last executing test programs: 2.606447159s ago: executing program 2 (id=11593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b000600000008001800400000000a001000010000000000000008000b000600000008000c"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 2.551454232s ago: executing program 0 (id=11594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xfffffffffffffd8e, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xffe7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "dc450c3e0cd486b59a21e735845991e2"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e080001400000001508"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.249430459s ago: executing program 2 (id=11597): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.088283546s ago: executing program 0 (id=11599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10003}, 0x1c) 1.888862216s ago: executing program 0 (id=11602): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.711784683s ago: executing program 1 (id=11604): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="f153a0e55baf5fec8efd22d77caf2356fa35192a7d1220975cdd1031c3c26e2c5253e78f71593ab70e5577b34777e3e183b8dceb1aef0f143f0d61ffe2efec8cd7ce8ce0d7b0ff3b986b1a4ceda894dd1c18ea8a250d02438a087ba5ce97511e0b7e80c07286872be97871bb552ed8a33df260cd3416b9045e695adb6365742402264f5889c56a53709f603f181659c358ad806290d5f942f7a53b8a9deee9ff", 0xa0}], 0x1, 0x0, 0x0, 0x8080}, 0x2400401d) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r1) 1.620105188s ago: executing program 4 (id=11606): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x3f, 0x8, 0xf9a, 0x100, 0x41}, 0x14) 1.521417445s ago: executing program 3 (id=11607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) 1.44816957s ago: executing program 1 (id=11608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={0x24, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 1.381861694s ago: executing program 3 (id=11609): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000170100000200000700"], 0x18, 0x80}, 0x4004080) 1.272843771s ago: executing program 1 (id=11610): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x4) 1.195893589s ago: executing program 0 (id=11611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.11695426s ago: executing program 3 (id=11612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x40c4) 1.116659828s ago: executing program 4 (id=11613): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 1.005006766s ago: executing program 1 (id=11614): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 977.893274ms ago: executing program 2 (id=11615): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f00000004c0), &(0x7f00000005c0)=@tcp}, 0x20) 860.899706ms ago: executing program 3 (id=11616): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff04, 0x0) 824.681804ms ago: executing program 4 (id=11617): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)={'a', ' *:* ', 'm\x00'}, 0x8) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='b *:* rw'], 0xa) 807.168331ms ago: executing program 2 (id=11618): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 671.925529ms ago: executing program 2 (id=11619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xffffff4e, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 599.130607ms ago: executing program 1 (id=11620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f00000000c0)) 581.370484ms ago: executing program 4 (id=11621): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 504.698238ms ago: executing program 3 (id=11622): r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x270}, 0x40000c4) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 493.8448ms ago: executing program 0 (id=11623): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) 409.095399ms ago: executing program 4 (id=11624): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x6, 0x100}, 0xc) 290.388594ms ago: executing program 2 (id=11625): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x5c, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4bd5ffa8e842cdd19baeb25d342579f7e63d2d1e5317517e", "b1fe94141226cc71e718e86db665dd4fbd49b20523893e8724968b868600ac13"}}}}}}, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 204.833084ms ago: executing program 0 (id=11626): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 139.104921ms ago: executing program 4 (id=11627): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) 28.791966ms ago: executing program 3 (id=11628): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xa96) sendto$inet(r0, 0x0, 0x0, 0x2004c000, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 0s ago: executing program 1 (id=11629): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) kernel console output (not intermixed with test programs): 1'. [ 189.909565][T13259] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.363997][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3649'. [ 190.654838][T13314] --map-set only usable from mangle table [ 190.683794][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3662'. [ 190.953785][T13339] xt_cgroup: no path or classid specified [ 191.050919][T13343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3672'. [ 191.269868][T13360] netlink: 'syz.0.3677': attribute type 5 has an invalid length. [ 191.556854][ T84] IPVS: starting estimator thread 0... [ 191.659085][T13385] IPVS: using max 30 ests per chain, 72000 per kthread [ 192.066931][T13420] netlink: NAT attribute has 5 unknown bytes [ 192.066963][T13420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.124299][T13426] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 192.237973][T13432] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 192.306703][T13437] netlink: 'syz.0.3716': attribute type 21 has an invalid length. [ 192.455219][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'. [ 192.497728][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3725'. [ 192.497754][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3725'. [ 192.632203][T13461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.743997][T13468] lo: entered promiscuous mode [ 192.753401][T13468] tunl0: entered promiscuous mode [ 192.762707][T13468] gre0: entered promiscuous mode [ 192.788423][T13471] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 192.791487][T13468] gretap0: entered promiscuous mode [ 192.823106][T13468] erspan0: entered promiscuous mode [ 192.835037][T13468] ip_vti0: entered promiscuous mode [ 193.036838][T13484] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 193.458894][T13518] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3759'. [ 193.572652][T13523] netlink: 'syz.3.3763': attribute type 2 has an invalid length. [ 193.662424][T13532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3767'. [ 194.140481][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.140533][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.143635][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'. [ 194.317840][T13581] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3789'. [ 194.379770][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3791'. [ 194.758242][T13613] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 194.831009][T13615] Cannot find add_set index 4 as target [ 195.100320][T13635] veth5: entered allmulticast mode [ 195.137750][T13640] netlink: 'syz.1.3818': attribute type 21 has an invalid length. [ 195.137831][T13640] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3818'. [ 195.355000][T13657] netlink: 'syz.4.3826': attribute type 2 has an invalid length. [ 195.355373][T13657] netlink: 'syz.4.3826': attribute type 2 has an invalid length. [ 196.159803][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'. [ 196.506752][T13747] netlink: 'syz.1.3871': attribute type 2 has an invalid length. [ 196.610368][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3875'. [ 197.606247][ T84] IPVS: starting estimator thread 0... [ 197.685739][T13829] bond1: option min_links: invalid value (18446744073709551614) [ 197.685894][T13829] bond1: option min_links: allowed values 0 - 2147483647 [ 197.691766][T13829] bond1 (unregistering): Released all slaves [ 197.712093][T13828] IPVS: using max 27 ests per chain, 64800 per kthread [ 197.954511][T13853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.071751][T13860] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3927'. [ 198.318360][T13880] TCP: TCP_TX_DELAY enabled [ 198.498983][T13886] bond1 (unregistering): Released all slaves [ 198.577766][T13899] xt_TCPMSS: Only works on TCP SYN packets [ 198.704469][T13907] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 198.934009][T13923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.934033][T13923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.953076][T13923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.953095][T13923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.512395][T13965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.914430][T13996] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 200.121425][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 200.121506][T14011] bridge_slave_1: left allmulticast mode [ 200.121525][T14011] bridge_slave_1: left promiscuous mode [ 200.121755][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.162794][T14011] bridge_slave_0: left allmulticast mode [ 200.162820][T14011] bridge_slave_0: left promiscuous mode [ 200.163052][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.357404][T14023] netlink: 'syz.4.4007': attribute type 3 has an invalid length. [ 200.531334][T14039] x_tables: unsorted entry at hook 1 [ 200.539917][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 200.981915][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4026'. [ 201.057399][T14079] openvswitch: netlink: Message has 8 unknown bytes. [ 201.061707][T14073] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4028'. [ 201.879954][T14134] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4058'. [ 201.906349][T14136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4059'. [ 201.906370][T14136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4059'. [ 202.140692][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4067'. [ 202.248837][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'. [ 202.694422][T14195] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 202.791077][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'. [ 202.914610][T14213] netlink: 'syz.1.4096': attribute type 6 has an invalid length. [ 202.914632][T14213] netlink: 'syz.1.4096': attribute type 5 has an invalid length. [ 202.944561][T14215] xt_bpf: check failed: parse error [ 203.090585][T14223] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 203.106862][T14225] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.293920][T14237] netlink: 'syz.4.4109': attribute type 3 has an invalid length. [ 203.293941][T14237] netlink: 'syz.4.4109': attribute type 1 has an invalid length. [ 203.481506][T14251] netlink: zone id is out of range [ 203.481522][T14251] netlink: zone id is out of range [ 203.481796][T14251] netlink: set zone limit has 4 unknown bytes [ 203.790615][T14274] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 204.143486][T14298] bridge3: entered promiscuous mode [ 204.143550][T14298] bridge3: entered allmulticast mode [ 204.564720][T14320] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 204.594327][T14320] bond1 (unregistering): Released all slaves [ 205.043809][T14354] bond0: entered promiscuous mode [ 205.043835][T14354] bond0: entered allmulticast mode [ 205.044200][T14354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.239184][T14364] xt_IDLETIMER: timeout value is zero [ 205.543248][T14389] __nla_validate_parse: 7 callbacks suppressed [ 205.543267][T14389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4184'. [ 205.587916][T14393] netlink: 'syz.1.4187': attribute type 4 has an invalid length. [ 205.746394][T14404] C: entered promiscuous mode [ 205.772894][T14404] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.144567][T14436] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4207'. [ 206.424637][T14456] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 206.802763][T14485] ipt_rpfilter: unknown options [ 207.016611][T14502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4239'. [ 207.497336][T14537] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.743804][T14556] netlink: 'syz.1.4267': attribute type 11 has an invalid length. [ 207.980601][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4276'. [ 207.980644][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4276'. [ 208.510573][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 208.741182][T14634] xt_NETMAP: bad rangesize 37. [ 209.299450][T14676] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4326'. [ 209.395148][T14684] netlink: 'syz.1.4329': attribute type 24 has an invalid length. [ 209.411311][T14686] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 209.486242][T14692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4334'. [ 209.631675][T14700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4339'. [ 209.695202][T14704] netlink: 'syz.1.4340': attribute type 7 has an invalid length. [ 209.786598][T14712] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 210.073750][T14726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.223907][T14740] openvswitch: netlink: EtherType 548 is less than min 600 [ 210.722613][T14775] netlink: 'syz.4.4376': attribute type 12 has an invalid length. [ 210.849499][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4379'. [ 211.346518][T14809] xt_hashlimit: overflow, try lower: 3/0 [ 211.816742][T14835] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4404'. [ 213.516111][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4462'. [ 213.516140][T14958] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 213.598594][T14963] netlink: 'syz.3.4468': attribute type 64 has an invalid length. [ 213.598615][T14963] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4468'. [ 214.265114][T15012] veth1_macvtap: left promiscuous mode [ 215.100406][T15074] netlink: 'syz.3.4518': attribute type 2 has an invalid length. [ 215.100427][T15074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4518'. [ 215.549393][T15105] netlink: 'syz.0.4530': attribute type 1 has an invalid length. [ 215.633033][T15113] x_tables: duplicate entry at hook 3 [ 215.747869][ T5276] veth1_macvtap: entered promiscuous mode [ 216.558919][T15175] openvswitch: netlink: IP tunnel TTL not specified. [ 217.118691][T15212] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4573'. [ 217.579077][T15241] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 217.774467][T15260] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 217.832855][T15263] netlink: 'syz.3.4599': attribute type 1 has an invalid length. [ 217.964587][T15272] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 218.375468][T15305] xt_nat: multiple ranges no longer supported [ 218.585542][T15319] openvswitch: netlink: IP tunnel dst address not specified [ 219.671701][T15398] netlink: 'syz.0.4666': attribute type 4 has an invalid length. [ 220.168396][T15438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4684'. [ 220.293144][T15445] netlink: 'syz.1.4689': attribute type 1 has an invalid length. [ 220.293166][T15445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4689'. [ 220.343520][T15451] xt_TCPMSS: Only works on TCP SYN packets [ 220.427035][T15454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4695'. [ 220.514731][T15447] netlink: Failed to add helper -22 [ 220.514785][T15447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.635457][T15466] netlink: 'syz.2.4699': attribute type 58 has an invalid length. [ 220.635476][T15466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4699'. [ 220.892413][T15485] bond0: Error: Cannot enslave bond to itself. [ 220.952153][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4714'. [ 221.145389][T15506] xt_TCPMSS: Only works on TCP SYN packets [ 221.367181][T15519] netlink: 'syz.0.4728': attribute type 1 has an invalid length. [ 221.423461][T15523] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 221.447010][T15526] netlink: 'syz.4.4729': attribute type 1 has an invalid length. [ 221.447031][T15526] netlink: 'syz.4.4729': attribute type 268 has an invalid length. [ 221.447044][T15526] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4729'. [ 221.613878][T15538] netlink: 'syz.2.4734': attribute type 12 has an invalid length. [ 221.724223][T15542] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 222.482274][T15597] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4763'. [ 222.722767][T15618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.914772][T15632] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 223.121371][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4786'. [ 223.121483][T15645] openvswitch: netlink: Message has 4 unknown bytes. [ 223.180968][T15651] netlink: 'syz.4.4789': attribute type 1 has an invalid length. [ 223.180991][T15651] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4789'. [ 223.287973][T15656] netlink: 'syz.3.4791': attribute type 1 has an invalid length. [ 223.528791][T15677] netlink: 'syz.2.4803': attribute type 2 has an invalid length. [ 223.528811][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'. [ 223.727496][T15687] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 223.731274][T15687] bond3 (unregistering): Released all slaves [ 223.756285][T15693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4809'. [ 223.965239][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 223.965278][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4815'. [ 224.043945][T15711] wg1 speed is unknown, defaulting to 1000 [ 224.064948][T15711] wg1 speed is unknown, defaulting to 1000 [ 224.077235][T15711] wg1 speed is unknown, defaulting to 1000 [ 224.279815][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4824'. [ 224.369853][T15711] infiniband syz2: set active [ 224.369876][T15711] infiniband syz2: added wg1 [ 224.400887][T15711] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 224.400923][T15711] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 224.400958][T15711] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 224.461461][T15726] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.477167][T15726] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.480291][T15711] RDS/IB: syz2: added [ 224.480775][T15711] smc: adding ib device syz2 with port count 1 [ 224.480883][T15711] smc: ib device syz2 port 1 has no pnetid [ 224.649169][ T9] wg1 speed is unknown, defaulting to 1000 [ 224.653971][ T5730] wg1 speed is unknown, defaulting to 1000 [ 224.655293][ T1218] lo speed is unknown, defaulting to 1000 [ 224.661604][T15711] wg1 speed is unknown, defaulting to 1000 [ 225.294298][T15780] SET target dimension over the limit! [ 225.317800][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4851'. [ 225.398994][T15711] wg1 speed is unknown, defaulting to 1000 [ 225.552630][T15795] netlink: 'syz.4.4859': attribute type 1 has an invalid length. [ 225.950690][T15821] netlink: 'syz.3.4868': attribute type 2 has an invalid length. [ 225.950730][T15821] netlink: 'syz.3.4868': attribute type 2 has an invalid length. [ 226.078656][T15711] wg1 speed is unknown, defaulting to 1000 [ 226.294261][T15838] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4879'. [ 226.529850][T15853] geneve0: entered allmulticast mode [ 226.723327][T15711] wg1 speed is unknown, defaulting to 1000 [ 227.313615][T15711] wg1 speed is unknown, defaulting to 1000 [ 227.584117][T15917] netlink: 'syz.0.4917': attribute type 6 has an invalid length. [ 228.144070][T15950] ip6gre2: entered promiscuous mode [ 228.588287][T15982] netlink: 'syz.0.4947': attribute type 1 has an invalid length. [ 228.588307][T15982] __nla_validate_parse: 4 callbacks suppressed [ 228.588318][T15982] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4947'. [ 228.836684][T16002] netlink: 'syz.3.4955': attribute type 1 has an invalid length. [ 228.836706][T16002] netlink: 'syz.3.4955': attribute type 3 has an invalid length. [ 228.836717][T16002] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4955'. [ 228.889473][T15999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.935602][T16007] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 229.090208][T16016] netlink: 'syz.0.4960': attribute type 16 has an invalid length. [ 229.090229][T16016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4960'. [ 229.090252][T16016] veth0_macvtap: entered allmulticast mode [ 229.295889][T16029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.622881][T16054] ieee802154 phy0 wpan0: encryption failed: -90 [ 229.727046][T16059] netlink: 'syz.4.4984': attribute type 5 has an invalid length. [ 229.812717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.812738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.853660][T16067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.017738][T16082] vlan0: entered promiscuous mode [ 230.300758][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 230.846767][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5021'. [ 230.888635][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5024'. [ 230.933075][T16149] netlink: 'syz.1.5025': attribute type 2 has an invalid length. [ 231.062363][T16159] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5030'. [ 231.062385][T16159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5030'. [ 231.285225][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5037'. [ 231.285252][T16176] netlink: 'syz.0.5037': attribute type 6 has an invalid length. [ 231.333636][T16173] bond3: option resend_igmp: invalid value (32767) [ 231.333660][T16173] bond3: option resend_igmp: allowed values 0 - 255 [ 231.354614][T16173] bond3 (unregistering): Released all slaves [ 231.409909][T16181] netlink: 'syz.4.5040': attribute type 21 has an invalid length. [ 231.409969][T16181] netlink: 'syz.4.5040': attribute type 6 has an invalid length. [ 231.409982][T16181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5040'. [ 231.470708][T16184] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.809578][T16209] openvswitch: netlink: Key type 5126 is out of range max 32 [ 231.970896][T16223] netlink: 'syz.2.5061': attribute type 3 has an invalid length. [ 232.034538][T16227] xt_ecn: cannot match TCP bits for non-tcp packets [ 232.544504][T16264] dvmrp1: entered allmulticast mode [ 232.661544][T16273] netlink: 'syz.2.5087': attribute type 11 has an invalid length. [ 232.964402][T16297] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 233.134280][T16304] netlink: 'syz.1.5101': attribute type 1 has an invalid length. [ 233.495660][T16317] SET target dimension over the limit! [ 235.101863][T16405] __nla_validate_parse: 7 callbacks suppressed [ 235.101891][T16405] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5149'. [ 235.274424][T16413] netlink: 'syz.0.5155': attribute type 30 has an invalid length. [ 235.477266][T16429] xt_hashlimit: size too large, truncated to 1048576 [ 235.793148][T16442] ip6t_srh: unknown srh match flags 5F28 [ 236.385698][T16431] infiniband syz1: set active [ 236.397879][T16431] infiniband syz1: added team_slave_0 [ 236.497199][T16431] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 236.497233][T16431] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 236.497267][T16431] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 236.606737][T16431] RDS/IB: syz1: added [ 236.606795][T16431] smc: adding ib device syz1 with port count 1 [ 236.606812][T16431] smc: ib device syz1 port 1 has no pnetid [ 237.325049][T16510] netlink: 'syz.3.5197': attribute type 2 has an invalid length. [ 237.325069][T16510] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5197'. [ 237.547296][T16522] netlink: 524 bytes leftover after parsing attributes in process `syz.3.5203'. [ 237.779533][T16530] xt_hashlimit: size too large, truncated to 1048576 [ 237.779553][T16530] xt_hashlimit: max too large, truncated to 1048576 [ 237.779737][T16530] xt_hashlimit: overflow, rate too high: 0 [ 239.041549][T16576] x_tables: unsorted underflow at hook 1 [ 239.225308][T16579] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 239.225334][T16579] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 239.334179][T16588] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.387429][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5239'. [ 239.587014][T16599] SET target dimension over the limit! [ 239.999603][T16612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5248'. [ 240.897617][T16652] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5267'. [ 241.160268][T16668] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5276'. [ 241.185413][T16670] xt_ecn: cannot match TCP bits for non-tcp packets [ 241.254260][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5278'. [ 241.254284][T16672] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5278'. [ 241.254298][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5278'. [ 241.254458][T16672] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5278'. [ 241.254473][T16672] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5278'. [ 241.457445][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5279'. [ 241.459145][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5282'. [ 242.300893][T16716] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 242.442643][T16724] set match dimension is over the limit! [ 242.686076][T16738] dvmrp1: left allmulticast mode [ 243.666566][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5331'. [ 243.919090][T16793] ksmbd: Unknown IPC event: 1, ignore. [ 244.139521][T16808] xt_socket: unknown flags 0xc [ 244.396103][T16821] tc_dump_action: action bad kind [ 245.044026][T16855] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 245.514607][T16878] bridge4: entered promiscuous mode [ 245.516315][T16878] bridge4: entered allmulticast mode [ 246.670010][T16936] netlink: NAT attribute has 1 unknown bytes [ 246.670046][T16936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.773981][T16942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.831488][T16948] netlink: Unknown conntrack attr (0) [ 246.921913][T16951] __nla_validate_parse: 7 callbacks suppressed [ 246.921933][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5417'. [ 247.794214][ T50] IPVS: starting estimator thread 0... [ 247.889308][T16990] IPVS: using max 28 ests per chain, 67200 per kthread [ 247.953024][T16997] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5438'. [ 248.156880][T17007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 248.278251][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5445'. [ 248.278275][T17013] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5445'. [ 248.352389][T17018] netlink: 'syz.3.5449': attribute type 2 has an invalid length. [ 248.627387][T17028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5454'. [ 249.404787][T17061] netlink: 'syz.1.5470': attribute type 13 has an invalid length. [ 249.641239][T17072] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5474'. [ 249.641587][T17072] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5474'. [ 249.745717][T17079] IPVS: length: 239 != 24 [ 250.593661][ T31] audit: type=1107 audit(1790710739.764:2): pid=17113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 251.611957][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'. [ 252.125347][T17170] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 252.386644][T17187] netlink: 'syz.0.5533': attribute type 64 has an invalid length. [ 252.413082][ T5716] lo speed is unknown, defaulting to 1000 [ 252.413139][ T5716] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 252.496098][T17189] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5534'. [ 252.768844][T17201] netlink: set zone limit has 4 unknown bytes [ 252.903091][T17204] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.128093][T17204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.234576][T17204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.267267][T17204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.269108][ T987] lo speed is unknown, defaulting to 1000 [ 253.269145][ T987] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 253.603224][T17231] ip6gre1: entered allmulticast mode [ 254.378089][T17268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.464899][T17272] openvswitch: netlink: Multiple metadata blocks provided [ 255.348132][T17306] xt_l2tp: invalid flags combination: 8 [ 255.486478][T17314] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 255.504101][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5598'. [ 255.578641][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.578689][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.202933][T17355] netlink: 'syz.0.5615': attribute type 1 has an invalid length. [ 256.202955][T17355] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5615'. [ 256.758091][T17373] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.135695][T17397] ip_tables: iptables: counters copy to user failed while replacing table [ 257.182661][T17401] SET target dimension over the limit! [ 257.419016][T17414] Driver unsupported XDP return value 0 on prog (id 401) dev N/A, expect packet loss! [ 257.655578][T17426] x_tables: unsorted underflow at hook 4 [ 257.729363][T17431] netlink: 'syz.1.5651': attribute type 2 has an invalid length. [ 257.870137][T17431] : entered promiscuous mode [ 257.954661][T17441] vcan0: entered allmulticast mode [ 258.044803][T17445] veth3: entered allmulticast mode [ 258.212180][T17451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.529326][T17471] Bluetooth: MGMT ver 1.23 [ 258.529365][T17471] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 258.557187][T17472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.924162][T17490] Bluetooth: hci0: unsupported parameter 5135 [ 258.924184][T17490] Bluetooth: hci0: unsupported parameter 8192 [ 258.924200][T17490] Bluetooth: hci0: unsupported parameter 5135 [ 258.924211][T17490] Bluetooth: hci0: unsupported parameter 8192 [ 259.318015][T17507] netlink: 'syz.4.5689': attribute type 1 has an invalid length. [ 259.318047][T17507] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5689'. [ 259.318061][T17507] netlink: 'syz.4.5689': attribute type 1 has an invalid length. [ 259.424244][T17512] wireguard: wg2: Could not create IPv4 socket [ 259.543587][T17514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5692'. [ 259.602087][T17521] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5695'. [ 259.710872][T17520] IPVS: Scheduler module ip_vs_mh not found [ 260.136147][T17536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5703'. [ 260.267569][T17541] vlan1: entered promiscuous mode [ 260.267591][T17541] geneve1: entered promiscuous mode [ 260.268636][T17541] vlan1: entered allmulticast mode [ 260.268650][T17541] geneve1: entered allmulticast mode [ 261.040960][T17566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 261.746647][T17598] batadv0: entered promiscuous mode [ 261.746967][T17598] macsec1: entered promiscuous mode [ 261.771100][T17598] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 261.791114][T17598] batadv0: left promiscuous mode [ 262.447141][T17626] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5740'. [ 262.449450][T17626] Zero length message leads to an empty skb [ 262.599220][T17631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.441732][T17749] ip_tables: iptables: counters copy to user failed while replacing table [ 265.625266][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5800'. [ 266.244496][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5807'. [ 267.567173][T17835] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5835'. [ 267.624745][ T84] IPVS: starting estimator thread 0... [ 267.681337][T17841] tipc: Started in network mode [ 267.681370][T17841] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 267.681420][T17841] tipc: Enabling of bearer rejected, failed to enable media [ 267.716726][T17837] IPVS: using max 37 ests per chain, 88800 per kthread [ 268.612696][T17881] ip_tables: iptables: counters copy to user failed while replacing table [ 269.298893][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5868'. [ 269.298917][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5868'. [ 269.782965][T17921] netlink: 'syz.0.5876': attribute type 13 has an invalid length. [ 269.893053][T17931] netlink: 'syz.0.5881': attribute type 3 has an invalid length. [ 270.610375][T17963] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 270.851977][T17979] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 270.852012][T17979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.896444][T17980] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5903'. [ 271.193833][T17994] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 271.193854][T17994] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5910'. [ 271.578334][T18015] netlink: 'syz.0.5922': attribute type 1 has an invalid length. [ 271.636208][T18018] netlink: 'syz.1.5923': attribute type 9 has an invalid length. [ 272.245009][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5936'. [ 272.274543][T18048] Bluetooth: MGMT ver 1.23 [ 272.329669][T18051] netlink: 'syz.2.5941': attribute type 62 has an invalid length. [ 272.399052][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5942'. [ 273.222523][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5958'. [ 273.515448][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5964'. [ 274.822209][T18151] ip6gre1: entered allmulticast mode [ 274.838937][ T5761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.387757][T18172] netlink: 'syz.1.5999': attribute type 32 has an invalid length. [ 275.387780][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5999'. [ 275.444255][T18172] bond2: Setting coupled_control to off (0) [ 275.921893][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6010'. [ 276.054815][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6014'. [ 276.594891][T18213] A link change request failed with some changes committed already. Interface 1¾x9ÿ may have been left with an inconsistent configuration, please check. [ 277.009162][T18241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.085599][T18247] ip_tables: iptables: counters copy to user failed while replacing table [ 277.152805][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 277.704864][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6049'. [ 277.704902][T18274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.249897][T18299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.254919][T18301] netlink: 'syz.0.6059': attribute type 9 has an invalid length. [ 278.254939][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6059'. [ 278.287104][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6058'. [ 278.937215][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.992175][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 278.993637][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.994182][T18336] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6078'. [ 279.499492][T18354] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6084'. [ 280.125622][T18376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6093'. [ 280.158468][T18379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.425174][T18387] ip_tables: iptables: counters copy to user failed while replacing table [ 280.657210][T18399] netlink: 'syz.0.6105': attribute type 1 has an invalid length. [ 280.657233][T18399] netlink: 'syz.0.6105': attribute type 2 has an invalid length. [ 280.657245][T18399] netlink: 'syz.0.6105': attribute type 3 has an invalid length. [ 280.972580][T18415] ip_tables: iptables: counters copy to user failed while replacing table [ 281.123048][T18425] xt_IDLETIMER: label is empty or not nul-terminated [ 281.125103][T18424] __nla_validate_parse: 1 callbacks suppressed [ 281.125120][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6118'. [ 281.125217][T18424] netlink: Unknown conntrack attr (type=1030, max=9) [ 281.944868][T18445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6127'. [ 282.645810][T18479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6143'. [ 283.194552][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6157'. [ 283.194599][T18508] block nbd0: not configured, cannot reconfigure [ 283.335196][T18515] netlink: 'syz.2.6160': attribute type 1 has an invalid length. [ 283.335218][T18515] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.6160'. [ 284.622568][T18563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6185'. [ 285.102023][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6195'. [ 285.361933][T18598] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6202'. [ 285.772622][T18614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6209'. [ 286.155748][T18626] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6215'. [ 286.257977][T18634] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6219'. [ 287.130154][T18671] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6237'. [ 287.576035][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.638958][T18697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6249'. [ 287.751090][T18703] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.6254'. [ 287.751209][T18703] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 287.783203][T18703] 0ªX¹¦Dö»: entered allmulticast mode [ 287.813020][T18704] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6251'. [ 287.961997][T18711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6258'. [ 288.022812][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6255'. [ 288.227047][T18722] macvtap1: entered promiscuous mode [ 288.227295][T18722] macvtap1: entered allmulticast mode [ 288.227309][T18722] veth1_vlan: entered allmulticast mode [ 288.355179][T18730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.469103][T18734] ip_tables: iptables: counters copy to user failed while replacing table [ 288.819860][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6277'. [ 289.023269][T18765] netlink: 'syz.2.6281': attribute type 1 has an invalid length. [ 289.023291][T18765] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6281'. [ 289.023306][T18765] netlink: 'syz.2.6281': attribute type 1 has an invalid length. [ 290.423938][T18819] sit2: entered promiscuous mode [ 290.423965][T18819] sit2: entered allmulticast mode [ 290.489392][T18821] netlink: zone id is out of range [ 290.489410][T18821] netlink: zone id is out of range [ 290.508768][T18821] netlink: zone id is out of range [ 290.896158][T18837] netlink: 'syz.4.6317': attribute type 8 has an invalid length. [ 291.026783][T18837] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.027976][T18837] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.003387][T18886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.060323][T18887] __nla_validate_parse: 6 callbacks suppressed [ 292.060344][T18887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6341'. [ 292.230481][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6345'. [ 292.621778][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6351'. [ 292.621811][T18910] netlink: 'syz.2.6351': attribute type 5 has an invalid length. [ 292.621825][T18910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6351'. [ 292.883583][T18918] Bluetooth: hci0: unsupported parameter 5135 [ 292.883606][T18918] Bluetooth: hci0: unsupported parameter 8192 [ 292.883618][T18918] Bluetooth: hci0: unsupported parameter 5135 [ 292.883629][T18918] Bluetooth: hci0: unsupported parameter 8192 [ 292.905923][ T31] audit: type=1800 audit(1790710782.074:3): pid=18920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6356" name="memory.events" dev="tmpfs" ino=6466 res=0 errno=0 [ 292.905979][ T31] audit: type=1804 audit(1790710782.084:4): pid=18920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6356" name="/newroot/1288/memory.events" dev="tmpfs" ino=6466 res=1 errno=0 [ 293.128293][T18923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6358'. [ 293.170611][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6360'. [ 293.405922][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6365'. [ 293.474691][T18940] lo: entered promiscuous mode [ 293.475102][T18940] lo: left promiscuous mode [ 293.579548][T18943] Bluetooth: hci0: unsupported parameter 5135 [ 293.579587][T18943] Bluetooth: hci0: unsupported parameter 8192 [ 293.579599][T18943] Bluetooth: hci0: unsupported parameter 5135 [ 293.579610][T18943] Bluetooth: hci0: unsupported parameter 8192 [ 294.426101][T18976] netlink: 'syz.4.6383': attribute type 2 has an invalid length. [ 294.446876][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6385'. [ 296.058076][T19044] sock: sock_timestamping_bind_phc: sock not bind to device [ 296.676152][T19068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6428'. [ 298.360477][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6460'. [ 298.360499][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6460'. [ 298.360522][T19132] netlink: 'syz.0.6460': attribute type 12 has an invalid length. [ 298.360534][T19132] netlink: 'syz.0.6460': attribute type 11 has an invalid length. [ 298.916914][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6475'. [ 299.230031][T19176] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6480'. [ 299.377697][ T5761] IPVS: starting estimator thread 0... [ 299.393427][T19182] IPVS: ip_vs_edit_dest(): server weight less than zero [ 299.465672][T19187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6486'. [ 299.478023][T19183] IPVS: using max 40 ests per chain, 96000 per kthread [ 299.478823][T19187] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6486'. [ 299.883087][T19204] ip_tables: iptables: counters copy to user failed while replacing table [ 300.148888][T19216] tipc: Started in network mode [ 300.148910][T19216] tipc: Node identity 2, cluster identity 4711 [ 300.148923][T19216] tipc: Node number set to 2 [ 300.427059][T19226] tipc: Enabling of bearer rejected, failed to enable media [ 300.875515][T19246] ip_tables: iptables: counters copy to user failed while replacing table [ 301.184109][T19265] netlink: 'syz.1.6523': attribute type 3 has an invalid length. [ 301.184131][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6523'. [ 301.511570][T19280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.571633][T19285] tipc: Enabling of bearer rejected, failed to enable media [ 301.624625][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6535'. [ 301.891543][T19299] netlink: 'syz.0.6539': attribute type 178 has an invalid length. [ 302.046496][T19308] netlink: 'syz.1.6544': attribute type 3 has an invalid length. [ 302.612770][T19330] Bluetooth: hci0: unsupported parameter 5134 [ 302.612793][T19330] Bluetooth: hci0: unsupported parameter 8192 [ 302.612805][T19330] Bluetooth: hci0: unsupported parameter 5134 [ 302.612815][T19330] Bluetooth: hci0: unsupported parameter 8192 [ 302.734215][T19339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6558'. [ 302.995106][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6564'. [ 303.215507][T19358] netlink: zone id is out of range [ 303.215526][T19358] netlink: zone id is out of range [ 303.215533][T19358] netlink: zone id is out of range [ 303.215540][T19358] netlink: zone id is out of range [ 303.215547][T19358] netlink: zone id is out of range [ 303.215554][T19358] netlink: zone id is out of range [ 303.215884][T19358] netlink: zone id is out of range [ 303.578706][T19379] __nla_validate_parse: 2 callbacks suppressed [ 303.578733][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6578'. [ 303.578795][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6578'. [ 303.862100][T19390] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6584'. [ 303.862126][T19390] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6584'. [ 303.862140][T19390] netlink: 'syz.4.6584': attribute type 6 has an invalid length. [ 303.862152][T19390] netlink: 'syz.4.6584': attribute type 5 has an invalid length. [ 303.862162][T19390] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6584'. [ 304.201876][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6591'. [ 304.201900][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6591'. [ 304.278103][T19411] tipc: Enabling of bearer rejected, failed to enable media [ 304.723408][T19429] smc: net device lo applied user defined pnetid SYZ0 [ 304.723531][T19429] smc: smcd device lo applied user defined pnetid SYZ0 [ 305.140855][T19445] vlan2: entered promiscuous mode [ 305.140876][T19445] bridge0: entered promiscuous mode [ 305.237909][T19451] net_ratelimit: 499 callbacks suppressed [ 305.237928][T19451] sock: sock_set_timeout: `syz.2.6612' (pid 19451) tries to set negative timeout [ 305.496108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.125718][T19479] Bluetooth: MGMT ver 1.23 [ 306.386465][T19492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6633'. [ 306.470218][T19496] atomic_op ffff88801fe989e0 conn xmit_atomic 0000000000000000 [ 306.989233][T19520] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6647'. [ 307.061159][T19522] netlink: 'syz.3.6649': attribute type 3 has an invalid length. [ 307.540962][T19546] Bluetooth: hci0: unsupported parameter 5135 [ 307.540987][T19546] Bluetooth: hci0: unsupported parameter 8192 [ 307.540998][T19546] Bluetooth: hci0: unsupported parameter 5135 [ 307.541010][T19546] Bluetooth: hci0: unsupported parameter 8192 [ 307.672426][T19551] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 307.953053][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6668'. [ 308.860728][T19605] ip_tables: iptables: counters copy to user failed while replacing table [ 309.040605][T19609] Bluetooth: hci0: unsupported parameter 5135 [ 309.040630][T19609] Bluetooth: hci0: unsupported parameter 8192 [ 309.040642][T19609] Bluetooth: hci0: unsupported parameter 5135 [ 309.040651][T19609] Bluetooth: hci0: unsupported parameter 8192 [ 309.382870][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6697'. [ 310.075731][T19650] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 310.075961][T19650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.330376][T19664] netlink: 'syz.4.6717': attribute type 49 has an invalid length. [ 310.564404][T19674] netlink: 'syz.2.6721': attribute type 1 has an invalid length. [ 310.757319][T19679] ip_tables: iptables: counters copy to user failed while replacing table [ 311.423154][T19706] netlink: Failed to add %pB helper -22 [ 311.423215][T19706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.493737][T19713] netlink: 'syz.4.6739': attribute type 3 has an invalid length. [ 311.509033][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6742'. [ 311.509065][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6742'. [ 311.703012][T19725] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6744'. [ 311.801899][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6749'. [ 311.854683][T19734] netlink: 'syz.4.6751': attribute type 11 has an invalid length. [ 312.123160][T19739] xt_CT: No such helper "snmp_trap" [ 312.882968][T19780] Bluetooth: hci0: unsupported parameter 5135 [ 312.882990][T19780] Bluetooth: hci0: unsupported parameter 8192 [ 312.883002][T19780] Bluetooth: hci0: unsupported parameter 5135 [ 312.883012][T19780] Bluetooth: hci0: unsupported parameter 8192 [ 314.253818][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6798'. [ 314.324752][ T60] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.327399][ T60] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.335055][ T4942] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.547450][ T5744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.687569][ T5744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 315.179003][T19877] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6818'. [ 315.784649][T19901] pimreg3: entered allmulticast mode [ 316.598262][T19936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6848'. [ 316.659124][T19936] vlan0: entered promiscuous mode [ 316.659146][T19936] 0ªX¹¦Dö»: entered promiscuous mode [ 316.761677][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6852'. [ 317.021946][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.022033][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.156640][T19953] tipc: MTU too low for tipc bearer [ 318.056235][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6874'. [ 318.056258][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6874'. [ 318.056300][T19992] netlink: 'syz.1.6874': attribute type 14 has an invalid length. [ 318.056312][T19992] netlink: 'syz.1.6874': attribute type 13 has an invalid length. [ 318.632616][T20013] netlink: 'syz.2.6884': attribute type 3 has an invalid length. [ 318.696186][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 318.703475][T20017] sctp: [Deprecated]: syz.4.6887 (pid 20017) Use of int in maxseg socket option. [ 318.703475][T20017] Use struct sctp_assoc_value instead [ 318.781421][T20021] netlink: 'syz.4.6888': attribute type 10 has an invalid length. [ 318.834389][T20023] netlink: 'syz.4.6890': attribute type 4 has an invalid length. [ 318.834410][T20023] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6890'. [ 320.085213][T20074] netlink: 'syz.0.6914': attribute type 1 has an invalid length. [ 320.085236][T20074] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6914'. [ 320.085250][T20074] netlink: 'syz.0.6914': attribute type 1 has an invalid length. [ 321.810082][T20153] smc: net device team0 applied user defined pnetid SYZ2 [ 322.651211][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6970'. [ 322.984141][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6977'. [ 322.984165][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6977'. [ 323.668070][T20229] netlink: 'syz.2.6987': attribute type 3 has an invalid length. [ 323.668093][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6987'. [ 323.699326][T20234] netlink: 'syz.3.6989': attribute type 2 has an invalid length. [ 323.699347][T20234] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6989'. [ 324.181589][T20251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6998'. [ 324.440818][T20261] vlan2: entered allmulticast mode [ 324.440841][T20261] bond0: entered allmulticast mode [ 324.440854][T20261] bond_slave_0: entered allmulticast mode [ 324.440870][T20261] bond_slave_1: entered allmulticast mode [ 324.756190][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7012'. [ 325.038212][T20293] netlink: 'syz.2.7018': attribute type 1 has an invalid length. [ 325.239164][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7021'. [ 325.300662][T20307] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 325.383551][T20310] vlan2: entered allmulticast mode [ 325.476636][T20315] netlink: 'syz.3.7024': attribute type 1 has an invalid length. [ 327.091905][T20363] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7050'. [ 327.091930][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'. [ 327.257449][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.845466][T20379] __nla_validate_parse: 3 callbacks suppressed [ 327.845489][T20379] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7058'. [ 327.845542][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7058'. [ 327.962018][T20388] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 328.893340][T20422] tipc: Enabling of bearer rejected, media not registered [ 329.104346][T20431] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7084'. [ 329.717299][T20456] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 330.043658][T20471] openvswitch: netlink: Missing valid actions attribute. [ 330.058857][T20472] ip_tables: iptables: counters copy to user failed while replacing table [ 330.259304][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7109'. [ 330.416463][T20487] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7111'. [ 330.604247][T20497] openvswitch: netlink: Missing key (keys=40, expected=100) [ 330.726331][T20501] ip_tables: iptables: counters copy to user failed while replacing table [ 331.212018][T20526] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7130'. [ 331.827018][T20549] netlink: 'syz.1.7141': attribute type 1 has an invalid length. [ 331.910370][T20555] Bluetooth: MGMT ver 1.23 [ 332.217275][T20571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7152'. [ 333.161647][T20614] Bluetooth: hci0: unsupported parameter 5135 [ 333.161670][T20614] Bluetooth: hci0: unsupported parameter 8192 [ 333.161681][T20614] Bluetooth: hci0: unsupported parameter 5135 [ 333.161714][T20614] Bluetooth: hci0: unsupported parameter 8192 [ 333.895807][T20647] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7190'. [ 333.895833][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7190'. [ 333.941088][T20651] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 334.283646][T20668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.822919][T20694] netlink: NAT attribute has 4 unknown bytes [ 334.822954][T20694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.362907][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7223'. [ 335.410027][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7226'. [ 336.524434][T20773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7251'. [ 336.524459][T20773] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7251'. [ 336.524473][T20773] netlink: 'syz.2.7251': attribute type 5 has an invalid length. [ 336.524484][T20773] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7251'. [ 336.849584][T20788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.271106][T20807] netlink: 'syz.3.7267': attribute type 58 has an invalid length. [ 337.271127][T20807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7267'. [ 337.430316][T20813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.474353][T20837] netlink: 'syz.0.7280': attribute type 3 has an invalid length. [ 338.474374][T20837] netlink: 'syz.0.7280': attribute type 1 has an invalid length. [ 338.474386][T20837] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7280'. [ 338.747978][T20848] netlink: 'syz.0.7285': attribute type 23 has an invalid length. [ 338.841816][T20854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.156340][T20865] netlink: 'syz.4.7296': attribute type 2 has an invalid length. [ 339.416072][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.828760][T20897] pim6reg527: entered allmulticast mode [ 339.962092][T20906] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7313'. [ 340.472507][T20931] netlink: 'syz.4.7327': attribute type 1 has an invalid length. [ 340.472531][T20931] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7327'. [ 340.472545][T20931] netlink: 'syz.4.7327': attribute type 1 has an invalid length. [ 340.489859][T20929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.665224][T20939] netlink: 'syz.4.7332': attribute type 1 has an invalid length. [ 340.665244][T20939] netlink: 'syz.4.7332': attribute type 3 has an invalid length. [ 340.665256][T20939] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7332'. [ 340.665286][T20939] NCSI netlink: No device for ifindex 813332851 [ 341.441169][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7345'. [ 341.441535][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7345'. [ 341.601441][T20978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.904670][T20996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7359'. [ 342.142939][T21005] netlink: 'syz.1.7363': attribute type 2 has an invalid length. [ 342.215232][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7368'. [ 342.493491][T21022] netlink: zone id is out of range [ 343.141270][T21055] xt_IDLETIMER: timeout value is too big [ 343.840562][T21084] SET target dimension over the limit! [ 344.809817][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7422'. [ 344.983554][T21134] ovs-s: entered promiscuous mode [ 345.013983][T21134] openvswitch: ovs-s: Dropping previously announced user features [ 345.176134][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.244794][T21146] xt_hashlimit: size too large, truncated to 1048576 [ 345.782666][T21169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7441'. [ 346.150966][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7444'. [ 346.542936][T21191] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 346.602974][T21196] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7455'. [ 346.685402][T21201] Bluetooth: hci0: unsupported parameter 5135 [ 346.685423][T21201] Bluetooth: hci0: unsupported parameter 8192 [ 346.685435][T21201] Bluetooth: hci0: unsupported parameter 5135 [ 346.685446][T21201] Bluetooth: hci0: unsupported parameter 8192 [ 347.285223][T21223] Bluetooth: hci0: unsupported parameter 5135 [ 347.285248][T21223] Bluetooth: hci0: unsupported parameter 8192 [ 347.285260][T21223] Bluetooth: hci0: unsupported parameter 5135 [ 347.285271][T21223] Bluetooth: hci0: unsupported parameter 8192 [ 347.844023][T21243] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7477'. [ 348.014403][T21252] nbd: must specify a device to reconfigure [ 348.077798][T21257] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 349.058639][T21308] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 349.123776][T21312] netlink: 'syz.1.7511': attribute type 2 has an invalid length. [ 350.371709][T21365] ip_tables: iptables: counters copy to user failed while replacing table [ 350.624519][T21375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7539'. [ 350.885614][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7544'. [ 350.982142][T21390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7549'. [ 351.509750][T21411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7558'. [ 351.559662][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7561'. [ 352.037343][T21439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7572'. [ 352.228245][T21445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7575'. [ 352.612757][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7584'. [ 352.876406][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7589'. [ 352.876429][T21475] bridge: RTM_NEWNEIGH with invalid ether address [ 353.125071][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7591'. [ 353.125122][T21483] block nbd0: Unsupported socket: should be TCP or UNIX. [ 353.170758][T21485] ip_tables: iptables: counters copy to user failed while replacing table [ 353.251447][T21489] netlink: 'syz.2.7595': attribute type 32 has an invalid length. [ 353.251469][T21489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7595'. [ 353.407708][T21489] bond3: option coupled_control: invalid value (192) [ 353.432583][T21489] bond3 (unregistering): Released all slaves [ 356.011145][T21612] ip_tables: iptables: counters copy to user failed while replacing table [ 356.262399][T21623] __nla_validate_parse: 7 callbacks suppressed [ 356.262450][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'. [ 356.296808][T21623] macsec1: entered promiscuous mode [ 356.296832][T21623] bridge0: entered promiscuous mode [ 356.297028][T21623] macsec1: entered allmulticast mode [ 356.297042][T21623] bridge0: entered allmulticast mode [ 356.298649][T21623] bridge0: port 3(macsec1) entered blocking state [ 356.298827][T21623] bridge0: port 3(macsec1) entered disabled state [ 356.314347][T21623] bridge0: left allmulticast mode [ 356.375128][ T5757] bridge0: left promiscuous mode [ 356.587612][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7669'. [ 357.289735][T21672] openvswitch: netlink: Unknown nsh attribute 0 [ 357.689571][T21687] tipc: Enabling of bearer rejected, failed to enable media [ 358.039241][T21704] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7699'. [ 358.299527][T21716] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 358.299563][T21716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.723859][T21739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7716'. [ 359.317867][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7731'. [ 359.317896][T21769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7731'. [ 359.317911][T21769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7731'. [ 359.392077][T21774] netlink: 'syz.1.7734': attribute type 2 has an invalid length. [ 360.257971][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7751'. [ 360.314345][T21820] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 360.314380][T21820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.532930][T21827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7756'. [ 360.584681][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7752'. [ 361.449684][T21868] __nla_validate_parse: 1 callbacks suppressed [ 361.449705][T21868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7772'. [ 361.450034][T21868] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 361.631233][T21875] netlink: 'syz.2.7775': attribute type 29 has an invalid length. [ 361.632832][T21875] netlink: 'syz.2.7775': attribute type 29 has an invalid length. [ 362.323895][T21907] raw_sendmsg: syz.1.7792 forgot to set AF_INET. Fix it! [ 362.601043][T21922] netlink: 'syz.2.7799': attribute type 4 has an invalid length. [ 362.631277][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7801'. [ 362.792822][T21930] netlink: 'syz.2.7806': attribute type 1 has an invalid length. [ 362.915223][T21937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7802'. [ 363.003109][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7808'. [ 363.914629][T21977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.031109][T21985] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 364.105079][T21987] nbd: couldn't find device at index 15663104 [ 364.372572][T22001] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 365.232096][T22040] netlink: 'syz.4.7855': attribute type 1 has an invalid length. [ 365.232119][T22040] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7855'. [ 365.232134][T22040] netlink: 'syz.4.7855': attribute type 1 has an invalid length. [ 367.373494][T22145] netlink: 'syz.4.7907': attribute type 4 has an invalid length. [ 367.373517][T22145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7907'. [ 367.699949][T22153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.967784][T22167] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 368.174914][T22174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7922'. [ 368.946888][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7939'. [ 369.081154][T22210] bond5: Invalid ad_actor_system MAC address. [ 369.081349][T22210] bond5: option ad_actor_system: invalid value (1) [ 369.107510][T22210] bond5 (unregistering): Released all slaves [ 369.198755][T22215] xfrm0: entered promiscuous mode [ 369.198932][T22215] team0: Device xfrm0 is of different type [ 369.468249][T22231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7947'. [ 369.468275][T22231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7947'. [ 370.240343][T22268] netlink: 'syz.4.7964': attribute type 1 has an invalid length. [ 370.240365][T22268] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7964'. [ 370.240379][T22268] netlink: 'syz.4.7964': attribute type 1 has an invalid length. [ 371.548017][T22312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7986'. [ 371.773397][T22323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7989'. [ 372.027224][T22335] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7998'. [ 372.028977][T22335] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7998'. [ 372.446636][T22353] ip_tables: iptables: counters copy to user failed while replacing table [ 372.589109][T22359] vlan1: entered allmulticast mode [ 372.589131][T22359] veth0_vlan: entered allmulticast mode [ 372.649084][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8010'. [ 372.688178][T22363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8011'. [ 372.742052][T22365] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 372.742596][T22365] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 374.155189][T22406] netlink: 'syz.2.8034': attribute type 1 has an invalid length. [ 374.686078][T22423] netlink: 'syz.3.8041': attribute type 1 has an invalid length. [ 375.007690][T22435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8046'. [ 375.007723][T22435] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 375.684836][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8060'. [ 375.701805][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8060'. [ 376.020832][T22478] netlink: 'syz.1.8068': attribute type 1 has an invalid length. [ 376.020853][T22478] netlink: 'syz.1.8068': attribute type 3 has an invalid length. [ 376.020865][T22478] netlink: 172 bytes leftover after parsing attributes in process `syz.1.8068'. [ 376.020970][T22478] NCSI netlink: No device for ifindex 813332851 [ 376.074898][ T31] audit: type=1107 audit(1790710865.254:5): pid=22480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 376.344615][T22495] netlink: 'syz.3.8072': attribute type 11 has an invalid length. [ 376.717422][T22511] netlink: 'syz.2.8084': attribute type 1 has an invalid length. [ 376.717461][T22511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.935739][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'. [ 377.159536][T22531] ip_tables: iptables: counters copy to user failed while replacing table [ 377.214103][T22536] netlink: 'syz.0.8096': attribute type 18 has an invalid length. [ 377.795577][T22561] openvswitch: netlink: Missing key (keys=40, expected=100) [ 377.995057][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8111'. [ 378.303913][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8119'. [ 378.303936][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8119'. [ 378.390144][T22589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8124'. [ 378.390167][T22589] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8124'. [ 378.390213][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8124'. [ 378.466379][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.507866][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8122'. [ 378.747213][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8129'. [ 379.033466][T22620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8136'. [ 379.095992][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.335248][T22633] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.735130][T22653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.829383][T22655] netlink: 'syz.4.8154': attribute type 3 has an invalid length. [ 379.829406][T22655] netlink: 'syz.4.8154': attribute type 1 has an invalid length. [ 379.829418][T22655] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8154'. [ 381.603992][T22741] netlink: 'syz.4.8196': attribute type 1 has an invalid length. [ 381.604016][T22741] nbd: error processing sock list [ 382.422050][T22768] tipc: Started in network mode [ 382.422081][T22768] tipc: Node identity ac141441, cluster identity 4711 [ 382.451050][T22768] tipc: Enabled bearer , priority 10 [ 383.039810][T22802] __nla_validate_parse: 5 callbacks suppressed [ 383.039836][T22802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8224'. [ 383.143932][T22806] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8227'. [ 383.387220][T22820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.539313][ T5757] tipc: Node number set to 2886997057 [ 383.982946][T22844] netlink: 'syz.0.8246': attribute type 7 has an invalid length. [ 384.167340][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8250'. [ 384.415081][T22866] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 385.001803][T22891] ip_tables: iptables: counters copy to user failed while replacing table [ 385.350533][T22911] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8279'. [ 386.502706][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8308'. [ 386.586976][T22972] openvswitch: netlink: Missing valid actions attribute. [ 386.587009][T22972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.912298][T22990] ip_tables: iptables: counters copy to user failed while replacing table [ 387.602851][T23018] netlink: 'syz.0.8331': attribute type 25 has an invalid length. [ 387.606793][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8332'. [ 388.018088][T23045] ip_tables: iptables: counters copy to user failed while replacing table [ 388.099079][T23048] ip_tables: iptables: counters copy to user failed while replacing table [ 388.196142][T23051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8348'. [ 388.197161][T23051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8348'. [ 388.971995][T23075] tipc: Enabled bearer , priority 11 [ 389.202376][T23081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8362'. [ 389.202401][T23081] tipc: Invalid UDP bearer configuration [ 389.202439][T23081] tipc: Enabling of bearer rejected, failed to enable media [ 389.708227][T23105] veth0_to_bond: entered allmulticast mode [ 390.716136][T23151] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.766666][T23156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.766684][T23156] IPv6: NLM_F_CREATE should be set when creating new route [ 390.766724][T23156] IPv6: NLM_F_CREATE should be set when creating new route [ 390.766749][T23156] IPv6: NLM_F_CREATE should be set when creating new route [ 390.767467][T23156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.057042][T23169] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8401'. [ 391.500547][T23192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8416'. [ 391.792631][T23204] tipc: Enabled bearer , priority 10 [ 392.108707][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8429'. [ 392.227396][T23225] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 392.406276][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8439'. [ 392.573512][T23243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.504935][T23279] netlink: 'syz.2.8460': attribute type 2 has an invalid length. [ 394.227026][T23310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8474'. [ 394.227077][T23310] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 394.428809][T23322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8479'. [ 394.947015][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8488'. [ 395.026700][T23339] ipvlan2: entered allmulticast mode [ 395.026723][T23339] syz_tun: entered allmulticast mode [ 396.639585][T23409] veth0: entered promiscuous mode [ 396.640484][T23409] veth0: left promiscuous mode [ 396.725298][T23412] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8523'. [ 396.725348][T23412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8523'. [ 396.725361][T23412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8523'. [ 397.981910][T23466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8546'. [ 398.755641][T23488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8559'. [ 399.054417][T23497] tap0: tun_chr_ioctl cmd 1074025672 [ 399.054439][T23497] tap0: ignored: set checksum disabled [ 399.507753][T23520] netlink: 'syz.4.8574': attribute type 10 has an invalid length. [ 399.556376][T23520] team0: Port device dummy0 added [ 399.575277][T23523] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8572'. [ 399.584971][T23518] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8572'. [ 400.000483][T23546] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.8583'. [ 400.260933][T23558] ip_tables: iptables: counters copy to user failed while replacing table [ 400.464281][T23566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8593'. [ 400.464386][T23566] nbd: couldn't find a device at index 65553 [ 400.800018][T23582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.101181][T23594] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8606'. [ 401.307279][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8610'. [ 401.307305][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8610'. [ 401.311615][T23604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8610'. [ 401.311637][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8610'. [ 401.982235][T23628] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8623'. [ 402.345581][T23644] wlan0 speed is unknown, defaulting to 1000 [ 402.374170][T23644] lo speed is unknown, defaulting to 1000 [ 402.398774][T23644] wg1 speed is unknown, defaulting to 1000 [ 403.706344][T23694] block nbd0: Unsupported socket: should be TCP or UNIX. [ 403.759388][T23695] h: entered promiscuous mode [ 404.001442][T23705] netlink: 'syz.3.8661': attribute type 11 has an invalid length. [ 404.630256][T23726] __nla_validate_parse: 6 callbacks suppressed [ 404.630277][T23726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8670'. [ 404.873005][T23733] netlink: 'syz.4.8674': attribute type 83 has an invalid length. [ 405.088570][T23735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8675'. [ 405.919209][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8693'. [ 405.919580][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8693'. [ 406.251149][T23789] openvswitch: netlink: IP tunnel dst address not specified [ 406.251184][T23789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.978955][T23818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8712'. [ 408.744256][T23907] netlink: 'syz.0.8752': attribute type 3 has an invalid length. [ 408.744278][T23907] netlink: 'syz.0.8752': attribute type 1 has an invalid length. [ 408.744291][T23907] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8752'. [ 408.745569][T23907] NCSI netlink: No device for ifindex 813332851 [ 409.176001][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.320136][T23930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8762'. [ 409.451730][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8766'. [ 409.707431][T23949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8770'. [ 409.916304][T23962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.970313][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8803'. [ 410.972722][T24013] hsr_slave_0: left promiscuous mode [ 410.974052][T24013] hsr_slave_1: left promiscuous mode [ 411.267816][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8806'. [ 413.039503][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8842'. [ 413.044329][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8842'. [ 413.044576][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8842'. [ 413.133329][T24096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8840'. [ 413.636485][T24126] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8855'. [ 414.043684][T24146] openvswitch: netlink: Unknown key attributes 1 [ 414.240641][T24158] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8871'. [ 415.005595][T24188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8885'. [ 415.597471][ T60] tipc: Subscription rejected, illegal request [ 415.756242][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8898'. [ 415.823454][T24219] veth0: entered promiscuous mode [ 415.827735][T24213] veth0: left promiscuous mode [ 415.952709][T24221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8902'. [ 415.996309][T24226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.098608][T24232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.639849][T24305] netlink: 'syz.0.8942': attribute type 1 has an invalid length. [ 417.639871][T24305] netlink: 'syz.0.8942': attribute type 3 has an invalid length. [ 417.639883][T24305] netlink: 'syz.0.8942': attribute type 7 has an invalid length. [ 417.639902][T24305] netlink: 'syz.0.8942': attribute type 8 has an invalid length. [ 417.639914][T24305] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8942'. [ 417.639928][T24305] NCSI netlink: No device for ifindex 131092 [ 417.733156][T24306] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8943'. [ 417.951120][T24316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8947'. [ 418.840372][T24354] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8966'. [ 418.986039][T24363] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8971'. [ 419.137902][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8972'. [ 419.168757][T24367] netlink: 'syz.3.8972': attribute type 1 has an invalid length. [ 419.168781][T24367] netlink: 'syz.3.8972': attribute type 2 has an invalid length. [ 419.258550][T24376] netlink: 'syz.1.8977': attribute type 83 has an invalid length. [ 419.346425][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8978'. [ 420.404819][T24429] __nla_validate_parse: 1 callbacks suppressed [ 420.404838][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9002'. [ 421.265302][T24469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9021'. [ 421.380065][T24472] sctp: [Deprecated]: syz.1.9023 (pid 24472) Use of int in max_burst socket option deprecated. [ 421.380065][T24472] Use struct sctp_assoc_value instead [ 421.796665][T24500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9035'. [ 422.103365][T24511] ip_tables: iptables: counters copy to user failed while replacing table [ 422.287532][T24518] IPv6: Can't replace route, no match found [ 422.287794][T24518] IPv6: Can't replace route, no match found [ 422.854193][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9057'. [ 422.909658][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9057'. [ 422.946142][T24550] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9058'. [ 423.249894][T24565] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9067'. [ 423.442182][T24571] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 423.731160][T24586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9075'. [ 424.014148][T24593] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.309374][T24602] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9082'. [ 424.455659][T24607] netlink: 'syz.0.9084': attribute type 3 has an invalid length. [ 424.857914][T24621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9092'. [ 426.050686][T24671] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 426.071432][T24671] bond0: left promiscuous mode [ 426.127739][T24671] vlan1: left promiscuous mode [ 426.127760][T24671] geneve1: left promiscuous mode [ 426.130802][T24671] h: left promiscuous mode [ 426.475511][T24685] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 426.851231][T24702] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 427.280815][T24726] __nla_validate_parse: 1 callbacks suppressed [ 427.280835][T24726] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9137'. [ 427.814545][T24754] netlink: 'syz.2.9151': attribute type 1 has an invalid length. [ 427.814567][T24754] netlink: 'syz.2.9151': attribute type 2 has an invalid length. [ 427.839281][T24754] netlink: 'syz.2.9151': attribute type 1 has an invalid length. [ 427.839301][T24754] netlink: 'syz.2.9151': attribute type 2 has an invalid length. [ 428.160805][T24770] netlink: 'syz.4.9158': attribute type 5 has an invalid length. [ 428.338368][T24778] netlink: 'syz.4.9161': attribute type 33 has an invalid length. [ 428.357846][T24773] bond5 (unregistering): Released all slaves [ 428.405312][T24775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9160'. [ 428.541567][T24778] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 428.630078][T24778] bond2 (unregistering): Released all slaves [ 428.963817][T24800] netlink: 'syz.0.9170': attribute type 83 has an invalid length. [ 429.043393][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9171'. [ 429.043428][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9171'. [ 429.317385][T24797] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.317532][T24797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.567934][T24797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.607031][T24797] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 429.827412][T24803] veth0_to_bond: left allmulticast mode [ 429.903812][T24803] 0·: left allmulticast mode [ 429.903838][T24803] hsr_slave_0: left allmulticast mode [ 429.903866][T24803] hsr_slave_1: left allmulticast mode [ 429.999646][T24803] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 430.018288][ T5744] wg1 speed is unknown, defaulting to 1000 [ 430.047060][T24820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9178'. [ 430.283868][T24832] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9181'. [ 430.301059][T24834] netlink: 'syz.1.9183': attribute type 1 has an invalid length. [ 430.301079][T24834] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.9183'. [ 430.301094][T24834] netlink: 'syz.1.9183': attribute type 1 has an invalid length. [ 430.301106][T24834] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.9183'. [ 430.656841][T24847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.995618][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9198'. [ 431.420904][T24888] netlink: 'syz.2.9210': attribute type 12 has an invalid length. [ 431.743600][T24903] ip_tables: iptables: counters copy to user failed while replacing table [ 431.905818][T24907] netlink: 'syz.3.9218': attribute type 2 has an invalid length. [ 431.905842][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9218'. [ 432.094623][T24917] wg2: Caught tx_queue_len zero misconfig [ 433.436698][T24965] __nla_validate_parse: 1 callbacks suppressed [ 433.436718][T24965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9244'. [ 433.965055][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9257'. [ 434.336924][T25012] ip_tables: iptables: counters copy to user failed while replacing table [ 434.864278][T25038] vxcan0: tx address claim with dest, not broadcast [ 435.438536][T25065] erspan0: entered promiscuous mode [ 435.758236][T25081] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9299'. [ 436.373296][T25108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9308'. [ 436.520292][T25118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9314'. [ 436.652473][T25123] netlink: 'syz.0.9318': attribute type 29 has an invalid length. [ 436.655892][T25123] netlink: 'syz.0.9318': attribute type 29 has an invalid length. [ 436.957567][T25133] macvtap0: entered allmulticast mode [ 436.957590][T25133] veth0_macvtap: entered allmulticast mode [ 437.274363][T25151] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 439.566905][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9374'. [ 439.899123][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.976484][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 442.448660][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9432'. [ 442.572564][T25392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9437'. [ 442.822479][T25404] blkio.reset_stats is deprecated [ 443.682301][T25443] netlink: 'syz.3.9461': attribute type 15 has an invalid length. [ 443.964723][T25458] openvswitch: netlink: EtherType 2 is less than min 600 [ 444.839951][T25502] ip_tables: iptables: counters copy to user failed while replacing table [ 445.913094][T25545] lo: Caught tx_queue_len zero misconfig [ 446.684316][T25585] tap0: tun_chr_ioctl cmd 1074025676 [ 446.684339][T25585] tap0: owner set to 0 [ 446.836490][T25593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9536'. [ 447.075443][T25605] openvswitch: netlink: IP tunnel TTL not specified. [ 447.075476][T25605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.404399][T25623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9548'. [ 447.404433][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9548'. [ 447.508886][T25626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9550'. [ 447.636534][T25622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9547'. [ 448.460947][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9569'. [ 448.810437][T25684] netlink: 'syz.1.9578': attribute type 3 has an invalid length. [ 448.810458][T25684] netlink: 'syz.1.9578': attribute type 2 has an invalid length. [ 448.963191][T25680] bond0: entered promiscuous mode [ 448.963214][T25680] bond_slave_0: entered promiscuous mode [ 448.963422][T25680] bond_slave_1: entered promiscuous mode [ 448.989049][T25680] bond0: left promiscuous mode [ 448.989069][T25680] bond_slave_0: left promiscuous mode [ 448.989264][T25680] bond_slave_1: left promiscuous mode [ 449.044088][T25692] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9582'. [ 449.044109][T25692] tipc: Invalid UDP bearer configuration [ 449.044147][T25692] tipc: Enabling of bearer rejected, failed to enable media [ 450.121826][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9609'. [ 450.136035][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.177399][T25746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.733491][T25772] openvswitch: netlink: IP tunnel dst address not specified [ 450.733519][T25772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.414061][T25805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9637'. [ 452.304177][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9653'. [ 452.563969][T25847] syz.0.9653 (25847) used greatest stack depth: 18088 bytes left [ 452.601033][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9656'. [ 452.715178][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9659'. [ 453.635600][T25901] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9680'. [ 453.635683][T25901] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 453.703701][T25905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9682'. [ 454.150966][T25928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9692'. [ 454.508450][T25946] netlink: 'syz.3.9700': attribute type 14 has an invalid length. [ 454.713038][T25953] ip6tnl0: Caught tx_queue_len zero misconfig [ 455.061372][T25966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 455.491189][T25983] netlink: 'syz.3.9719': attribute type 9 has an invalid length. [ 455.898859][T26005] veth1_to_bond: Caught tx_queue_len zero misconfig [ 456.679216][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9748'. [ 456.894409][T26051] veth0_to_bridge: entered promiscuous mode [ 456.908382][T26048] veth0_to_bridge: left promiscuous mode [ 457.629708][T26084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9768'. [ 457.629913][T26084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9768'. [ 457.629927][T26084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9768'. [ 458.737988][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9791'. [ 459.287434][T26161] netlink: 'syz.1.9806': attribute type 83 has an invalid length. [ 459.528513][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9811'. [ 459.554015][T26172] ip_tables: iptables: counters copy to user failed while replacing table [ 460.069498][T26193] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 460.924107][T26232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9837'. [ 460.924134][T26232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9837'. [ 461.093718][T26236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9840'. [ 461.093746][T26236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9840'. [ 461.172495][T26243] netlink: 31 bytes leftover after parsing attributes in process `syz.3.9842'. [ 461.321064][T26251] netlink: 'syz.4.9848': attribute type 11 has an invalid length. [ 461.733438][T26271] netlink: 'syz.4.9857': attribute type 10 has an invalid length. [ 461.744442][T26271] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.744566][T26271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.744912][T26271] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.745029][T26271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.784158][T26271] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 461.800990][T26274] bridge_slave_1: left promiscuous mode [ 461.803174][T26274] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.820503][T26274] bridge_slave_0: left allmulticast mode [ 461.820527][T26274] bridge_slave_0: left promiscuous mode [ 461.820746][T26274] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.992328][T26274] bond0: (slave bridge0): Releasing backup interface [ 462.301547][T26289] netlink: 'syz.0.9864': attribute type 83 has an invalid length. [ 462.348073][T26286] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 462.472486][T26296] xfrm2: entered promiscuous mode [ 462.472507][T26296] xfrm2: entered allmulticast mode [ 463.314860][T26334] openvswitch: netlink: Unknown key attributes 1 [ 463.527187][T26342] __nla_validate_parse: 11 callbacks suppressed [ 463.527214][T26342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9888'. [ 463.566772][T26342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9888'. [ 463.771149][T26354] bond0: Caught tx_queue_len zero misconfig [ 464.319212][T26380] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9907'. [ 464.324430][T26380] tipc: Disabling bearer [ 464.934514][T26408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9920'. [ 465.366306][T26420] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9927'. [ 465.803882][T26439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.804015][T26439] batadv_slave_0: entered promiscuous mode [ 466.289599][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9945'. [ 466.400486][T26465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9947'. [ 466.523590][T26473] ip_tables: iptables: counters copy to user failed while replacing table [ 466.802526][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9958'. [ 466.820094][T26486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9958'. [ 466.820129][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9958'. [ 467.244967][T26503] netlink: 'syz.1.9966': attribute type 4 has an invalid length. [ 467.329893][ T52] block nbd0: Receive control failed (result -32) [ 467.353943][T26507] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 467.354220][T26507] syzkaller1: linktype set to 823 [ 469.405495][T26588] __nla_validate_parse: 4 callbacks suppressed [ 469.405514][T26588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10006'. [ 469.426187][T26588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10006'. [ 470.380226][T26629] veth0: entered promiscuous mode [ 470.381575][T26628] veth0: left promiscuous mode [ 470.657844][T26641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10030'. [ 470.721866][T26645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10035'. [ 470.721922][T26645] nbd: socks must be embedded in a SOCK_ITEM attr [ 471.028173][T26658] openvswitch: netlink: Unknown key attributes 1 [ 471.648719][T26686] ip_tables: iptables: counters copy to user failed while replacing table [ 471.826479][T26691] sctp: [Deprecated]: syz.4.10055 (pid 26691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.826479][T26691] Use struct sctp_sack_info instead [ 471.888756][T26699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10054'. [ 472.046995][T26704] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10059'. [ 472.753812][T26731] xt_hashlimit: size too large, truncated to 1048576 [ 472.778373][T17603] wlan1: Trigger new scan to find an IBSS to join [ 472.844358][T26735] xt_hashlimit: size too large, truncated to 1048576 [ 473.964296][T26780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 475.014736][T26825] pimreg: entered allmulticast mode [ 475.060942][T26831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10119'. [ 475.061081][T26831] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10119'. [ 475.391765][T26844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10125'. [ 475.737450][ T13] wlan1: Trigger new scan to find an IBSS to join [ 476.112742][T26871] team0: Cannot enslave team device to itself [ 477.784248][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10167'. [ 478.489681][T26972] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10181'. [ 478.698029][ T60] wlan1: Creating new IBSS network, BSSID 02:b2:ce:90:c2:61 [ 478.971338][T26993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10192'. [ 479.464672][T27015] tipc: Enabled bearer , priority 10 [ 479.465747][T27015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10203'. [ 479.612534][T27023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10205'. [ 479.811502][T27030] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10207'. [ 480.332744][T27054] nbd1: detected capacity change from 0 to 63 [ 480.391621][ T52] block nbd1: Receive control failed (result -32) [ 480.419281][ T2165] block nbd1: Dead connection, failed to find a fallback [ 480.419309][ T2165] block nbd1: shutting down sockets [ 480.419417][ T2165] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.419519][ T2165] Buffer I/O error on dev nbd1, logical block 0, async page read [ 480.419939][ T2165] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.419964][ T2165] Buffer I/O error on dev nbd1, logical block 1, async page read [ 480.420803][ T2165] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.420829][ T2165] Buffer I/O error on dev nbd1, logical block 2, async page read [ 480.420944][ T2165] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.420967][ T2165] Buffer I/O error on dev nbd1, logical block 3, async page read [ 480.421220][ T2165] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.421243][ T2165] Buffer I/O error on dev nbd1, logical block 0, async page read [ 480.421342][ T2165] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.421365][ T2165] Buffer I/O error on dev nbd1, logical block 1, async page read [ 480.421459][ T2165] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.421480][ T2165] Buffer I/O error on dev nbd1, logical block 2, async page read [ 480.421573][ T2165] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.421592][ T2165] Buffer I/O error on dev nbd1, logical block 3, async page read [ 480.421695][ T2165] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.421716][ T2165] Buffer I/O error on dev nbd1, logical block 0, async page read [ 480.435331][ T2165] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 480.435358][ T2165] Buffer I/O error on dev nbd1, logical block 1, async page read [ 480.449867][T27058] ldm_validate_partition_table(): Disk read failed. [ 480.467774][T27058] Dev nbd1: unable to read RDB block 0 [ 480.520433][T27058] nbd1: unable to read partition table [ 480.638864][T27058] ldm_validate_partition_table(): Disk read failed. [ 480.642374][T27058] Dev nbd1: unable to read RDB block 0 [ 480.643724][T27058] nbd1: unable to read partition table [ 480.776576][T27066] netlink: 84 bytes leftover after parsing attributes in process `syz.4.10227'. [ 480.900934][T27072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10226'. [ 481.212188][T27085] netlink: 'syz.1.10234': attribute type 1 has an invalid length. [ 481.212210][T27085] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10234'. [ 481.212226][T27085] netlink: 'syz.1.10234': attribute type 2 has an invalid length. [ 481.212237][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10234'. [ 481.355623][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10240'. [ 481.439864][T27093] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 481.584063][T27099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10238'. [ 481.614519][T27099] ipvlan2: entered allmulticast mode [ 482.090831][T27124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10252'. [ 482.728002][T27156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.937054][T27167] ip_tables: iptables: counters copy to user failed while replacing table [ 483.365350][T27182] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10278'. [ 483.941767][T27207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10290'. [ 484.039062][T27207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.048255][T27207] bond0: (slave bond3): Enslaving as an active interface with an up link [ 484.595596][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10304'. [ 484.657219][ T52] block nbd2: Receive control failed (result -32) [ 485.404727][T27265] tun0: tun_chr_ioctl cmd 1074025675 [ 485.404749][T27265] tun0: persist enabled [ 485.471161][T27269] netlink: 'syz.1.10318': attribute type 3 has an invalid length. [ 486.214699][T27298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10333'. [ 486.503317][T27311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10339'. [ 486.734595][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10343'. [ 486.982729][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10350'. [ 487.457478][T27355] netlink: 'syz.2.10359': attribute type 1 has an invalid length. [ 487.457501][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10359'. [ 487.845351][T27376] veth0: mtu less than device minimum [ 488.167691][T27388] batadv_slave_1: entered allmulticast mode [ 488.168445][T27387] batadv_slave_1: left allmulticast mode [ 488.334117][T27394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10378'. [ 488.858452][T27420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10391'. [ 488.923711][T27420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10391'. [ 489.493951][T27449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10403'. [ 489.728266][T27461] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10404'. [ 489.894064][T27462] netlink: 'syz.4.10407': attribute type 5 has an invalid length. [ 490.153687][T27469] Bluetooth: hci1: too big key_count value 32778 [ 490.868239][T27495] netlink: 'syz.4.10423': attribute type 2 has an invalid length. [ 491.646090][T27517] batadv_slave_0: Caught tx_queue_len zero misconfig [ 492.186857][T27544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.187913][T27544] batadv_slave_1: entered promiscuous mode [ 492.795585][T27571] netlink: 'syz.3.10456': attribute type 30 has an invalid length. [ 493.090767][T27582] __nla_validate_parse: 1 callbacks suppressed [ 493.091415][T27582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10460'. [ 493.734612][T27601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10470'. [ 493.734833][T27601] bond_slave_1: entered allmulticast mode [ 493.922786][T27611] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10474'. [ 494.038053][T27618] ipvlan1: Caught tx_queue_len zero misconfig [ 494.368701][T27626] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.526270][T27640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10486'. [ 495.182928][T27665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10497'. [ 495.614671][T27684] bond0: option miimon: invalid value (18446744071829782528) [ 495.614696][T27684] bond0: option miimon: allowed values 0 - 2147483647 [ 496.134816][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10517'. [ 496.670753][T27732] netlink: 'syz.2.10528': attribute type 2 has an invalid length. [ 496.670776][T27732] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10528'. [ 496.916903][T27742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10535'. [ 496.916928][T27742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10535'. [ 497.093684][T27748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10537'. [ 497.364308][T27756] netlink: 'syz.3.10541': attribute type 1 has an invalid length. [ 497.676104][T27768] netlink: 'syz.2.10547': attribute type 83 has an invalid length. [ 498.807455][T27821] netlink: 'syz.2.10571': attribute type 6 has an invalid length. [ 499.138179][T27838] ip_tables: iptables: counters copy to user failed while replacing table [ 499.409423][T27841] IPVS: persistence engine module ip_vs_pe_À not found [ 499.648940][T27855] __nla_validate_parse: 4 callbacks suppressed [ 499.648960][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10587'. [ 500.141192][T27878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10597'. [ 500.164968][T27878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10597'. [ 500.490498][T27892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10605'. [ 500.538736][T27892] smc: removing net device team0 with user defined pnetid SYZ2 [ 500.552456][T27892] team_slave_0: left promiscuous mode [ 500.653183][T27892] team0 (unregistering): Port device team_slave_0 removed [ 500.655224][T27892] team_slave_1: left promiscuous mode [ 500.737918][T27892] team0 (unregistering): Port device team_slave_1 removed [ 500.829307][T27907] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 500.830024][T27907] netlink: 'syz.4.10612': attribute type 12 has an invalid length. [ 501.337538][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.894162][T27958] netlink: 'syz.0.10635': attribute type 2 has an invalid length. [ 502.447242][T27981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10646'. [ 503.019672][T28001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10656'. [ 503.021965][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10656'. [ 503.022005][T28001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10656'. [ 503.283140][T28006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10659'. [ 504.214901][T28048] netlink: 'syz.4.10679': attribute type 11 has an invalid length. [ 505.107889][T28086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10696'. [ 505.343277][T28093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 505.407039][T28097] veth1_macvtap: left promiscuous mode [ 505.734454][T28104] netlink: 'syz.4.10707': attribute type 83 has an invalid length. [ 506.173103][T28115] netlink: 'syz.4.10711': attribute type 10 has an invalid length. [ 506.174373][T28115] veth0_vlan: entered allmulticast mode [ 506.246192][T28118] netlink: 'syz.1.10713': attribute type 1 has an invalid length. [ 506.246213][T28118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10713'. [ 506.335868][T28115] team0: Device veth0_vlan failed to register rx_handler [ 506.445369][T28115] tipc: Resetting bearer [ 506.548202][T28119] gtp1: entered promiscuous mode [ 506.548401][T28119] gtp1: entered allmulticast mode [ 506.828607][T28125] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10714'. [ 508.707444][T28211] netlink: 'syz.1.10753': attribute type 2 has an invalid length. [ 509.364755][T28236] tap0: tun_chr_ioctl cmd 2148553947 [ 509.837333][T28259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10773'. [ 509.837355][T28259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10773'. [ 510.195011][T28277] veth0: entered promiscuous mode [ 510.195476][T28277] veth0: left promiscuous mode [ 510.339138][T28281] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 510.854720][T28308] tipc: Enabling of bearer rejected, already enabled [ 510.946805][ T1017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.449317][ T52] block nbd3: Receive control failed (result -32) [ 511.452393][T25178] block nbd3: Receive control failed (result -32) [ 515.548277][T28473] veth0_macvtap (unregistering): left allmulticast mode [ 515.720780][T28473] .`: (slave macsec0): Releasing backup interface [ 516.033607][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10874'. [ 516.281664][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10881'. [ 516.379388][T28513] netlink: 'syz.4.10885': attribute type 9 has an invalid length. [ 516.403686][T28511] netlink: 'syz.0.10883': attribute type 4 has an invalid length. [ 517.019827][T28543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10896'. [ 517.247339][T28554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10900'. [ 517.284509][T28554] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 517.300255][T28554] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 518.300696][T28595] team0: No ports can be present during mode change [ 518.484415][T28602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10923'. [ 518.645338][T28614] sctp: [Deprecated]: syz.1.10928 (pid 28614) Use of int in maxseg socket option. [ 518.645338][T28614] Use struct sctp_assoc_value instead [ 519.021068][T28628] netlink: 'syz.0.10936': attribute type 4 has an invalid length. [ 519.098581][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10939'. [ 519.120611][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10939'. [ 519.245657][T28637] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.10941'. [ 519.709326][T28658] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10949'. [ 520.362065][T28687] tipc: Started in network mode [ 520.362083][T28687] tipc: Node identity , cluster identity 4711 [ 520.362185][T28687] tipc: Failed to set node id, please configure manually [ 520.362229][T28687] tipc: Enabling of bearer rejected, failed to enable media [ 521.305216][T28728] netlink: 'syz.4.10984': attribute type 5 has an invalid length. [ 522.141819][T28756] netlink: 'syz.4.10995': attribute type 2 has an invalid length. [ 522.927151][T28790] netlink: 81 bytes leftover after parsing attributes in process `syz.1.11011'. [ 523.638432][T28810] netlink: 284 bytes leftover after parsing attributes in process `syz.0.11020'. [ 523.861227][T28821] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 524.006445][T28827] openvswitch: netlink: VLAN attribute unexpected. [ 524.096677][T28829] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 524.108196][T28829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.261645][ T31] audit: type=1804 audit(1790711013.444:6): pid=28834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11031" name="/newroot/2197/cgroup.controllers" dev="tmpfs" ino=11050 res=1 errno=0 [ 524.273563][ T31] audit: type=1800 audit(1790711013.454:7): pid=28834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11031" name="cgroup.controllers" dev="tmpfs" ino=11050 res=0 errno=0 [ 524.459028][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11035'. [ 524.615008][T28841] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 525.742200][T28894] netlink: 'syz.4.11058': attribute type 2 has an invalid length. [ 525.966682][T28902] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11062'. [ 525.966709][T28902] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11062'. [ 526.521940][T28923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11073'. [ 526.521970][T28923] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11073'. [ 526.681625][T28923] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11073'. [ 526.992904][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11076'. [ 527.219229][T28932] udevd[28932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 527.235163][T28932] udevd[28932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 527.383232][T28938] macvtap2: entered promiscuous mode [ 527.414287][T28938] macvtap2: entered allmulticast mode [ 527.414307][T28938] vlan0: entered allmulticast mode [ 527.414320][T28938] veth0_vlan: entered allmulticast mode [ 528.731563][T28993] : renamed from bond0 (while UP) [ 528.768226][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11100'. [ 528.768254][T28992] block nbd4: Unsupported socket: should be TCP or UNIX. [ 529.194454][T29011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11111'. [ 529.195184][T29011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11111'. [ 529.195205][T29011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11111'. [ 529.683822][T29031] netlink: 'syz.0.11121': attribute type 83 has an invalid length. [ 529.866056][T29033] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11122'. [ 530.238613][T29054] xt_hashlimit: size too large, truncated to 1048576 [ 530.492075][T29064] veth1_to_bond: entered allmulticast mode [ 530.492332][T29064] veth1_to_bond: left allmulticast mode [ 530.677491][T29070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11138'. [ 530.710766][T29070] bridge0: port 3(batadv1) entered blocking state [ 530.711048][T29070] bridge0: port 3(batadv1) entered disabled state [ 530.711217][T29070] batadv1: entered allmulticast mode [ 530.728084][T29070] batadv1: entered promiscuous mode [ 531.172247][T29084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.197278][T17603] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 531.197295][T17603] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 531.973950][T29119] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.005083][T29121] Cannot find set identified by id 4 to match [ 532.194249][T29127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11163'. [ 532.313082][T29131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11167'. [ 532.713777][T29148] veth0: Caught tx_queue_len zero misconfig [ 533.221842][T29165] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 533.221865][T29165] syzkaller1: group set to 0 [ 533.867220][T29198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11198'. [ 533.960342][T29200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11199'. [ 536.237584][T29270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11231'. [ 536.353935][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11232'. [ 536.787014][ T1017] bond0: (slave bond3): link status definitely down, disabling slave [ 537.142879][T29309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11250'. [ 537.412689][T29322] netlink: 'syz.2.11256': attribute type 17 has an invalid length. [ 537.412716][T29322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11256'. [ 537.412742][T29322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11256'. [ 537.555098][T29329] netlink: 'syz.0.11258': attribute type 17 has an invalid length. [ 537.555119][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11258'. [ 537.556993][T29329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11258'. [ 537.599917][T29329] gretap0: entered promiscuous mode [ 537.669650][T29329] gretap0: left promiscuous mode [ 539.328318][T29373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11280'. [ 539.933690][T29400] openvswitch: netlink: Missing valid actions attribute. [ 540.069388][T29406] siw: device registration error -23 [ 540.892239][T29446] vcan0: tx address claim with broadcast sa [ 541.099747][T29442] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 541.100192][T29442] gretap3: entered promiscuous mode [ 541.100207][T29442] gretap3: entered allmulticast mode [ 541.313147][T29452] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 541.895412][T29478] syzkaller1: entered promiscuous mode [ 541.895436][T29478] syzkaller1: entered allmulticast mode [ 542.366416][T29494] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 542.779171][T29513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11342'. [ 542.779193][T29513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11342'. [ 542.924161][T29521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.937930][ T84] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 543.275536][T29537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11353'. [ 544.400774][T29573] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.616159][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.656052][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.892804][T29597] syzkaller1: entered promiscuous mode [ 545.892826][T29597] syzkaller1: entered allmulticast mode [ 546.696117][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.071734][T29628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11392'. [ 547.736124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.887100][T29645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11400'. [ 548.776064][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.800536][T29685] syzkaller1: entered allmulticast mode [ 549.816007][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.759489][T29723] netlink: 'syz.4.11435': attribute type 5 has an invalid length. [ 550.759509][T29723] netlink: 'syz.4.11435': attribute type 9 has an invalid length. [ 550.759522][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11435'. [ 550.855975][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.923545][T29729] ªªªªª»: renamed from dummy0 (while UP) [ 551.589104][T29750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11447'. [ 551.595499][T25178] block nbd4: Receive control failed (result -107) [ 551.906213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 552.330959][T29755] IPVS: Scheduler module ip_vs_sip not found [ 552.546050][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.903964][T29779] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.936059][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.123075][T29791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11464'. [ 553.179655][T29792] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 553.986829][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.953546][T29837] netlink: 'syz.3.11480': attribute type 11 has an invalid length. [ 555.016326][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.118646][T29841] netlink: 'syz.2.11482': attribute type 39 has an invalid length. [ 556.056268][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.039530][T29886] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.096283][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.180842][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11492'. [ 557.234162][T29890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11492'. [ 557.447261][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11495'. [ 557.492761][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11495'. [ 557.783202][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11498'. [ 558.146174][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.176248][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.439696][T29951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11519'. [ 559.462142][T29951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11519'. [ 560.216208][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.004953][T29999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11537'. [ 561.116397][T30007] sctp: [Deprecated]: syz.4.11540 (pid 30007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.116397][T30007] Use struct sctp_sack_info instead [ 561.256077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.560352][T30019] ip_tables: iptables: counters copy to user failed while replacing table [ 562.132259][T30041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.248242][T30045] syzkaller1: entered promiscuous mode [ 562.248266][T30045] syzkaller1: entered allmulticast mode [ 562.296496][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.656713][T30054] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.782931][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.336557][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 563.687183][T30082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11573'. [ 563.775061][T30085] block nbd0: reconnected socket [ 563.777380][T25178] block nbd0: Receive control failed (result -107) [ 564.375895][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.933827][T30110] syzkaller1: entered promiscuous mode [ 564.934020][T30110] syzkaller1: entered allmulticast mode [ 565.416668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.560837][T30128] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11593'. [ 566.015142][T30142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11600'. [ 566.455904][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.364909][T30184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11619'. [ 567.364944][T30184] netlink: 'syz.2.11619': attribute type 7 has an invalid length. [ 567.364956][T30184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11619'. [ 567.495896][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.989106][T30202] [ 567.991483][T30202] ====================================================== [ 567.998527][T30202] WARNING: possible circular locking dependency detected [ 568.005672][T30202] syzkaller #0 Not tainted [ 568.010085][T30202] ------------------------------------------------------ [ 568.017136][T30202] syz.4.11627/30202 is trying to acquire lock: [ 568.023286][T30202] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 568.032625][T30202] [ 568.032625][T30202] but task is already holding lock: [ 568.039984][T30202] ffff888031a01d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 568.049524][T30202] [ 568.049524][T30202] which lock already depends on the new lock. [ 568.049524][T30202] [ 568.059935][T30202] [ 568.059935][T30202] the existing dependency chain (in reverse order) is: [ 568.068949][T30202] [ 568.068949][T30202] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 568.076625][T30202] __might_fault+0xcb/0x130 [ 568.081673][T30202] _copy_from_user+0x28/0xb0 [ 568.086915][T30202] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 568.093560][T30202] ip_generic_getfrag+0x149/0x2d0 [ 568.099178][T30202] __ip6_append_data+0x3b26/0x40c0 [ 568.104891][T30202] ip6_append_data+0x108/0x270 [ 568.110183][T30202] rawv6_sendmsg+0x1298/0x18c0 [ 568.115533][T30202] sock_sendmsg_nosec+0x10e/0x180 [ 568.121171][T30202] ____sys_sendmsg+0x54e/0x850 [ 568.126559][T30202] ___sys_sendmsg+0x2a5/0x360 [ 568.131768][T30202] __x64_sys_sendmsg+0x1b1/0x290 [ 568.137245][T30202] do_syscall_64+0x166/0x520 [ 568.142479][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.148939][T30202] [ 568.148939][T30202] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 568.156690][T30202] lock_sock_nested+0x41/0x100 [ 568.161989][T30202] inet_shutdown+0x6a/0x390 [ 568.167095][T30202] nbd_mark_nsock_dead+0x2cb/0x550 [ 568.172833][T30202] recv_work+0x1cee/0x1e10 [ 568.177789][T30202] process_scheduled_works+0xc3d/0x1630 [ 568.183915][T30202] worker_thread+0xa47/0xfb0 [ 568.189039][T30202] kthread+0x38b/0x480 [ 568.193636][T30202] ret_from_fork+0x514/0xb70 [ 568.198772][T30202] ret_from_fork_asm+0x1a/0x30 [ 568.204105][T30202] [ 568.204105][T30202] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 568.211764][T30202] __mutex_lock+0x19d/0x1550 [ 568.217034][T30202] nbd_queue_rq+0x373/0xff0 [ 568.222064][T30202] blk_mq_dispatch_rq_list+0x499/0x1990 [ 568.228197][T30202] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 568.235099][T30202] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 568.241602][T30202] blk_mq_run_work_fn+0x16c/0x300 [ 568.247161][T30202] process_scheduled_works+0xc3d/0x1630 [ 568.253233][T30202] worker_thread+0xa47/0xfb0 [ 568.258350][T30202] kthread+0x38b/0x480 [ 568.262939][T30202] ret_from_fork+0x514/0xb70 [ 568.268048][T30202] ret_from_fork_asm+0x1a/0x30 [ 568.273347][T30202] [ 568.273347][T30202] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 568.280566][T30202] __mutex_lock+0x19d/0x1550 [ 568.285688][T30202] nbd_queue_rq+0xc1/0xff0 [ 568.290630][T30202] blk_mq_dispatch_rq_list+0x499/0x1990 [ 568.296702][T30202] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 568.303559][T30202] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 568.310072][T30202] blk_mq_run_work_fn+0x16c/0x300 [ 568.315629][T30202] process_scheduled_works+0xc3d/0x1630 [ 568.321706][T30202] worker_thread+0xa47/0xfb0 [ 568.326827][T30202] kthread+0x38b/0x480 [ 568.331418][T30202] ret_from_fork+0x514/0xb70 [ 568.336528][T30202] ret_from_fork_asm+0x1a/0x30 [ 568.341824][T30202] [ 568.341824][T30202] -> #3 (set->srcu){.+.+}-{0:0}: [ 568.348954][T30202] __synchronize_srcu+0xc9/0x2f0 [ 568.354455][T30202] elevator_switch+0x1e8/0x7b0 [ 568.359816][T30202] elevator_change+0x2fa/0x480 [ 568.365109][T30202] elevator_set_default+0x375/0x440 [ 568.370840][T30202] blk_register_queue+0x3f3/0x4e0 [ 568.376453][T30202] __add_disk+0x6b8/0xdb0 [ 568.381309][T30202] add_disk_fwnode+0x100/0x3a0 [ 568.386599][T30202] nbd_dev_add+0x733/0xb60 [ 568.391535][T30202] nbd_init+0x168/0x1f0 [ 568.396341][T30202] do_one_initcall+0x250/0x870 [ 568.401634][T30202] do_initcall_level+0x10a/0x1a0 [ 568.407156][T30202] do_initcalls+0x59/0xa0 [ 568.412008][T30202] kernel_init_freeable+0x29d/0x3e0 [ 568.417728][T30202] kernel_init+0x22/0x1d0 [ 568.422582][T30202] ret_from_fork+0x514/0xb70 [ 568.427691][T30202] ret_from_fork_asm+0x1a/0x30 [ 568.432986][T30202] [ 568.432986][T30202] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 568.440812][T30202] __mutex_lock+0x19d/0x1550 [ 568.445933][T30202] elevator_change+0x1af/0x480 [ 568.451218][T30202] elevator_set_none+0xb5/0x140 [ 568.456587][T30202] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 568.462921][T30202] nbd_start_device+0x189/0xb30 [ 568.468292][T30202] nbd_genl_connect+0x167d/0x1cd0 [ 568.473836][T30202] genl_family_rcv_msg_doit+0x233/0x340 [ 568.480009][T30202] genl_rcv_msg+0x614/0x7a0 [ 568.485038][T30202] netlink_rcv_skb+0x226/0x4a0 [ 568.490379][T30202] genl_rcv+0x28/0x40 [ 568.494897][T30202] netlink_unicast+0x7bd/0x940 [ 568.500228][T30202] netlink_sendmsg+0x813/0xb40 [ 568.505528][T30202] sock_sendmsg_nosec+0x13a/0x180 [ 568.511084][T30202] ____sys_sendmsg+0x54e/0x850 [ 568.516380][T30202] ___sys_sendmsg+0x2a5/0x360 [ 568.521589][T30202] __x64_sys_sendmsg+0x1b1/0x290 [ 568.527055][T30202] do_syscall_64+0x166/0x520 [ 568.532179][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.538600][T30202] [ 568.538600][T30202] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 568.547244][T30202] blk_alloc_queue+0x544/0x690 [ 568.552531][T30202] __blk_mq_alloc_disk+0x194/0x390 [ 568.558170][T30202] nbd_dev_add+0x494/0xb60 [ 568.563109][T30202] nbd_init+0x168/0x1f0 [ 568.567793][T30202] do_one_initcall+0x250/0x870 [ 568.573087][T30202] do_initcall_level+0x10a/0x1a0 [ 568.578546][T30202] do_initcalls+0x59/0xa0 [ 568.583395][T30202] kernel_init_freeable+0x29d/0x3e0 [ 568.589121][T30202] kernel_init+0x22/0x1d0 [ 568.593977][T30202] ret_from_fork+0x514/0xb70 [ 568.599099][T30202] ret_from_fork_asm+0x1a/0x30 [ 568.604393][T30202] [ 568.604393][T30202] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 568.611612][T30202] __lock_acquire+0x164c/0x2de0 [ 568.617017][T30202] lock_acquire+0x115/0x350 [ 568.622044][T30202] fs_reclaim_acquire+0x71/0x100 [ 568.627501][T30202] prepare_alloc_pages+0x149/0x600 [ 568.633132][T30202] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 568.639463][T30202] alloc_pages_mpol+0x21e/0x390 [ 568.644853][T30202] alloc_pages_noprof+0xb1/0x2b0 [ 568.650327][T30202] pte_alloc_one+0x22/0x370 [ 568.655391][T30202] do_pte_missing+0x13c8/0x34b0 [ 568.660777][T30202] handle_mm_fault+0x1a53/0x3750 [ 568.666247][T30202] do_user_addr_fault+0x746/0x1340 [ 568.671898][T30202] exc_page_fault+0x6a/0xc0 [ 568.676930][T30202] asm_exc_page_fault+0x26/0x30 [ 568.682302][T30202] __get_user_4+0x14/0x30 [ 568.687154][T30202] ppp_ioctl+0x5f5/0x1c00 [ 568.692140][T30202] __se_sys_ioctl+0xfc/0x170 [ 568.697270][T30202] do_syscall_64+0x166/0x520 [ 568.702386][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.708799][T30202] [ 568.708799][T30202] other info that might help us debug this: [ 568.708799][T30202] [ 568.719028][T30202] Chain exists of: [ 568.719028][T30202] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 568.719028][T30202] [ 568.731754][T30202] Possible unsafe locking scenario: [ 568.731754][T30202] [ 568.739232][T30202] CPU0 CPU1 [ 568.744652][T30202] ---- ---- [ 568.750011][T30202] rlock(&mm->mmap_lock); [ 568.754431][T30202] lock(sk_lock-AF_INET6); [ 568.761454][T30202] lock(&mm->mmap_lock); [ 568.768304][T30202] lock(fs_reclaim); [ 568.772288][T30202] [ 568.772288][T30202] *** DEADLOCK *** [ 568.772288][T30202] [ 568.780494][T30202] locks held by syz.4.11627/30202: 2, last CPU#0: [ 568.786954][T30202] #0: ffffffff8fa0cc60 (ppp_mutex){+.+.}-{4:4}, at: ppp_ioctl+0xdf/0x1c00 [ 568.795608][T30202] #1: ffff888031a01d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 568.805549][T30202] [ 568.805549][T30202] stack backtrace: [ 568.811454][T30202] CPU: 0 UID: 0 PID: 30202 Comm: syz.4.11627 Not tainted syzkaller #0 PREEMPT(full) [ 568.820911][T30202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 568.830993][T30202] Call Trace: [ 568.834281][T30202] [ 568.837302][T30202] dump_stack_lvl+0xe8/0x150 [ 568.841965][T30202] print_circular_bug+0x2e2/0x300 [ 568.846992][T30202] check_noncircular+0x12f/0x150 [ 568.851926][T30202] __lock_acquire+0x164c/0x2de0 [ 568.856770][T30202] ? __lock_acquire+0x747/0x2de0 [ 568.861760][T30202] ? __lock_acquire+0x747/0x2de0 [ 568.866688][T30202] lock_acquire+0x115/0x350 [ 568.871190][T30202] ? prepare_alloc_pages+0x149/0x600 [ 568.876467][T30202] ? lock_acquire+0x115/0x350 [ 568.881133][T30202] fs_reclaim_acquire+0x71/0x100 [ 568.886061][T30202] ? prepare_alloc_pages+0x149/0x600 [ 568.891361][T30202] prepare_alloc_pages+0x149/0x600 [ 568.896483][T30202] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 568.902303][T30202] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.908640][T30202] ? __pfx_policy_nodemask+0x10/0x10 [ 568.913925][T30202] ? kernel_text_address+0xa5/0xe0 [ 568.919035][T30202] alloc_pages_mpol+0x21e/0x390 [ 568.923891][T30202] alloc_pages_noprof+0xb1/0x2b0 [ 568.928829][T30202] pte_alloc_one+0x22/0x370 [ 568.933327][T30202] do_pte_missing+0x13c8/0x34b0 [ 568.938174][T30202] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 568.944419][T30202] handle_mm_fault+0x1a53/0x3750 [ 568.949365][T30202] ? handle_mm_fault+0xf1/0x3750 [ 568.954313][T30202] ? __pfx_handle_mm_fault+0x10/0x10 [ 568.959602][T30202] ? __lock_acquire+0x747/0x2de0 [ 568.964534][T30202] ? lock_mm_and_find_vma+0xa7/0x340 [ 568.969823][T30202] do_user_addr_fault+0x746/0x1340 [ 568.974934][T30202] exc_page_fault+0x6a/0xc0 [ 568.979435][T30202] asm_exc_page_fault+0x26/0x30 [ 568.984276][T30202] RIP: 0010:__get_user_4+0x14/0x30 [ 568.989457][T30202] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 569.009093][T30202] RSP: 0018:ffffc90006c47d78 EFLAGS: 00050287 [ 569.015150][T30202] RAX: 000000110e22fff6 RBX: ffff888031f8cf80 RCX: 0000000000000046 [ 569.023112][T30202] RDX: 00007ffffffff000 RSI: ffffffff8e69f169 RDI: ffffffff8c6dac80 [ 569.031080][T30202] RBP: ffffc90006c47ea8 R08: ffffffff821ec27f R09: 0000000000000000 [ 569.039041][T30202] R10: 00000000c004743e R11: 0000000000000002 R12: 00000000c004743e [ 569.047006][T30202] R13: ffff888031f8d070 R14: ffff8880351c3a40 R15: 1ffff11006a38753 [ 569.054972][T30202] ? __might_fault+0xaf/0x130 [ 569.059657][T30202] ppp_ioctl+0x5f5/0x1c00 [ 569.063987][T30202] ? __pfx_ppp_ioctl+0x10/0x10 [ 569.068749][T30202] ? __fget_files+0x2a/0x420 [ 569.073361][T30202] ? __fget_files+0x3a2/0x420 [ 569.078030][T30202] ? __fget_files+0x2a/0x420 [ 569.082613][T30202] ? bpf_lsm_file_ioctl+0x9/0x20 [ 569.087576][T30202] ? __pfx_ppp_ioctl+0x10/0x10 [ 569.092337][T30202] __se_sys_ioctl+0xfc/0x170 [ 569.096921][T30202] do_syscall_64+0x166/0x520 [ 569.101508][T30202] ? trace_irq_disable+0x3b/0x140 [ 569.106557][T30202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.112614][T30202] ? clear_bhb_loop+0x70/0xc0 [ 569.117281][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.123176][T30202] RIP: 0033:0x7f3c1499e159 [ 569.127588][T30202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.147185][T30202] RSP: 002b:00007f3c1592d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.155593][T30202] RAX: ffffffffffffffda RBX: 00007f3c14c25fa0 RCX: 00007f3c1499e159 [ 569.163557][T30202] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 569.171520][T30202] RBP: 00007f3c14a3506b R08: 0000000000000000 R09: 0000000000000000 [ 569.179479][T30202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.187439][T30202] R13: 00007f3c14c26038 R14: 00007f3c14c25fa0 R15: 00007ffe274269d8 [ 569.195411][T30202] [ 569.200213][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.368793][T30206] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.403084][T30208] netlink: 'syz.1.11629': attribute type 16 has an invalid length. [ 569.403103][T30208] netlink: 'syz.1.11629': attribute type 17 has an invalid length. [ 569.612861][T30208] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.612966][T30208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.693925][T30208] batadv_slave_1: left promiscuous mode [ 569.695306][T30208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.752299][T30208] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 569.772732][T30208] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 569.773661][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.773725][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.216069][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.255876][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.295976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.335907][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.296155][T29867] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 574.375994][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.415891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.455968][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.495962][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available