last executing test programs: 5.579378741s ago: executing program 4 (id=7893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020021", 0x4}], 0x3) 5.147677268s ago: executing program 4 (id=7901): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r1) 4.935118088s ago: executing program 4 (id=7906): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 4.776944974s ago: executing program 4 (id=7910): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 4.511062059s ago: executing program 4 (id=7916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4.294493072s ago: executing program 4 (id=7920): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 2.868043772s ago: executing program 2 (id=7943): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, 0x0}}], 0x1, 0x4000040) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x4, 0x100, 0x3}, 0x10) 2.535234649s ago: executing program 2 (id=7949): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2.008345752s ago: executing program 2 (id=7956): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.922962103s ago: executing program 3 (id=7958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 1.789544321s ago: executing program 0 (id=7960): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x2, @empty, 'batadv_slave_1\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1.706919991s ago: executing program 1 (id=7961): socket$netlink(0x10, 0x3, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 1.595219734s ago: executing program 2 (id=7962): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 1.444674931s ago: executing program 2 (id=7963): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.395871518s ago: executing program 1 (id=7964): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.202717198s ago: executing program 1 (id=7965): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1.10973891s ago: executing program 3 (id=7966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) 1.088768133s ago: executing program 0 (id=7967): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="6b3e99e411", 0x5, 0x40051, &(0x7f0000000000)={0xa, 0x4e21, 0x24d, @private1}, 0x1c) 859.041211ms ago: executing program 3 (id=7968): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 858.747578ms ago: executing program 0 (id=7969): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 719.493842ms ago: executing program 1 (id=7970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 703.450397ms ago: executing program 0 (id=7971): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)='P', 0x1}], 0x1}}], 0x1, 0x8041) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) 589.204696ms ago: executing program 3 (id=7972): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 502.765694ms ago: executing program 0 (id=7973): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r0, &(0x7f0000000540)='|Z', 0x2) 477.979146ms ago: executing program 1 (id=7974): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/220, 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) 332.675292ms ago: executing program 2 (id=7975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 262.535359ms ago: executing program 1 (id=7976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x190) 143.173042ms ago: executing program 3 (id=7977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r2}, &(0x7f0000000340)=0x8) 109.904761ms ago: executing program 0 (id=7978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4044094) 0s ago: executing program 3 (id=7979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): has an invalid length. [ 97.319572][ T6353] netlink: 'syz.0.254': attribute type 3 has an invalid length. [ 97.335774][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'. [ 97.731615][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 97.821597][ T6375] netlink: 'syz.3.264': attribute type 11 has an invalid length. [ 98.066745][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 98.178031][ T6355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.219062][ T6355] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 98.311356][ T187] IPVS: starting estimator thread 0... [ 98.379764][ T6355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.397361][ T6355] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 98.452919][ T6403] IPVS: using max 30 ests per chain, 72000 per kthread [ 98.520607][ T6355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.560135][ T6355] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 98.700390][ T6355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.734262][ T6355] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 98.847393][ T6355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 98.873394][ T6355] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 99.591486][ T6460] netlink: 68 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.781397][ T6465] syz.3.298 uses obsolete (PF_INET,SOCK_PACKET) [ 99.881333][ T6469] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 100.757592][ T6520] netlink: 'syz.4.320': attribute type 2 has an invalid length. [ 101.751436][ T6567] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.756814][ T6568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.341'. [ 102.862883][ T6628] netlink: 'syz.4.363': attribute type 2 has an invalid length. [ 103.777540][ T6669] bond1: Removing last arp target with arp_interval on [ 103.788504][ T6681] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 105.089149][ T6742] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 105.597573][ T6773] ksmbd: Unknown IPC event: 1, ignore. [ 105.652277][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.421'. [ 106.528741][ T6818] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 106.562899][ T6818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'. [ 106.628567][ T6822] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 106.649196][ T6818] team0: Port device geneve1 added [ 106.875436][ T6837] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 106.936548][ T6839] netlink: 59 bytes leftover after parsing attributes in process `syz.0.450'. [ 107.011313][ T6843] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 107.036927][ T6843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.451'. [ 107.071026][ T6843] block nbd1: not configured, cannot reconfigure [ 107.251826][ T6856] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 107.375066][ T6859] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 108.137333][ T6900] xt_TCPMSS: Only works on TCP SYN packets [ 108.589512][ T6926] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 108.608881][ T6925] openvswitch: netlink: IPv4 tunnel dst address is zero [ 109.085918][ T6950] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 109.671137][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'. [ 109.863614][ T6992] netlink: 'syz.2.522': attribute type 12 has an invalid length. [ 109.921735][ T6992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.522'. [ 110.199479][ T7008] netlink: 216 bytes leftover after parsing attributes in process `syz.0.530'. [ 110.851489][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 110.915203][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 110.967040][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 111.365322][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 112.041701][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 113.929888][ T7209] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 113.939651][ T7207] lo speed is unknown, defaulting to 1000 [ 113.970267][ T7207] lo speed is unknown, defaulting to 1000 [ 114.039415][ T7207] lo speed is unknown, defaulting to 1000 [ 114.084808][ T7207] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 114.156362][ T7207] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 114.233508][ T7207] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 114.287408][ T7207] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.347631][ T7207] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 114.537028][ T7207] lo speed is unknown, defaulting to 1000 [ 114.557166][ T7207] lo speed is unknown, defaulting to 1000 [ 114.602874][ T7207] lo speed is unknown, defaulting to 1000 [ 114.631107][ T7207] lo speed is unknown, defaulting to 1000 [ 114.650931][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 114.697722][ T7207] lo speed is unknown, defaulting to 1000 [ 114.968566][ T7254] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 115.017420][ T7254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.063669][ T7254] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 115.087359][ T7259] netlink: 144 bytes leftover after parsing attributes in process `syz.1.651'. [ 115.372708][ T7274] Cannot find del_set index 0 as target [ 115.397570][ T7278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.410730][ T7280] openvswitch: netlink: IPv6 tunnel dst address is zero [ 115.583729][ T7284] netlink: 'syz.1.663': attribute type 21 has an invalid length. [ 115.612079][ T7284] netlink: 128 bytes leftover after parsing attributes in process `syz.1.663'. [ 115.655225][ T7284] netlink: 3 bytes leftover after parsing attributes in process `syz.1.663'. [ 115.801555][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 115.834514][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 115.842205][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 115.865243][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 116.180749][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.680'. [ 116.210882][ T7318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.449346][ T7330] tunl0: entered promiscuous mode [ 116.471832][ T7330] netlink: 'syz.4.686': attribute type 3 has an invalid length. [ 116.589974][ T7336] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 116.749674][ T7344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.950729][ T7357] openvswitch: netlink: Flow actions attr not present in new flow. [ 117.328998][ T7376] openvswitch: netlink: EtherType 300 is less than min 600 [ 117.386888][ T7380] __nla_validate_parse: 5 callbacks suppressed [ 117.386907][ T7380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.711'. [ 117.442131][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 117.761027][ T7400] netlink: get zone limit has 4 unknown bytes [ 118.335765][ T7433] xt_TCPMSS: Only works on TCP SYN packets [ 118.345912][ T7434] netlink: 9 bytes leftover after parsing attributes in process `syz.1.737'. [ 118.388116][ T7434] 0·: renamed from hsr0 (while UP) [ 118.450251][ T7434] 0·: entered allmulticast mode [ 118.462070][ T7434] hsr_slave_0: entered allmulticast mode [ 118.489026][ T7434] hsr_slave_1: entered allmulticast mode [ 118.510091][ T7434] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 118.546390][ T7436] lo: entered promiscuous mode [ 118.568056][ T7436] tunl0: entered promiscuous mode [ 118.596201][ T7436] gre0: entered promiscuous mode [ 118.650524][ T7436] gretap0: entered promiscuous mode [ 118.676180][ T7436] erspan0: entered promiscuous mode [ 118.694493][ T7436] ip_vti0: entered promiscuous mode [ 119.700235][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'. [ 119.741699][ T7498] geneve2: entered promiscuous mode [ 119.759496][ T7506] x_tables: duplicate underflow at hook 4 [ 120.218870][ T7526] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 120.249745][ T7526] bond2 (unregistering): Released all slaves [ 120.275467][ T7532] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 121.279235][ T7580] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 121.479213][ T7593] netlink: 'syz.2.814': attribute type 12 has an invalid length. [ 121.499586][ T7596] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 121.931795][ T7616] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 122.090116][ T7624] netlink: 'syz.0.831': attribute type 5 has an invalid length. [ 122.477105][ T7643] netlink: 'syz.0.840': attribute type 3 has an invalid length. [ 122.537155][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'. [ 123.079794][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.858'. [ 123.299984][ T7689] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 123.419010][ T7696] netlink: 'syz.1.866': attribute type 16 has an invalid length. [ 123.457283][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.866'. [ 123.486844][ T7696] veth0_macvtap: entered allmulticast mode [ 124.199911][ T7736] netlink: 'syz.0.887': attribute type 16 has an invalid length. [ 124.268069][ T7736] netlink: 'syz.0.887': attribute type 3 has an invalid length. [ 124.277138][ T7741] x_tables: unsorted entry at hook 4 [ 124.297407][ T7736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.887'. [ 124.827356][ T7770] netlink: 'syz.0.903': attribute type 29 has an invalid length. [ 124.860999][ T7773] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 124.865299][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 124.899157][ T7775] netlink: 'syz.1.906': attribute type 10 has an invalid length. [ 124.920515][ T7775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.906'. [ 124.944222][ T7773] team0: Device veth0_macvtap failed to register rx_handler [ 125.028926][ T7775] team0: entered allmulticast mode [ 125.042851][ T7775] team_slave_0: entered allmulticast mode [ 125.064660][ T7775] team_slave_1: entered allmulticast mode [ 125.081171][ T7775] bridge0: port 3(team0) entered blocking state [ 125.092062][ T7775] bridge0: port 3(team0) entered disabled state [ 125.130711][ T7775] team0: entered promiscuous mode [ 125.146454][ T7775] team_slave_0: entered promiscuous mode [ 125.182514][ T7775] team_slave_1: entered promiscuous mode [ 125.219437][ T7775] bridge0: port 3(team0) entered blocking state [ 125.227617][ T7775] bridge0: port 3(team0) entered forwarding state [ 125.409972][ T7797] netlink: 244 bytes leftover after parsing attributes in process `syz.3.917'. [ 125.606445][ T7807] netlink: 224 bytes leftover after parsing attributes in process `syz.4.921'. [ 126.175134][ T7841] netlink: 140 bytes leftover after parsing attributes in process `syz.2.939'. [ 126.620223][ T7865] validate_nla: 4 callbacks suppressed [ 126.620242][ T7865] netlink: 'syz.0.952': attribute type 29 has an invalid length. [ 126.734747][ T3353] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 126.769891][ T3353] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.817540][ T3353] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.856166][ T3353] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.037565][ T7886] netlink: 'syz.4.959': attribute type 6 has an invalid length. [ 127.437632][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 127.548105][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 127.747650][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 128.356512][ T7959] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 128.618041][ T7972] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.998'. [ 128.796740][ T7981] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.816303][ T7982] IPVS: length: 239 != 24 [ 128.829028][ T7985] netlink: 'syz.4.1004': attribute type 21 has an invalid length. [ 128.933206][ T7989] netlink: zone id is out of range [ 128.939595][ T7989] netlink: del zone limit has 4 unknown bytes [ 129.410922][ T8015] netlink: 'syz.3.1018': attribute type 4 has an invalid length. [ 129.699675][ T8029] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 131.022910][ T8099] netlink: zone id is out of range [ 131.041591][ T8099] netlink: zone id is out of range [ 131.065499][ T8099] netlink: zone id is out of range [ 131.083954][ T8099] netlink: zone id is out of range [ 131.100770][ T8099] netlink: zone id is out of range [ 131.120932][ T8099] netlink: zone id is out of range [ 131.158012][ T8099] netlink: zone id is out of range [ 131.677133][ T8129] netlink: 'syz.1.1076': attribute type 3 has an invalid length. [ 131.856016][ T8140] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.019562][ T8149] netlink: 'syz.4.1086': attribute type 13 has an invalid length. [ 132.047543][ T8149] netlink: 'syz.4.1086': attribute type 58 has an invalid length. [ 132.070218][ T8149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1086'. [ 132.106426][ T8155] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 132.120288][ T8155] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1088'. [ 132.130361][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 132.352165][ T8165] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 132.877548][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891038][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.379263][ T8221] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1120'. [ 133.414614][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1120'. [ 133.596854][ T8225] bond3: option lp_interval: invalid value (0) [ 133.633852][ T8225] bond3: option lp_interval: allowed values 1 - 2147483647 [ 133.679930][ T8225] bond3 (unregistering): Released all slaves [ 133.744132][ T8243] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1130'. [ 133.764783][ T8241] netlink: 'syz.4.1128': attribute type 3 has an invalid length. [ 134.638554][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 135.063024][ T8306] SET target dimension over the limit! [ 135.127201][ T8311] net_ratelimit: 84 callbacks suppressed [ 135.127219][ T8311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.471142][ T8325] netlink: 'syz.4.1171': attribute type 1 has an invalid length. [ 135.502618][ T8325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1171'. [ 135.537250][ T8330] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1174'. [ 135.558311][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 135.679868][ T8331] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 135.920153][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1178'. [ 136.186541][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1183'. [ 136.233824][ T8349] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 136.948393][ T8376] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1197'. [ 136.969527][ T8377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.978245][ T8377] IPv6: NLM_F_CREATE should be set when creating new route [ 137.599563][ T8402] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.840591][ T8414] gretap1: entered promiscuous mode [ 137.861069][ T8414] gretap1: entered allmulticast mode [ 138.157430][ T8421] openvswitch: netlink: Tunnel attr 0 has unexpected len 232 expected 8 [ 138.245133][ T8427] netlink: 'syz.1.1218': attribute type 39 has an invalid length. [ 138.550759][ T8437] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 139.017242][ T8457] __nla_validate_parse: 3 callbacks suppressed [ 139.017259][ T8457] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1235'. [ 139.683005][ T8479] netlink: 'syz.4.1246': attribute type 8 has an invalid length. [ 140.174704][ T8497] lo: entered promiscuous mode [ 140.246183][ T8497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.372059][ T5729] lo speed is unknown, defaulting to 1000 [ 140.426633][ T5729] syz0: Port: 1 Link DOWN [ 141.131058][ T8521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.762439][ T8547] x_tables: duplicate entry at hook 4 [ 142.875172][ T8589] xt_hashlimit: size too large, truncated to 1048576 [ 142.904056][ T8593] openvswitch: netlink: Missing valid actions attribute. [ 142.931515][ T8593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.934534][ T8592] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 143.012167][ T8592] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 143.168112][ T8602] netlink: ct family unspecified [ 143.813442][ T8624] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1312'. [ 144.532735][ T8650] openvswitch: netlink: IPv4 tun info is not correct [ 144.758646][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 144.799560][ T8656] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 144.836100][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 144.908826][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 144.932708][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 145.613505][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1343'. [ 145.680009][ T8686] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1343'. [ 145.854973][ T8693] ip6gre1: entered promiscuous mode [ 146.365403][ T8715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.788526][ T8729] netlink: 'syz.1.1365': attribute type 2 has an invalid length. [ 146.849042][ T8731] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 146.885193][ T8731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1366'. [ 146.922278][ T8731] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 147.674800][ T8753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.923706][ T8762] openvswitch: netlink: Multiple metadata blocks provided [ 148.148629][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 148.926804][ T8802] ip6t_rpfilter: unknown options [ 149.180808][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 150.388749][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1421'. [ 150.428478][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 150.816050][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 151.071510][ T8864] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 151.140808][ T8864] netlink: 'syz.4.1431': attribute type 2 has an invalid length. [ 151.178904][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 151.269670][ T8869] netlink: 'syz.1.1433': attribute type 12 has an invalid length. [ 151.331258][ T8869] netlink: 'syz.1.1433': attribute type 29 has an invalid length. [ 151.391155][ T8869] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1433'. [ 151.464523][ T8869] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1433'. [ 151.585963][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 151.648573][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 151.716558][ T8876] netlink: 'syz.2.1437': attribute type 14 has an invalid length. [ 151.790984][ T8876] netlink: 'syz.2.1437': attribute type 13 has an invalid length. [ 151.916008][ T8883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.585134][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1453'. [ 152.720359][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 152.955223][ T8925] netlink: 'syz.0.1460': attribute type 11 has an invalid length. [ 153.113227][ T8931] Zero length message leads to an empty skb [ 153.949222][ T8964] sctp: [Deprecated]: syz.2.1480 (pid 8964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.949222][ T8964] Use struct sctp_sack_info instead [ 154.625199][ T8989] netlink: 'syz.3.1492': attribute type 4 has an invalid length. [ 156.025230][ T9035] __nla_validate_parse: 3 callbacks suppressed [ 156.025247][ T9035] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1512'. [ 156.139453][ T9037] xt_CT: No such helper "snmp" [ 156.291126][ T9046] netlink: 'syz.2.1517': attribute type 11 has an invalid length. [ 157.400203][ T9085] netlink: 'syz.3.1536': attribute type 4 has an invalid length. [ 157.447413][ T9085] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1536'. [ 158.073587][ T9112] Bluetooth: MGMT ver 1.23 [ 159.714851][ T9171] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1573'. [ 160.143260][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1579'. [ 161.106577][ T9208] SET target dimension over the limit! [ 162.155602][ T9237] lo speed is unknown, defaulting to 1000 [ 163.315384][ T9284] ip6erspan0: entered allmulticast mode [ 163.323029][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 163.500051][ T9292] batadv0: entered promiscuous mode [ 163.538505][ T9292] macsec1: entered promiscuous mode [ 163.569925][ T9292] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 163.608170][ T9292] batadv0: left promiscuous mode [ 163.637379][ T9300] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1625'. [ 163.725087][ T9296] vlan2: entered promiscuous mode [ 163.757134][ T9296] bridge0: entered promiscuous mode [ 163.784108][ T9296] vlan2: entered allmulticast mode [ 163.803517][ T9296] bridge0: entered allmulticast mode [ 165.190634][ T9351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.777731][ T9371] tipc: Enabling of bearer rejected, failed to enable media [ 166.444192][ T9388] netlink: zone id is out of range [ 166.466885][ T9388] netlink: zone id is out of range [ 166.499443][ T9388] netlink: zone id is out of range [ 167.012984][ T5729] IPVS: starting estimator thread 0... [ 167.161952][ T9405] IPVS: using max 40 ests per chain, 96000 per kthread [ 168.042377][ T9445] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 168.087879][ T9450] sctp: [Deprecated]: syz.4.1698 (pid 9450) Use of int in max_burst socket option deprecated. [ 168.087879][ T9450] Use struct sctp_assoc_value instead [ 168.286090][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 168.552422][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 169.183900][ T9486] tipc: Started in network mode [ 169.205827][ T9486] tipc: Node identity 2003, cluster identity 4711 [ 169.235740][ T9486] tipc: Node number set to 8195 [ 169.579370][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 169.638991][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'. [ 169.732493][ T9510] IPVS: ip_vs_edit_dest(): server weight less than zero [ 169.747958][ T809] IPVS: starting estimator thread 0... [ 169.855996][ T9511] IPVS: using max 32 ests per chain, 76800 per kthread [ 170.041770][ T9522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1732'. [ 170.392522][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.846361][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1749'. [ 171.171762][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1754'. [ 171.214288][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1754'. [ 172.350277][ T9612] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1774'. [ 172.384739][ T9612] xt_policy: neither incoming nor outgoing policy selected [ 172.662533][ T9622] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1779'. [ 172.858764][ T9626] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1780'. [ 173.600979][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 173.643608][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1794'. [ 174.635259][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 175.327989][ T9696] netlink: 'syz.1.1812': attribute type 11 has an invalid length. [ 175.365954][ T9696] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.1812'. [ 176.459243][ T9734] ip_tables: iptables: counters copy to user failed while replacing table [ 176.806590][ T9745] geneve2: entered promiscuous mode [ 177.202608][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1842'. [ 177.251550][ T9758] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1842'. [ 177.310832][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 178.592706][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1867'. [ 178.614051][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1867'. [ 178.626515][ T9819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.136578][ T9838] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 179.365893][ T9835] lo speed is unknown, defaulting to 1000 [ 179.734547][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 179.887586][ T9866] lo: left promiscuous mode [ 179.944825][ T9866] tunl0: left promiscuous mode [ 179.956027][ T9866] gre0: left promiscuous mode [ 179.967166][ T9866] gretap0: left promiscuous mode [ 179.987417][ T9866] erspan0: left promiscuous mode [ 180.002391][ T9866] ip_vti0: left promiscuous mode [ 180.201197][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.209637][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.344965][ T9866] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.987527][ T9898] xt_limit: Overflow, try lower: 271964/0 [ 181.031711][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 181.060314][ T9901] netlink: 'syz.0.1901': attribute type 5 has an invalid length. [ 181.081081][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1901'. [ 182.383326][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1925'. [ 182.435782][ T9948] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 182.890139][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 182.974788][ T9969] openvswitch: netlink: Missing valid actions attribute. [ 183.028601][ T9969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.145405][ T9977] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1939'. [ 183.858370][T10002] netlink: 'syz.0.1951': attribute type 3 has an invalid length. [ 183.895732][T10002] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 183.940921][T10002] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1951'. [ 185.170419][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1976'. [ 185.175384][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 185.209161][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 185.767208][T10080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1989'. [ 186.575635][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 186.642597][T10112] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.864472][T10123] netlink: 'syz.4.2009': attribute type 32 has an invalid length. [ 186.898136][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 187.009115][T10123] bond1: Setting coupled_control to off (0) [ 187.618188][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'. [ 188.734763][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.286002][T10229] bridge_slave_0: default FDB implementation only supports local addresses [ 189.418547][T10234] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2061'. [ 190.471507][T10282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.478943][T10282] IPv6: NLM_F_CREATE should be set when creating new route [ 190.486498][T10282] IPv6: NLM_F_CREATE should be set when creating new route [ 190.493859][T10282] IPv6: NLM_F_CREATE should be set when creating new route [ 190.547772][T10282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.951366][T10294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2087'. [ 191.055353][T10294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2087'. [ 191.503407][T10313] netlink: 'syz.2.2096': attribute type 2 has an invalid length. [ 191.527099][T10313] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2096'. [ 192.267713][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.769909][T10406] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2132'. [ 194.316102][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.397177][T10430] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2140'. [ 194.509582][T10437] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 195.175385][T10463] lo: entered promiscuous mode [ 195.204071][T10463] lo: left promiscuous mode [ 195.370938][T10470] netlink: 'syz.2.2158': attribute type 62 has an invalid length. [ 195.711357][T10485] pimreg3: entered allmulticast mode [ 195.727143][T10487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2166'. [ 195.814021][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'. [ 196.043829][T10498] pim6reg527: entered allmulticast mode [ 196.719228][T10518] openvswitch: netlink: Unknown nsh attribute 0 [ 196.815210][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2183'. [ 196.834363][T10523] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 197.958082][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 197.989164][T10569] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 199.063363][T10608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 199.101599][T10608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 200.879459][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'. [ 200.936758][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.477647][T10726] Bluetooth: MGMT ver 1.23 [ 202.989199][T10741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2288'. [ 203.039116][T10741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2288'. [ 203.748597][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 204.626624][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2321'. [ 204.921776][T10818] netlink: 'syz.3.2325': attribute type 29 has an invalid length. [ 205.074174][T10824] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 205.241791][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 205.261280][T10834] netlink: 'syz.0.2333': attribute type 3 has an invalid length. [ 205.469566][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2337'. [ 206.180548][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 206.241311][T10871] pim6reg: entered allmulticast mode [ 206.261408][T10871] pim6reg: left allmulticast mode [ 206.411036][T10876] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.809788][T10891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2361'. [ 207.156622][T10907] netlink: 'syz.2.2369': attribute type 2 has an invalid length. [ 207.605196][T10919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2375'. [ 207.694171][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 207.712910][T10919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2375'. [ 207.752128][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 207.792604][T10919] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2375'. [ 208.273508][T10940] Illegal XDP return value 16128 on prog (id 91) dev syz_tun, expect packet loss! [ 208.364119][T10945] rdma_op ffff8880690cc9f0 conn xmit_rdma 0000000000000000 [ 208.473661][T10947] ipvlan2: entered promiscuous mode [ 208.880678][T10964] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2397'. [ 209.014673][T10972] Bluetooth: MGMT ver 1.23 [ 209.568785][T10998] netlink: 'syz.3.2412': attribute type 1 has an invalid length. [ 209.585895][T10998] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2412'. [ 209.611153][T10998] netlink: 'syz.3.2412': attribute type 1 has an invalid length. [ 210.056730][T11013] netlink: 'syz.3.2420': attribute type 2 has an invalid length. [ 210.306230][T11013] : entered promiscuous mode [ 211.188402][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2435'. [ 211.236814][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 212.100484][T11070] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 212.302855][T11074] openvswitch: netlink: Unknown key attributes 20 [ 213.814581][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 214.058341][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2485'. [ 214.492339][T11168] nbd: must specify a size in bytes for the device [ 214.638474][T11174] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2495'. [ 215.439908][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2511'. [ 215.607474][T11209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2512'. [ 215.977437][T11224] netlink: 'syz.0.2519': attribute type 18 has an invalid length. [ 217.331780][T11280] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2547'. [ 217.405598][T11280] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2547'. [ 217.470054][T11280] netlink: 'syz.4.2547': attribute type 6 has an invalid length. [ 217.540929][T11280] netlink: 'syz.4.2547': attribute type 5 has an invalid length. [ 217.593944][T11280] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2547'. [ 217.916414][T11294] vlan3: entered allmulticast mode [ 217.921604][T11294] bond0: entered allmulticast mode [ 217.956248][T11294] bond_slave_0: entered allmulticast mode [ 217.963093][T11294] bond_slave_1: entered allmulticast mode [ 218.593047][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.636010][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.676705][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.481112][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 220.835016][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 221.437005][T11436] sock: sock_timestamping_bind_phc: sock not bind to device [ 221.834535][T11454] netlink: 'syz.1.2622': attribute type 3 has an invalid length. [ 222.159676][T11466] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2627'. [ 222.541568][T11485] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 222.680107][T11489] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 222.950761][T11498] tipc: Enabling of bearer rejected, failed to enable media [ 222.989572][ T29] audit: type=1800 audit(1786026850.731:2): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2645" name="memory.events" dev="tmpfs" ino=2718 res=0 errno=0 [ 223.050493][ T29] audit: type=1804 audit(1786026850.731:3): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2645" name="/newroot/539/memory.events" dev="tmpfs" ino=2718 res=1 errno=0 [ 223.435531][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2650'. [ 223.461953][T11516] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 223.731761][T11529] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2658'. [ 224.428827][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 224.511632][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 224.564724][T11564] netlink: 'syz.3.2673': attribute type 3 has an invalid length. [ 224.937448][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2682'. [ 226.209797][T11622] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.105347][T11647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2716'. [ 227.162612][T11650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.648181][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 227.866089][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2728'. [ 227.885964][T11677] tipc: Invalid UDP bearer configuration [ 227.886026][T11677] tipc: Enabling of bearer rejected, failed to enable media [ 227.887173][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'. [ 228.288783][T11694] netlink: 'syz.2.2737': attribute type 11 has an invalid length. [ 228.618631][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2744'. [ 230.002733][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2766'. [ 230.483020][T11775] netlink: 'syz.3.2774': attribute type 2 has an invalid length. [ 231.549241][T11816] nbd: must specify an index to disconnect [ 232.157214][T11842] xt_l2tp: wrong L2TP version: 0 [ 232.588114][T11860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.772140][T11865] tipc: Enabling of bearer rejected, media not registered [ 232.846502][T11869] netlink: 'syz.3.2820': attribute type 11 has an invalid length. [ 234.261106][T11924] netlink: 'syz.2.2844': attribute type 2 has an invalid length. [ 235.081071][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'. [ 235.452674][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2871'. [ 237.795325][T12075] Cannot find add_set index 46338 as target [ 238.080309][T12087] openvswitch: netlink: Message has 5 unknown bytes. [ 239.348754][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 239.842472][T12158] netlink: 'syz.2.2956': attribute type 178 has an invalid length. [ 240.249118][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2965'. [ 240.787200][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 241.051534][T12216] netlink: 'syz.4.2984': attribute type 2 has an invalid length. [ 241.101881][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 242.431179][T12268] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 242.448479][T12268] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3009'. [ 242.478898][T12268] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 243.445546][T12304] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3026'. [ 243.909095][T12319] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 243.934899][T12319] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.453541][T12338] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 245.162926][T12367] vcan1: entered promiscuous mode [ 245.196352][T12367] vcan1: entered allmulticast mode [ 245.483629][T12381] xt_hashlimit: size too large, truncated to 1048576 [ 246.993457][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3082'. [ 247.294016][T12432] nbd: must specify a device to reconfigure [ 248.031051][T12458] netlink: 'syz.3.3100': attribute type 1 has an invalid length. [ 248.100869][T12461] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3101'. [ 248.308006][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 248.370270][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 248.537699][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 249.339848][T12510] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3125'. [ 250.315835][T12550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.457619][T12558] tipc: Started in network mode [ 250.481243][T12558] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 250.542680][T12558] tipc: Enabled bearer , priority 10 [ 251.664034][ T809] tipc: Node number set to 10136234 [ 251.684821][T12615] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 252.052233][T12629] tipc: Started in network mode [ 252.068765][T12629] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 252.100954][T12629] tipc: Enabled bearer , priority 10 [ 252.234866][ T1128] tipc: Subscription rejected, illegal request [ 253.068280][T12674] tipc: Started in network mode [ 253.074283][T12674] tipc: Node identity e0000001, cluster identity 4711 [ 253.081462][T12674] tipc: Enabling of bearer rejected, failed to enable media [ 253.215458][ T187] tipc: Node number set to 9480874 [ 253.319358][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'. [ 253.425634][T12681] sit1: entered promiscuous mode [ 253.445754][T12681] sit1: entered allmulticast mode [ 253.466190][T12683] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.097390][T12713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.447527][T12728] netlink: 'syz.3.3232': attribute type 1 has an invalid length. [ 254.619506][T12735] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3236'. [ 254.761960][T12743] vcan0: entered allmulticast mode [ 254.894556][T12747] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3241'. [ 255.521793][T12769] xt_hashlimit: size too large, truncated to 1048576 [ 255.755920][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.672752][T12809] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3270'. [ 256.717779][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3272'. [ 257.017212][T12822] bridge0: port 3(ipvlan2) entered blocking state [ 257.025425][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3278'. [ 257.032112][T12822] bridge0: port 3(ipvlan2) entered disabled state [ 257.055085][T12822] ipvlan2: entered allmulticast mode [ 257.078516][T12822] ipvlan2: left allmulticast mode [ 257.135501][T12831] netlink: 'syz.1.3280': attribute type 11 has an invalid length. [ 257.541533][T12847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3288'. [ 257.889210][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3297'. [ 258.466355][T12889] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3308'. [ 258.476547][T12890] netlink: 'syz.4.3309': attribute type 2 has an invalid length. [ 258.499216][T12890] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3309'. [ 258.543994][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3311'. [ 258.806592][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3316'. [ 259.805941][T12943] xt_l2tp: missing protocol rule (udp|l2tpip) [ 259.965659][T12951] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 260.024746][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 260.056259][T12953] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3340'. [ 260.575065][T12973] netlink: 'syz.3.3350': attribute type 3 has an invalid length. [ 260.592970][T12973] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 260.611248][T12973] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3350'. [ 261.812757][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'. [ 262.095470][T13034] syz.2.3380 (13034) used obsolete PPPIOCDETACH ioctl [ 263.496632][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 264.476457][T13133] openvswitch: netlink: Missing key (keys=40, expected=100) [ 265.249614][T13161] xt_hashlimit: size too large, truncated to 1048576 [ 265.602166][T13172] netlink: 'syz.1.3445': attribute type 3 has an invalid length. [ 266.061779][T13188] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.597439][T13206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.620622][T13206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.628271][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 266.689928][T13206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.721202][T13206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.872779][T13217] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3465'. [ 267.056710][T13221] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 267.558405][T13245] vlan4: entered allmulticast mode [ 267.560650][T13247] netlink: 'syz.2.3480': attribute type 1 has an invalid length. [ 267.802971][ T5759] IPVS: starting estimator thread 0... [ 267.903008][T13256] IPVS: using max 32 ests per chain, 76800 per kthread [ 267.910421][T13262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.238843][T13274] netlink: 'syz.1.3494': attribute type 25 has an invalid length. [ 268.327717][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3493'. [ 268.374037][T13276] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3493'. [ 268.409485][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3495'. [ 268.415138][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3493'. [ 268.448519][T13281] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 268.462922][T13281] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3497'. [ 268.522032][T13281] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 269.779077][T13340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.109396][T13428] lo: entered allmulticast mode [ 272.138544][T13428] lo: left allmulticast mode [ 272.256940][T13433] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 272.932980][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 272.976255][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 273.035069][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 273.090313][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 273.972071][T13507] netlink: 170676 bytes leftover after parsing attributes in process `syz.4.3591'. [ 274.016729][T13507] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 274.051615][T13507] openvswitch: netlink: Message has 512 unknown bytes. [ 274.359307][T13520] smc: net device team0 applied user defined pnetid SYZ2 [ 275.258482][T13560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3612'. [ 275.325128][T13560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3612'. [ 275.569243][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3617'. [ 276.540602][T13610] veth5: entered allmulticast mode [ 277.326983][T13651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3649'. [ 277.418661][T13651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3649'. [ 277.765863][T13666] netlink: 'syz.2.3655': attribute type 2 has an invalid length. [ 278.267129][T13689] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3665'. [ 278.339437][T13689] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3665'. [ 278.789352][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3674'. [ 280.134406][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 280.178689][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3692'. [ 281.199216][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3709'. [ 281.264352][T13809] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.293490][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3710'. [ 281.900672][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3716'. [ 281.942101][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3716'. [ 283.127214][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3748'. [ 285.148059][T13956] __nla_validate_parse: 1 callbacks suppressed [ 285.148088][T13956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3783'. [ 285.571035][T13972] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 285.601346][T13972] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3790'. [ 285.645675][T13972] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 285.771734][T13978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 287.142268][T14030] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3819'. [ 287.173723][T14030] netlink: 'syz.3.3819': attribute type 9 has an invalid length. [ 287.701014][T14055] xt_l2tp: v2 tid > 0xffff: 1114244 [ 287.923985][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3836'. [ 287.983117][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 288.373536][T14087] netlink: 'syz.3.3845': attribute type 2 has an invalid length. [ 288.495817][T14090] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 289.192976][T14122] netlink: 'syz.0.3861': attribute type 2 has an invalid length. [ 289.340863][T14122] : entered promiscuous mode [ 290.019020][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3874'. [ 290.869934][T14179] vlan2: entered allmulticast mode [ 290.893289][T14179] bond0: entered allmulticast mode [ 290.913743][T14179] bond_slave_0: entered allmulticast mode [ 290.920602][T14179] bond_slave_1: entered allmulticast mode [ 291.113837][T14192] netlink: 'syz.1.3896': attribute type 58 has an invalid length. [ 291.143760][T14192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3896'. [ 291.329743][T14204] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 292.584609][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3922'. [ 292.892941][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 292.927255][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 292.976587][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 293.007099][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 293.139484][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 293.193613][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 293.223752][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 293.258306][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3929'. [ 294.526805][T14323] netlink: 'syz.1.3955': attribute type 23 has an invalid length. [ 296.304549][T14379] __nla_validate_parse: 38 callbacks suppressed [ 296.304566][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3983'. [ 296.356833][T14384] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3982'. [ 298.313801][T14471] xt_time: unknown flags 0xf4 [ 300.227281][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4057'. [ 300.248272][T14537] netlink: 'syz.1.4058': attribute type 3 has an invalid length. [ 301.294727][T14585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.605115][T14598] vlan3: entered allmulticast mode [ 301.623528][T14598] bond0: entered allmulticast mode [ 301.637843][T14601] netlink: 'syz.4.4090': attribute type 142 has an invalid length. [ 301.664768][T14598] bond_slave_0: entered allmulticast mode [ 301.699566][T14598] bond_slave_1: entered allmulticast mode [ 301.885913][T14608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4094'. [ 302.618220][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4109'. [ 302.654795][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 302.988015][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4118'. [ 303.137512][T14665] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4120'. [ 303.355817][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4124'. [ 303.437621][T14678] nbd: must specify at least one socket [ 304.373937][T14708] netlink: 'syz.3.4141': attribute type 2 has an invalid length. [ 305.087816][T14737] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 305.511349][T14739] bond4: (slave bond_slave_1): Device is not our slave [ 305.578225][T14739] bond4: option active_slave: invalid value (bond_slave_1) [ 305.643162][T14739] bond4 (unregistering): Released all slaves [ 305.723612][T14761] tipc: Enabling of bearer rejected, failed to enable media [ 305.979985][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4172'. [ 306.885729][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4191'. [ 308.500613][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 308.574407][T14882] bond1: Invalid ad_actor_system MAC address. [ 308.580700][T14882] bond1: option ad_actor_system: invalid value (1) [ 308.602208][T14882] bond1 (unregistering): Released all slaves [ 309.459873][T14917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4239'. [ 310.405208][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4255'. [ 310.438482][T14949] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4255'. [ 310.469790][T14949] netlink: 'syz.4.4255': attribute type 5 has an invalid length. [ 311.054046][T14970] netlink: 'syz.2.4263': attribute type 1 has an invalid length. [ 311.078023][T14970] netlink: 'syz.2.4263': attribute type 3 has an invalid length. [ 311.092627][T14970] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4263'. [ 311.136489][T14970] NCSI netlink: No device for ifindex 813332851 [ 311.409278][T14985] ip_tables: iptables: counters copy to user failed while replacing table [ 311.441220][T14982] netlink: 'syz.4.4268': attribute type 1 has an invalid length. [ 311.890450][T15004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.366683][T15026] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4289'. [ 312.746693][T15042] nbd: couldn't find device at index 134217728 [ 313.237882][T15064] Bluetooth: MGMT ver 1.23 [ 313.861649][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4318'. [ 315.260476][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4346'. [ 316.382228][T15198] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4371'. [ 316.640026][T15206] netlink: 'syz.3.4375': attribute type 2 has an invalid length. [ 316.789710][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4378'. [ 317.200447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.203675][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279790][ T29] audit: type=1107 audit(1786026945.021:4): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 317.411063][T15234] netlink: 'syz.2.4389': attribute type 3 has an invalid length. [ 317.486951][T15240] xt_l2tp: v2 sid > 0xffff: 1114112 [ 317.651713][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4394'. [ 317.882956][T15257] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 318.178261][T15275] netlink: 'syz.4.4408': attribute type 13 has an invalid length. [ 318.224075][T15275] veth1_macvtap: left promiscuous mode [ 318.267660][T15275] macsec0: entered allmulticast mode [ 318.432856][T15284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.549445][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4415'. [ 318.560567][T15288] netlink: 'syz.1.4414': attribute type 1 has an invalid length. [ 318.581008][T15288] nbd: error processing sock list [ 318.630099][T15289] macsec1: entered promiscuous mode [ 318.646600][T15289] bridge0: entered promiscuous mode [ 318.658909][T15289] macsec1: entered allmulticast mode [ 318.674516][T15289] bridge0: entered allmulticast mode [ 318.694746][T15289] bridge0: port 3(macsec1) entered blocking state [ 318.720142][T15289] bridge0: port 3(macsec1) entered disabled state [ 318.784360][T15289] bridge0: left allmulticast mode [ 318.808216][T15299] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 318.833883][T15299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.834735][T15300] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 318.861218][ T187] bridge0: left promiscuous mode [ 319.150357][T15310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4426'. [ 319.679222][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4432'. [ 319.952813][T15331] netlink: 'syz.0.4436': attribute type 83 has an invalid length. [ 320.611467][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4444'. [ 320.625070][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4445'. [ 320.669671][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4445'. [ 320.726098][T15349] smc: removing net device team0 with user defined pnetid SYZ2 [ 320.819016][T15349] team0 (unregistering): Port device team_slave_0 removed [ 320.879063][T15349] team0 (unregistering): Port device team_slave_1 removed [ 321.591129][T15381] tun0: tun_chr_ioctl cmd 1074025675 [ 321.614179][T15381] tun0: persist enabled [ 322.632878][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4485'. [ 323.272864][T15458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4496'. [ 325.490621][T15544] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4535'. [ 326.267375][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4550'. [ 326.309851][T15578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4550'. [ 326.568698][T15591] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4557'. [ 327.374772][T15614] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4567'. [ 329.178217][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4590'. [ 329.291841][T15669] netlink: 'syz.4.4592': attribute type 5 has an invalid length. [ 329.497440][T15678] TCP: TCP_TX_DELAY enabled [ 329.500248][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4596'. [ 329.569431][T15677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4596'. [ 330.104698][T15703] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4609'. [ 331.061667][T15730] block nbd0: not configured, cannot reconfigure [ 331.370057][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'. [ 331.595190][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4633'. [ 332.998379][T15808] ip_tables: iptables: counters copy to user failed while replacing table [ 333.338018][T15819] netlink: 'syz.1.4662': attribute type 10 has an invalid length. [ 333.621718][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4667'. [ 333.882420][T15829] macvtap1: entered promiscuous mode [ 333.902932][T15829] vlan0: entered promiscuous mode [ 333.915758][T15829] macvtap1: entered allmulticast mode [ 333.941882][T15829] vlan0: entered allmulticast mode [ 333.949069][T15829] veth0_vlan: entered allmulticast mode [ 334.107007][T15847] No such timeout policy " " [ 334.122405][T15847] netlink: Failed to associated timeout policy ' ' [ 334.896813][T15881] sch_fq: defrate 0 ignored. [ 335.108032][T15889] erspan0: entered promiscuous mode [ 335.482707][ T29] audit: type=1804 audit(1786026963.221:5): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4705" name="/newroot/950/cgroup.controllers" dev="tmpfs" ino=4778 res=1 errno=0 [ 335.558220][ T29] audit: type=1800 audit(1786026963.231:6): pid=15906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4705" name="cgroup.controllers" dev="tmpfs" ino=4778 res=0 errno=0 [ 335.701566][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'. [ 336.212027][T15938] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4720'. [ 336.639448][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4729'. [ 336.729519][T15959] smbdirect: ib_dev[syz0] renamed to [syz2] [ 337.445371][T15990] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4745'. [ 338.583489][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 338.817708][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4770'. [ 339.505586][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4783'. [ 339.658206][T16075] netlink: 'syz.1.4783': attribute type 1 has an invalid length. [ 339.709865][T16075] netlink: 'syz.1.4783': attribute type 2 has an invalid length. [ 340.194054][T16097] ip_tables: iptables: counters copy to user failed while replacing table [ 340.379070][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4799'. [ 340.409544][T16102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4797'. [ 340.459538][T16108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4800'. [ 340.484816][T16108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4800'. [ 342.045828][T16177] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 342.707520][T16211] netlink: Conntrack attr has 12 unknown bytes [ 342.726708][T16211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.965526][T16215] block nbd0: not configured, cannot reconfigure [ 342.970873][T16221] syz.2.4856: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 343.038308][T16221] CPU: 0 UID: 0 PID: 16221 Comm: syz.2.4856 Not tainted syzkaller #0 PREEMPT(full) [ 343.038337][T16221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.038357][T16221] Call Trace: [ 343.038366][T16221] [ 343.038375][T16221] dump_stack_lvl+0xe8/0x150 [ 343.038421][T16221] warn_alloc+0x24c/0x270 [ 343.038450][T16221] ? stack_depot_save_flags+0x33/0x800 [ 343.038479][T16221] ? __pfx_warn_alloc+0x10/0x10 [ 343.038506][T16221] ? kasan_save_track+0x3e/0x80 [ 343.038530][T16221] ? __kasan_kmalloc+0x93/0xb0 [ 343.038558][T16221] ? xsk_setsockopt+0x52a/0x960 [ 343.038580][T16221] ? do_sock_setsockopt+0x17c/0x1b0 [ 343.038600][T16221] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 343.038619][T16221] ? do_syscall_64+0x174/0x580 [ 343.038645][T16221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.038675][T16221] __vmalloc_node_range_noprof+0x12c/0x1730 [ 343.038729][T16221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 343.038758][T16221] ? __kasan_kmalloc+0x93/0xb0 [ 343.038786][T16221] ? __kmalloc_cache_noprof+0x32d/0x660 [ 343.038812][T16221] ? __kmalloc_cache_noprof+0x150/0x660 [ 343.038841][T16221] vmalloc_user_noprof+0xad/0xe0 [ 343.038866][T16221] ? xskq_create+0xbf/0x170 [ 343.038891][T16221] xskq_create+0xbf/0x170 [ 343.038918][T16221] xsk_init_queue+0x8a/0xe0 [ 343.038945][T16221] xsk_setsockopt+0x52a/0x960 [ 343.038967][T16221] ? __fget_files+0x2a/0x420 [ 343.038995][T16221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.039018][T16221] ? __pfx_aa_sk_perm+0x10/0x10 [ 343.039043][T16221] ? aa_sock_opt_perm+0xff/0x1a0 [ 343.039068][T16221] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 343.039089][T16221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.039114][T16221] do_sock_setsockopt+0x17c/0x1b0 [ 343.039140][T16221] __x64_sys_setsockopt+0x13d/0x1b0 [ 343.039164][T16221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.039191][T16221] do_syscall_64+0x174/0x580 [ 343.039217][T16221] ? trace_irq_disable+0x3b/0x140 [ 343.039242][T16221] ? clear_bhb_loop+0x40/0x90 [ 343.039267][T16221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.039287][T16221] RIP: 0033:0x7fba68d9e0d9 [ 343.039313][T16221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.039329][T16221] RSP: 002b:00007fba69c9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.039350][T16221] RAX: ffffffffffffffda RBX: 00007fba69025fa0 RCX: 00007fba68d9e0d9 [ 343.039364][T16221] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 343.039375][T16221] RBP: 00007fba68e35024 R08: 0000000000000004 R09: 0000000000000000 [ 343.039385][T16221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.039397][T16221] R13: 00007fba69026038 R14: 00007fba69025fa0 R15: 00007ffd64f36288 [ 343.039430][T16221] [ 343.221923][T16221] Mem-Info: [ 343.381720][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4857'. [ 343.393330][T16221] active_anon:5707 inactive_anon:0 isolated_anon:0 [ 343.393330][T16221] active_file:0 inactive_file:43389 isolated_file:0 [ 343.393330][T16221] unevictable:768 dirty:254 writeback:0 [ 343.393330][T16221] slab_reclaimable:10551 slab_unreclaimable:99241 [ 343.393330][T16221] mapped:29257 shmem:1289 pagetables:1206 [ 343.393330][T16221] sec_pagetables:0 bounce:0 [ 343.393330][T16221] kernel_misc_reclaimable:0 [ 343.393330][T16221] free:1324691 free_pcp:10572 free_cma:0 [ 343.400790][T16223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.441088][T16221] Node 0 active_anon:22828kB inactive_anon:0kB active_file:0kB inactive_file:173364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117028kB dirty:1016kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12276kB pagetables:4556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 343.492747][T16230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.510399][T16223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.518089][T16221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 343.556028][T16223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.564205][T16223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.589042][T16221] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.629311][T16221] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 343.635867][T16221] Node 0 DMA32 free:1338684kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23128kB inactive_anon:0kB active_file:0kB inactive_file:173364kB unevictable:1536kB writepending:1016kB zspages:0kB present:3129332kB managed:2548456kB mlocked:0kB bounce:0kB free_pcp:40776kB local_pcp:20600kB free_cma:0kB [ 343.717756][T16221] lowmem_reserve[]: 0 0 0 0 0 [ 343.753213][T16233] gretap0: entered promiscuous mode [ 343.766178][T16221] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.781415][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4861'. [ 343.821490][T16221] lowmem_reserve[]: 0 0 0 0 0 [ 343.827302][T16221] Node 1 Normal free:3944720kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1508kB free_cma:0kB [ 343.845881][T16235] gretap0: left promiscuous mode [ 343.878661][T16221] lowmem_reserve[]: 0 0 0 0 0 [ 343.884338][T16221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.904220][T16221] Node 0 DMA32: 604*4kB (UME) 750*8kB (UM) 254*16kB (UM) 494*32kB (UM) 167*64kB (UME) 66*128kB (UM) 30*256kB (UM) 25*512kB (UME) 17*1024kB (UME) 8*2048kB (U) 302*4096kB (UM) = 1338688kB [ 344.047538][T16221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 344.105030][T16221] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3944720kB [ 344.123002][T16245] netlink: 'syz.4.4866': attribute type 2 has an invalid length. [ 344.168555][T16221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.221960][T16221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.273617][T16221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.304545][T16221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.318668][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4871'. [ 344.340888][T16221] 44674 total pagecache pages [ 344.346748][T16221] 0 pages in swap cache [ 344.356154][T16221] Free swap = 124996kB [ 344.398128][T16221] Total swap = 124996kB [ 344.417934][T16221] 2097051 pages RAM [ 344.434940][T16221] 0 pages HighMem/MovableOnly [ 344.457883][T16221] 428258 pages reserved [ 344.474012][T16221] 0 pages cma reserved [ 345.412782][T16302] netlink: 'syz.3.4892': attribute type 3 has an invalid length. [ 345.447880][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4892'. [ 345.464502][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4895'. [ 345.482595][T16302] netlink: 'syz.3.4892': attribute type 3 has an invalid length. [ 345.524349][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4892'. [ 345.630059][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 346.279496][T16342] openvswitch: netlink: Unknown nsh attribute 0 [ 347.333060][T16386] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4931'. [ 347.609248][T16398] veth0: entered promiscuous mode [ 347.647694][T16397] veth0: left promiscuous mode [ 348.024825][T16414] netlink: 'syz.0.4945': attribute type 3 has an invalid length. [ 348.516086][T16434] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 348.544843][T16434] syzkaller1: group set to 0 [ 348.880837][T16449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4962'. [ 349.147447][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4968'. [ 349.251350][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4969'. [ 349.410709][T16474] blkio.reset_stats is deprecated [ 349.507491][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4976'. [ 349.876865][T16495] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4982'. [ 350.297792][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4990'. [ 350.609231][T16525] netlink: 'syz.3.4995': attribute type 4 has an invalid length. [ 352.208950][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5029'. [ 352.236787][T16592] block nbd0: Unsupported socket: should be TCP or UNIX. [ 352.374752][T16603] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.5034'. [ 352.565333][T16611] sctp: [Deprecated]: syz.2.5038 (pid 16611) Use of int in max_burst socket option deprecated. [ 352.565333][T16611] Use struct sctp_assoc_value instead [ 352.744056][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5040'. [ 352.800388][T16618] netlink: 'syz.4.5041': attribute type 5 has an invalid length. [ 353.022781][T16622] bond4: entered promiscuous mode [ 353.311647][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5047'. [ 353.850263][T16654] h: entered promiscuous mode [ 354.285324][T16677] openvswitch: netlink: IPv4 tunnel dst address is zero [ 354.304362][T16677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.529302][T16689] __nla_validate_parse: 3 callbacks suppressed [ 354.529443][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5073'. [ 354.543374][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5074'. [ 354.598236][T16687] xfrm1: entered promiscuous mode [ 354.612527][T16687] xfrm1: entered allmulticast mode [ 354.632547][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5074'. [ 354.849877][T16700] netlink: 71 bytes leftover after parsing attributes in process `syz.1.5080'. [ 355.311822][T16717] netlink: 'syz.2.5086': attribute type 83 has an invalid length. [ 355.552983][T16726] netlink: 'syz.0.5088': attribute type 16 has an invalid length. [ 355.582218][T16726] netlink: 'syz.0.5088': attribute type 2 has an invalid length. [ 355.636018][T16726] netlink: 64110 bytes leftover after parsing attributes in process `syz.0.5088'. [ 355.651474][T16724] lo speed is unknown, defaulting to 1000 [ 356.365859][T16757] netlink: 'syz.2.5104': attribute type 1 has an invalid length. [ 356.392284][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5104'. [ 356.463082][T16763] netlink: 'syz.4.5108': attribute type 4 has an invalid length. [ 356.691329][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5112'. [ 356.883374][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5114'. [ 356.981840][T16780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5115'. [ 357.028650][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5117'. [ 358.264456][T16838] ip_tables: iptables: counters copy to user failed while replacing table [ 358.946376][T16864] bond3 (unregistering): Released all slaves [ 358.977281][T16868] tipc: Invalid UDP bearer configuration [ 358.977335][T16868] tipc: Enabling of bearer rejected, failed to enable media [ 359.261865][T16878] bridge0: port 3(dummy0) entered blocking state [ 359.275863][T16878] bridge0: port 3(dummy0) entered disabled state [ 359.283345][T16878] dummy0: entered allmulticast mode [ 359.316165][T16878] dummy0: entered promiscuous mode [ 359.349656][T16878] bridge0: port 3(dummy0) entered blocking state [ 359.357813][T16878] bridge0: port 3(dummy0) entered forwarding state [ 359.467779][T16886] tap0: tun_chr_ioctl cmd 2148553947 [ 359.706975][T16900] __nla_validate_parse: 4 callbacks suppressed [ 359.706996][T16900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5168'. [ 360.300691][T16926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5183'. [ 360.904997][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5197'. [ 360.930150][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5197'. [ 361.160349][ T4943] block nbd0: Receive control failed (result -32) [ 361.768175][T16991] netlink: 'syz.3.5214': attribute type 83 has an invalid length. [ 362.527064][T17016] netlink: 'syz.3.5226': attribute type 2 has an invalid length. [ 362.895220][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5236'. [ 363.009618][T17040] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 363.024662][ T202] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.054358][ T202] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.101142][ T202] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.152786][ T202] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.371178][T17096] xt_hashlimit: size too large, truncated to 1048576 [ 365.084966][T17123] tap0: tun_chr_ioctl cmd 1074025672 [ 365.116069][T17123] tap0: ignored: set checksum disabled [ 365.183486][T17127] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.354833][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5301'. [ 366.449019][T17181] ip_tables: iptables: counters copy to user failed while replacing table [ 366.764226][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5309'. [ 367.165730][T17215] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5317'. [ 367.868022][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5329'. [ 367.949571][T17242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5330'. [ 368.014902][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5330'. [ 368.044990][T17248] netlink: 'syz.2.5333': attribute type 4 has an invalid length. [ 368.062561][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5330'. [ 368.425195][T17257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5337'. [ 368.561120][T17259] xt_hashlimit: size too large, truncated to 1048576 [ 368.906072][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5343'. [ 369.536814][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5358'. [ 371.842984][T17400] __nla_validate_parse: 4 callbacks suppressed [ 371.843013][T17400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5403'. [ 371.998455][T17407] IPv6: Can't replace route, no match found [ 372.030349][T17407] IPv6: Can't replace route, no match found [ 372.051161][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5407'. [ 372.095403][T17409] xfrm1: entered promiscuous mode [ 372.107244][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'. [ 372.112434][T17409] xfrm1: entered allmulticast mode [ 372.137314][T17413] netlink: 'syz.0.5409': attribute type 30 has an invalid length. [ 372.150655][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5407'. [ 372.179289][T17412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5408'. [ 372.189425][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5409'. [ 372.195667][T17412] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5408'. [ 372.681002][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 372.722601][T17436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5420'. [ 372.763937][T17436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5420'. [ 372.964306][T17446] sctp: [Deprecated]: syz.4.5425 (pid 17446) Use of int in max_burst socket option deprecated. [ 372.964306][T17446] Use struct sctp_assoc_value instead [ 374.903368][T17535] netlink: 'syz.1.5465': attribute type 16 has an invalid length. [ 374.935455][T17535] netlink: 'syz.1.5465': attribute type 2 has an invalid length. [ 374.957764][T17532] erspan0: entered promiscuous mode [ 375.017864][T17533] lo speed is unknown, defaulting to 1000 [ 376.081474][T17572] netlink: 'syz.1.5485': attribute type 1 has an invalid length. [ 376.125395][T17572] netlink: 'syz.1.5485': attribute type 1 has an invalid length. [ 376.213895][T17578] tipc: New replicast peer: 255.255.255.255 [ 376.233340][T17578] tipc: Enabled bearer , priority 10 [ 377.032597][T17614] __nla_validate_parse: 12 callbacks suppressed [ 377.032624][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5505'. [ 377.806114][T17647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5521'. [ 377.967813][ T4943] block nbd1: Receive control failed (result -32) [ 378.637367][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.677239][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5553'. [ 379.704578][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5553'. [ 379.899335][T17729] openvswitch: netlink: IP tunnel dst address not specified [ 379.912821][T17729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.457560][T17756] netlink: 'syz.0.5569': attribute type 3 has an invalid length. [ 380.748577][T17770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5575'. [ 380.825215][T17767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5574'. [ 380.856091][T17767] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.000807][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5579'. [ 381.056032][T17781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5579'. [ 381.070751][T17780] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5580'. [ 381.489346][T17802] netlink: 'syz.0.5590': attribute type 83 has an invalid length. [ 381.607703][T17808] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5593'. [ 382.227356][T17834] xt_hashlimit: size too large, truncated to 1048576 [ 382.515152][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5610'. [ 382.777624][T17852] ip6gre1: entered allmulticast mode [ 382.807109][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.378662][T17894] netlink: 'syz.3.5633': attribute type 2 has an invalid length. [ 384.572204][T17902] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5637'. [ 384.935855][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5644'. [ 384.943195][T17920] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5646'. [ 385.388311][T17939] netlink: 'syz.0.5655': attribute type 83 has an invalid length. [ 386.672608][T17963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5665'. [ 386.690347][T17962] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 386.760403][T17963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5665'. [ 386.952112][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.805605][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5689'. [ 387.853364][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5689'. [ 388.295444][T18031] netlink: 'syz.0.5700': attribute type 30 has an invalid length. [ 389.670426][T18084] netlink: 'syz.0.5726': attribute type 19 has an invalid length. [ 389.857763][T18092] netlink: 'syz.1.5728': attribute type 6 has an invalid length. [ 390.075461][T18097] sctp: [Deprecated]: syz.3.5732 (pid 18097) Use of int in maxseg socket option. [ 390.075461][T18097] Use struct sctp_assoc_value instead [ 391.736486][T18173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5767'. [ 392.917270][T18226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5791'. [ 394.727594][T18279] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5813'. [ 394.835983][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5814'. [ 395.271973][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.380597][T18334] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 396.416640][T18334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.303443][T18369] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5854'. [ 397.335652][T18366] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5854'. [ 397.884189][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5861'. [ 397.915434][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5861'. [ 398.156443][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5864'. [ 398.429993][T18402] pim6reg: entered allmulticast mode [ 398.621336][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5873'. [ 398.689768][T18412] xt_hashlimit: size too large, truncated to 1048576 [ 399.053662][T18425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.640252][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5888'. [ 400.821250][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'. [ 401.310163][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5921'. [ 401.348555][T18511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5921'. [ 402.258520][T18550] openvswitch: netlink: IP tunnel dst address not specified [ 402.272766][T18550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.584072][T18564] sctp: [Deprecated]: syz.3.5942 (pid 18564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.584072][T18564] Use struct sctp_sack_info instead [ 403.066434][T18584] netlink: 'syz.3.5952': attribute type 1 has an invalid length. [ 403.097927][T18584] netlink: 'syz.3.5952': attribute type 2 has an invalid length. [ 403.151274][T18584] netlink: 'syz.3.5952': attribute type 1 has an invalid length. [ 403.181797][T18584] netlink: 'syz.3.5952': attribute type 2 has an invalid length. [ 403.669243][T18609] veth0: entered promiscuous mode [ 403.684086][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5964'. [ 403.714126][T18606] veth0: left promiscuous mode [ 404.515552][T18637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5978'. [ 405.162527][T18655] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5986'. [ 405.180002][T18656] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 405.205861][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 405.336659][T18661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5988'. [ 405.416703][T18658] bridge0: port 2(bridge_slave_1) entered listening state [ 405.510871][T18658] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.782738][T18679] tipc: Bearer : already 2 bearers with priority 10 [ 405.800734][T18679] tipc: Bearer : trying with adjusted priority [ 405.836899][T18679] tipc: Enabling of bearer rejected, failed to enable media [ 406.192821][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6002'. [ 406.991583][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6021'. [ 408.054687][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 408.519316][T18797] netlink: Unknown nat attribute (0) [ 408.539481][T18797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.998552][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6058'. [ 409.497290][T18838] veth0_to_bridge: entered promiscuous mode [ 409.527064][T18835] veth0_to_bridge: left promiscuous mode [ 409.712591][T18844] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6073'. [ 410.036864][T18858] netlink: 'syz.2.6079': attribute type 1 has an invalid length. [ 410.092778][T18858] netlink: 'syz.2.6079': attribute type 3 has an invalid length. [ 410.116747][T18858] netlink: 'syz.2.6079': attribute type 7 has an invalid length. [ 410.133607][T18862] netlink: 'syz.3.6082': attribute type 15 has an invalid length. [ 410.141668][T18858] netlink: 'syz.2.6079': attribute type 8 has an invalid length. [ 410.160170][T18858] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6079'. [ 410.179778][T18858] NCSI netlink: No device for ifindex 131092 [ 410.346028][T18866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6083'. [ 410.387370][T18875] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6087'. [ 412.095676][T18943] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6120'. [ 412.124200][T18938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.150370][T18948] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.6120'. [ 412.175405][T18938] bond2: entered allmulticast mode [ 412.186354][T18938] bond0: (slave bond2): Enslaving as an active interface with an up link [ 412.393795][T18956] netlink: 'syz.0.6125': attribute type 2 has an invalid length. [ 412.551967][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.051083][T18978] netlink: 'syz.3.6133': attribute type 83 has an invalid length. [ 414.203570][T19021] netlink: 'syz.2.6153': attribute type 1 has an invalid length. [ 414.230200][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6153'. [ 416.316903][T19094] team0: No ports can be present during mode change [ 416.722397][T19112] ip_tables: iptables: counters copy to user failed while replacing table [ 417.110112][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6203'. [ 418.043561][T19168] team0: Cannot enslave team device to itself [ 418.530773][T19184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6229'. [ 418.572444][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.595037][T19189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.170437][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6240'. [ 419.185478][T19211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6239'. [ 419.227992][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6240'. [ 419.407796][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6242'. [ 419.624494][T19220] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 421.849578][T19318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6292'. [ 421.941682][T19321] team0: Device gtp1 is of different type [ 422.294191][T19336] vxcan0: tx address claim with dlc 0 [ 422.340599][T19338] ip_tables: iptables: counters copy to user failed while replacing table [ 422.481950][T19342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6303'. [ 422.601035][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6305'. [ 422.690178][T19351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6307'. [ 423.777312][T19399] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 423.816375][ T5729] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 425.280190][T19439] tipc: Started in network mode [ 425.303869][T19439] tipc: Node identity 7f000001, cluster identity 4711 [ 425.327883][T19439] tipc: New replicast peer: 127.0.0.2 [ 425.357947][T19439] tipc: Enabled bearer , priority 10 [ 425.623525][T19462] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6353'. [ 425.695528][T19435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.747458][T19435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.111584][T19435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.135415][T19435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.604243][T19435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.681190][T19435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.800911][ T5729] tipc: Node number set to 2130706433 [ 427.416790][ T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.445869][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.645922][ T1033] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.685527][ T1033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.785566][T19528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6379'. [ 427.885404][ T3353] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.934429][ T3353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.978050][ T3353] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.020594][ T3353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.064045][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6381'. [ 428.123550][T19535] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.364572][T19553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6387'. [ 429.738412][T19604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 429.762951][T19604] syzkaller1: linktype set to 823 [ 429.956623][ T4943] block nbd2: Receive control failed (result -32) [ 431.803541][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'. [ 432.091356][T19706] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6459'. [ 432.378044][T19716] sctp: [Deprecated]: syz.0.6462 (pid 19716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.378044][T19716] Use struct sctp_sack_info instead [ 432.982547][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6470'. [ 433.192468][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6475'. [ 433.309271][T19750] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6478'. [ 433.489399][T19759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6480'. [ 433.501483][T19758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6482'. [ 433.767500][T19772] Bluetooth: hci1: too big key_count value 32778 [ 434.077561][T19783] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 434.093977][T19783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.709317][T19815] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 434.898290][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6513'. [ 435.137735][T19831] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 435.474774][T19847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.108087][T19876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6538'. [ 436.372945][T19882] netlink: Failed to add helper -22 [ 436.389589][T19882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.412175][T19888] netlink: 'syz.2.6544': attribute type 83 has an invalid length. [ 436.865654][T19902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6551'. [ 436.883502][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6553'. [ 436.905253][T19908] openvswitch: netlink: Flow key attribute not present in set flow. [ 437.099883][T19919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6558'. [ 437.213539][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6561'. [ 437.232237][T19924] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6561'. [ 437.283654][T19924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6561'. [ 437.334368][T19927] netlink: 'syz.4.6562': attribute type 2 has an invalid length. [ 437.378351][T19931] netlink: 'syz.0.6564': attribute type 4 has an invalid length. [ 437.398172][T19931] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6564'. [ 437.430059][T19931] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6564'. [ 437.551526][T19937] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 437.579078][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6568'. [ 437.616664][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6568'. [ 438.858397][T19991] ip_tables: iptables: counters copy to user failed while replacing table [ 439.889868][T20016] macvtap0: entered allmulticast mode [ 439.903799][T20016] veth0_macvtap: entered allmulticast mode [ 440.079045][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.291044][T20034] netlink: 'syz.2.6612': attribute type 2 has an invalid length. [ 440.394387][T20039] netlink: 'syz.3.6615': attribute type 2 has an invalid length. [ 440.741417][T20057] block nbd3: Unsupported socket: should be TCP or UNIX. [ 441.903968][T20110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.111542][T20118] netlink: 'syz.1.6651': attribute type 1 has an invalid length. [ 442.144566][T20118] netlink: 'syz.1.6651': attribute type 7 has an invalid length. [ 442.174832][T20118] netlink: 'syz.1.6651': attribute type 8 has an invalid length. [ 442.196966][T20118] __nla_validate_parse: 6 callbacks suppressed [ 442.196986][T20118] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6651'. [ 442.268114][T20118] NCSI netlink: No device for ifindex 65584 [ 442.340294][T20126] netlink: 'syz.4.6655': attribute type 2 has an invalid length. [ 442.370922][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6655'. [ 442.745167][T20146] netlink: 'syz.0.6663': attribute type 4 has an invalid length. [ 443.097447][T20160] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6672'. [ 443.278923][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6675'. [ 443.970896][T20196] netlink: 'syz.2.6689': attribute type 5 has an invalid length. [ 444.583187][T20223] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6702'. [ 445.246592][T20250] bond0: option miimon: invalid value (18446744071829782528) [ 445.284997][T20250] bond0: option miimon: allowed values 0 - 2147483647 [ 445.480575][T20260] netlink: 'syz.2.6719': attribute type 5 has an invalid length. [ 446.023274][T20287] netlink: 'syz.2.6731': attribute type 3 has an invalid length. [ 446.041632][T20287] netlink: 'syz.2.6731': attribute type 1 has an invalid length. [ 446.053661][T20287] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6731'. [ 446.076505][T20287] NCSI netlink: No device for ifindex 813332851 [ 446.163642][T20289] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6732'. [ 446.472009][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.865149][T20314] dvmrp8: entered allmulticast mode [ 446.891708][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6746'. [ 447.115200][T20327] sctp: [Deprecated]: syz.0.6750 (pid 20327) Use of int in max_burst socket option. [ 447.115200][T20327] Use struct sctp_assoc_value instead [ 448.306363][T20380] netlink: 81 bytes leftover after parsing attributes in process `syz.4.6776'. [ 448.572596][T20393] netlink: 'syz.0.6782': attribute type 83 has an invalid length. [ 449.480984][T20435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.500371][T20434] veth0: entered promiscuous mode [ 449.536218][T20434] veth0: left promiscuous mode [ 449.788195][T20446] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 449.796544][T20446] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 449.986372][T20452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6811'. [ 450.552847][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6822'. [ 450.866846][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6830'. [ 453.114623][T20582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6871'. [ 453.343006][T20593] netlink: 'syz.3.6877': attribute type 8 has an invalid length. [ 453.377666][T20593] sch_fq: defrate 0 ignored. [ 453.708236][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6883'. [ 454.081653][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6891'. [ 454.134825][T20629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.142427][T20629] IPv6: NLM_F_CREATE should be set when creating new route [ 454.149937][T20629] IPv6: NLM_F_CREATE should be set when creating new route [ 454.213191][T20629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.633833][T20652] netlink: 'syz.2.6904': attribute type 4 has an invalid length. [ 454.638976][T20636] syz.1.6897 (20636) used greatest stack depth: 18056 bytes left [ 454.713664][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6906'. [ 454.812275][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6906'. [ 455.969492][T20688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6920'. [ 456.084207][T20692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6922'. [ 456.428785][T20701] veth1_macvtap: left promiscuous mode [ 457.484619][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6948'. [ 457.905074][T20763] netlink: 'syz.3.6956': attribute type 4 has an invalid length. [ 457.980655][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6957'. [ 458.096734][T20772] netlink: 'syz.0.6960': attribute type 11 has an invalid length. [ 458.888803][ T4943] block nbd3: Receive control failed (result -32) [ 458.900487][ T50] block nbd3: Receive control failed (result -32) [ 460.368057][T20866] veth0: entered promiscuous mode [ 460.395689][T20866] veth0: left promiscuous mode [ 460.438214][T20868] openvswitch: netlink: IP tunnel TTL not specified. [ 460.475655][T20868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.625993][T20877] netlink: 'syz.1.7010': attribute type 21 has an invalid length. [ 460.667872][T20877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7010'. [ 460.723649][T20880] netlink: 'syz.1.7010': attribute type 21 has an invalid length. [ 460.726988][T20877] netlink: 'syz.1.7010': attribute type 4 has an invalid length. [ 460.782293][T20880] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7010'. [ 460.801902][T20877] netlink: 'syz.1.7010': attribute type 5 has an invalid length. [ 460.840990][T20877] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7010'. [ 460.862672][T20880] netlink: 'syz.1.7010': attribute type 4 has an invalid length. [ 460.891890][T20880] netlink: 'syz.1.7010': attribute type 5 has an invalid length. [ 460.950041][T20880] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7010'. [ 461.319547][T20906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7023'. [ 461.368938][T20913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7025'. [ 461.473565][T20920] netlink: 'syz.2.7028': attribute type 14 has an invalid length. [ 462.290720][T20954] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.7044'. [ 463.041869][T20990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7060'. [ 463.640020][T21016] sctp: [Deprecated]: syz.4.7073 (pid 21016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.640020][T21016] Use struct sctp_sack_info instead [ 464.015396][T21029] sctp: [Deprecated]: syz.3.7079 (pid 21029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.015396][T21029] Use struct sctp_sack_info instead [ 464.350398][T21048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7088'. [ 464.749265][T21064] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7096'. [ 464.911296][T21070] bond0: option miimon: invalid value (18446744071829782528) [ 464.932706][T21070] bond0: option miimon: allowed values 0 - 2147483647 [ 466.694831][T21150] sctp: [Deprecated]: syz.1.7134 (pid 21150) Use of int in max_burst socket option. [ 466.694831][T21150] Use struct sctp_assoc_value instead [ 466.824777][T21158] openvswitch: netlink: IP tunnel dst address not specified [ 466.880102][T21158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.291467][ T50] block nbd4: Receive control failed (result -32) [ 467.586712][ T1033] tipc: Subscription rejected, illegal request [ 467.726719][T21200] netlink: Invalid conntrack timeout [ 467.753077][T21200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.797525][T21204] __nla_validate_parse: 1 callbacks suppressed [ 467.821954][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7162'. [ 469.114366][T21255] netlink: 'syz.2.7186': attribute type 83 has an invalid length. [ 469.194028][T21261] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7189'. [ 469.749737][T21281] xt_hashlimit: size too large, truncated to 1048576 [ 469.808181][T21286] xt_hashlimit: size too large, truncated to 1048576 [ 471.165721][T21336] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7222'. [ 471.790945][T21351] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.963418][T21363] tipc: New replicast peer: 255.255.255.255 [ 472.015700][T21363] tipc: Enabled bearer , priority 10 [ 472.103917][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7239'. [ 473.025261][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7259'. [ 473.556151][ T50] block nbd0: Receive control failed (result -22) [ 473.580750][T21436] block nbd0: reconnected socket [ 473.629111][T21440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.636511][T21440] IPv6: NLM_F_CREATE should be set when creating new route [ 473.645399][T21440] IPv6: NLM_F_CREATE should be set when creating new route [ 473.665734][T21440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.238950][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7292'. [ 474.589920][T21480] ip_tables: iptables: counters copy to user failed while replacing table [ 474.849182][T21490] xt_hashlimit: size too large, truncated to 1048576 [ 476.058651][T21539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7318'. [ 476.086591][T21539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7318'. [ 476.110305][T21541] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7319'. [ 476.417372][T21554] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 476.437568][T21558] netlink: 'syz.3.7327': attribute type 12 has an invalid length. [ 476.483737][T21558] netlink: 'syz.3.7327': attribute type 29 has an invalid length. [ 476.516771][T21558] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7327'. [ 476.539134][T21558] netlink: 'syz.3.7327': attribute type 2 has an invalid length. [ 477.553436][T21607] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 478.560354][T21648] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.968633][T21660] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7375'. [ 479.288046][T21666] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.159301][T21717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7399'. [ 481.760412][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7431'. [ 482.929107][T21827] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 482.935771][T21827] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 483.340495][T21844] tap0: tun_chr_ioctl cmd 1074025676 [ 483.355839][T21844] tap0: owner set to 0 [ 484.023716][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7468'. [ 484.526300][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7473'. [ 484.799772][T21887] netlink: 'syz.3.7476': attribute type 12 has an invalid length. [ 484.850388][T21887] netlink: 'syz.3.7476': attribute type 29 has an invalid length. [ 484.861862][T21887] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7476'. [ 484.930122][T21887] netlink: 'syz.3.7476': attribute type 1 has an invalid length. [ 484.956519][T21887] netlink: 'syz.3.7476': attribute type 2 has an invalid length. [ 484.965984][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7478'. [ 485.287114][T21908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7485'. [ 485.370809][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7486'. [ 485.599880][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7491'. [ 486.057895][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7503'. [ 486.374578][T21960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7510'. [ 487.241339][T21998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7527'. [ 487.910561][T22020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.952973][T22020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.977753][T22020] bond0 (unregistering): Released all slaves [ 489.036417][T22065] netlink: 'syz.3.7559': attribute type 9 has an invalid length. [ 490.705572][T22136] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7590'. [ 491.284273][T22162] tun1: tun_chr_ioctl cmd 1074025675 [ 491.321857][T22162] tun1: persist disabled [ 491.334549][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7605'. [ 491.367161][T22165] block nbd0: Unsupported socket: should be TCP or UNIX. [ 491.603952][T22173] openvswitch: netlink: IP tunnel dst address not specified [ 491.635591][T22173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.089872][T22191] netlink: 'syz.2.7615': attribute type 1 has an invalid length. [ 492.111288][T22191] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7615'. [ 492.142647][T22191] netlink: 'syz.2.7615': attribute type 2 has an invalid length. [ 492.167512][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7615'. [ 492.417969][T22205] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7619'. [ 492.430832][T22204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7620'. [ 492.656793][T22214] ip6gre0: Master is either lo or non-ether device [ 492.726690][T22215] ipvlan3: entered allmulticast mode [ 492.779106][T22215] batadv_slave_1: entered allmulticast mode [ 492.815576][T22215] batman_adv: batadv0: Adding interface: ipvlan3 [ 492.822254][T22215] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.848834][T22215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.881146][T22215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.925029][T22215] batman_adv: batadv0: Interface activated: ipvlan3 [ 492.987764][T22221] nbd5: detected capacity change from 0 to 63 [ 493.020135][ T4955] block nbd5: Send control failed (result -32) [ 493.029018][ T50] block nbd5: Receive control failed (result -32) [ 493.038234][ T4955] block nbd5: Request send failed, requeueing [ 493.051019][ T4955] block nbd5: Dead connection, failed to find a fallback [ 493.062439][ T4955] block nbd5: shutting down sockets [ 493.069694][ T4955] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.082049][ T4955] Buffer I/O error on dev nbd5, logical block 0, async page read [ 493.093771][ T4955] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.105957][ T4955] Buffer I/O error on dev nbd5, logical block 1, async page read [ 493.115118][ T4955] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.125371][ T4955] Buffer I/O error on dev nbd5, logical block 2, async page read [ 493.133510][ T4955] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.143168][ T4955] Buffer I/O error on dev nbd5, logical block 3, async page read [ 493.153770][ T4955] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.163474][ T4955] Buffer I/O error on dev nbd5, logical block 0, async page read [ 493.171557][ T4955] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.181679][ T4955] Buffer I/O error on dev nbd5, logical block 1, async page read [ 493.195571][ T4955] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.206432][ T4955] Buffer I/O error on dev nbd5, logical block 2, async page read [ 493.214965][ T4955] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.224587][ T4955] Buffer I/O error on dev nbd5, logical block 3, async page read [ 493.233865][ T4955] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.244260][ T4955] Buffer I/O error on dev nbd5, logical block 0, async page read [ 493.252317][ T4955] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.262071][ T4955] Buffer I/O error on dev nbd5, logical block 1, async page read [ 493.272711][ T5637] ldm_validate_partition_table(): Disk read failed. [ 493.282427][ T5637] Dev nbd5: unable to read RDB block 0 [ 493.289439][ T5637] nbd5: unable to read partition table [ 493.305840][ T5637] ldm_validate_partition_table(): Disk read failed. [ 493.314022][ T5637] Dev nbd5: unable to read RDB block 0 [ 493.321154][ T5637] nbd5: unable to read partition table [ 493.866099][T22258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7645'. [ 494.409796][T22281] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 494.564585][T22289] netlink: 'syz.1.7658': attribute type 1 has an invalid length. [ 494.601961][T22289] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7658'. [ 494.833073][T22301] vxcan0: tx drop: invalid da for name 0x0000000000000014 [ 495.098423][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7671'. [ 495.241042][T22321] gtp0: entered promiscuous mode [ 495.262252][T22321] gtp0: entered allmulticast mode [ 495.381022][T22325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7675'. [ 495.886445][T22347] netlink: 'syz.0.7685': attribute type 21 has an invalid length. [ 495.909777][T22347] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7685'. [ 498.767034][T22464] netlink: 'syz.0.7737': attribute type 10 has an invalid length. [ 498.795864][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7738'. [ 498.851605][T22464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.886431][T22464] batadv0: entered allmulticast mode [ 498.910228][T22464] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 499.350036][T22479] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7746'. [ 499.678668][T22491] block nbd6: Unsupported socket: should be TCP or UNIX. [ 500.306999][T22515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7762'. [ 500.628293][T22521] IPVS: persistence engine module ip_vs_pe_À not found [ 500.819665][T22539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7772'. [ 501.286732][T22561] netlink: 'syz.4.7783': attribute type 11 has an invalid length. [ 501.331141][T22563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7784'. [ 501.378854][T22566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7785'. [ 501.411459][T22566] bond0: ARP target 8.4.0.0 is already present [ 501.424311][T22566] bond0: option arp_ip_target: invalid value (1032) [ 501.509587][T22570] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7787'. [ 501.524006][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.413758][T22607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7805'. [ 502.895991][T22625] netlink: 'syz.2.7812': attribute type 28 has an invalid length. [ 502.926330][T22625] netlink: 'syz.2.7812': attribute type 3 has an invalid length. [ 502.942134][T22625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7812'. [ 503.186472][T22633] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 503.208152][T22633] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 503.219331][ T29] audit: type=1800 audit(1786027130.961:7): pid=22637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7818" name="memory.events" dev="tmpfs" ino=7648 res=0 errno=0 [ 503.227813][T22633] gretap1: entered promiscuous mode [ 503.282474][T22633] gretap1: entered allmulticast mode [ 503.386316][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 503.411185][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 503.552411][T22648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7821'. [ 503.577445][T22648] block nbd6: Unsupported socket: should be TCP or UNIX. [ 504.257291][T22682] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7836'. [ 505.258418][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7855'. [ 506.246812][T22762] netlink: 'syz.1.7872': attribute type 33 has an invalid length. [ 506.315009][T22762] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 506.337704][T22762] bond1 (unregistering): Released all slaves [ 506.899204][T22790] netlink: 'syz.2.7886': attribute type 1 has an invalid length. [ 506.908620][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7884'. [ 506.926107][T22790] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7886'. [ 506.937299][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7884'. [ 506.947786][T22790] netlink: 'syz.2.7886': attribute type 1 has an invalid length. [ 506.972585][T22790] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.7886'. [ 508.169393][T22843] geneve2: entered promiscuous mode [ 508.233523][ T1033] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 39065 - 0 [ 508.267285][ T1033] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 39065 - 0 [ 508.308676][ T1033] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 39065 - 0 [ 508.346904][ T1033] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 39065 - 0 [ 508.486787][T22859] xt_hashlimit: size too large, truncated to 1048576 [ 508.653196][T22867] bridge0: port 3(vlan2) entered blocking state [ 508.673799][T22867] bridge0: port 3(vlan2) entered disabled state [ 508.688576][T22867] vlan2: entered allmulticast mode [ 508.711867][T22867] dummy0: entered allmulticast mode [ 508.734604][T22867] vlan2: entered promiscuous mode [ 508.753127][T22867] dummy0: entered promiscuous mode [ 509.230234][T22885] macvlan0: entered promiscuous mode [ 510.766442][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7954'. [ 511.055575][T22952] bridge_slave_0: left allmulticast mode [ 511.107356][T22952] bridge_slave_0: left promiscuous mode [ 511.138975][T22952] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.187730][T22952] bridge_slave_1: left promiscuous mode [ 511.210954][T22952] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.230116][T22959] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7961'. [ 511.267590][T22959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7961'. [ 511.285261][T22952] bond0: (slave bond_slave_0): Releasing backup interface [ 511.328979][T22952] bond0: (slave bond_slave_1): Releasing backup interface [ 511.385997][T22952] team0: Port device team_slave_0 removed [ 511.482542][T22964] xt_hashlimit: size too large, truncated to 1048576 [ 511.483020][T22952] team0: Port device team_slave_1 removed [ 511.546488][T22952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 511.667552][T22966] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.768966][T22966] bridge_slave_0 (unregistering): left allmulticast mode [ 511.811923][T22966] bridge_slave_0 (unregistering): left promiscuous mode [ 511.870625][T22966] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.944705][T22970] IPVS: Scheduler module ip_vs_sip not found [ 512.346074][ T5759] hsr0: entered promiscuous mode [ 512.353479][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7972'. [ 512.595458][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7975'. [ 512.673843][T22994] veth0_macvtap: left allmulticast mode [ 512.695375][T22994] veth0_macvtap: left promiscuous mode [ 512.848152][T22994] [ 512.850528][T22994] ====================================================== [ 512.857549][T22994] WARNING: possible circular locking dependency detected [ 512.864595][T22994] syzkaller #0 Not tainted [ 512.869024][T22994] ------------------------------------------------------ [ 512.876051][T22994] syz.2.7975/22994 is trying to acquire lock: [ 512.882125][T22994] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 512.892053][T22994] [ 512.892053][T22994] but task is already holding lock: [ 512.899411][T22994] ffffffff8f5e4520 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 512.908221][T22994] [ 512.908221][T22994] which lock already depends on the new lock. [ 512.908221][T22994] [ 512.918637][T22994] [ 512.918637][T22994] the existing dependency chain (in reverse order) is: [ 512.927651][T22994] [ 512.927651][T22994] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 512.934947][T22994] __mutex_lock+0x19d/0x1550 [ 512.940198][T22994] get_device_parent+0x16f/0x3a0 [ 512.945668][T22994] device_add+0x2d4/0xb80 [ 512.950527][T22994] device_create+0x269/0x300 [ 512.955632][T22994] msr_device_create+0x33/0x50 [ 512.960950][T22994] cpuhp_invoke_callback+0x434/0x810 [ 512.966779][T22994] cpuhp_thread_fun+0x362/0x780 [ 512.972145][T22994] smpboot_thread_fn+0x57c/0xa80 [ 512.977607][T22994] kthread+0x388/0x470 [ 512.982205][T22994] ret_from_fork+0x514/0xb70 [ 512.987347][T22994] ret_from_fork_asm+0x1a/0x30 [ 512.992636][T22994] [ 512.992636][T22994] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 513.000186][T22994] cpuhp_thread_fun+0x127/0x780 [ 513.005558][T22994] smpboot_thread_fn+0x57c/0xa80 [ 513.011020][T22994] kthread+0x388/0x470 [ 513.015613][T22994] ret_from_fork+0x514/0xb70 [ 513.020748][T22994] ret_from_fork_asm+0x1a/0x30 [ 513.026038][T22994] [ 513.026038][T22994] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 513.033806][T22994] cpus_read_lock+0x42/0x160 [ 513.039028][T22994] static_key_slow_inc+0x12/0x30 [ 513.044619][T22994] nbd_genl_reconfigure+0x1301/0x1e80 [ 513.050584][T22994] genl_family_rcv_msg_doit+0x233/0x340 [ 513.056729][T22994] genl_rcv_msg+0x614/0x7a0 [ 513.061758][T22994] netlink_rcv_skb+0x226/0x4a0 [ 513.067044][T22994] genl_rcv+0x28/0x40 [ 513.071811][T22994] netlink_unicast+0x7bb/0x940 [ 513.077115][T22994] netlink_sendmsg+0x813/0xb40 [ 513.082504][T22994] sock_sendmsg_nosec+0x13a/0x180 [ 513.088195][T22994] ____sys_sendmsg+0x54e/0x850 [ 513.093491][T22994] ___sys_sendmsg+0x2a5/0x360 [ 513.098689][T22994] __x64_sys_sendmsg+0x1b1/0x290 [ 513.104141][T22994] do_syscall_64+0x174/0x580 [ 513.109340][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.115776][T22994] [ 513.115776][T22994] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 513.123424][T22994] __mutex_lock+0x19d/0x1550 [ 513.128534][T22994] nbd_queue_rq+0x373/0x1150 [ 513.133632][T22994] blk_mq_dispatch_rq_list+0x499/0x1990 [ 513.139814][T22994] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 513.146744][T22994] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 513.154121][T22994] blk_mq_run_work_fn+0x16c/0x300 [ 513.159664][T22994] process_scheduled_works+0xa8e/0x14e0 [ 513.165722][T22994] worker_thread+0xa47/0xfb0 [ 513.170823][T22994] kthread+0x388/0x470 [ 513.175406][T22994] ret_from_fork+0x514/0xb70 [ 513.180526][T22994] ret_from_fork_asm+0x1a/0x30 [ 513.185800][T22994] [ 513.185800][T22994] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 513.193006][T22994] __mutex_lock+0x19d/0x1550 [ 513.198120][T22994] nbd_queue_rq+0xc1/0x1150 [ 513.203138][T22994] blk_mq_dispatch_rq_list+0x499/0x1990 [ 513.209213][T22994] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 513.216066][T22994] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 513.222569][T22994] blk_mq_run_work_fn+0x16c/0x300 [ 513.228102][T22994] process_scheduled_works+0xa8e/0x14e0 [ 513.234165][T22994] worker_thread+0xa47/0xfb0 [ 513.239275][T22994] kthread+0x388/0x470 [ 513.243886][T22994] ret_from_fork+0x514/0xb70 [ 513.248996][T22994] ret_from_fork_asm+0x1a/0x30 [ 513.254269][T22994] [ 513.254269][T22994] -> #5 (set->srcu){.+.+}-{0:0}: [ 513.261383][T22994] __synchronize_srcu+0xc9/0x2f0 [ 513.266869][T22994] elevator_switch+0x1e8/0x7b0 [ 513.272242][T22994] elevator_change+0x2fa/0x480 [ 513.277537][T22994] elevator_set_default+0x375/0x440 [ 513.283256][T22994] blk_register_queue+0x3f3/0x4e0 [ 513.288864][T22994] __add_disk+0x6cb/0xe30 [ 513.293790][T22994] add_disk_fwnode+0x100/0x3a0 [ 513.299062][T22994] nbd_dev_add+0x733/0xb60 [ 513.303988][T22994] nbd_init+0x15f/0x1e0 [ 513.308799][T22994] do_one_initcall+0x250/0x870 [ 513.314076][T22994] do_initcall_level+0x10a/0x1a0 [ 513.319638][T22994] do_initcalls+0x59/0xa0 [ 513.324482][T22994] kernel_init_freeable+0x29d/0x3e0 [ 513.330194][T22994] kernel_init+0x1d/0x1d0 [ 513.335034][T22994] ret_from_fork+0x514/0xb70 [ 513.340141][T22994] ret_from_fork_asm+0x1a/0x30 [ 513.345417][T22994] [ 513.345417][T22994] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 513.353222][T22994] __mutex_lock+0x19d/0x1550 [ 513.358329][T22994] elevator_change+0x1af/0x480 [ 513.363877][T22994] elevator_set_none+0xb5/0x140 [ 513.369251][T22994] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 513.375565][T22994] nbd_start_device+0x189/0xb30 [ 513.380923][T22994] nbd_genl_connect+0x1597/0x1c10 [ 513.386463][T22994] genl_family_rcv_msg_doit+0x233/0x340 [ 513.392561][T22994] genl_rcv_msg+0x614/0x7a0 [ 513.397580][T22994] netlink_rcv_skb+0x226/0x4a0 [ 513.402942][T22994] genl_rcv+0x28/0x40 [ 513.407442][T22994] netlink_unicast+0x7bb/0x940 [ 513.412713][T22994] netlink_sendmsg+0x813/0xb40 [ 513.418025][T22994] sock_sendmsg_nosec+0x13a/0x180 [ 513.423593][T22994] ____sys_sendmsg+0x54e/0x850 [ 513.428892][T22994] ___sys_sendmsg+0x2a5/0x360 [ 513.434085][T22994] __x64_sys_sendmsg+0x1b1/0x290 [ 513.439541][T22994] do_syscall_64+0x174/0x580 [ 513.444648][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.451055][T22994] [ 513.451055][T22994] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 513.460020][T22994] blk_alloc_queue+0x544/0x690 [ 513.465311][T22994] __blk_mq_alloc_disk+0x194/0x390 [ 513.470936][T22994] nbd_dev_add+0x494/0xb60 [ 513.475859][T22994] nbd_init+0x15f/0x1e0 [ 513.480530][T22994] do_one_initcall+0x250/0x870 [ 513.485897][T22994] do_initcall_level+0x10a/0x1a0 [ 513.491356][T22994] do_initcalls+0x59/0xa0 [ 513.496197][T22994] kernel_init_freeable+0x29d/0x3e0 [ 513.501908][T22994] kernel_init+0x1d/0x1d0 [ 513.506748][T22994] ret_from_fork+0x514/0xb70 [ 513.511862][T22994] ret_from_fork_asm+0x1a/0x30 [ 513.517143][T22994] [ 513.517143][T22994] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 513.524352][T22994] fs_reclaim_acquire+0x71/0x100 [ 513.529851][T22994] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 513.536084][T22994] alloc_inode+0xb8/0x1b0 [ 513.540954][T22994] iget_locked+0x131/0x6a0 [ 513.545887][T22994] kernfs_get_inode+0x4f/0x770 [ 513.551173][T22994] kernfs_get_tree+0x5cd/0x980 [ 513.556446][T22994] vfs_get_tree+0x92/0x2a0 [ 513.561389][T22994] do_new_mount+0x319/0xdc0 [ 513.566448][T22994] __se_sys_mount+0x31d/0x420 [ 513.571638][T22994] do_syscall_64+0x174/0x580 [ 513.576764][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.583172][T22994] [ 513.583172][T22994] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 513.591157][T22994] down_write+0x96/0x200 [ 513.595917][T22994] kernfs_remove_by_name_ns+0x4e/0x140 [ 513.601889][T22994] device_links_driver_bound+0x4ab/0x1440 [ 513.608226][T22994] driver_bound+0xd8/0x2e0 [ 513.613204][T22994] really_probe+0x774/0xae0 [ 513.618315][T22994] __driver_probe_device+0x1e8/0x360 [ 513.624139][T22994] driver_probe_device+0x4f/0x240 [ 513.629689][T22994] __device_attach_driver+0x270/0x410 [ 513.635587][T22994] bus_for_each_drv+0x258/0x2f0 [ 513.640966][T22994] __device_attach+0x2c4/0x450 [ 513.646270][T22994] device_initial_probe+0xa1/0xd0 [ 513.651828][T22994] bus_probe_device+0x12a/0x220 [ 513.657196][T22994] device_add+0x7d7/0xb80 [ 513.662036][T22994] faux_device_create_with_groups+0x1a5/0x2b0 [ 513.668731][T22994] regulator_dummy_init+0x19/0x40 [ 513.674343][T22994] regulator_init+0xca/0x110 [ 513.679457][T22994] do_one_initcall+0x250/0x870 [ 513.684738][T22994] do_initcall_level+0x10a/0x1a0 [ 513.690193][T22994] do_initcalls+0x59/0xa0 [ 513.695033][T22994] kernel_init_freeable+0x29d/0x3e0 [ 513.700791][T22994] kernel_init+0x1d/0x1d0 [ 513.705649][T22994] ret_from_fork+0x514/0xb70 [ 513.710766][T22994] ret_from_fork_asm+0x1a/0x30 [ 513.716051][T22994] [ 513.716051][T22994] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 513.724654][T22994] __lock_acquire+0x1520/0x2cf0 [ 513.730067][T22994] lock_acquire+0x106/0x350 [ 513.735101][T22994] down_read+0x4a/0x330 [ 513.739914][T22994] kernfs_remove+0x35/0x80 [ 513.744858][T22994] __kobject_del+0xe0/0x310 [ 513.749983][T22994] kobject_del+0x45/0x60 [ 513.754829][T22994] cleanup_glue_dir+0x1a3/0x220 [ 513.760197][T22994] device_del+0x77d/0x8f0 [ 513.765122][T22994] device_destroy+0xb2/0x1a0 [ 513.770243][T22994] macvtap_device_event+0x226/0x400 [ 513.776070][T22994] notifier_call_chain+0x1a5/0x3d0 [ 513.781699][T22994] unregister_netdevice_many_notify+0x17de/0x2150 [ 513.788737][T22994] rtnl_dellink+0x5be/0x810 [ 513.793825][T22994] rtnetlink_rcv_msg+0x802/0xc00 [ 513.799269][T22994] netlink_rcv_skb+0x226/0x4a0 [ 513.804546][T22994] netlink_unicast+0x7bb/0x940 [ 513.809818][T22994] netlink_sendmsg+0x813/0xb40 [ 513.815099][T22994] sock_sendmsg_nosec+0x13a/0x180 [ 513.820673][T22994] ____sys_sendmsg+0x54e/0x850 [ 513.825974][T22994] ___sys_sendmsg+0x2a5/0x360 [ 513.831175][T22994] __x64_sys_sendmsg+0x1b1/0x290 [ 513.836628][T22994] do_syscall_64+0x174/0x580 [ 513.841739][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.848153][T22994] [ 513.848153][T22994] other info that might help us debug this: [ 513.848153][T22994] [ 513.858387][T22994] Chain exists of: [ 513.858387][T22994] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 513.858387][T22994] [ 513.871769][T22994] Possible unsafe locking scenario: [ 513.871769][T22994] [ 513.879211][T22994] CPU0 CPU1 [ 513.884565][T22994] ---- ---- [ 513.889928][T22994] lock(gdp_mutex); [ 513.893827][T22994] lock(cpuhp_state-up); [ 513.900940][T22994] lock(gdp_mutex); [ 513.907352][T22994] rlock(&root->kernfs_supers_rwsem); [ 513.912838][T22994] [ 513.912838][T22994] *** DEADLOCK *** [ 513.912838][T22994] [ 513.920964][T22994] 2 locks held by syz.2.7975/22994: [ 513.926145][T22994] #0: ffffffff9002dac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x41b/0x810 [ 513.935108][T22994] #1: ffffffff8f5e4520 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 513.944247][T22994] [ 513.944247][T22994] stack backtrace: [ 513.950172][T22994] CPU: 0 UID: 0 PID: 22994 Comm: syz.2.7975 Not tainted syzkaller #0 PREEMPT(full) [ 513.950204][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.950227][T22994] Call Trace: [ 513.950236][T22994] [ 513.950244][T22994] dump_stack_lvl+0xe8/0x150 [ 513.950269][T22994] print_circular_bug+0x2e1/0x300 [ 513.950288][T22994] check_noncircular+0x12e/0x150 [ 513.950305][T22994] __lock_acquire+0x1520/0x2cf0 [ 513.950334][T22994] ? kernfs_remove+0x35/0x80 [ 513.950347][T22994] lock_acquire+0x106/0x350 [ 513.950367][T22994] ? kernfs_remove+0x35/0x80 [ 513.950384][T22994] down_read+0x4a/0x330 [ 513.950406][T22994] ? kernfs_remove+0x35/0x80 [ 513.950421][T22994] kernfs_remove+0x35/0x80 [ 513.950433][T22994] __kobject_del+0xe0/0x310 [ 513.950450][T22994] kobject_del+0x45/0x60 [ 513.950463][T22994] cleanup_glue_dir+0x1a3/0x220 [ 513.950482][T22994] device_del+0x77d/0x8f0 [ 513.950500][T22994] ? __pfx_device_del+0x10/0x10 [ 513.950517][T22994] ? kobject_put+0x50f/0x550 [ 513.950532][T22994] device_destroy+0xb2/0x1a0 [ 513.950549][T22994] ? __pfx_device_destroy+0x10/0x10 [ 513.950567][T22994] ? kernfs_remove_by_name_ns+0x101/0x140 [ 513.950584][T22994] macvtap_device_event+0x226/0x400 [ 513.950608][T22994] ? __pfx_macvtap_device_event+0x10/0x10 [ 513.950634][T22994] notifier_call_chain+0x1a5/0x3d0 [ 513.950664][T22994] unregister_netdevice_many_notify+0x17de/0x2150 [ 513.950692][T22994] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 513.950714][T22994] ? netdev_upper_dev_unlink+0x99/0xe0 [ 513.950729][T22994] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 513.950744][T22994] ? macvlan_dellink+0x3e4/0x470 [ 513.950783][T22994] ? __pfx_macvtap_dellink+0x10/0x10 [ 513.950804][T22994] ? __pfx_macvtap_dellink+0x10/0x10 [ 513.950825][T22994] rtnl_dellink+0x5be/0x810 [ 513.950842][T22994] ? __pfx_rtnl_dellink+0x10/0x10 [ 513.950883][T22994] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 513.950898][T22994] ? __pfx_rtnl_dellink+0x10/0x10 [ 513.950917][T22994] ? __pfx_rtnl_dellink+0x10/0x10 [ 513.950930][T22994] rtnetlink_rcv_msg+0x802/0xc00 [ 513.950946][T22994] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 513.950960][T22994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.950973][T22994] ? ref_tracker_free+0x689/0x830 [ 513.951053][T22994] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.951077][T22994] netlink_rcv_skb+0x226/0x4a0 [ 513.951095][T22994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.951110][T22994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.951131][T22994] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.951149][T22994] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.951167][T22994] netlink_unicast+0x7bb/0x940 [ 513.951186][T22994] netlink_sendmsg+0x813/0xb40 [ 513.951208][T22994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.951226][T22994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 513.951288][T22994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.951304][T22994] sock_sendmsg_nosec+0x13a/0x180 [ 513.951327][T22994] ____sys_sendmsg+0x54e/0x850 [ 513.951345][T22994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.951365][T22994] ? import_iovec+0x73/0xa0 [ 513.951418][T22994] ___sys_sendmsg+0x2a5/0x360 [ 513.951434][T22994] ? __lock_acquire+0x683/0x2cf0 [ 513.951455][T22994] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.951473][T22994] ? futex_wait+0x2a2/0x390 [ 513.951510][T22994] ? __fget_files+0x2a/0x420 [ 513.951530][T22994] ? __fget_files+0x3a2/0x420 [ 513.951554][T22994] __x64_sys_sendmsg+0x1b1/0x290 [ 513.951571][T22994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.951595][T22994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.951611][T22994] do_syscall_64+0x174/0x580 [ 513.951630][T22994] ? trace_irq_disable+0x3b/0x140 [ 513.951659][T22994] ? clear_bhb_loop+0x40/0x90 [ 513.951675][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.951691][T22994] RIP: 0033:0x7fba68d9e0d9 [ 513.951706][T22994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.951722][T22994] RSP: 002b:00007fba69c9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.951740][T22994] RAX: ffffffffffffffda RBX: 00007fba69025fa0 RCX: 00007fba68d9e0d9 [ 513.951754][T22994] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 513.951764][T22994] RBP: 00007fba68e35024 R08: 0000000000000000 R09: 0000000000000000 [ 513.951774][T22994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.951783][T22994] R13: 00007fba69026038 R14: 00007fba69025fa0 R15: 00007ffd64f36288 [ 513.951800][T22994] [ 516.871833][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!