0: unsupported parameter 8192 [ 385.451352][T20798] Bluetooth: hci0: unsupported parameter 5161 [ 385.451381][T20798] Bluetooth: hci0: unsupported parameter 8192 [ 385.740479][T20812] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 385.740521][T20812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.920611][T20817] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7237'. [ 385.985469][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7238'. [ 385.985508][T20819] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 386.377745][T20837] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7243'. [ 386.378549][T20836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7245'. [ 386.414653][T20836] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7245'. [ 386.817628][T20853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7252'. [ 387.387338][T20876] raw_sendmsg: syz.4.7263 forgot to set AF_INET. Fix it! [ 387.688976][T20888] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7269'. [ 388.180647][T20909] xt_policy: too many policy elements [ 388.563273][T20924] netlink: 'syz.3.7286': attribute type 12 has an invalid length. [ 388.563296][T20924] netlink: 'syz.3.7286': attribute type 29 has an invalid length. [ 388.563310][T20924] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7286'. [ 388.563344][T20924] netlink: 59 bytes leftover after parsing attributes in process `syz.3.7286'. [ 389.396392][T20952] netlink: 'syz.1.7297': attribute type 13 has an invalid length. [ 390.377842][T20989] rdma_op ffff88807a259a38 conn xmit_rdma 0000000000000000 [ 390.826778][T21007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7326'. [ 390.907613][T21009] Bluetooth: hci0: unsupported parameter 5134 [ 390.907640][T21009] Bluetooth: hci0: unsupported parameter 8192 [ 390.907654][T21009] Bluetooth: hci0: unsupported parameter 5134 [ 390.907667][T21009] Bluetooth: hci0: unsupported parameter 8192 [ 390.976016][T21014] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7330'. [ 391.377253][T21029] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 391.813412][T21043] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.7341'. [ 391.813823][T21043] netlink: 'syz.0.7341': attribute type 2 has an invalid length. [ 392.647528][T21074] netlink: NAT attribute has 4 unknown bytes [ 392.647565][T21074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.679334][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 392.998323][T21085] xt_l2tp: unknown flags: 10 [ 393.362918][T21097] ip_tables: iptables: counters copy to user failed while replacing table [ 393.667676][T21107] tipc: Enabling of bearer rejected, failed to enable media [ 395.047474][T21147] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7394'. [ 395.122657][T21144] team0: Device ipvlan0 failed to register rx_handler [ 395.474873][T21158] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7399'. [ 395.677815][T21165] Bluetooth: hci0: unsupported parameter 5161 [ 395.677840][T21165] Bluetooth: hci0: unsupported parameter 8192 [ 395.677855][T21165] Bluetooth: hci0: unsupported parameter 5161 [ 395.677869][T21165] Bluetooth: hci0: unsupported parameter 8192 [ 396.134048][T21180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7410'. [ 396.138512][T21180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7410'. [ 396.448661][ T31] audit: type=1107 audit(1789455032.465:4): pid=21191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 397.176721][T21207] bond2: (slave bond_slave_0): Device is not our slave [ 397.176748][T21207] bond2: option active_slave: invalid value (bond_slave_0) [ 397.221885][T21207] bond2 (unregistering): Released all slaves [ 397.691930][T21227] Bluetooth: hci0: unsupported parameter 5135 [ 397.691963][T21227] Bluetooth: hci0: unsupported parameter 8192 [ 397.691980][T21227] Bluetooth: hci0: unsupported parameter 5135 [ 397.691993][T21227] Bluetooth: hci0: unsupported parameter 8192 [ 398.609569][T21263] Bluetooth: MGMT ver 1.23 [ 398.636792][T21265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7448'. [ 398.636815][T21265] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7448'. [ 398.636829][T21265] netlink: 'syz.3.7448': attribute type 6 has an invalid length. [ 398.636841][T21265] netlink: 'syz.3.7448': attribute type 5 has an invalid length. [ 398.636863][T21265] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7448'. [ 398.777601][T21269] netlink: 'syz.1.7451': attribute type 3 has an invalid length. [ 398.777624][T21269] netlink: 'syz.1.7451': attribute type 1 has an invalid length. [ 398.777637][T21269] netlink: 204 bytes leftover after parsing attributes in process `syz.1.7451'. [ 398.868239][T21271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7452'. [ 398.987428][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7450'. [ 399.027746][T21277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7456'. [ 399.178195][T21284] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7458'. [ 399.336176][T21291] smc: net device lo erased user defined pnetid SYZ0 [ 399.337465][T21291] smc: smcd device lo erased user defined pnetid SYZ0 [ 399.441442][T21297] IPVS: length: 8 != 1152 [ 400.680019][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 400.680124][ T53] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 401.682353][T21381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.770189][T21388] tipc: Enabling of bearer rejected, failed to enable media [ 402.366410][T21415] tipc: Enabling of bearer rejected, failed to enable media [ 402.575884][T21423] Bluetooth: hci0: unsupported parameter 5135 [ 402.575910][T21423] Bluetooth: hci0: unsupported parameter 8192 [ 402.575925][T21423] Bluetooth: hci0: unsupported parameter 5135 [ 402.575939][T21423] Bluetooth: hci0: unsupported parameter 8192 [ 402.783730][T21432] __nla_validate_parse: 1 callbacks suppressed [ 402.783770][T21432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7532'. [ 403.340857][T21455] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7540'. [ 403.340882][T21455] nbd: illegal input index -8454144 [ 403.646884][T21471] netlink: 'syz.2.7549': attribute type 6 has an invalid length. [ 403.646908][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7549'. [ 404.283458][T21495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7561'. [ 404.283493][T21495] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 404.416011][T21498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7564'. [ 404.963503][T21517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7571'. [ 405.512895][T21537] nbd: must specify at least one socket [ 406.122998][T21548] netlink: 'syz.0.7586': attribute type 1 has an invalid length. [ 406.123034][T21548] nbd: error processing sock list [ 406.228759][T21552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7588'. [ 406.821816][T21563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7593'. [ 407.164569][T21579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7600'. [ 407.318448][T21582] sock: sock_set_timeout: `syz.1.7602' (pid 21582) tries to set negative timeout [ 407.701892][T21602] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7610'. [ 408.152875][T21618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7619'. [ 408.497277][ T95] IPVS: starting estimator thread 0... [ 408.579897][T21634] IPVS: using max 30 ests per chain, 72000 per kthread [ 409.022667][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7635'. [ 409.852428][T21680] xt_hashlimit: size too large, truncated to 1048576 [ 411.209537][T21726] Bluetooth: hci0: unsupported parameter 5134 [ 411.209562][T21726] Bluetooth: hci0: unsupported parameter 8192 [ 411.209575][T21726] Bluetooth: hci0: unsupported parameter 5134 [ 411.209589][T21726] Bluetooth: hci0: unsupported parameter 8192 [ 411.617879][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7673'. [ 411.832928][T21735] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 411.854562][T21735] bond4 (unregistering): Released all slaves [ 412.571605][T21759] sctp: [Deprecated]: syz.4.7684 (pid 21759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.571605][T21759] Use struct sctp_sack_info instead [ 412.642915][T21761] ip_tables: iptables: counters copy to user failed while replacing table [ 413.621876][T21796] team0: Device gtp0 is up. Set it down before adding it as a team port [ 414.351811][T21825] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7714'. [ 414.706336][T21841] netlink: 'syz.4.7721': attribute type 1 has an invalid length. [ 415.032988][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7727'. [ 417.374431][T21916] netlink: 'syz.4.7758': attribute type 1 has an invalid length. [ 418.080317][T21937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7767'. [ 418.234726][T21946] netlink: Invalid conntrack helper [ 418.234763][T21946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.587365][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7779'. [ 418.987642][T21973] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.053390][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7786'. [ 419.850495][T22005] netlink: 'syz.3.7800': attribute type 1 has an invalid length. [ 419.968835][T22010] Bluetooth: hci0: unsupported parameter 5135 [ 419.968859][T22010] Bluetooth: hci0: unsupported parameter 8192 [ 419.968873][T22010] Bluetooth: hci0: unsupported parameter 5135 [ 419.968886][T22010] Bluetooth: hci0: unsupported parameter 8192 [ 420.411029][T22024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7809'. [ 420.554359][T22028] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7812'. [ 420.975125][T22044] netlink: 'syz.3.7819': attribute type 4 has an invalid length. [ 420.975152][T22044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7819'. [ 422.211967][T22088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.737362][T22146] atomic_op ffff8880289dd9e0 conn xmit_atomic 0000000000000000 [ 424.297663][T22167] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.7875'. [ 424.297854][T22167] 0XD: renamed from gretap0 (while UP) [ 424.317564][T22167] 0XD: entered allmulticast mode [ 424.675291][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7881'. [ 425.134009][T22199] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7887'. [ 425.434006][T22210] openvswitch: netlink: Unknown key attributes 20 [ 426.176259][T22239] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 427.595777][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7916'. [ 427.614455][T22275] netlink: 'syz.0.7914': attribute type 1 has an invalid length. [ 427.614479][T22275] netlink: 'syz.0.7914': attribute type 2 has an invalid length. [ 427.614494][T22275] netlink: 'syz.0.7914': attribute type 3 has an invalid length. [ 427.614509][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7914'. [ 427.964006][T22279] vlan3: entered promiscuous mode [ 427.964032][T22279] bridge0: entered promiscuous mode [ 427.964239][T22279] vlan3: entered allmulticast mode [ 427.964255][T22279] bridge0: entered allmulticast mode [ 428.496086][T22303] vlan1: entered allmulticast mode [ 428.496110][T22303] veth0_vlan: entered allmulticast mode [ 428.831102][T22314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.948929][T22392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7959'. [ 431.127556][T22396] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7961'. [ 431.243985][T22400] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7962'. [ 431.244040][T22400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7962'. [ 431.244057][T22400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7962'. [ 431.679753][T22415] netlink: 'syz.3.7969': attribute type 7 has an invalid length. [ 431.847084][T22421] nbd: couldn't find device at index 15663104 [ 433.097062][T22460] openvswitch: netlink: Missing key (keys=40, expected=100) [ 433.476523][T22472] tunl0: entered promiscuous mode [ 433.548247][T22472] netlink: 'syz.3.7992': attribute type 4 has an invalid length. [ 433.548272][T22472] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7992'. [ 433.753145][T22482] SET target dimension over the limit! [ 434.403287][T22508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.165012][T22542] Bluetooth: hci0: unsupported parameter 5135 [ 435.165038][T22542] Bluetooth: hci0: unsupported parameter 8192 [ 435.165067][T22542] Bluetooth: hci0: unsupported parameter 5135 [ 435.165081][T22542] Bluetooth: hci0: unsupported parameter 8192 [ 436.424757][T22586] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8039'. [ 436.656110][T22591] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 437.574825][T22620] netlink: Setting conntrack mark requires 'commit' flag. [ 437.574862][T22620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.418046][T22642] sit1: entered promiscuous mode [ 438.418071][T22642] sit1: entered allmulticast mode [ 438.463881][T22645] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 440.050587][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.414685][T22712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.415800][T22713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8099'. [ 441.315597][T22744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8113'. [ 441.473282][T22750] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.8117'. [ 441.473310][T22750] netlink: 'syz.0.8117': attribute type 1 has an invalid length. [ 442.404046][T22772] netlink: NAT attribute has 4 unknown bytes [ 442.404084][T22772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.189320][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8141'. [ 443.197375][T22800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8140'. [ 443.248156][T22801] netlink: 'syz.0.8142': attribute type 1 has an invalid length. [ 443.451834][T22807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8146'. [ 444.194171][T22828] tipc: Enabled bearer , priority 10 [ 444.994985][T22853] ip_tables: iptables: counters copy to user failed while replacing table [ 445.916452][T22891] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8186'. [ 445.916481][T22891] netlink: 35 bytes leftover after parsing attributes in process `syz.4.8186'. [ 445.916500][T22891] netlink: 'syz.4.8186': attribute type 5 has an invalid length. [ 445.916515][T22891] netlink: 'syz.4.8186': attribute type 6 has an invalid length. [ 445.916529][T22891] netlink: 35 bytes leftover after parsing attributes in process `syz.4.8186'. [ 446.116132][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8187'. [ 446.611698][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8197'. [ 447.158952][T22942] IPVS: Error connecting to the multicast addr [ 447.480191][T22952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.150912][T22978] Bluetooth: hci0: unsupported parameter 5161 [ 448.150939][T22978] Bluetooth: hci0: unsupported parameter 8192 [ 448.150954][T22978] Bluetooth: hci0: unsupported parameter 5161 [ 448.150968][T22978] Bluetooth: hci0: unsupported parameter 8192 [ 450.094788][T23049] netlink: 'syz.2.8263': attribute type 1 has an invalid length. [ 450.094829][T23049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.586357][ T5631] Bluetooth: hci4: SCO packet too small [ 451.558345][T23105] netlink: 'syz.3.8291': attribute type 11 has an invalid length. [ 451.769012][T23114] netlink: 'syz.0.8294': attribute type 2 has an invalid length. [ 451.897048][T23114] : entered promiscuous mode [ 452.723622][T23141] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 453.710732][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8321'. [ 455.390709][T23216] netlink: 'syz.0.8343': attribute type 1 has an invalid length. [ 455.390733][T23216] netlink: 200 bytes leftover after parsing attributes in process `syz.0.8343'. [ 456.088927][T23240] lo: left promiscuous mode [ 456.089916][T23240] tunl0: left promiscuous mode [ 456.092158][T23240] gre0: left promiscuous mode [ 456.094448][T23240] gretap0: left promiscuous mode [ 456.096383][T23240] erspan0: left promiscuous mode [ 456.098960][T23240] ip_vti0: left promiscuous mode [ 458.056188][T23240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.202851][T23240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.812311][T23240] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 458.948579][T23240] bridge2: left allmulticast mode [ 459.004311][T23240] bond4: left allmulticast mode [ 459.047157][T23240] bond5: left promiscuous mode [ 459.047185][T23240] bond5: left allmulticast mode [ 459.094480][T23240] vlan1: left promiscuous mode [ 459.094505][T23240] geneve1: left promiscuous mode [ 459.095245][T23240] vlan1: left allmulticast mode [ 459.095260][T23240] geneve1: left allmulticast mode [ 459.097156][T23240] vlan3: left promiscuous mode [ 459.097175][T23240] bridge0: left promiscuous mode [ 459.097325][T23240] vlan3: left allmulticast mode [ 459.097339][T23240] bridge0: left allmulticast mode [ 459.189842][T14556] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.210258][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.211252][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.211565][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.356403][T23286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8367'. [ 459.625107][T23301] xt_l2tp: v2 tid > 0xffff: 1114244 [ 461.476180][T23381] team0: Device is already in use. [ 461.501924][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8414'. [ 461.501949][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8414'. [ 461.677375][T23392] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 463.097172][T23446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 463.248904][T23454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.120249][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 464.243087][T23498] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8468'. [ 465.115938][T23519] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 465.464192][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8481'. [ 465.486457][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8481'. [ 465.886238][T23542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8490'. [ 466.385716][T23556] smc: net device team0 applied user defined pnetid SYZ2 [ 466.826719][T23567] IPVS: Scheduler module ip_vs_mh not found [ 467.238113][T23586] netlink: 'syz.2.8508': attribute type 178 has an invalid length. [ 467.953987][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8520'. [ 467.955620][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8520'. [ 469.060412][T23648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.268530][T23655] vcan0: entered allmulticast mode [ 471.190653][T23735] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 471.190712][T23735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.415703][T23745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8586'. [ 471.415732][T23745] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8586'. [ 471.415750][T23745] netlink: 'syz.1.8586': attribute type 5 has an invalid length. [ 471.415764][T23745] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8586'. [ 471.476811][T23744] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 471.476850][T23744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.766755][T23753] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 471.858352][T23755] xt_hashlimit: size too large, truncated to 1048576 [ 472.327129][T23772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8598'. [ 472.556883][T23777] netlink: zone id is out of range [ 472.556901][T23777] netlink: zone id is out of range [ 472.556915][T23777] netlink: zone id is out of range [ 472.556926][T23777] netlink: zone id is out of range [ 473.009723][T23788] nbd: must specify an index to disconnect [ 473.091726][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8609'. [ 473.300560][T23801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8613'. [ 473.542409][T23810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.560917][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8617'. [ 474.519692][T23839] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8632'. [ 474.652884][T23846] macvlan0: entered promiscuous mode [ 475.306796][T23867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8646'. [ 475.320091][T23867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8646'. [ 476.022173][T23900] net_ratelimit: 1 callbacks suppressed [ 476.022194][T23900] netlink: zone id is out of range [ 477.268668][T23954] __nla_validate_parse: 52 callbacks suppressed [ 477.268699][T23954] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8687'. [ 477.606748][T23962] nbd: must specify a size in bytes for the device [ 478.145423][T23985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8703'. [ 478.352506][T23990] Bluetooth: hci0: unsupported parameter 5135 [ 478.352531][T23990] Bluetooth: hci0: unsupported parameter 8192 [ 478.352545][T23990] Bluetooth: hci0: unsupported parameter 5135 [ 478.352558][T23990] Bluetooth: hci0: unsupported parameter 8192 [ 479.199802][T24020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8719'. [ 479.276888][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8722'. [ 479.726045][T24040] netlink: 'syz.1.8729': attribute type 29 has an invalid length. [ 479.869527][T24047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8732'. [ 480.415843][T24068] Bluetooth: hci0: unsupported parameter 5134 [ 480.415865][T24068] Bluetooth: hci0: unsupported parameter 8192 [ 480.415904][T24068] Bluetooth: hci0: unsupported parameter 5134 [ 480.415917][T24068] Bluetooth: hci0: unsupported parameter 8192 [ 480.636181][T24076] netlink: 'syz.3.8746': attribute type 3 has an invalid length. [ 480.808417][T24080] ieee802154 phy0 wpan0: encryption failed: -22 [ 481.582141][T24117] Bluetooth: hci0: unsupported parameter 5135 [ 481.582169][T24117] Bluetooth: hci0: unsupported parameter 8192 [ 481.582184][T24117] Bluetooth: hci0: unsupported parameter 5135 [ 481.582198][T24117] Bluetooth: hci0: unsupported parameter 8192 [ 481.823227][T24121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8765'. [ 483.753044][T24202] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.8808'. [ 484.414963][T24226] xt_hashlimit: size too large, truncated to 1048576 [ 485.094520][T24251] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8830'. [ 485.603478][T24270] netlink: 'syz.2.8838': attribute type 64 has an invalid length. [ 485.603502][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 485.920072][T24278] Bluetooth: hci0: unsupported parameter 5135 [ 485.920096][T24278] Bluetooth: hci0: unsupported parameter 8192 [ 485.920110][T24278] Bluetooth: hci0: unsupported parameter 5135 [ 485.920124][T24278] Bluetooth: hci0: unsupported parameter 8192 [ 486.466561][T24304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8856'. [ 486.466588][T24304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8856'. [ 486.466616][T24304] netlink: 'syz.2.8856': attribute type 12 has an invalid length. [ 486.466631][T24304] netlink: 'syz.2.8856': attribute type 11 has an invalid length. [ 486.520230][T24303] netlink: 'syz.0.8855': attribute type 83 has an invalid length. [ 486.731578][T24306] vlan2: entered allmulticast mode [ 486.731604][T24306] bond0: entered allmulticast mode [ 486.731620][T24306] bond_slave_0: entered allmulticast mode [ 486.731988][T24306] bond_slave_1: entered allmulticast mode [ 486.796344][T24309] tipc: Enabling of bearer rejected, failed to enable media [ 487.570033][T24341] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8874'. [ 488.038814][T24358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8883'. [ 488.242746][T24365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8886'. [ 488.602794][T24377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8892'. [ 489.011914][T24395] netlink: 'syz.3.8902': attribute type 5 has an invalid length. [ 489.011954][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8902'. [ 489.121935][T24399] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8903'. [ 489.706729][T24417] pimreg: entered allmulticast mode [ 489.712901][T24419] pimreg: left allmulticast mode [ 489.720348][T24420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8913'. [ 490.268501][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8922'. [ 490.288860][T24441] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8923'. [ 491.120702][T24468] netlink: 'syz.1.8936': attribute type 9 has an invalid length. [ 491.120726][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8936'. [ 491.322523][T24475] netlink: 'syz.3.8940': attribute type 1 has an invalid length. [ 491.322546][T24475] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8940'. [ 491.602737][T24481] netlink: 75 bytes leftover after parsing attributes in process `syz.3.8943'. [ 491.866467][T24493] netlink: 'syz.0.8949': attribute type 2 has an invalid length. [ 492.073479][T24499] tipc: Enabling of bearer rejected, failed to enable media [ 493.006327][T24540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8972'. [ 493.564088][T24565] netlink: 'syz.4.8985': attribute type 2 has an invalid length. [ 493.565971][T24564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8984'. [ 494.010256][T24583] netlink: 'syz.0.8993': attribute type 2 has an invalid length. [ 494.545841][T24608] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 495.635616][T24652] xt_IDLETIMER: label is empty or not nul-terminated [ 496.007472][T24662] nftables ruleset with unbound set [ 496.125034][T24667] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 496.390870][T24674] netlink: 'syz.1.9036': attribute type 2 has an invalid length. [ 497.441252][T24709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9051'. [ 497.441289][T24709] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9051'. [ 497.441335][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9051'. [ 497.555718][T24712] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9054'. [ 497.836401][T24721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9059'. [ 497.948112][T24726] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9061'. [ 497.948138][T24726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9061'. [ 498.294750][T24734] vlan2: entered promiscuous mode [ 498.294779][T24734] bridge0: entered promiscuous mode [ 499.305224][T24770] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 499.717892][T24785] veth0_to_bond: entered allmulticast mode [ 499.924381][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9093'. [ 500.542298][T24816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9105'. [ 500.731784][T24816] bond4: Invalid ad_actor_system MAC address. [ 500.732300][T24816] bond4: option ad_actor_system: invalid value (1) [ 500.753380][T24816] bond4 (unregistering): Released all slaves [ 501.484343][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.521832][T24851] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9122'. [ 501.816103][T24861] nbd: must specify a device to reconfigure [ 502.551278][T24891] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.030318][T24904] netlink: 'syz.2.9147': attribute type 1 has an invalid length. [ 503.126629][T24911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.211648][T24916] batadv0: entered promiscuous mode [ 503.214284][T24916] macsec1: entered promiscuous mode [ 503.215912][T24916] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 503.265325][T24916] batadv0: left promiscuous mode [ 504.197466][T24958] netlink: 'syz.3.9172': attribute type 1 has an invalid length. [ 504.554305][T24970] __nla_validate_parse: 1 callbacks suppressed [ 504.554328][T24970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9178'. [ 505.914034][T25016] wireguard: wg2: Could not create IPv4 socket [ 505.948465][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9202'. [ 505.948491][T25018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9202'. [ 507.401801][T25059] netlink: 'syz.3.9222': attribute type 3 has an invalid length. [ 507.401826][T25059] netlink: 'syz.3.9222': attribute type 1 has an invalid length. [ 507.401840][T25059] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9222'. [ 507.471872][T25062] netlink: 'syz.1.9223': attribute type 1 has an invalid length. [ 507.471895][T25062] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9223'. [ 507.973395][T25085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.408801][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9236'. [ 508.435395][T25096] xt_cgroup: path and classid specified [ 508.845903][T25118] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9251'. [ 508.964773][T25124] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 509.066099][T25129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9256'. [ 510.006250][T25162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.416521][T25177] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 510.631301][T25185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9283'. [ 510.631356][T25185] netlink: 'syz.2.9283': attribute type 5 has an invalid length. [ 510.631373][T25185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9283'. [ 510.669222][T25187] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 510.975351][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9291'. [ 510.997506][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 511.027791][T25196] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.104705][T25202] pim6reg: entered allmulticast mode [ 512.422100][T25259] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 513.008919][T25282] ip_tables: iptables: counters copy to user failed while replacing table [ 513.363728][T25296] netlink: 'syz.2.9334': attribute type 1 has an invalid length. [ 513.363755][T25296] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9334'. [ 513.363791][T25296] netlink: 'syz.2.9334': attribute type 1 has an invalid length. [ 513.443199][T25298] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9337'. [ 513.444125][ T60] tipc: Resetting bearer [ 513.519412][T25300] Bluetooth: hci0: unsupported parameter 5135 [ 513.519436][T25300] Bluetooth: hci0: unsupported parameter 8192 [ 513.519450][T25300] Bluetooth: hci0: unsupported parameter 5135 [ 513.519463][T25300] Bluetooth: hci0: unsupported parameter 8192 [ 513.835368][T25308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9341'. [ 513.835396][T25308] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9341'. [ 513.835450][T25308] netlink: 'syz.0.9341': attribute type 5 has an invalid length. [ 513.960991][T25312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9343'. [ 513.961032][T25312] netlink: 11 bytes leftover after parsing attributes in process `syz.1.9343'. [ 514.222294][T25319] netlink: 'syz.0.9346': attribute type 2 has an invalid length. [ 514.306050][T25322] openvswitch: netlink: Missing key (keys=40, expected=100) [ 514.922085][T14556] wlan1: Trigger new scan to find an IBSS to join [ 516.425968][T25416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9392'. [ 516.871031][T25433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9399'. [ 518.160915][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9418'. [ 518.438335][T25479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9422'. [ 518.725274][T25486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9426'. [ 519.446050][T25514] netlink: 'syz.4.9439': attribute type 1 has an invalid length. [ 519.446074][T25514] netlink: 'syz.4.9439': attribute type 3 has an invalid length. [ 519.446089][T25514] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9439'. [ 519.446106][T25514] NCSI netlink: No device for ifindex 813332851 [ 519.726460][T25524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9442'. [ 519.883800][T14553] wlan1: Trigger new scan to find an IBSS to join [ 519.904156][T25528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9446'. [ 519.931055][T25527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9445'. [ 520.218218][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9452'. [ 520.740809][T25558] netlink: 'syz.1.9461': attribute type 3 has an invalid length. [ 520.943576][T25567] netlink: Unknown nat attribute (0) [ 520.943614][T25567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.107567][T25574] xt_hashlimit: size too large, truncated to 1048576 [ 521.820178][T25600] netlink: 'syz.1.9481': attribute type 1 has an invalid length. [ 521.975064][T25606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.178432][T14553] wlan1: Creating new IBSS network, BSSID 9a:a3:dc:b6:ef:ab [ 522.272604][T25616] __nla_validate_parse: 1 callbacks suppressed [ 522.272624][T25616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9489'. [ 522.841678][T25630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9495'. [ 523.387176][T25647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9504'. [ 523.627792][T25661] xt_IDLETIMER: timeout value is too big [ 523.960350][T25675] netlink: 'syz.4.9517': attribute type 3 has an invalid length. [ 525.221108][T25726] Bluetooth: hci0: unsupported parameter 5135 [ 525.221132][T25726] Bluetooth: hci0: unsupported parameter 8192 [ 525.221146][T25726] Bluetooth: hci0: unsupported parameter 5135 [ 525.221158][T25726] Bluetooth: hci0: unsupported parameter 8192 [ 525.442605][T25734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.214069][T25769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9562'. [ 526.214129][T25769] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 526.420021][T25775] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9567'. [ 527.007762][T25799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.536723][T25823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9589'. [ 528.197559][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9603'. [ 528.416828][T25855] netlink: 'syz.0.9606': attribute type 23 has an invalid length. [ 529.159527][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 529.193469][T25889] netlink: 'syz.4.9622': attribute type 18 has an invalid length. [ 529.271223][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.282408][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.282568][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.282673][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.346777][T25892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9624'. [ 529.358554][T25892] tipc: Invalid UDP bearer configuration [ 529.358600][T25892] tipc: Enabling of bearer rejected, failed to enable media [ 529.612316][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9627'. [ 529.612343][T25899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9627'. [ 529.612363][T25899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9627'. [ 529.707129][T25902] wireguard0: entered promiscuous mode [ 530.106514][T25924] Bluetooth: hci0: unsupported parameter 5135 [ 530.106539][T25924] Bluetooth: hci0: unsupported parameter 8192 [ 530.106553][T25924] Bluetooth: hci0: unsupported parameter 5135 [ 530.106566][T25924] Bluetooth: hci0: unsupported parameter 8192 [ 530.478496][T25937] netlink: 'syz.3.9644': attribute type 1 has an invalid length. [ 530.478522][T25937] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9644'. [ 530.478540][T25937] netlink: 'syz.3.9644': attribute type 1 has an invalid length. [ 530.834946][T25947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9649'. [ 531.157340][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9656'. [ 531.157376][T25961] netlink: 'syz.4.9656': attribute type 3 has an invalid length. [ 531.183415][T25962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.520933][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9661'. [ 532.067013][T25997] tipc: Enabled bearer , priority 0 [ 533.505648][T26053] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 533.896128][T26065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9705'. [ 534.720630][T26100] netlink: 'syz.2.9721': attribute type 1 has an invalid length. [ 534.720655][T26100] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9721'. [ 534.720673][T26100] netlink: 'syz.2.9721': attribute type 1 has an invalid length. [ 535.444354][T26116] macvlan0: entered promiscuous mode [ 536.445517][T26155] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 536.474695][T26157] openvswitch: netlink: Missing key (keys=40, expected=100) [ 536.950710][T26178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9760'. [ 537.132528][T26183] netlink: 'syz.0.9762': attribute type 29 has an invalid length. [ 537.132561][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9762'. [ 537.135161][T26183] netlink: 'syz.0.9762': attribute type 29 has an invalid length. [ 537.135180][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9762'. [ 537.768697][T26199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9769'. [ 537.768741][T26199] block nbd0: Unsupported socket: should be TCP or UNIX. [ 539.231513][T26229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9783'. [ 539.353071][T26232] netlink: 252 bytes leftover after parsing attributes in process `syz.2.9785'. [ 539.591511][T26240] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 539.994961][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9794'. [ 540.514213][T26275] xt_hashlimit: size too large, truncated to 1048576 [ 541.294703][T26300] netlink: 'syz.2.9817': attribute type 3 has an invalid length. [ 542.625608][T26363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9846'. [ 542.626691][T26363] netlink: 'syz.3.9846': attribute type 1 has an invalid length. [ 543.185660][T26379] ip_tables: iptables: counters copy to user failed while replacing table [ 543.351920][T26389] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9861'. [ 543.844924][T26402] macvtap1: entered promiscuous mode [ 543.845969][T26402] macvtap1: entered allmulticast mode [ 543.845985][T26402] veth1_vlan: entered allmulticast mode [ 544.181912][T26409] syz.0.9870 (26409) used obsolete PPPIOCDETACH ioctl [ 545.487061][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9891'. [ 547.173870][T26513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9921'. [ 547.366310][T26517] netlink: 'syz.1.9922': attribute type 3 has an invalid length. [ 547.366335][T26517] netlink: 'syz.1.9922': attribute type 1 has an invalid length. [ 547.366351][T26517] netlink: 212 bytes leftover after parsing attributes in process `syz.1.9922'. [ 547.366368][T26517] NCSI netlink: No device for ifindex 813332851 [ 547.713344][T26530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9930'. [ 547.851359][T26535] netlink: 'syz.4.9931': attribute type 11 has an invalid length. [ 547.975007][T26540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9933'. [ 548.069060][T26540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9933'. [ 548.190495][T26551] openvswitch: netlink: IP tunnel dst address not specified [ 548.190529][T26551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.889110][T26566] netlink: 'syz.2.9946': attribute type 2 has an invalid length. [ 549.015154][T26568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9947'. [ 549.398408][T26580] block nbd0: Unsupported socket: should be TCP or UNIX. [ 550.148280][T26611] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 550.148310][T26611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.269813][T26616] netlink: 'syz.3.9969': attribute type 15 has an invalid length. [ 550.710356][T26628] netlink: 'syz.4.9974': attribute type 10 has an invalid length. [ 550.820927][T26628] team0: Port device dummy0 added [ 551.287093][T26646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9983'. [ 551.603501][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9988'. [ 551.604228][T26655] IPVS: persistence engine module ip_vs_pe_ not found [ 551.728947][T26667] Cannot find set identified by id 4 to match [ 553.739986][T26728] netlink: 'syz.2.10021': attribute type 5 has an invalid length. [ 555.242245][T14556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 556.229258][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10051'. [ 556.463147][T26803] openvswitch: netlink: VLAN attribute unexpected. [ 556.990599][T26817] netlink: 'syz.2.10060': attribute type 1 has an invalid length. [ 557.376485][T26835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10069'. [ 557.428749][T26838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10070'. [ 557.777849][T26851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10076'. [ 557.777880][T26851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10076'. [ 558.053453][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10080'. [ 558.473604][T26883] team0: No ports can be present during mode change [ 558.796970][T26898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10099'. [ 558.816270][T26898] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.063734][T26906] netlink: 'syz.1.10101': attribute type 4 has an invalid length. [ 559.575731][T26929] netlink: 'syz.3.10112': attribute type 1 has an invalid length. [ 559.575757][T26929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10112'. [ 559.576565][T26927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10111'. [ 559.903161][T26935] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10113'. [ 561.934024][T26994] macvlan0: entered promiscuous mode [ 561.934051][T26994] veth1_vlan: entered promiscuous mode [ 562.924473][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.267175][T27033] openvswitch: netlink: IPv4 tunnel dst address is zero [ 563.267211][T27033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.806517][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10166'. [ 564.174455][T27063] netlink: 'syz.0.10171': attribute type 16 has an invalid length. [ 564.174482][T27063] netlink: 'syz.0.10171': attribute type 2 has an invalid length. [ 564.174498][T27063] netlink: 64110 bytes leftover after parsing attributes in process `syz.0.10171'. [ 564.248167][T27066] ip_tables: iptables: counters copy to user failed while replacing table [ 564.673045][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10180'. [ 565.173021][T27095] openvswitch: netlink: IP tunnel dst address not specified [ 565.173059][T27095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.944953][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10201'. [ 566.022507][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10201'. [ 566.970252][T27161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10216'. [ 567.307751][T27172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10221'. [ 567.307778][T27172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10221'. [ 567.308024][T27173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10219'. [ 567.352709][T27173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10219'. [ 568.040630][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 570.201455][T27283] batman_adv: batadv0: Adding interface: wlan1 [ 570.201474][T27283] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.201705][T27283] batman_adv: batadv0: Interface activated: wlan1 [ 570.393443][T27291] netlink: 'syz.0.10275': attribute type 5 has an invalid length. [ 570.902595][T27307] netlink: 'syz.3.10283': attribute type 1 has an invalid length. [ 571.493821][T27324] erspan0: entered promiscuous mode [ 571.510572][T27326] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 571.666159][ T53] block nbd0: Receive control failed (result -32) [ 571.867457][T27345] xt_hashlimit: size too large, truncated to 1048576 [ 571.923185][T27348] xt_hashlimit: size too large, truncated to 1048576 [ 573.472705][T27401] __nla_validate_parse: 3 callbacks suppressed [ 573.472727][T27401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10325'. [ 573.472829][T27401] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10325'. [ 574.980885][T27450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10347'. [ 574.980921][T27450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10347'. [ 575.124560][T27454] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10349'. [ 575.300488][T27458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10350'. [ 575.408280][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10352'. [ 575.809805][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10358'. [ 576.374825][T27495] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10368'. [ 576.856521][T27514] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.10378'. [ 578.614704][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10408'. [ 578.846858][T27583] sctp: [Deprecated]: syz.2.10411 (pid 27583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.846858][T27583] Use struct sctp_sack_info instead [ 579.114514][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10417'. [ 579.114542][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10417'. [ 579.574380][T27612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10424'. [ 580.463069][T27642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10439'. [ 580.837532][T27660] team0: Cannot enslave team device to itself [ 581.299933][T27681] netlink: 31 bytes leftover after parsing attributes in process `syz.1.10458'. [ 581.299960][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10458'. [ 581.299978][T27681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10458'. [ 581.668855][T27695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10466'. [ 581.668891][T27695] netlink: 'syz.2.10466': attribute type 8 has an invalid length. [ 581.668905][T27695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10466'. [ 582.804706][T27727] macvtap1: entered promiscuous mode [ 582.804734][T27727] vlan0: entered promiscuous mode [ 582.805479][T27727] macvtap1: entered allmulticast mode [ 582.805496][T27727] vlan0: entered allmulticast mode [ 582.805510][T27727] veth0_vlan: entered allmulticast mode [ 583.141250][T27738] block nbd2: not configured, cannot reconfigure [ 583.145837][T27742] netlink: 'syz.4.10487': attribute type 28 has an invalid length. [ 583.145857][T27742] netlink: 'syz.4.10487': attribute type 3 has an invalid length. [ 583.720923][T27766] netlink: Only one type of NAT may be specified [ 583.720958][T27766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.035389][T27778] __nla_validate_parse: 4 callbacks suppressed [ 584.035411][T27778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10504'. [ 585.172162][T27822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10525'. [ 586.158202][T27863] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10541'. [ 586.175919][T27862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10543'. [ 586.175943][T27862] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10543'. [ 586.176176][T27862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10543'. [ 586.456486][T27874] veth0: entered promiscuous mode [ 586.467814][T27873] veth0: left promiscuous mode [ 586.655613][T27882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10554'. [ 587.207863][T27905] netlink: 'syz.3.10563': attribute type 83 has an invalid length. [ 587.328810][T27916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10564'. [ 587.705371][T27927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10574'. [ 587.785314][T27931] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10573'. [ 588.471204][T27961] block nbd1: Unsupported socket: should be TCP or UNIX. [ 590.245867][T28030] __nla_validate_parse: 2 callbacks suppressed [ 590.245888][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10622'. [ 590.415431][T28039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10629'. [ 590.792047][T28050] nbd1: detected capacity change from 0 to 63 [ 590.797829][ T53] block nbd1: Receive control failed (result -32) [ 590.857648][T28053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10634'. [ 590.874654][ T1707] block nbd1: Dead connection, failed to find a fallback [ 590.874678][ T1707] block nbd1: shutting down sockets [ 590.874759][ T1707] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.874852][ T1707] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.875229][ T1707] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.875258][ T1707] Buffer I/O error on dev nbd1, logical block 1, async page read [ 590.875374][ T1707] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.875399][ T1707] Buffer I/O error on dev nbd1, logical block 2, async page read [ 590.875501][ T1707] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.875526][ T1707] Buffer I/O error on dev nbd1, logical block 3, async page read [ 590.875766][ T1707] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.875792][ T1707] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.875885][ T1707] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.875910][ T1707] Buffer I/O error on dev nbd1, logical block 1, async page read [ 590.876046][ T1707] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.876071][ T1707] Buffer I/O error on dev nbd1, logical block 2, async page read [ 590.876185][ T1707] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.876229][ T1707] Buffer I/O error on dev nbd1, logical block 3, async page read [ 590.879775][ T1707] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.879806][ T1707] Buffer I/O error on dev nbd1, logical block 0, async page read [ 590.889953][ T1707] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 590.890179][ T1707] Buffer I/O error on dev nbd1, logical block 1, async page read [ 590.906495][T28054] ldm_validate_partition_table(): Disk read failed. [ 590.913217][T28054] Dev nbd1: unable to read RDB block 0 [ 590.923490][T28054] nbd1: unable to read partition table [ 591.215024][T28054] ldm_validate_partition_table(): Disk read failed. [ 591.234413][T28054] Dev nbd1: unable to read RDB block 0 [ 591.238124][T28054] nbd1: unable to read partition table [ 591.867143][T28075] netlink: 'syz.2.10644': attribute type 1 has an invalid length. [ 591.867172][T28075] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10644'. [ 591.867193][T28075] netlink: 'syz.2.10644': attribute type 2 has an invalid length. [ 591.867210][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10644'. [ 591.941540][T28076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10645'. [ 591.999562][T28079] openvswitch: netlink: EtherType 2 is less than min 600 [ 593.988770][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10676'. [ 594.074030][T28145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10676'. [ 594.421971][T28161] netlink: 'syz.2.10685': attribute type 2 has an invalid length. [ 595.131559][T28192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10700'. [ 595.135552][T28192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10700'. [ 595.224210][T28195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.831872][T28226] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10714'. [ 596.191941][T28235] erspan0: entered promiscuous mode [ 596.464308][T28251] netlink: 'syz.0.10728': attribute type 1 has an invalid length. [ 596.464332][T28251] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.10728'. [ 596.464349][T28251] netlink: 'syz.0.10728': attribute type 1 has an invalid length. [ 596.464363][T28251] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.10728'. [ 597.433083][T28290] netlink: 'syz.0.10747': attribute type 5 has an invalid length. [ 598.355665][T28324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10763'. [ 599.301151][T28359] netlink: 'syz.3.10779': attribute type 3 has an invalid length. [ 599.445009][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10781'. [ 599.445786][T28363] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10781'. [ 599.445824][T28363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10781'. [ 600.503374][T28395] tipc: Started in network mode [ 600.503408][T28395] tipc: Node identity ac14140f, cluster identity 4711 [ 600.504757][T28395] tipc: New replicast peer: 255.255.255.255 [ 600.505742][T28395] tipc: Enabled bearer , priority 10 [ 601.639106][ T5722] tipc: Node number set to 2886997007 [ 603.305070][T28502] netlink: 'syz.1.10848': attribute type 3 has an invalid length. [ 603.384039][T28504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10849'. [ 604.515060][T28541] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10866'. [ 605.140387][T28563] netlink: 'syz.2.10877': attribute type 1 has an invalid length. [ 605.140410][T28563] netlink: 'syz.2.10877': attribute type 3 has an invalid length. [ 605.140423][T28563] netlink: 'syz.2.10877': attribute type 7 has an invalid length. [ 605.140436][T28563] netlink: 'syz.2.10877': attribute type 8 has an invalid length. [ 605.140448][T28563] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10877'. [ 605.140480][T28563] NCSI netlink: No device for ifindex 131092 [ 605.356920][T28573] veth0: entered promiscuous mode [ 605.365470][T28573] veth0: left promiscuous mode [ 607.781981][T28665] netlink: 165 bytes leftover after parsing attributes in process `syz.3.10924'. [ 609.143998][T28713] netlink: 'syz.3.10946': attribute type 8 has an invalid length. [ 609.144221][T28713] sch_fq: defrate 0 ignored. [ 611.522444][T28794] netlink: 'syz.4.10986': attribute type 83 has an invalid length. [ 611.653855][T28800] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.947047][T28815] openvswitch: netlink: IP tunnel TTL not specified. [ 611.947093][T28815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.195316][T28825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11000'. [ 612.522166][T25690] Bluetooth: hci4: command 0x0406 tx timeout [ 612.703821][T14556] tipc: Subscription rejected, illegal request [ 613.016459][T28858] blkio.reset_stats is deprecated [ 613.280102][T28867] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11022'. [ 614.274104][ T53] block nbd2: Receive control failed (result -32) [ 614.735145][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11047'. [ 615.123914][T28945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11056'. [ 616.273179][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11076'. [ 616.305869][T28985] xfrm1: entered promiscuous mode [ 616.305892][T28985] xfrm1: entered allmulticast mode [ 616.335822][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11076'. [ 616.605280][T28999] netlink: 'syz.2.11083': attribute type 12 has an invalid length. [ 616.605305][T28999] netlink: 'syz.2.11083': attribute type 29 has an invalid length. [ 616.605321][T28999] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11083'. [ 616.605342][T28999] netlink: 'syz.2.11083': attribute type 2 has an invalid length. [ 617.393917][T29023] gtp1: entered promiscuous mode [ 617.394128][T29023] gtp1: entered allmulticast mode [ 618.103863][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11111'. [ 618.273961][T29058] openvswitch: netlink: IP tunnel dst address not specified [ 618.274013][T29058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.075577][T29082] veth0_to_bridge: entered promiscuous mode [ 619.077949][T29081] veth0_to_bridge: left promiscuous mode [ 620.200319][T29130] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11146'. [ 621.076458][T29163] netlink: 'syz.1.11164': attribute type 4 has an invalid length. [ 621.583475][T29179] netlink: 'syz.4.11171': attribute type 83 has an invalid length. [ 621.695596][T29188] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 621.697170][T29186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11175'. [ 622.151333][T29206] bond0: option miimon: invalid value (18446744071829782528) [ 622.151364][T29206] bond0: option miimon: allowed values 0 - 2147483647 [ 622.482210][T29212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11188'. [ 623.031427][T29232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11195'. [ 623.031571][T29232] netlink: 6 bytes leftover after parsing attributes in process `syz.4.11195'. [ 624.364944][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.456752][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11220'. [ 624.456778][T29281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11220'. [ 624.773721][T29291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11223'. [ 625.132109][T29299] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 627.575519][T29390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11271'. [ 627.575545][T29390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11271'. [ 627.742308][T29399] netlink: 'syz.2.11276': attribute type 83 has an invalid length. [ 628.078668][T29411] netlink: 'syz.2.11281': attribute type 8 has an invalid length. [ 628.078691][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11281'. [ 628.123182][T29411] bridge0: port 3(veth1_to_bridge) entered disabled state [ 628.123403][T29411] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.123569][T29411] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.183384][T29413] netlink: 'syz.4.11282': attribute type 4 has an invalid length. [ 628.681640][T29435] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11292'. [ 628.830550][T29442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11295'. [ 629.005483][T29446] netlink: 'syz.3.11298': attribute type 2 has an invalid length. [ 629.105154][T29448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11299'. [ 629.894398][T29479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11312'. [ 630.369449][T29498] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11321'. [ 630.885206][T29516] netlink: 'syz.4.11330': attribute type 83 has an invalid length. [ 631.137405][T29528] IPv6: Can't replace route, no match found [ 631.137699][T29528] IPv6: Can't replace route, no match found [ 633.110182][T29603] ip_tables: iptables: counters copy to user failed while replacing table [ 633.114020][T29605] vxcan0: tx address claim with dest, not broadcast [ 633.501963][T29619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11376'. [ 633.505694][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11376'. [ 633.866739][T29631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11382'. [ 634.541848][T29657] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11394'. [ 634.646618][T29660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11395'. [ 634.722863][T29664] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11397'. [ 635.112249][T29679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11405'. [ 635.463706][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11411'. [ 635.464771][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11411'. [ 635.465012][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11411'. [ 635.762859][T29702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11416'. [ 635.799852][T29704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11417'. [ 635.819910][T29706] netlink: 'syz.3.11418': attribute type 2 has an invalid length. [ 635.819930][T29706] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11418'. [ 636.083755][T29711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11420'. [ 636.578265][T29733] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 637.025041][ T53] Bluetooth: hci1: connection err: -111 [ 637.287314][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11443'. [ 638.445002][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11468'. [ 639.386346][T29849] netlink: del zone limit has 4 unknown bytes [ 640.245437][T29883] netlink: 'syz.0.11502': attribute type 83 has an invalid length. [ 640.524412][T29895] __nla_validate_parse: 1 callbacks suppressed [ 640.524434][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11508'. [ 640.680710][T29898] veth0: mtu less than device minimum [ 642.098901][T29939] ip_tables: iptables: counters copy to user failed while replacing table [ 642.777457][T29951] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.11532'. [ 642.944846][T29954] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11536'. [ 643.748635][T29978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11547'. [ 643.770865][T29978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11547'. [ 643.881382][T29980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11548'. [ 643.905452][T29980] macvlan0: left promiscuous mode [ 643.986203][T29987] netlink: 'syz.2.11552': attribute type 6 has an invalid length. [ 644.017786][T29980] netlink: 'syz.3.11548': attribute type 1 has an invalid length. [ 644.017806][T29980] netlink: 'syz.3.11548': attribute type 2 has an invalid length. [ 644.372596][T30000] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11558'. [ 644.438645][T30003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11559'. [ 645.127634][T30037] netlink: 'syz.4.11577': attribute type 2 has an invalid length. [ 645.421082][T30051] netlink: 'syz.2.11583': attribute type 2 has an invalid length. [ 645.529967][T30057] netlink: 81 bytes leftover after parsing attributes in process `syz.3.11585'. [ 645.854358][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11592'. [ 646.475100][T30096] sch_fq: defrate 0 ignored. [ 646.612645][T30102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11606'. [ 646.635757][T30102] hsr_slave_0: left promiscuous mode [ 646.648531][T30102] hsr_slave_1: left promiscuous mode [ 646.788736][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11607'. [ 646.845717][T30110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11610'. [ 646.893535][T30110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11610'. [ 647.085331][T30117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11611'. [ 647.441892][T30137] openvswitch: netlink: IP tunnel dst address not specified [ 647.441928][T30137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.475370][T30138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11623'. [ 647.892873][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11632'. [ 648.706046][T30191] netlink: 'syz.2.11645': attribute type 21 has an invalid length. [ 648.706072][T30191] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11645'. [ 648.706124][T30191] netlink: 'syz.2.11645': attribute type 4 has an invalid length. [ 648.706138][T30191] netlink: 'syz.2.11645': attribute type 5 has an invalid length. [ 648.740075][T30191] netlink: 'syz.2.11645': attribute type 21 has an invalid length. [ 648.740236][T30191] netlink: 'syz.2.11645': attribute type 4 has an invalid length. [ 649.001057][T30200] tipc: Resetting bearer [ 649.200333][T30200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.435764][T30200] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 649.492140][T30200] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 649.518039][ T60] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 649.565360][T30205] tipc: Resetting bearer [ 649.627813][T30205] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 649.653838][T30205] bridge1: left allmulticast mode [ 649.658831][T30205] gtp0: left allmulticast mode [ 649.676817][T30205] ip6gre1: left allmulticast mode [ 649.688542][T30205] ip6tnl1: left allmulticast mode [ 649.698838][T30205] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 650.095219][ T9] syz2: Port: 1 Link ACTIVE [ 650.592313][T30245] tun1: tun_chr_ioctl cmd 1074025675 [ 650.592338][T30245] tun1: persist disabled [ 650.735711][T30250] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 650.735736][T30250] syzkaller1: group set to 0 [ 651.354298][T30275] sctp: [Deprecated]: syz.0.11683 (pid 30275) Use of int in max_burst socket option deprecated. [ 651.354298][T30275] Use struct sctp_assoc_value instead [ 651.843597][T30288] __nla_validate_parse: 4 callbacks suppressed [ 651.843619][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11689'. [ 651.843649][T30288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11689'. [ 652.514074][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11696'. [ 652.538626][T30304] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.038243][T30325] sctp: [Deprecated]: syz.4.11706 (pid 30325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.038243][T30325] Use struct sctp_sack_info instead [ 653.101130][T30321] bond4 (unregistering): Released all slaves [ 653.133089][T30322] ip6tnl0: Caught tx_queue_len zero misconfig [ 653.502531][T30344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11714'. [ 653.527102][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11716'. [ 654.232857][ T53] block nbd3: Receive control failed (result -32) [ 655.070779][T30403] validate_nla: 1 callbacks suppressed [ 655.070802][T30403] netlink: 'syz.3.11743': attribute type 1 has an invalid length. [ 655.070818][T30403] netlink: 'syz.3.11743': attribute type 2 has an invalid length. [ 655.073267][T30403] netlink: 'syz.3.11743': attribute type 1 has an invalid length. [ 655.073285][T30403] netlink: 'syz.3.11743': attribute type 2 has an invalid length. [ 655.765286][T30430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11756'. [ 655.765320][T30430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11756'. [ 657.181582][T30493] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11786'. [ 657.470837][T30499] macvtap0: entered allmulticast mode [ 657.470863][T30499] veth0_macvtap: entered allmulticast mode [ 657.728136][T30511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11795'. [ 658.607289][T30538] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 659.235517][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11818'. [ 659.662245][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11826'. [ 659.662281][T30574] netlink: 'syz.3.11826': attribute type 30 has an invalid length. [ 659.662297][T30574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11826'. [ 659.994225][T30583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11830'. [ 660.130691][ T31] audit: type=1804 audit(1789455296.155:5): pid=30590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11833" name="/newroot/2356/cgroup.controllers" dev="tmpfs" ino=11839 res=1 errno=0 [ 660.132776][ T31] audit: type=1800 audit(1789455296.155:6): pid=30590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11833" name="cgroup.controllers" dev="tmpfs" ino=11839 res=0 errno=0 [ 660.394519][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11838'. [ 660.748038][T30613] netlink: 'syz.2.11845': attribute type 1 has an invalid length. [ 660.748064][T30613] netlink: 208 bytes leftover after parsing attributes in process `syz.2.11845'. [ 661.292262][T30630] lo: Caught tx_queue_len zero misconfig [ 661.462722][T30643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11860'. [ 661.711685][T30645] netlink: 284 bytes leftover after parsing attributes in process `syz.3.11858'. [ 663.372402][T30709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11890'. [ 663.475133][T30713] openvswitch: netlink: Unknown key attributes 1 [ 664.160305][T30737] tap0: tun_chr_ioctl cmd 1074025676 [ 664.160328][T30737] tap0: owner set to 0 [ 664.686554][T30749] bond4: entered promiscuous mode [ 665.404917][T30779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11923'. [ 666.024223][T30813] netlink: 'syz.2.11938': attribute type 4 has an invalid length. [ 666.311045][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11939'. [ 666.964881][ T53] Bluetooth: hci4: connection err: -111 [ 667.452085][T30867] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11963'. [ 667.528459][T30869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11964'. [ 667.562375][T30876] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11965'. [ 668.742509][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11987'. [ 669.125021][T30934] netlink: 'syz.2.11994': attribute type 5 has an invalid length. [ 669.349061][T30940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11997'. [ 669.349095][T30940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11997'. [ 669.706142][T30946] netlink: Failed to add k\ helper -22 [ 669.706385][T30946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.431526][T30973] sctp: [Deprecated]: syz.4.12013 (pid 30973) Use of int in maxseg socket option. [ 670.431526][T30973] Use struct sctp_assoc_value instead [ 670.473878][T30976] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12014'. [ 671.372045][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12034'. [ 672.462712][T31063] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12056'. [ 673.195862][T31087] h: entered promiscuous mode [ 673.305757][T25690] block nbd4: Receive control failed (result -32) [ 673.308660][ T53] block nbd4: Receive control failed (result -32) [ 674.718509][T31146] TCP: TCP_TX_DELAY enabled [ 674.954864][T31154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12098'. [ 675.022224][T31156] tun0: tun_chr_ioctl cmd 1074025675 [ 675.022247][T31156] tun0: persist enabled [ 675.071362][T31162] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12102'. [ 675.071389][T31162] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12102'. [ 675.137000][T31160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12100'. [ 675.788893][T31185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 677.117306][T31231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12136'. [ 677.206369][T31234] batman_adv: batadv0: Interface deactivated: wlan1 [ 677.299889][T31234] batman_adv: batadv0: Removing interface: wlan1 [ 678.050163][T31266] netlink: 'syz.2.12152': attribute type 1 has an invalid length. [ 678.243951][T31274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12157'. [ 678.666780][T31289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12163'. [ 680.441852][T31349] netlink: 192 bytes leftover after parsing attributes in process `syz.2.12193'. [ 680.445940][T31349] netlink: 192 bytes leftover after parsing attributes in process `syz.2.12193'. [ 680.550305][T31352] tap0: tun_chr_ioctl cmd 1074025672 [ 680.550332][T31352] tap0: ignored: set checksum disabled [ 680.928053][T31364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12198'. [ 680.928083][T31364] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12198'. [ 681.034818][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12199'. [ 681.312585][T31364] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12198'. [ 681.420591][T31374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12203'. [ 682.325275][T31406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12218'. [ 682.736165][T31418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12224'. [ 682.738614][T31418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12224'. [ 683.363274][T31445] netlink: 'syz.3.12236': attribute type 1 has an invalid length. [ 683.999626][T31473] tipc: Invalid UDP bearer configuration [ 683.999676][T31473] tipc: Enabling of bearer rejected, failed to enable media [ 685.274814][T31535] batadv0: entered promiscuous mode [ 685.274839][T31535] batadv0: entered allmulticast mode [ 685.805649][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.807598][T31559] __nla_validate_parse: 4 callbacks suppressed [ 685.807615][T31559] netlink: 232 bytes leftover after parsing attributes in process `syz.1.12288'. [ 686.168974][T31579] netlink: 'syz.3.12298': attribute type 11 has an invalid length. [ 686.486338][T31593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12305'. [ 686.543614][T31598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12305'. [ 686.553769][T31595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12306'. [ 687.323369][T31632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12323'. [ 687.647720][T31624] vlan1 (unregistering): left allmulticast mode [ 687.647745][T31624] veth0_vlan (unregistering): left allmulticast mode [ 688.214352][T31657] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12334'. [ 688.848419][T31684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12347'. [ 689.295116][T31700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12355'. [ 689.609814][T31712] netlink: 576 bytes leftover after parsing attributes in process `syz.1.12361'. [ 689.834999][T31721] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 689.836567][T31721] syzkaller1: linktype set to 823 [ 690.192137][T31740] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12374'. [ 691.526164][T31801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12403'. [ 693.058411][T31833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12418'. [ 693.868544][T31862] veth0: entered promiscuous mode [ 693.870644][T31862] veth0: left promiscuous mode [ 693.970484][T31863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12430'. [ 695.533679][T31923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12456'. [ 695.846836][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12463'. [ 696.204952][T31948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12469'. [ 696.445611][T31954] veth0: entered promiscuous mode [ 696.447216][T31953] veth0: left promiscuous mode [ 696.730605][T31968] veth1_to_bond: Caught tx_queue_len zero misconfig [ 696.951906][T31974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12481'. [ 697.991583][T32022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12504'. [ 697.994875][T32021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 698.230136][T32031] bond0: Caught tx_queue_len zero misconfig [ 698.496129][T32044] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 698.537347][T32043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12514'. [ 698.676307][T32050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12516'. [ 699.268545][T32068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12528'. [ 699.703062][T32090] netlink: 'syz.3.12537': attribute type 1 has an invalid length. [ 699.703087][T32090] netlink: 'syz.3.12537': attribute type 7 has an invalid length. [ 699.703101][T32090] netlink: 'syz.3.12537': attribute type 8 has an invalid length. [ 699.703115][T32090] netlink: 208 bytes leftover after parsing attributes in process `syz.3.12537'. [ 699.703131][T32090] NCSI netlink: No device for ifindex 65584 [ 699.850180][T32094] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12540'. [ 699.983398][T32101] netlink: 'syz.4.12544': attribute type 83 has an invalid length. [ 700.824917][T32138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12561'. [ 701.795518][T32175] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 702.562972][T32201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12591'. [ 703.664584][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12613'. [ 704.204481][T32275] ip_tables: iptables: counters copy to user failed while replacing table [ 704.294751][T32280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12629'. [ 704.295321][T32280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12629'. [ 704.297479][T32280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12629'. [ 705.678389][T32338] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12654'. [ 706.001891][T32352] netlink: 'syz.1.12659': attribute type 2 has an invalid length. [ 706.001918][T32352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12659'. [ 706.289452][T32364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12666'. [ 706.458309][T32369] veth1_macvtap: entered promiscuous mode [ 706.536552][T32373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 706.553011][T32374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12671'. [ 706.789984][T32386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12677'. [ 707.514417][T32418] netlink: 'syz.2.12691': attribute type 83 has an invalid length. [ 707.677092][T32424] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 707.781752][T32429] openvswitch: netlink: Unknown key attributes 1 [ 708.396325][T32459] __nla_validate_parse: 1 callbacks suppressed [ 708.396348][T32459] netlink: 232 bytes leftover after parsing attributes in process `syz.1.12710'. [ 708.635135][T32469] netlink: 'syz.1.12716': attribute type 10 has an invalid length. [ 708.653632][T32469] team0: Port device dummy0 added [ 709.141569][T32489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12724'. [ 709.518197][T32508] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12733'. [ 709.534497][T32504] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12733'. [ 711.043254][T32553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12755'. [ 711.213438][T32563] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12759'. [ 711.768917][T32582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12769'. [ 712.190043][T32602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12779'. [ 712.193162][T32603] netlink: 'syz.0.12778': attribute type 1 has an invalid length. [ 712.193181][T32603] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12778'. [ 712.193197][T32603] netlink: 'syz.0.12778': attribute type 2 has an invalid length. [ 712.193211][T32603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12778'. [ 712.303819][T32605] netlink: 'syz.3.12780': attribute type 7 has an invalid length. [ 712.303841][T32605] netlink: 'syz.3.12780': attribute type 8 has an invalid length. [ 712.388536][T32607] netlink: 'syz.0.12782': attribute type 21 has an invalid length. [ 712.597376][T32615] bridge_slave_1: left allmulticast mode [ 712.597426][T32615] bridge_slave_1: left promiscuous mode [ 712.599491][T32615] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.728538][T32615] bridge_slave_0: left allmulticast mode [ 712.728566][T32615] bridge_slave_0: left promiscuous mode [ 712.728776][T32615] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.958478][T32623] macvlan3: entered promiscuous mode [ 712.958675][T32623] macvlan3: entered allmulticast mode [ 712.959280][T32623] .`: (slave macvlan3): Error -98 calling set_mac_address [ 713.076146][T32629] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 713.397205][T32639] veth0: entered promiscuous mode [ 713.404808][T32638] veth0: left promiscuous mode [ 713.777993][T32663] __nla_validate_parse: 3 callbacks suppressed [ 713.778015][T32663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12806'. [ 714.202352][T32685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12810'. [ 714.603554][T32693] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 714.831143][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12820'. [ 715.066895][T32706] syzkaller1: entered promiscuous mode [ 715.067265][T32706] syzkaller1: entered allmulticast mode [ 715.500299][T32722] veth1_macvtap: left promiscuous mode [ 715.500332][T32722] macsec0: entered allmulticast mode [ 715.621674][T32722] veth1_macvtap: entered promiscuous mode [ 715.621699][T32722] veth1_macvtap: entered allmulticast mode [ 715.622982][T32722] macsec0: left allmulticast mode [ 715.623001][T32722] veth1_macvtap: left allmulticast mode [ 716.004388][T32741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12836'. [ 716.546818][T32762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12848'. [ 716.718047][T32767] veth0: Caught tx_queue_len zero misconfig [ 717.928486][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12869'. [ 717.943628][T25690] block nbd5: Receive control failed (result -107) [ 718.087606][ T346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12873'. [ 718.087647][ T346] bond0: ARP target 8.4.0.0 is already present [ 718.087667][ T346] bond0: option arp_ip_target: invalid value (1032) [ 719.632320][ T403] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 720.977833][ T446] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12916'. [ 721.627884][ T463] bond2: option mode: invalid value (10) [ 721.693594][ T463] bond2 (unregistering): Released all slaves [ 722.063433][ T489] netlink: 'syz.4.12935': attribute type 39 has an invalid length. [ 722.343020][ T498] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12940'. [ 722.563451][ T506] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12944'. [ 722.563476][ T506] openvswitch: netlink: Message has 4 unknown bytes. [ 722.821431][ T515] bridge0: port 1(bridge_slave_0) entered listening state [ 723.818225][ T554] batadv_slave_0: entered promiscuous mode [ 723.827667][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12965'. [ 723.827859][ T554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.091236][ T554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.922586][ T588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12983'. [ 724.928291][ T588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12983'. [ 725.993531][ T618] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12995'. [ 726.924795][ T636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13003'. [ 727.158102][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13006'. [ 727.234734][ T644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.295864][ T644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.676190][ T652] block nbd6: server does not support multiple connections per device. [ 727.677652][ T652] block nbd6: shutting down sockets [ 727.700755][ T654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13012'. [ 727.700795][ T654] netlink: 'syz.4.13012': attribute type 10 has an invalid length. [ 727.700813][ T654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13012'. [ 727.925255][ T659] sctp: [Deprecated]: syz.1.13014 (pid 659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.925255][ T659] Use struct sctp_sack_info instead [ 727.972889][ T660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13015'. [ 729.084346][ T696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13032'. [ 729.301966][ T702] ipvlan0: Caught tx_queue_len zero misconfig [ 729.563442][ T709] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 730.642074][ T730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13044'. [ 731.037804][ T735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13046'. [ 731.215005][ T735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13046'. [ 731.714270][ T743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13048'. [ 734.004423][ T782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13065'. [ 735.147353][ T811] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13079'. [ 735.729003][ T821] netlink: 'syz.2.13082': attribute type 2 has an invalid length. [ 736.547628][ T836] ip_tables: iptables: counters copy to user failed while replacing table [ 736.566502][ T832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13086'. [ 736.696141][ T835] sctp: [Deprecated]: syz.0.13089 (pid 835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.696141][ T835] Use struct sctp_sack_info instead [ 738.627155][ T863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13096'. [ 739.293906][ T870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13096'. [ 739.293992][ T870] nbd: device at index 64 is going down [ 739.603498][ T879] udevd[879]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 739.692992][ T876] udevd[876]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 741.038483][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13110'. [ 742.065406][ T926] batadv0: Caught tx_queue_len zero misconfig [ 742.088143][ T926] netlink: 'syz.3.13117': attribute type 3 has an invalid length. [ 744.825670][ T981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13135'. [ 745.044011][ T985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13137'. [ 745.196019][ T988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13138'. [ 746.311644][ T1018] trusted_key: syz.0.13151 sent an empty control message without MSG_MORE. [ 747.226421][ T1028] bridge6: entered promiscuous mode [ 747.226488][ T1028] bridge6: entered allmulticast mode [ 747.266047][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.478680][ T1028] team0: Port device bridge6 added [ 747.486293][ T1034] bridge0: port 3(team0) entered blocking state [ 747.486392][ T1034] bridge0: port 3(team0) entered disabled state [ 747.486557][ T1034] team0: entered allmulticast mode [ 747.486574][ T1034] team_slave_0: entered allmulticast mode [ 747.486594][ T1034] team_slave_1: entered allmulticast mode [ 747.618536][ T1034] team0: entered promiscuous mode [ 747.618600][ T1034] team_slave_0: entered promiscuous mode [ 747.619381][ T1034] team_slave_1: entered promiscuous mode [ 749.934485][ T1099] netlink: 'syz.3.13180': attribute type 4 has an invalid length. [ 750.737915][ T1119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13189'. [ 751.513372][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13197'. [ 751.889385][T25690] block nbd0: Receive control failed (result -107) [ 751.905683][ T1146] block nbd0: reconnected socket [ 755.095865][ T1202] netlink: 'syz.2.13223': attribute type 11 has an invalid length. [ 756.090224][ T1223] [ 756.092644][ T1223] ====================================================== [ 756.099686][ T1223] WARNING: possible circular locking dependency detected [ 756.106791][ T1223] syzkaller #0 Not tainted [ 756.111251][ T1223] ------------------------------------------------------ [ 756.118304][ T1223] syz.4.13235/1223 is trying to acquire lock: [ 756.124391][ T1223] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 756.133645][ T1223] [ 756.133645][ T1223] but task is already holding lock: [ 756.141036][ T1223] ffff888076ab9d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 756.150583][ T1223] [ 756.150583][ T1223] which lock already depends on the new lock. [ 756.150583][ T1223] [ 756.161016][ T1223] [ 756.161016][ T1223] the existing dependency chain (in reverse order) is: [ 756.170058][ T1223] [ 756.170058][ T1223] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 756.177660][ T1223] __might_fault+0xcb/0x130 [ 756.182796][ T1223] _copy_from_user+0x28/0xb0 [ 756.188080][ T1223] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 756.194740][ T1223] ip_generic_getfrag+0x149/0x2d0 [ 756.200433][ T1223] __ip6_append_data+0x3b26/0x40c0 [ 756.206177][ T1223] ip6_append_data+0x108/0x270 [ 756.211501][ T1223] rawv6_sendmsg+0x1298/0x18c0 [ 756.216919][ T1223] sock_sendmsg_nosec+0x10e/0x180 [ 756.222582][ T1223] ____sys_sendmsg+0x54e/0x850 [ 756.227930][ T1223] ___sys_sendmsg+0x2a5/0x360 [ 756.233172][ T1223] __x64_sys_sendmsg+0x1b1/0x290 [ 756.238680][ T1223] do_syscall_64+0x166/0x520 [ 756.243926][ T1223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.250410][ T1223] [ 756.250410][ T1223] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 756.258229][ T1223] lock_sock_nested+0x41/0x100 [ 756.263550][ T1223] inet_shutdown+0x6a/0x390 [ 756.268711][ T1223] nbd_mark_nsock_dead+0x2cb/0x550 [ 756.274470][ T1223] recv_work+0x1cee/0x1e10 [ 756.279444][ T1223] process_scheduled_works+0xc3d/0x1630 [ 756.285581][ T1223] worker_thread+0xa47/0xfb0 [ 756.290733][ T1223] kthread+0x38b/0x480 [ 756.295359][ T1223] ret_from_fork+0x514/0xb70 [ 756.300511][ T1223] ret_from_fork_asm+0x1a/0x30 [ 756.305914][ T1223] [ 756.305914][ T1223] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 756.313600][ T1223] __mutex_lock+0x19d/0x1550 [ 756.318847][ T1223] nbd_queue_rq+0x373/0xff0 [ 756.323911][ T1223] blk_mq_dispatch_rq_list+0x499/0x1990 [ 756.330116][ T1223] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 756.337040][ T1223] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 756.343599][ T1223] blk_mq_run_work_fn+0x16c/0x300 [ 756.349189][ T1223] process_scheduled_works+0xc3d/0x1630 [ 756.355288][ T1223] worker_thread+0xa47/0xfb0 [ 756.360504][ T1223] kthread+0x38b/0x480 [ 756.365150][ T1223] ret_from_fork+0x514/0xb70 [ 756.370292][ T1223] ret_from_fork_asm+0x1a/0x30 [ 756.375621][ T1223] [ 756.375621][ T1223] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 756.382898][ T1223] __mutex_lock+0x19d/0x1550 [ 756.388052][ T1223] nbd_queue_rq+0xc1/0xff0 [ 756.393030][ T1223] blk_mq_dispatch_rq_list+0x499/0x1990 [ 756.399136][ T1223] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 756.406023][ T1223] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 756.412563][ T1223] blk_mq_run_work_fn+0x16c/0x300 [ 756.418181][ T1223] process_scheduled_works+0xc3d/0x1630 [ 756.424288][ T1223] worker_thread+0xa47/0xfb0 [ 756.429445][ T1223] kthread+0x38b/0x480 [ 756.434065][ T1223] ret_from_fork+0x514/0xb70 [ 756.439260][ T1223] ret_from_fork_asm+0x1a/0x30 [ 756.444595][ T1223] [ 756.444595][ T1223] -> #3 (set->srcu){.+.+}-{0:0}: [ 756.451769][ T1223] __synchronize_srcu+0xc9/0x2f0 [ 756.457352][ T1223] elevator_switch+0x1e8/0x7b0 [ 756.462739][ T1223] elevator_change+0x2fa/0x480 [ 756.468084][ T1223] elevator_set_default+0x375/0x440 [ 756.473843][ T1223] blk_register_queue+0x3f3/0x4e0 [ 756.479472][ T1223] __add_disk+0x6b8/0xdb0 [ 756.484358][ T1223] add_disk_fwnode+0x100/0x3a0 [ 756.489684][ T1223] nbd_dev_add+0x733/0xb60 [ 756.494647][ T1223] nbd_init+0x168/0x1f0 [ 756.499462][ T1223] do_one_initcall+0x250/0x870 [ 756.504815][ T1223] do_initcall_level+0x10a/0x1a0 [ 756.510360][ T1223] do_initcalls+0x59/0xa0 [ 756.515249][ T1223] kernel_init_freeable+0x29d/0x3e0 [ 756.521007][ T1223] kernel_init+0x22/0x1d0 [ 756.525892][ T1223] ret_from_fork+0x514/0xb70 [ 756.531045][ T1223] ret_from_fork_asm+0x1a/0x30 [ 756.536376][ T1223] [ 756.536376][ T1223] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 756.544353][ T1223] __mutex_lock+0x19d/0x1550 [ 756.549509][ T1223] elevator_change+0x1af/0x480 [ 756.554836][ T1223] elevator_set_none+0xb5/0x140 [ 756.560277][ T1223] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 756.566678][ T1223] nbd_start_device+0x189/0xb30 [ 756.572088][ T1223] nbd_genl_connect+0x167d/0x1cd0 [ 756.577739][ T1223] genl_family_rcv_msg_doit+0x233/0x340 [ 756.583931][ T1223] genl_rcv_msg+0x614/0x7a0 [ 756.588996][ T1223] netlink_rcv_skb+0x226/0x4a0 [ 756.594376][ T1223] genl_rcv+0x28/0x40 [ 756.598936][ T1223] netlink_unicast+0x7bd/0x940 [ 756.604258][ T1223] netlink_sendmsg+0x813/0xb40 [ 756.609589][ T1223] sock_sendmsg_nosec+0x13a/0x180 [ 756.615188][ T1223] ____sys_sendmsg+0x54e/0x850 [ 756.620539][ T1223] ___sys_sendmsg+0x2a5/0x360 [ 756.625782][ T1223] __x64_sys_sendmsg+0x1b1/0x290 [ 756.631298][ T1223] do_syscall_64+0x166/0x520 [ 756.636453][ T1223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.642904][ T1223] [ 756.642904][ T1223] -> #1 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 756.651574][ T1223] blk_alloc_queue+0x544/0x690 [ 756.656941][ T1223] __blk_mq_alloc_disk+0x194/0x390 [ 756.662640][ T1223] nbd_dev_add+0x494/0xb60 [ 756.667612][ T1223] nbd_init+0x168/0x1f0 [ 756.672328][ T1223] do_one_initcall+0x250/0x870 [ 756.677666][ T1223] do_initcall_level+0x10a/0x1a0 [ 756.683169][ T1223] do_initcalls+0x59/0xa0 [ 756.688113][ T1223] kernel_init_freeable+0x29d/0x3e0 [ 756.693896][ T1223] kernel_init+0x22/0x1d0 [ 756.698837][ T1223] ret_from_fork+0x514/0xb70 [ 756.703984][ T1223] ret_from_fork_asm+0x1a/0x30 [ 756.709323][ T1223] [ 756.709323][ T1223] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 756.716590][ T1223] __lock_acquire+0x164c/0x2de0 [ 756.722073][ T1223] lock_acquire+0x115/0x350 [ 756.727135][ T1223] fs_reclaim_acquire+0x71/0x100 [ 756.732632][ T1223] prepare_alloc_pages+0x149/0x600 [ 756.738296][ T1223] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 756.744702][ T1223] alloc_pages_mpol+0x21e/0x390 [ 756.750142][ T1223] alloc_pages_noprof+0xb1/0x2b0 [ 756.755644][ T1223] pte_alloc_one+0x22/0x370 [ 756.760721][ T1223] do_pte_missing+0x13c8/0x34b0 [ 756.766147][ T1223] handle_mm_fault+0x1a53/0x3750 [ 756.771706][ T1223] do_user_addr_fault+0x746/0x1340 [ 756.777362][ T1223] exc_page_fault+0x6a/0xc0 [ 756.782426][ T1223] asm_exc_page_fault+0x26/0x30 [ 756.787832][ T1223] __get_user_4+0x14/0x30 [ 756.792796][ T1223] ppp_ioctl+0x5f5/0x1c00 [ 756.797785][ T1223] __se_sys_ioctl+0xfc/0x170 [ 756.802950][ T1223] do_syscall_64+0x166/0x520 [ 756.808108][ T1223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.814551][ T1223] [ 756.814551][ T1223] other info that might help us debug this: [ 756.814551][ T1223] [ 756.824799][ T1223] Chain exists of: [ 756.824799][ T1223] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 756.824799][ T1223] [ 756.837449][ T1223] Possible unsafe locking scenario: [ 756.837449][ T1223] [ 756.844926][ T1223] CPU0 CPU1 [ 756.850315][ T1223] ---- ---- [ 756.855708][ T1223] rlock(&mm->mmap_lock); [ 756.860156][ T1223] lock(sk_lock-AF_INET6); [ 756.867215][ T1223] lock(&mm->mmap_lock); [ 756.874109][ T1223] lock(fs_reclaim); [ 756.878119][ T1223] [ 756.878119][ T1223] *** DEADLOCK *** [ 756.878119][ T1223] [ 756.886278][ T1223] locks held by syz.4.13235/1223: 2, last CPU#1: [ 756.892646][ T1223] #0: ffffffff8fa0ad60 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 756.901375][ T1223] #1: ffff888076ab9d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 756.911369][ T1223] [ 756.911369][ T1223] stack backtrace: [ 756.917294][ T1223] CPU: 1 UID: 0 PID: 1223 Comm: syz.4.13235 Not tainted syzkaller #0 PREEMPT(full) [ 756.926692][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 756.936809][ T1223] Call Trace: [ 756.940125][ T1223] [ 756.943090][ T1223] dump_stack_lvl+0xe8/0x150 [ 756.947759][ T1223] print_circular_bug+0x2e2/0x300 [ 756.952844][ T1223] check_noncircular+0x12f/0x150 [ 756.957822][ T1223] __lock_acquire+0x164c/0x2de0 [ 756.962710][ T1223] ? __lock_acquire+0x747/0x2de0 [ 756.967683][ T1223] ? __lock_acquire+0x747/0x2de0 [ 756.972665][ T1223] lock_acquire+0x115/0x350 [ 756.977211][ T1223] ? prepare_alloc_pages+0x149/0x600 [ 756.982535][ T1223] ? lock_acquire+0x115/0x350 [ 756.987276][ T1223] fs_reclaim_acquire+0x71/0x100 [ 756.992251][ T1223] ? prepare_alloc_pages+0x149/0x600 [ 756.997565][ T1223] prepare_alloc_pages+0x149/0x600 [ 757.002722][ T1223] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 757.008601][ T1223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 757.014993][ T1223] ? __pfx_policy_nodemask+0x10/0x10 [ 757.020314][ T1223] ? kernel_text_address+0xa5/0xe0 [ 757.025464][ T1223] alloc_pages_mpol+0x21e/0x390 [ 757.030368][ T1223] alloc_pages_noprof+0xb1/0x2b0 [ 757.035343][ T1223] pte_alloc_one+0x22/0x370 [ 757.039891][ T1223] do_pte_missing+0x13c8/0x34b0 [ 757.044810][ T1223] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 757.051110][ T1223] handle_mm_fault+0x1a53/0x3750 [ 757.056092][ T1223] ? handle_mm_fault+0xf1/0x3750 [ 757.061089][ T1223] ? __pfx_handle_mm_fault+0x10/0x10 [ 757.066421][ T1223] ? __lock_acquire+0x747/0x2de0 [ 757.071415][ T1223] ? lock_mm_and_find_vma+0xa7/0x340 [ 757.076742][ T1223] do_user_addr_fault+0x746/0x1340 [ 757.081899][ T1223] exc_page_fault+0x6a/0xc0 [ 757.086457][ T1223] asm_exc_page_fault+0x26/0x30 [ 757.091350][ T1223] RIP: 0010:__get_user_4+0x14/0x30 [ 757.096494][ T1223] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 757.116142][ T1223] RSP: 0018:ffffc9000578fd78 EFLAGS: 00050287 [ 757.122264][ T1223] RAX: 000000110e22fff6 RBX: ffff88807d0c8000 RCX: 0000000000000046 [ 757.130284][ T1223] RDX: 00007ffffffff000 RSI: ffffffff8e6feb8f RDI: ffffffff8c6d9c80 [ 757.138297][ T1223] RBP: ffffc9000578fea8 R08: ffffffff821eae3f R09: 0000000000000000 [ 757.146339][ T1223] R10: 00000000c004743e R11: 0000000000000002 R12: 00000000c004743e [ 757.154357][ T1223] R13: ffff88807d0c80f0 R14: ffff88807d4ee700 R15: 1ffff1100fa9dceb [ 757.162380][ T1223] ? __might_fault+0xaf/0x130 [ 757.167171][ T1223] ppp_ioctl+0x5f5/0x1c00 [ 757.171573][ T1223] ? __pfx_ppp_ioctl+0x10/0x10 [ 757.176406][ T1223] ? __fget_files+0x2a/0x420 [ 757.181068][ T1223] ? __fget_files+0x3a2/0x420 [ 757.185799][ T1223] ? __fget_files+0x2a/0x420 [ 757.190443][ T1223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 757.195448][ T1223] ? __pfx_ppp_ioctl+0x10/0x10 [ 757.200257][ T1223] __se_sys_ioctl+0xfc/0x170 [ 757.204882][ T1223] do_syscall_64+0x166/0x520 [ 757.209510][ T1223] ? trace_irq_disable+0x3b/0x140 [ 757.214603][ T1223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.220750][ T1223] ? clear_bhb_loop+0x70/0xc0 [ 757.225474][ T1223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.231406][ T1223] RIP: 0033:0x7fb49df9e159 [ 757.235855][ T1223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.255495][ T1223] RSP: 002b:00007fb49ee61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.263979][ T1223] RAX: ffffffffffffffda RBX: 00007fb49e225fa0 RCX: 00007fb49df9e159 [ 757.271991][ T1223] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 757.279983][ T1223] RBP: 00007fb49e03503b R08: 0000000000000000 R09: 0000000000000000 [ 757.287994][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.295994][ T1223] R13: 00007fb49e226038 R14: 00007fb49e225fa0 R15: 00007fff79249a48 [ 757.304012][ T1223] [ 757.453709][ T1234] bridge0: Caught tx_queue_len zero misconfig