last executing test programs: 4.296051218s ago: executing program 0 (id=11343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x70, 0x6001}, @void, @eth={@broadcast, @random="8cfb7fafe188", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x1c, 0x14, 0x64, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @multicast2}}}}}}, 0x26) 3.232228976s ago: executing program 0 (id=11354): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.622072792s ago: executing program 3 (id=11361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}]}, 0x24}}, 0x4800) 2.485510103s ago: executing program 3 (id=11365): socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 2.187231627s ago: executing program 0 (id=11369): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.174494501s ago: executing program 3 (id=11370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 2.065752778s ago: executing program 4 (id=11371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.920219855s ago: executing program 0 (id=11373): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="23f6", 0x5dc}], 0x2}, 0x20000810) 1.724583136s ago: executing program 3 (id=11375): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.657071533s ago: executing program 4 (id=11376): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(0x4) getsockname(r0, 0x0, 0x0) 1.596609544s ago: executing program 4 (id=11377): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000001c00000000000000bc26000000000000bf67000000000000070300000fff07006702000020000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040"], 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.499982345s ago: executing program 2 (id=11379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) close(0x4) 1.459198874s ago: executing program 4 (id=11380): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/148, 0x94}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.334421657s ago: executing program 3 (id=11381): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/194, 0xc2}], 0x1}, 0x10020) 1.274369227s ago: executing program 2 (id=11383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x6, 0x4, "d631f9fe"}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, 0x8) 1.204039572s ago: executing program 4 (id=11384): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x1c, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 1.134985335s ago: executing program 1 (id=11385): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x4, 0xfffb, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r0, 0x0, 0x0) 1.007806379s ago: executing program 1 (id=11386): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) 1.005739412s ago: executing program 2 (id=11387): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 817.535456ms ago: executing program 1 (id=11388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 702.347499ms ago: executing program 2 (id=11389): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000f80)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb", "9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c", "99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b829", {"099446c31273fd7ec60f852bdbf775ec", "59036644ec92021d72dd3dc6cd23008a"}}}}}}}, 0x0) 559.46177ms ago: executing program 1 (id=11390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010) 473.579585ms ago: executing program 3 (id=11391): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 380.553776ms ago: executing program 2 (id=11392): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) 344.949475ms ago: executing program 1 (id=11393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 337.857735ms ago: executing program 0 (id=11394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88) 175.22762ms ago: executing program 4 (id=11395): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) 59.126728ms ago: executing program 1 (id=11396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x28) 57.721069ms ago: executing program 0 (id=11397): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 0s ago: executing program 2 (id=11398): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) kernel console output (not intermixed with test programs): netlink: Message has 1 unknown bytes. [ 223.224769][T13695] netlink: NAT attribute has 1 unknown bytes [ 223.224806][T13695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.298248][T13700] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 224.297396][T13756] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3770'. [ 224.368410][T13760] dvmrp0: entered allmulticast mode [ 224.737754][T13782] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3782'. [ 224.738444][T13782] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3782'. [ 224.738470][T13782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3782'. [ 224.890075][T13789] netlink: 'syz.4.3787': attribute type 9 has an invalid length. [ 224.912445][T13792] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3791'. [ 225.362049][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3802'. [ 225.721451][T13844] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 225.851726][T13847] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 226.090792][T13864] ip_tables: iptables: counters copy to user failed while replacing table [ 226.322041][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 226.331300][T13877] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 226.497623][T13887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.498791][T13943] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 227.644014][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'. [ 227.722567][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3870'. [ 228.918379][T14027] netlink: 'syz.3.3898': attribute type 2 has an invalid length. [ 228.918399][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3898'. [ 229.131798][T14041] xt_recent: Unsupported userspace flags (000000b1) [ 229.223152][T14047] xt_NFQUEUE: number of total queues is 0 [ 229.272746][T14051] openvswitch: netlink: IP tunnel dst address not specified [ 229.538214][T14067] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3918'. [ 230.359021][T14115] netlink: Conntrack attr type has unexpected length (type=7, length=8, expected=0) [ 230.359064][T14115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.442657][T14117] netlink: 'syz.3.3944': attribute type 21 has an invalid length. [ 230.442682][T14117] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3944'. [ 230.442752][T14117] netlink: 'syz.3.3944': attribute type 5 has an invalid length. [ 230.442764][T14117] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3944'. [ 230.613768][T14129] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 230.843245][T14144] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3955'. [ 231.221793][T14166] netlink: 'syz.1.3967': attribute type 24 has an invalid length. [ 231.376480][T14178] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3973'. [ 231.521181][T14182] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 231.561270][T14188] xt_limit: Overflow, try lower: 536871034/0 [ 232.294913][T14230] netlink: 'syz.0.3999': attribute type 8 has an invalid length. [ 232.434107][T14239] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4003'. [ 232.901010][ T31] audit: type=1107 audit(1789976293.017:2): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 232.928795][T14271] nft_compat: unsupported protocol 0 [ 233.164909][T14276] netlink: 'syz.1.4022': attribute type 3 has an invalid length. [ 233.166903][T14278] vlan0: entered promiscuous mode [ 233.167089][T14278] vlan0: entered allmulticast mode [ 233.167102][T14278] veth0_vlan: entered allmulticast mode [ 233.258154][T14284] IPv6: sit1: Disabled Multicast RS [ 233.397178][T14292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'. [ 233.397217][T14292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'. [ 233.467141][T14296] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 233.662098][T14308] lo: left promiscuous mode [ 233.662287][T14308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.891235][T14323] netlink: 'syz.4.4044': attribute type 3 has an invalid length. [ 233.891258][T14323] netlink: 'syz.4.4044': attribute type 1 has an invalid length. [ 233.984353][T14327] netlink: 'syz.0.4047': attribute type 1 has an invalid length. [ 233.984378][T14327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4047'. [ 234.273219][T14345] Cannot find add_set index 2 as target [ 234.319684][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 234.319736][T14347] IPv6: Can't replace route, no match found [ 234.734590][T14369] xt_MASQUERADE: bad MAP_IPS. [ 234.824045][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 235.000107][T14388] netlink: 'syz.1.4078': attribute type 21 has an invalid length. [ 235.000183][T14388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4078'. [ 235.179503][T14393] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 235.220772][T14393] bond5 (unregistering): Released all slaves [ 235.270590][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4082'. [ 235.475466][T14418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4090'. [ 235.622109][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4092'. [ 235.768181][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4099'. [ 236.292919][T14466] openvswitch: netlink: IPv6 tunnel dst address is zero [ 236.740599][T14495] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 237.018371][T14509] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.448755][T14536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.736102][T14554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.908009][T14567] netlink: 'syz.2.4159': attribute type 11 has an invalid length. [ 238.099672][T14576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.213024][T14583] bridge3: entered promiscuous mode [ 238.213060][T14583] bridge3: entered allmulticast mode [ 238.272542][T14585] C: entered promiscuous mode [ 238.274448][T14585] gre0: entered promiscuous mode [ 238.301546][T14585] erspan0: entered promiscuous mode [ 238.316993][T14585] ip_vti0: entered promiscuous mode [ 238.967280][T14620] __nla_validate_parse: 2 callbacks suppressed [ 238.967303][T14620] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4188'. [ 239.037886][T14624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 239.233531][T14638] netlink: 'syz.0.4196': attribute type 7 has an invalid length. [ 239.233922][T14639] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4197'. [ 239.627913][T14661] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 240.519761][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 240.554093][T14717] wg1: entered promiscuous mode [ 240.559727][T14717] wg1: entered allmulticast mode [ 240.712003][T14723] hsr0: entered allmulticast mode [ 240.712029][T14723] hsr_slave_0: entered allmulticast mode [ 240.712044][T14723] hsr_slave_1: entered allmulticast mode [ 240.890490][T14731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.008018][T14739] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 241.008043][T14739] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 242.090770][T14797] netlink: 'syz.0.4268': attribute type 1 has an invalid length. [ 242.090795][T14797] netlink: 'syz.0.4268': attribute type 2 has an invalid length. [ 242.090806][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4268'. [ 242.637246][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4277'. [ 242.637275][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4277'. [ 242.830682][T14833] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.830779][T14833] gretap1: entered promiscuous mode [ 242.830794][T14833] gretap1: entered allmulticast mode [ 242.957353][T14836] netlink: 'syz.4.4284': attribute type 21 has an invalid length. [ 242.957457][T14836] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4284'. [ 243.003300][T14843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4285'. [ 243.053937][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 243.563979][T14868] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 243.564019][T14868] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 243.564044][T14868] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 243.887667][T14892] netlink: 'syz.4.4307': attribute type 2 has an invalid length. [ 244.026863][T14899] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4311'. [ 244.540195][T14930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4322'. [ 244.540227][T14930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4322'. [ 244.557578][T14930] gretap2: entered promiscuous mode [ 244.557600][T14930] gretap2: entered allmulticast mode [ 245.745140][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 245.823714][T15008] x_tables: duplicate entry at hook 1 [ 245.873297][T15011] openvswitch: netlink: Duplicate or invalid key (type 0). [ 245.985300][T15018] xt_esp: unknown flags DD [ 246.004743][T15021] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 246.004761][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'. [ 246.004781][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'. [ 246.145701][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'. [ 246.278163][T15039] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4371'. [ 246.351429][T15035] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 246.354290][T15035] bond7 (unregistering): Released all slaves [ 247.030398][T15077] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4384'. [ 247.537236][T15110] openvswitch: netlink: ct_state flags ffffffff unsupported [ 248.354014][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4416'. [ 248.354051][T15157] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 248.354565][T15158] bond0: Error: CAN devices cannot be enslaved [ 248.474885][T15165] Cannot find del_set index 4 as target [ 248.507385][T15163] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 248.853527][ T983] bond0: (slave bond_slave_0): interface is now down [ 248.853560][ T983] bond0: (slave bond_slave_1): interface is now down [ 249.138192][T15197] xt_CT: No such helper "netbios-ns" [ 249.259310][T15208] __nla_validate_parse: 1 callbacks suppressed [ 249.259334][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4436'. [ 249.259351][T15208] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4436'. [ 249.292668][T15211] netlink: 'syz.0.4438': attribute type 2 has an invalid length. [ 249.336408][T15213] dvmrp1: entered allmulticast mode [ 249.392523][T15171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.586832][T15222] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 249.586865][T15222] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 249.660940][T15224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.666321][T15230] openvswitch: netlink: Duplicate or invalid key (type 0). [ 249.825400][T15238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4450'. [ 249.825432][T15238] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 249.897927][T15243] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 249.915167][T15241] netlink: 'syz.2.4452': attribute type 1 has an invalid length. [ 249.915196][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4452'. [ 250.061516][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4455'. [ 250.607308][T15284] netlink: 'syz.0.4472': attribute type 1 has an invalid length. [ 250.772304][T15295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4479'. [ 250.858655][T15299] netlink: 'syz.3.4483': attribute type 8 has an invalid length. [ 251.122025][T15314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4488'. [ 251.122051][T15314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4488'. [ 251.122064][T15314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4488'. [ 251.386258][ T1502] bond0: (slave bond_slave_0): interface is now down [ 251.386280][ T1502] bond0: (slave bond_slave_1): interface is now down [ 251.422836][ T1502] bond0: now running without any active interface! [ 251.427739][T15328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.152215][T15370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4516'. [ 252.210415][T15370] bond7 (unregistering): Released all slaves [ 252.556514][T15395] netlink: 'syz.1.4525': attribute type 2 has an invalid length. [ 252.556568][T15395] netlink: 'syz.1.4525': attribute type 2 has an invalid length. [ 252.903928][T15414] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 252.952706][T15421] netlink: 'syz.1.4540': attribute type 2 has an invalid length. [ 253.218368][T15436] netlink: 'syz.1.4547': attribute type 12 has an invalid length. [ 253.875536][T15472] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 254.716492][T15525] __nla_validate_parse: 5 callbacks suppressed [ 254.716510][T15525] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4592'. [ 255.053952][T15544] xt_l2tp: missing protocol rule (udp|l2tpip) [ 255.073640][T15546] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 255.613119][T15579] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4618'. [ 255.947155][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.148752][T15609] x_tables: duplicate entry at hook 3 [ 256.262836][T15618] netlink: 'syz.3.4639': attribute type 2 has an invalid length. [ 256.415240][T15622] set match dimension is over the limit! [ 256.520520][T15630] lo: entered promiscuous mode [ 256.522112][T15630] netlink: 'syz.2.4644': attribute type 2 has an invalid length. [ 256.522132][T15630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.891133][T15652] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 257.161069][T15620] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 257.284068][T15673] x_tables: duplicate underflow at hook 1 [ 257.489633][T15683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4668'. [ 257.705317][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4675'. [ 257.937200][T15716] ip6t_srh: unknown srh match flags 4000 [ 258.202570][T15731] netlink: 'syz.1.4693': attribute type 21 has an invalid length. [ 258.202625][T15731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4693'. [ 258.336955][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4697'. [ 258.576481][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.576552][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.586579][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.587522][T15748] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 258.587560][T15748] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 258.590247][T15748] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 258.623082][T15748] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 258.678470][T15748] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 258.786581][T15759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4708'. [ 258.792837][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.821981][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.849966][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.886080][T15748] wg0 speed is unknown, defaulting to 1000 [ 258.928306][T15748] wg0 speed is unknown, defaulting to 1000 [ 259.846309][T15812] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 259.846338][T15812] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 259.944028][T15822] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.050108][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4741'. [ 260.109455][T15833] openvswitch: netlink: Duplicate or invalid key (type 0). [ 260.458156][T15851] netlink: 'syz.2.4753': attribute type 11 has an invalid length. [ 260.458180][T15851] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.4753'. [ 260.648769][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4756'. [ 260.841546][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'. [ 260.913936][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4768'. [ 261.348022][T15900] xt_nfacct: accounting object `syz0' does not exist [ 261.378839][T15905] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 261.441472][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4779'. [ 261.573974][T15914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.859679][T15933] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4791'. [ 261.925140][T15935] netlink: 'syz.1.4792': attribute type 6 has an invalid length. [ 262.525330][T15969] netlink: 'syz.0.4808': attribute type 2 has an invalid length. [ 262.525372][T15969] netlink: 'syz.0.4808': attribute type 2 has an invalid length. [ 262.527754][T15970] : renamed from vlan1 [ 262.698640][T15974] netlink: 'syz.3.4811': attribute type 1 has an invalid length. [ 262.698661][T15974] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4811'. [ 262.741102][T15977] netlink: 'syz.4.4813': attribute type 23 has an invalid length. [ 263.041825][T15995] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4821'. [ 263.660163][T16030] Cannot find add_set index 65532 as target [ 263.745759][T16035] ip6t_srh: unknown srh invflags 4000 [ 263.933925][T16047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.081723][T16057] ip6t_rt: unknown flags 36 [ 264.083686][T16059] openvswitch: netlink: IPv4 tunnel dst address is zero [ 264.193183][T16064] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 264.344263][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4860'. [ 264.399076][T16077] netlink: 'syz.3.4862': attribute type 1 has an invalid length. [ 264.690148][T16094] netlink: 'syz.0.4870': attribute type 1 has an invalid length. [ 264.690168][T16094] netlink: 'syz.0.4870': attribute type 1 has an invalid length. [ 265.090448][T16118] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 265.093817][T16120] __nla_validate_parse: 4 callbacks suppressed [ 265.093832][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4883'. [ 265.093845][T16120] netlink: 'syz.1.4883': attribute type 1 has an invalid length. [ 265.178156][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4887'. [ 265.275255][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.275279][T16131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.279388][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.279407][T16131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.333136][T16134] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4891'. [ 265.582079][T16145] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 265.624183][T16151] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4898'. [ 265.989234][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4909'. [ 265.989289][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4909'. [ 266.326623][T16189] ipt_REJECT: TCP_RESET invalid for non-tcp [ 266.580996][T16203] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 266.602196][T16205] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 266.701105][T16213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.089274][T16234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4940'. [ 267.089314][T16234] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 267.231650][T16241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4946'. [ 267.290537][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4943'. [ 267.374291][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4949'. [ 267.579870][T16260] netlink: 'syz.0.4953': attribute type 30 has an invalid length. [ 267.676193][T16260] bond5: option arp_missed_max: invalid value (0) [ 267.676219][T16260] bond5: option arp_missed_max: allowed values 1 - 255 [ 267.687904][T16260] bond5 (unregistering): Released all slaves [ 268.362741][T16301] netlink: 'syz.1.4973': attribute type 2 has an invalid length. [ 268.491591][T16305] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 268.494107][T16305] bond5 (unregistering): Released all slaves [ 268.618991][T16315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.789361][T16326] xt_LOG: level 8 >= 8 [ 268.864334][T16332] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 269.345650][T16344] syz.2.4994 (16344) used greatest stack depth: 17856 bytes left [ 269.800622][T16387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.971740][T16397] netlink: 'syz.1.5020': attribute type 11 has an invalid length. [ 270.705871][T16445] netlink: Conntrack attr has 4 unknown bytes [ 270.705902][T16445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.014640][T16466] __nla_validate_parse: 1 callbacks suppressed [ 271.014659][T16466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5053'. [ 271.219110][T16477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5058'. [ 271.449082][T16494] netlink: 'syz.0.5068': attribute type 1 has an invalid length. [ 271.449102][T16494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5068'. [ 271.449116][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5068'. [ 271.600068][T16498] netlink: 'syz.1.5069': attribute type 64 has an invalid length. [ 271.679215][T16502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5072'. [ 272.242407][T16524] netlink: 'syz.1.5083': attribute type 29 has an invalid length. [ 272.672686][T16540] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.254567][T16575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5107'. [ 273.689696][T16603] ksmbd: Unknown IPC event: 1, ignore. [ 274.173885][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.702615][T16668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5148'. [ 275.360444][T16708] openvswitch: netlink: IP tunnel dst address not specified [ 275.444882][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5170'. [ 275.444902][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5170'. [ 275.448882][T16712] vlan0: entered promiscuous mode [ 275.776512][T16724] team0: entered promiscuous mode [ 276.389643][T16755] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5192'. [ 276.469307][T16758] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 276.497287][T16759] netlink: 'syz.1.5193': attribute type 2 has an invalid length. [ 276.748742][T16771] SET target dimension over the limit! [ 277.231438][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5212'. [ 277.290232][T16803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5216'. [ 277.366989][T16811] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 277.768483][T16831] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 277.768758][T16831] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 277.964290][T16843] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.964389][T16843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5231'. [ 278.133501][T16852] x_tables: unsorted underflow at hook 1 [ 278.257621][T16859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5240'. [ 278.568445][T16878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5249'. [ 278.674727][T16884] netlink: 'syz.4.5252': attribute type 1 has an invalid length. [ 278.889218][T16898] Bluetooth: MGMT ver 1.23 [ 278.889257][T16898] Bluetooth: hci0: unsupported parameter 5135 [ 278.889268][T16898] Bluetooth: hci0: unsupported parameter 8192 [ 278.889281][T16898] Bluetooth: hci0: unsupported parameter 5135 [ 278.889291][T16898] Bluetooth: hci0: unsupported parameter 8192 [ 278.968869][T16903] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.031936][T16904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5262'. [ 279.116301][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'. [ 279.165118][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5268'. [ 279.602534][T16943] Bluetooth: MGMT ver 1.23 [ 279.904072][T16959] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 279.984812][T16964] ip_tables: iptables: counters copy to user failed while replacing table [ 280.121933][T16976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.712355][T17008] ip_tables: iptables: counters copy to user failed while replacing table [ 280.790656][T17012] netlink: 'syz.0.5314': attribute type 9 has an invalid length. [ 280.916002][T17017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5316'. [ 281.319353][T17042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 281.369193][T17047] bridge_slave_1: default FDB implementation only supports local addresses [ 281.447425][T17052] IPVS: stopping master sync thread 16811 ... [ 281.738446][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5343'. [ 281.969745][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'. [ 282.564851][T17119] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 282.926793][T17137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5376'. [ 283.009510][T17143] tipc: MTU too low for tipc bearer [ 283.123190][T17149] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5384'. [ 283.123248][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'. [ 283.313807][T17157] ip6gre2: entered allmulticast mode [ 283.418383][T17167] pim6reg: entered allmulticast mode [ 283.699016][T17182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5398'. [ 283.994369][T17200] netlink: 'syz.4.5407': attribute type 33 has an invalid length. [ 284.057469][T17207] nbd: must specify an index to disconnect [ 284.553006][T17232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5422'. [ 284.806705][T17245] netlink: 'syz.1.5429': attribute type 1 has an invalid length. [ 284.898353][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 284.901113][T17253] ip_tables: iptables: counters copy to user failed while replacing table [ 285.356305][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5445'. [ 285.391325][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5446'. [ 285.831699][T17301] smbdirect: ib_dev[syz0] renamed to [syz2] [ 285.919753][T17308] block nbd0: Unsupported socket: should be TCP or UNIX. [ 287.299701][T17380] __nla_validate_parse: 5 callbacks suppressed [ 287.299719][T17380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5494'. [ 287.345778][T17380] vlan2: entered promiscuous mode [ 287.345799][T17380] bridge0: entered promiscuous mode [ 287.854637][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'. [ 287.854661][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'. [ 287.933734][T17414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5513'. [ 288.131389][T17424] Bluetooth: MGMT ver 1.23 [ 288.372749][T17438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5524'. [ 288.389828][T17440] netlink: zone id is out of range [ 288.389841][T17440] netlink: zone id is out of range [ 288.389976][T17440] netlink: zone id is out of range [ 289.199253][T17489] Zero length message leads to an empty skb [ 289.566615][T17511] netlink: 'syz.1.5560': attribute type 1 has an invalid length. [ 289.680615][T17518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.737592][T17523] netlink: 'syz.4.5567': attribute type 1 has an invalid length. [ 289.923514][T17532] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 289.923544][T17532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.319754][T17555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.547628][T17572] Bluetooth: hci0: unsupported parameter 5134 [ 290.547649][T17572] Bluetooth: hci0: unsupported parameter 8192 [ 290.547661][T17572] Bluetooth: hci0: unsupported parameter 5134 [ 290.547671][T17572] Bluetooth: hci0: unsupported parameter 8192 [ 290.712422][T17580] netlink: 'syz.3.5596': attribute type 25 has an invalid length. [ 290.927111][T17585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.095297][T17599] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 291.095330][T17599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.311187][T17617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.311204][T17617] IPv6: NLM_F_CREATE should be set when creating new route [ 291.311239][T17617] IPv6: NLM_F_CREATE should be set when creating new route [ 291.311260][T17617] IPv6: NLM_F_CREATE should be set when creating new route [ 291.311941][T17617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.117732][T17661] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.5633'. [ 292.117754][T17661] netlink: 'syz.3.5633': attribute type 1 has an invalid length. [ 292.453119][T17682] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5644'. [ 292.905056][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 293.019120][ T13] IPVS: starting estimator thread 0... [ 293.092954][T17718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5662'. [ 293.120997][ T5631] Bluetooth: hci4: unexpected event 0x0e length: 1 < 3 [ 293.170046][T17714] IPVS: Scheduler module ip_vs_mh not found [ 293.170094][T17715] IPVS: using max 35 ests per chain, 84000 per kthread [ 293.411543][T17739] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5670'. [ 293.703625][T17756] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5678'. [ 294.001990][T17772] netlink: 'syz.3.5686': attribute type 1 has an invalid length. [ 294.013566][T17774] netlink: 'syz.2.5687': attribute type 18 has an invalid length. [ 294.065250][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.065897][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.067860][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.067904][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.370062][T17785] netlink: 'syz.4.5692': attribute type 4 has an invalid length. [ 294.370088][T17785] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5692'. [ 294.528649][T17792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5695'. [ 294.732911][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 294.753036][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 294.753424][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 294.809178][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 295.099516][T17821] tipc: Enabling of bearer rejected, failed to enable media [ 295.611128][T17847] tipc: Started in network mode [ 295.611152][T17847] tipc: Node identity , cluster identity 4711 [ 295.611168][T17847] tipc: Failed to set node id, please configure manually [ 295.611204][T17847] tipc: Enabling of bearer rejected, failed to enable media [ 296.431058][T17890] netlink: 'syz.2.5742': attribute type 29 has an invalid length. [ 296.434577][T17890] netlink: 'syz.2.5742': attribute type 29 has an invalid length. [ 296.716592][T17905] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.594618][T17955] __nla_validate_parse: 10 callbacks suppressed [ 297.594642][T17955] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5774'. [ 297.594663][T17955] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5774'. [ 297.628096][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.628326][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.655360][ T5624] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.791726][T17965] ip_tables: iptables: counters copy to user failed while replacing table [ 297.865311][ T5624] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.984766][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5784'. [ 298.135202][ T5624] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 298.512252][T18005] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5800'. [ 298.541631][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5799'. [ 298.541969][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5799'. [ 299.042647][T18030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5811'. [ 299.655718][T18063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5825'. [ 299.826769][T18070] netlink: 'syz.3.5830': attribute type 23 has an invalid length. [ 300.201550][T18090] dvmrp1: left allmulticast mode [ 300.241574][T18092] netlink: 'syz.4.5839': attribute type 62 has an invalid length. [ 300.864781][T18131] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 300.864804][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 300.871273][T18131] netlink: 'syz.3.5859': attribute type 29 has an invalid length. [ 300.871291][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 301.432078][T18167] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 301.923258][T18198] atomic_op ffff888031bc89e0 conn xmit_atomic 0000000000000000 [ 301.945130][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 302.513888][T18230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.830193][ T5734] wg0 speed is unknown, defaulting to 1000 [ 302.999898][T18256] __nla_validate_parse: 3 callbacks suppressed [ 302.999919][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5922'. [ 302.999950][T18256] netlink: 'syz.0.5922': attribute type 5 has an invalid length. [ 302.999964][T18256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5922'. [ 303.353191][T18278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5930'. [ 303.423662][T18282] openvswitch: netlink: Missing valid actions attribute. [ 303.465211][T18283] Bluetooth: hci0: unsupported parameter 5135 [ 303.465236][T18283] Bluetooth: hci0: unsupported parameter 8192 [ 303.465248][T18283] Bluetooth: hci0: unsupported parameter 5135 [ 303.465259][T18283] Bluetooth: hci0: unsupported parameter 8192 [ 303.554732][T18290] Bluetooth: hci0: unsupported parameter 5135 [ 303.554756][T18290] Bluetooth: hci0: unsupported parameter 8192 [ 303.554768][T18290] Bluetooth: hci0: unsupported parameter 5135 [ 303.554779][T18290] Bluetooth: hci0: unsupported parameter 8192 [ 303.838263][T18258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 304.019621][T18318] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.345744][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 304.631981][T18351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 305.521131][T18400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.827492][T18412] Driver unsupported XDP return value 0 on prog (id 412) dev N/A, expect packet loss! [ 306.528112][T18451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.743008][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6020'. [ 307.395981][T18505] IPVS: ip_vs_add_dest(): server weight less than zero [ 307.725988][T18526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6051'. [ 307.898405][T18530] nftables ruleset with unbound set [ 308.175844][T18549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6060'. [ 308.175878][T18549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6060'. [ 308.607223][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6074'. [ 308.889068][T18591] Bluetooth: hci0: unsupported parameter 5134 [ 308.889090][T18591] Bluetooth: hci0: unsupported parameter 8192 [ 308.889101][T18591] Bluetooth: hci0: unsupported parameter 5134 [ 308.889125][T18591] Bluetooth: hci0: unsupported parameter 8192 [ 309.642926][T18641] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6104'. [ 309.898792][T18657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6113'. [ 310.010652][T18663] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6115'. [ 310.027815][T18664] netlink: 'syz.0.6117': attribute type 2 has an invalid length. [ 310.036742][T18659] sit2: entered promiscuous mode [ 310.036761][T18659] sit2: entered allmulticast mode [ 310.046544][T18665] netlink: zone id is out of range [ 310.298054][T18673] tipc: Started in network mode [ 310.298082][T18673] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 310.322059][T18673] tipc: Enabled bearer , priority 10 [ 310.345159][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.696653][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6132'. [ 311.427401][ T5624] tipc: Node number set to 10136234 [ 311.621968][T18750] Bluetooth: hci0: unsupported parameter 5135 [ 311.621988][T18750] Bluetooth: hci0: unsupported parameter 8192 [ 311.621999][T18750] Bluetooth: hci0: unsupported parameter 5135 [ 311.622009][T18750] Bluetooth: hci0: unsupported parameter 8192 [ 311.808953][T18762] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6163'. [ 312.467106][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'. [ 312.467184][T18797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.673532][T18805] netlink: 'syz.0.6184': attribute type 1 has an invalid length. [ 312.767199][T18810] Bluetooth: hci0: unsupported parameter 5135 [ 312.767221][T18810] Bluetooth: hci0: unsupported parameter 8192 [ 312.767231][T18810] Bluetooth: hci0: unsupported parameter 5135 [ 312.767242][T18810] Bluetooth: hci0: unsupported parameter 8192 [ 313.557369][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6208'. [ 313.557391][T18852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6208'. [ 313.634002][T18858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6211'. [ 313.680105][T18862] veth0_to_bond: entered allmulticast mode [ 313.846835][T18870] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6217'. [ 313.966911][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6223'. [ 314.992377][T18928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.992411][T18928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.008729][T18930] tipc: Enabling of bearer rejected, failed to enable media [ 315.028902][T18939] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6251'. [ 315.086885][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6253'. [ 315.184528][T18928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.184562][T18928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.361568][T18928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.361603][T18928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.474563][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6262'. [ 315.536613][T18928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.536647][T18928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.940959][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.940994][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.995190][ T137] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.995224][ T137] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.995871][ T137] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.995895][ T137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.009331][ T988] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.009366][ T988] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.129539][T18990] netlink: 'syz.2.6275': attribute type 7 has an invalid length. [ 316.168479][T18992] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 316.634735][T19019] ip_tables: iptables: counters copy to user failed while replacing table [ 316.650182][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6289'. [ 316.882791][T19034] netlink: 'syz.3.6298': attribute type 49 has an invalid length. [ 317.394956][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467242][T19071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6316'. [ 318.249726][T19114] netlink: 'syz.0.6336': attribute type 1 has an invalid length. [ 318.442424][T19125] netlink: 'syz.4.6341': attribute type 4 has an invalid length. [ 318.447682][T19126] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 318.671033][T19137] netlink: 'syz.4.6348': attribute type 2 has an invalid length. [ 318.757154][T19145] ip_tables: iptables: counters copy to user failed while replacing table [ 318.777943][T19146] __nla_validate_parse: 5 callbacks suppressed [ 318.777962][T19146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6352'. [ 318.781216][T19146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6352'. [ 318.952135][T19156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6358'. [ 318.952165][T19156] block nbd0: not configured, cannot reconfigure [ 319.094303][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6361'. [ 319.200174][T19168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6363'. [ 319.797025][T19192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6375'. [ 320.109601][T19207] vlan2: entered allmulticast mode [ 320.109622][T19207] bond0: entered allmulticast mode [ 320.109634][T19207] bond_slave_0: entered allmulticast mode [ 320.109649][T19207] bond_slave_1: entered allmulticast mode [ 320.331839][T19218] openvswitch: netlink: Missing valid actions attribute. [ 320.331868][T19218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.690101][T19233] xt_hashlimit: size too large, truncated to 1048576 [ 320.872220][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6396'. [ 320.872257][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6396'. [ 321.259339][T19260] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6406'. [ 322.328392][T19323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6434'. [ 322.993493][T19362] netlink: 'syz.3.6453': attribute type 2 has an invalid length. [ 323.605203][T19400] netlink: 'syz.0.6471': attribute type 6 has an invalid length. [ 323.623422][T19401] netlink: 'syz.2.6472': attribute type 8 has an invalid length. [ 323.637100][T19401] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.638827][T19401] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.213483][T19433] __nla_validate_parse: 4 callbacks suppressed [ 324.213506][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6485'. [ 324.213519][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6485'. [ 324.379799][T19443] netlink: 'syz.1.6492': attribute type 1 has an invalid length. [ 324.379821][T19443] netlink: 'syz.1.6492': attribute type 3 has an invalid length. [ 324.379832][T19443] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6492'. [ 324.379846][T19443] NCSI netlink: No device for ifindex 813332851 [ 324.569405][T19452] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6495'. [ 324.989945][T19480] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6508'. [ 325.457560][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6519'. [ 325.457583][T19507] tipc: Invalid UDP bearer configuration [ 325.457619][T19507] tipc: Enabling of bearer rejected, failed to enable media [ 326.240362][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6541'. [ 326.955066][T19588] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 326.985316][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 327.732142][T19629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6581'. [ 328.083744][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6588'. [ 329.178925][T19708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.238293][T19710] netlink: 'syz.0.6621': attribute type 2 has an invalid length. [ 329.371633][T19715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.543828][T19726] Bluetooth: hci0: unsupported parameter 5135 [ 329.543849][T19726] Bluetooth: hci0: unsupported parameter 8192 [ 329.543860][T19726] Bluetooth: hci0: unsupported parameter 5135 [ 329.543871][T19726] Bluetooth: hci0: unsupported parameter 8192 [ 329.616707][T19731] netlink: 'syz.2.6627': attribute type 1 has an invalid length. [ 329.616727][T19731] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6627'. [ 330.691939][T19793] Bluetooth: hci0: unsupported parameter 5134 [ 330.691963][T19793] Bluetooth: hci0: unsupported parameter 8192 [ 330.691975][T19793] Bluetooth: hci0: unsupported parameter 5134 [ 330.691983][T19793] Bluetooth: hci0: unsupported parameter 8192 [ 331.029712][T19805] Bluetooth: MGMT ver 1.23 [ 331.366889][T19818] bridge_slave_1: default FDB implementation only supports local addresses [ 332.061913][T19854] macvlan0: entered promiscuous mode [ 332.172241][T19863] Bluetooth: hci0: unsupported parameter 5135 [ 332.172264][T19863] Bluetooth: hci0: unsupported parameter 8192 [ 332.172275][T19863] Bluetooth: hci0: unsupported parameter 5135 [ 332.172285][T19863] Bluetooth: hci0: unsupported parameter 8192 [ 332.262383][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6682'. [ 332.384620][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6681'. [ 332.631725][T19883] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 332.631756][T19883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.927106][T19898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.993010][T19905] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.6694'. [ 332.993033][T19905] netlink: 'syz.4.6694': attribute type 2 has an invalid length. [ 333.337844][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6705'. [ 333.620869][T19939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.620895][T19939] IPv6: NLM_F_CREATE should be set when creating new route [ 333.816720][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6721'. [ 333.933887][T19956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6726'. [ 333.971598][T19957] netlink: 'syz.1.6722': attribute type 2 has an invalid length. [ 334.051761][T19957] : entered promiscuous mode [ 334.543896][T19995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.830195][T20012] macvlan0: entered promiscuous mode [ 334.863947][T20014] tipc: Enabling of bearer rejected, failed to enable media [ 335.137968][T20029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6758'. [ 335.144770][T20026] vlan2: entered allmulticast mode [ 335.144795][T20026] bond0: entered allmulticast mode [ 335.144808][T20026] bond_slave_0: entered allmulticast mode [ 335.144824][T20026] bond_slave_1: entered allmulticast mode [ 335.322513][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6761'. [ 335.337845][T20038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6762'. [ 335.898987][T20068] netlink: 'syz.2.6777': attribute type 2 has an invalid length. [ 336.550424][T20106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6797'. [ 336.596334][T20101] veth7: entered allmulticast mode [ 336.829736][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6804'. [ 337.018251][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6807'. [ 337.018276][T20130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6807'. [ 337.553225][T20165] ip_tables: iptables: counters copy to user failed while replacing table [ 337.719335][ T31] audit: type=1107 audit(1789976397.837:3): pid=20170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 337.981325][T20188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6837'. [ 338.535253][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6849'. [ 338.535680][T20219] xt_cgroup: path and classid specified [ 338.589432][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6850'. [ 338.870992][T20237] tipc: Enabling of bearer rejected, failed to enable media [ 339.281414][T20253] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 339.290248][T20253] bond4 (unregistering): Released all slaves [ 340.014257][T20310] pim6reg: entered allmulticast mode [ 340.041539][T20310] pim6reg: left allmulticast mode [ 340.513718][T20337] __nla_validate_parse: 1 callbacks suppressed [ 340.513740][T20337] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6894'. [ 340.660114][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6899'. [ 340.759492][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 340.778215][T20350] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 340.779823][T20350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.843123][T20351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.943889][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6920'. [ 342.648458][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6931'. [ 342.660337][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6931'. [ 342.886222][T20449] netlink: 'syz.4.6937': attribute type 1 has an invalid length. [ 342.886242][T20449] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.6937'. [ 342.989223][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 343.078929][T20454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6939'. [ 343.253465][T20467] : entered allmulticast mode [ 343.823402][T20497] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 344.421475][T20533] nbd: must specify a device to reconfigure [ 344.860377][ T13] IPVS: starting estimator thread 0... [ 344.945144][T20562] IPVS: using max 31 ests per chain, 74400 per kthread [ 345.346361][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6993'. [ 345.891200][T20622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.436406][T20648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7020'. [ 346.701727][T20659] tipc: Enabling not permitted [ 346.701764][T20659] tipc: Enabling of bearer rejected, failed to enable media [ 347.489061][T20702] wireguard: wg2: Could not create IPv4 socket [ 347.533858][T20704] netlink: 'syz.4.7049': attribute type 58 has an invalid length. [ 347.533884][T20704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7049'. [ 347.897629][T20718] ovs-s: entered promiscuous mode [ 347.910798][T20720] openvswitch: ovs-s: Dropping previously announced user features [ 348.066084][T20732] Bluetooth: hci0: unsupported parameter 5135 [ 348.066104][T20732] Bluetooth: hci0: unsupported parameter 8192 [ 348.066116][T20732] Bluetooth: hci0: unsupported parameter 5135 [ 348.066125][T20732] Bluetooth: hci0: unsupported parameter 8192 [ 348.241368][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7068'. [ 348.325967][T20742] netlink: 'syz.1.7067': attribute type 3 has an invalid length. [ 348.325986][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7067'. [ 349.020062][T20786] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7089'. [ 349.020085][T20786] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7089'. [ 349.020098][T20786] netlink: 'syz.4.7089': attribute type 5 has an invalid length. [ 349.020108][T20786] netlink: 'syz.4.7089': attribute type 6 has an invalid length. [ 349.020119][T20786] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7089'. [ 350.017732][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7116'. [ 350.017755][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7116'. [ 350.036461][T20841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7115'. [ 350.856303][T20889] netlink: 'syz.0.7139': attribute type 4 has an invalid length. [ 351.529583][T20922] __nla_validate_parse: 2 callbacks suppressed [ 351.529632][T20922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7155'. [ 351.835476][T20937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.982150][T20947] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7170'. [ 352.669984][T20985] xt_IDLETIMER: label is empty or not nul-terminated [ 353.239792][T21016] netlink: Invalid conntrack helper [ 353.239827][T21016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.430928][T21024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7205'. [ 353.544869][T21024] bond4: Invalid ad_actor_system MAC address. [ 353.544892][T21024] bond4: option ad_actor_system: invalid value (1) [ 353.574657][T21024] bond4 (unregistering): Released all slaves [ 353.610750][T21033] Bluetooth: hci0: unsupported parameter 5135 [ 353.610775][T21033] Bluetooth: hci0: unsupported parameter 8192 [ 353.610809][T21033] Bluetooth: hci0: unsupported parameter 5135 [ 353.610822][T21033] Bluetooth: hci0: unsupported parameter 8192 [ 353.946922][T21049] sock: sock_timestamping_bind_phc: sock not bind to device [ 354.082128][T21057] netlink: 'syz.3.7221': attribute type 46 has an invalid length. [ 354.243512][T21065] netlink: 'syz.2.7224': attribute type 64 has an invalid length. [ 354.243538][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7224'. [ 354.584773][T21084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7236'. [ 354.700089][T21089] netlink: 'syz.0.7237': attribute type 3 has an invalid length. [ 355.312917][T21123] batadv0: entered promiscuous mode [ 355.343746][T21123] macsec1: entered promiscuous mode [ 355.355857][T21123] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 355.383043][T21123] batadv0: left promiscuous mode [ 355.532533][T21134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 356.296375][T21179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7282'. [ 358.164161][T21280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7332'. [ 358.282000][T21288] netlink: 'syz.3.7336': attribute type 1 has an invalid length. [ 358.282020][T21288] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7336'. [ 358.282181][T21288] netlink: 'syz.3.7336': attribute type 1 has an invalid length. [ 358.420619][T21294] netlink: 'syz.4.7341': attribute type 8 has an invalid length. [ 358.420639][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7341'. [ 358.420666][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7341'. [ 358.705251][T21310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7347'. [ 358.705272][T21310] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7347'. [ 358.705286][T21310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7347'. [ 358.985345][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 359.199104][T21336] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7359'. [ 359.199502][T21336] xt_policy: neither incoming nor outgoing policy selected [ 359.446657][T21350] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7366'. [ 359.446681][T21350] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7366'. [ 359.446694][T21350] netlink: 'syz.4.7366': attribute type 5 has an invalid length. [ 359.889033][T21375] macsec1: entered promiscuous mode [ 359.889239][T21375] macsec1: entered allmulticast mode [ 359.889252][T21375] bridge0: entered allmulticast mode [ 359.892996][T21375] bridge0: port 3(macsec1) entered blocking state [ 359.893173][T21375] bridge0: port 3(macsec1) entered disabled state [ 359.932852][T21375] bridge0: left allmulticast mode [ 360.054327][T21387] smc: net device lo applied user defined pnetid SYZ0 [ 360.054416][T21387] smc: smcd device lo applied user defined pnetid SYZ0 [ 361.190031][T21450] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 361.278303][T21455] xt_hashlimit: size too large, truncated to 1048576 [ 361.620584][T21473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.977902][T21492] Bluetooth: hci0: unsupported parameter 5134 [ 361.977923][T21492] Bluetooth: hci0: unsupported parameter 8192 [ 361.977935][T21492] Bluetooth: hci0: unsupported parameter 5134 [ 361.977945][T21492] Bluetooth: hci0: unsupported parameter 8192 [ 363.319597][T21576] __nla_validate_parse: 9 callbacks suppressed [ 363.319617][T21576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7475'. [ 363.829496][T21608] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 363.829530][T21608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.849918][T21611] openvswitch: netlink: Missing key (keys=40, expected=100) [ 364.684068][T21656] netlink: 'syz.0.7512': attribute type 1 has an invalid length. [ 364.760487][T21662] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 365.595446][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7538'. [ 366.193520][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7554'. [ 366.209998][T21748] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7555'. [ 366.277091][T21751] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 366.277762][T21751] team0: Device ipvlan2 is already an upper device of the team interface [ 366.611872][T21765] team0: Device veth1_macvtap failed to register rx_handler [ 367.199099][T21801] Bluetooth: hci0: unsupported parameter 5135 [ 367.199125][T21801] Bluetooth: hci0: unsupported parameter 8192 [ 367.199136][T21801] Bluetooth: hci0: unsupported parameter 5135 [ 367.199162][T21801] Bluetooth: hci0: unsupported parameter 8192 [ 368.334331][T21860] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7610'. [ 368.853346][T21885] netlink: 'syz.3.7621': attribute type 1 has an invalid length. [ 368.959191][T21888] tipc: Enabling of bearer rejected, media not registered [ 369.091070][T21896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7627'. [ 369.151883][T21901] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7631'. [ 369.195733][T21904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7632'. [ 369.224539][T21904] vlan2: entered promiscuous mode [ 369.577546][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7641'. [ 369.716193][T21930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7644'. [ 370.006294][T21948] ip_tables: iptables: counters copy to user failed while replacing table [ 370.025792][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7653'. [ 370.025829][T21949] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 370.684544][T21986] tipc: Enabled bearer , priority 11 [ 370.979168][T22005] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 370.979204][T22005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.148039][ T1502] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.151567][ T1419] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.151614][ T1419] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.151653][ T1419] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.259300][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7685'. [ 371.368542][T22028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7689'. [ 371.497773][T22033] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 371.956795][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7704'. [ 371.956835][T22061] netlink: 'syz.2.7704': attribute type 14 has an invalid length. [ 371.956851][T22061] netlink: 'syz.2.7704': attribute type 13 has an invalid length. [ 372.813945][T22109] netlink: Failed to add %pB helper -22 [ 372.813995][T22109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.490753][T22148] __nla_validate_parse: 2 callbacks suppressed [ 373.490773][T22148] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.7746'. [ 373.490969][T22148] 0XD: renamed from gretap0 (while UP) [ 373.494448][T22148] 0XD: entered allmulticast mode [ 373.884651][T22170] netlink: 'syz.2.7757': attribute type 3 has an invalid length. [ 375.319367][T22254] netlink: 'syz.3.7797': attribute type 11 has an invalid length. [ 375.415638][T22259] netlink: 'syz.1.7801': attribute type 16 has an invalid length. [ 375.415659][T22259] netlink: 'syz.1.7801': attribute type 17 has an invalid length. [ 375.511024][T22259] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.511210][T22259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.513720][T22259] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.513830][T22259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.572027][T22259] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 376.220063][T22294] netlink: 'syz.1.7815': attribute type 11 has an invalid length. [ 376.648944][T22319] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7828'. [ 376.862556][T22329] tipc: Enabling of bearer rejected, failed to enable media [ 378.087891][T22399] tipc: Enabling of bearer rejected, media not registered [ 378.831019][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.236958][T22466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7899'. [ 379.239241][T22466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7899'. [ 379.298205][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7901'. [ 379.534810][T22485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7908'. [ 379.876565][T22508] netlink: 'syz.1.7920': attribute type 1 has an invalid length. [ 379.876585][T22508] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7920'. [ 379.876683][T22508] netlink: 'syz.1.7920': attribute type 1 has an invalid length. [ 380.052123][T22512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.718152][T22546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.751565][T22547] Bluetooth: hci0: unsupported parameter 5161 [ 380.751586][T22547] Bluetooth: hci0: unsupported parameter 8192 [ 380.751597][T22547] Bluetooth: hci0: unsupported parameter 5161 [ 380.751607][T22547] Bluetooth: hci0: unsupported parameter 8192 [ 380.919541][T22553] netlink: 'syz.1.7942': attribute type 142 has an invalid length. [ 380.971983][T22561] openvswitch: netlink: Missing key (keys=40, expected=100) [ 381.661903][T22602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7964'. [ 381.661945][T22602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7964'. [ 381.716359][T22605] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7967'. [ 381.716390][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7967'. [ 382.095136][T22627] block nbd0: not configured, cannot reconfigure [ 382.609395][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7989'. [ 383.195945][T22687] netlink: 'syz.3.8004': attribute type 3 has an invalid length. [ 383.438348][T22701] netlink: 'syz.3.8012': attribute type 1 has an invalid length. [ 383.549153][T22706] sctp: [Deprecated]: syz.4.8013 (pid 22706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.549153][T22706] Use struct sctp_sack_info instead [ 383.821684][ T1419] tipc: Subscription rejected, illegal request [ 385.091993][T22797] __nla_validate_parse: 2 callbacks suppressed [ 385.092012][T22797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8058'. [ 385.179848][T22805] sock: sock_set_timeout: `syz.1.8062' (pid 22805) tries to set negative timeout [ 385.235483][T22807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8064'. [ 385.371287][T22815] netlink: 'syz.0.8068': attribute type 3 has an invalid length. [ 385.371306][T22815] netlink: 'syz.0.8068': attribute type 1 has an invalid length. [ 385.371317][T22815] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8068'. [ 385.488376][T22822] ip_tables: iptables: counters copy to user failed while replacing table [ 385.862138][T22845] Bluetooth: hci0: unsupported parameter 5161 [ 385.862159][T22845] Bluetooth: hci0: unsupported parameter 8192 [ 385.862170][T22845] Bluetooth: hci0: unsupported parameter 5161 [ 385.862181][T22845] Bluetooth: hci0: unsupported parameter 8192 [ 386.095810][T22856] netlink: 'syz.0.8086': attribute type 1 has an invalid length. [ 386.452607][T22870] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 386.485864][ T31] audit: type=1800 audit(1789976446.597:4): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8096" name="memory.events" dev="tmpfs" ino=8111 res=0 errno=0 [ 386.519140][ T31] audit: type=1804 audit(1789976446.617:5): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8096" name="/newroot/1615/memory.events" dev="tmpfs" ino=8111 res=1 errno=0 [ 386.610326][T22882] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.704398][T22885] sctp: [Deprecated]: syz.4.8103 (pid 22885) Use of int in max_burst socket option deprecated. [ 386.704398][T22885] Use struct sctp_assoc_value instead [ 386.852349][T22896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8106'. [ 387.196122][T22913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8116'. [ 387.497788][T22927] tipc: Failed to obtain node identity [ 387.497818][T22927] tipc: Enabling of bearer rejected, failed to enable media [ 387.713286][T22940] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.033635][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8138'. [ 388.248364][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8142'. [ 388.248386][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8142'. [ 388.873204][T23006] netlink: NAT attribute has 4 unknown bytes [ 388.873237][T23006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.910460][T23010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.540836][T23039] xt_hashlimit: size too large, truncated to 1048576 [ 389.865535][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 390.258950][T23071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8191'. [ 390.756185][T23099] netlink: NAT attribute has 4 unknown bytes [ 390.756223][T23099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.223104][T23127] tipc: Started in network mode [ 391.223223][T23127] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 391.260143][T23127] tipc: Enabled bearer , priority 10 [ 391.736110][T23147] pim6reg527: entered allmulticast mode [ 392.303092][T23177] xt_IDLETIMER: timeout value is too big [ 392.375841][ T982] tipc: Node number set to 4269801488 [ 392.956270][T23197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8253'. [ 393.853688][T23230] Bluetooth: hci0: unsupported parameter 5161 [ 393.853711][T23230] Bluetooth: hci0: unsupported parameter 8192 [ 393.853723][T23230] Bluetooth: hci0: unsupported parameter 5161 [ 393.853734][T23230] Bluetooth: hci0: unsupported parameter 8192 [ 394.805494][T23266] netlink: 'syz.1.8286': attribute type 29 has an invalid length. [ 394.808730][T23266] netlink: 'syz.1.8286': attribute type 29 has an invalid length. [ 396.182035][T23320] IPVS: length: 8 != 1152 [ 396.672570][T23342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8323'. [ 396.672593][T23342] bridge: RTM_NEWNEIGH with invalid ether address [ 396.899049][T23351] netlink: 'syz.4.8327': attribute type 2 has an invalid length. [ 397.007910][T23353] netlink: 'syz.1.8328': attribute type 1 has an invalid length. [ 397.010029][T23356] netlink: 'syz.3.8331': attribute type 7 has an invalid length. [ 397.010046][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8331'. [ 397.010075][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8331'. [ 397.239507][T23362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8336'. [ 397.239734][T23362] smc: net device veth1_to_team applied user defined pnetid S [ 397.850888][T23390] netlink: 272 bytes leftover after parsing attributes in process `syz.2.8345'. [ 397.938621][T23392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8346'. [ 397.944496][T23396] xt_IDLETIMER: label is empty or not nul-terminated [ 398.099858][T23400] Bluetooth: hci0: unsupported parameter 5134 [ 398.099884][T23400] Bluetooth: hci0: unsupported parameter 8192 [ 398.099896][T23400] Bluetooth: hci0: unsupported parameter 5134 [ 398.099906][T23400] Bluetooth: hci0: unsupported parameter 8192 [ 398.226671][T23402] netlink: 'syz.4.8352': attribute type 4 has an invalid length. [ 398.294176][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8356'. [ 398.294204][T23412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8356'. [ 398.294234][T23412] netlink: 'syz.2.8356': attribute type 12 has an invalid length. [ 398.294247][T23412] netlink: 'syz.2.8356': attribute type 11 has an invalid length. [ 398.382214][T23415] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.383951][T23454] nbd: must specify at least one socket [ 399.585304][T23462] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8379'. [ 400.511808][T23485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8390'. [ 400.512960][T23486] netlink: 'syz.4.8392': attribute type 2 has an invalid length. [ 401.254454][T23511] netlink: 'syz.4.8404': attribute type 83 has an invalid length. [ 401.824201][T23534] __nla_validate_parse: 4 callbacks suppressed [ 401.824228][T23534] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8415'. [ 402.557691][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8431'. [ 402.564372][T23565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8431'. [ 402.711477][T23573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.320912][T23598] netlink: 'syz.1.8447': attribute type 1 has an invalid length. [ 403.320979][T23598] netlink: 'syz.1.8447': attribute type 1 has an invalid length. [ 403.555475][T23604] netlink: 'syz.3.8449': attribute type 1 has an invalid length. [ 403.555499][T23604] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8449'. [ 403.555514][T23604] netlink: 'syz.3.8449': attribute type 1 has an invalid length. [ 403.694510][T23610] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8453'. [ 403.967639][T23618] Bluetooth: hci0: unsupported parameter 5135 [ 403.967661][T23618] Bluetooth: hci0: unsupported parameter 8192 [ 403.967673][T23618] Bluetooth: hci0: unsupported parameter 5135 [ 403.967684][T23618] Bluetooth: hci0: unsupported parameter 8192 [ 404.452742][T23636] wireguard0: entered promiscuous mode [ 404.831693][T23649] nbd: socks must be embedded in a SOCK_ITEM attr [ 405.666086][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8484'. [ 405.685270][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8484'. [ 405.685597][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8484'. [ 405.685789][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8484'. [ 405.685964][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8484'. [ 406.810774][T23720] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 406.906759][T23724] __nla_validate_parse: 44 callbacks suppressed [ 406.906932][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8508'. [ 408.473049][T23792] netlink: 'syz.2.8539': attribute type 10 has an invalid length. [ 408.561039][T23796] nbd: couldn't find device at index 15663104 [ 409.256359][T23820] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 409.274769][T23824] netlink: 'syz.1.8553': attribute type 1 has an invalid length. [ 409.274790][T23824] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8553'. [ 409.274804][T23824] netlink: 'syz.1.8553': attribute type 1 has an invalid length. [ 410.081195][T23856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8569'. [ 410.104942][T23857] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8570'. [ 410.352898][ T5631] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 410.499190][T23875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8580'. [ 410.596696][T23880] netlink: 'syz.3.8583': attribute type 2 has an invalid length. [ 411.055226][T23893] netlink: 'syz.2.8587': attribute type 1 has an invalid length. [ 411.887109][T23925] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8605'. [ 412.005635][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8606'. [ 412.195458][T23938] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 412.549184][T23957] vlan3: entered promiscuous mode [ 412.549204][T23957] bridge0: entered promiscuous mode [ 413.214351][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8631'. [ 413.466489][T23994] netlink: 'syz.4.8639': attribute type 3 has an invalid length. [ 413.559347][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8636'. [ 413.559369][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8636'. [ 413.861669][T24014] team0: Device ipvlan0 failed to register rx_handler [ 416.372769][T24105] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8691'. [ 416.372829][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8691'. [ 416.372842][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8691'. [ 416.512246][T24115] netlink: 'syz.4.8695': attribute type 4 has an invalid length. [ 416.512273][T24115] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8695'. [ 416.596149][T24119] netlink: 'syz.3.8699': attribute type 1 has an invalid length. [ 417.380561][T24150] netlink: 'syz.1.8712': attribute type 5 has an invalid length. [ 417.380608][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8712'. [ 418.191847][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8728'. [ 418.191892][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8728'. [ 418.928893][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8742'. [ 419.037491][T24217] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8745'. [ 419.752479][T24241] netlink: 'syz.4.8755': attribute type 2 has an invalid length. [ 419.752505][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8755'. [ 420.000454][T24252] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 420.443174][T24264] Bluetooth: hci1: too big key_count value 32778 [ 420.766059][T24278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8771'. [ 420.863364][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8775'. [ 420.863458][T24280] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8775'. [ 421.050180][T24292] openvswitch: netlink: EtherType 2 is less than min 600 [ 421.120219][T24284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8773'. [ 422.557004][T24352] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 422.690499][T24356] __nla_validate_parse: 1 callbacks suppressed [ 422.690523][T24356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8811'. [ 422.690544][T24356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8811'. [ 422.953846][T24369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8816'. [ 423.155446][T24376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.069379][T24411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8836'. [ 424.548795][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8846'. [ 424.905152][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.061378][T24450] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 426.306712][T24497] netlink: 'syz.0.8876': attribute type 83 has an invalid length. [ 426.423467][T24499] netlink: 'syz.0.8880': attribute type 1 has an invalid length. [ 426.423492][T24499] netlink: 208 bytes leftover after parsing attributes in process `syz.0.8880'. [ 427.612841][T24555] netlink: 'syz.1.8905': attribute type 30 has an invalid length. [ 427.799705][T24559] veth0_to_bridge: entered promiscuous mode [ 427.800362][T24558] veth0_to_bridge: left promiscuous mode [ 428.076056][T24574] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8912'. [ 428.098353][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8915'. [ 428.773863][T24600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8925'. [ 428.782905][T24600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8925'. [ 429.698200][T24636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8945'. [ 429.784431][T24642] TCP: TCP_TX_DELAY enabled [ 430.148758][T24649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8950'. [ 430.150113][T24649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8950'. [ 430.150134][T24649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8950'. [ 430.549826][T24655] bond0: entered promiscuous mode [ 430.561371][T24655] batadv0: entered promiscuous mode [ 430.569262][T24655] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 430.569282][T24655] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 430.581727][T24655] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 430.790012][T24661] openvswitch: netlink: IP tunnel dst address not specified [ 430.790045][T24661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.862770][T24662] tap0: tun_chr_ioctl cmd 1074025676 [ 430.862791][T24662] tap0: owner set to 0 [ 432.197635][T24719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8982'. [ 432.593371][T24734] IPv6: Can't replace route, no match found [ 432.593642][T24734] IPv6: Can't replace route, no match found [ 432.633791][T24735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8990'. [ 433.819729][T24786] __nla_validate_parse: 4 callbacks suppressed [ 433.819748][T24786] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9015'. [ 434.093482][T24796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9021'. [ 434.179375][T24806] Cannot find set identified by id 4 to match [ 435.673982][T24862] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9048'. [ 436.162443][T24873] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9055'. [ 436.320213][T24880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9058'. [ 437.209897][T24917] openvswitch: netlink: IP tunnel dst address not specified [ 437.209928][T24917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.654334][T24984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9105'. [ 441.241284][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9157'. [ 441.508493][T25089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.509080][T25089] bond_slave_0: left allmulticast mode [ 441.535689][T25089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.536458][T25089] bond_slave_1: left allmulticast mode [ 441.539236][T25089] bond0 (unregistering): Released all slaves [ 442.590892][T25135] netlink: 'syz.2.9178': attribute type 11 has an invalid length. [ 442.590919][T25135] netlink: 3800 bytes leftover after parsing attributes in process `syz.2.9178'. [ 444.095967][T25195] IPVS: stopping backup sync thread 16758 ... [ 444.099485][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9204'. [ 445.548524][T25260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9236'. [ 445.701244][T25265] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9238'. [ 445.838424][T25269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9241'. [ 445.838471][T25269] netlink: 'syz.4.9241': attribute type 8 has an invalid length. [ 445.838483][T25269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9241'. [ 447.922735][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9277'. [ 448.731689][T25377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9292'. [ 448.883826][T25381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.051051][T25377] macvtap1: entered promiscuous mode [ 449.051074][T25377] vlan0: entered promiscuous mode [ 449.053762][T25388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9296'. [ 449.066581][T25377] macvtap1: entered allmulticast mode [ 449.066599][T25377] vlan0: entered allmulticast mode [ 449.066611][T25377] veth0_vlan: entered allmulticast mode [ 450.436164][T25442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9322'. [ 450.625910][T25444] erspan0: entered promiscuous mode [ 451.782762][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9339'. [ 452.937648][T25525] sch_fq: defrate 0 ignored. [ 453.054183][T25531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9363'. [ 453.151564][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9364'. [ 453.579330][ T5631] block nbd0: Receive control failed (result -32) [ 453.861846][T25569] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9381'. [ 454.275065][T25586] openvswitch: netlink: IP tunnel dst address not specified [ 454.275107][T25586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.715613][T25610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9399'. [ 455.543520][T25649] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 455.560641][T25649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.613932][T25653] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9417'. [ 455.616354][T25650] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9417'. [ 455.701289][T25658] netlink: 576 bytes leftover after parsing attributes in process `syz.3.9419'. [ 456.486969][T25686] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 456.487134][T25686] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 456.801450][T25700] netlink: 'syz.2.9441': attribute type 1 has an invalid length. [ 456.801477][T25700] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9441'. [ 456.801492][T25700] netlink: 'syz.2.9441': attribute type 2 has an invalid length. [ 456.801502][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9441'. [ 457.074742][T25709] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9444'. [ 458.228705][T25753] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 458.853987][T25774] __nla_validate_parse: 1 callbacks suppressed [ 458.854010][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9474'. [ 459.029010][T25781] macvtap0: entered allmulticast mode [ 459.029039][T25781] veth0_macvtap: entered allmulticast mode [ 459.311859][T25790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9482'. [ 459.433117][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9487'. [ 459.434189][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9487'. [ 459.628906][T25807] block nbd1: Unsupported socket: should be TCP or UNIX. [ 460.198457][T25824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9497'. [ 460.479545][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9504'. [ 460.926902][T25844] netlink: 'syz.2.9506': attribute type 10 has an invalid length. [ 461.035217][T25844] team0: Port device dummy0 added [ 461.081880][T25847] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9510'. [ 461.149073][T25850] vlan4: entered allmulticast mode [ 461.149106][T25850] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 462.031351][T25886] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 462.483302][T25906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9536'. [ 462.864275][T25923] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9544'. [ 463.920387][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9562'. [ 464.198960][T25979] netlink: 'syz.1.9568': attribute type 12 has an invalid length. [ 464.198985][T25979] netlink: 'syz.1.9568': attribute type 29 has an invalid length. [ 464.198996][T25979] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9568'. [ 464.199024][T25979] netlink: 'syz.1.9568': attribute type 2 has an invalid length. [ 464.480385][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9574'. [ 464.481580][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9574'. [ 464.801825][T26008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9580'. [ 464.957671][T26014] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 464.957943][T26014] syzkaller1: linktype set to 823 [ 465.352074][T26029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9591'. [ 465.414117][T26034] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 465.845963][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9600'. [ 465.845988][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9600'. [ 465.945396][T26053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9602'. [ 465.945434][T26053] netlink: 'syz.2.9602': attribute type 30 has an invalid length. [ 465.945449][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9602'. [ 467.534468][T26124] netlink: 'syz.1.9635': attribute type 11 has an invalid length. [ 468.887918][T26178] netlink: 'syz.2.9660': attribute type 1 has an invalid length. [ 468.887940][T26178] netlink: 'syz.2.9660': attribute type 2 has an invalid length. [ 469.880289][T26219] __nla_validate_parse: 2 callbacks suppressed [ 469.880309][T26219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9680'. [ 471.370122][T26272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9706'. [ 472.015632][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9714'. [ 472.203772][T26304] netlink: 'syz.2.9721': attribute type 2 has an invalid length. [ 472.225776][T26305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9722'. [ 472.341411][T26309] veth0: entered promiscuous mode [ 472.351596][T26307] veth0: left promiscuous mode [ 472.470244][T26313] netlink: 'syz.4.9725': attribute type 4 has an invalid length. [ 472.549407][T26321] tipc: Started in network mode [ 472.549438][T26321] tipc: Node identity ac14140f, cluster identity 4711 [ 472.553013][T26321] tipc: New replicast peer: 255.255.255.255 [ 472.575482][T26321] tipc: Enabled bearer , priority 10 [ 473.147824][T26344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9741'. [ 473.147879][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9741'. [ 473.238947][T26345] bond6: entered promiscuous mode [ 473.537384][T26364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9749'. [ 473.665669][ T982] tipc: Node number set to 2886997007 [ 473.777475][T26370] netlink: 'syz.4.9753': attribute type 5 has an invalid length. [ 474.530762][T26404] tun0: tun_chr_ioctl cmd 1074025675 [ 474.530793][T26404] tun0: persist enabled [ 474.649067][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9773'. [ 474.666127][T26413] hsr_slave_0: left promiscuous mode [ 474.669067][T26413] hsr_slave_1: left promiscuous mode [ 474.931303][T26422] tipc: Started in network mode [ 474.931337][T26422] tipc: Node identity ac14140f, cluster identity 4711 [ 474.931589][T26422] tipc: New replicast peer: 255.255.255.255 [ 474.975735][T26422] tipc: Enabled bearer , priority 10 [ 475.082946][T26430] erspan0: entered promiscuous mode [ 475.103090][T26428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9778'. [ 475.619959][T26449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9790'. [ 475.655796][T26449] xfrm1: entered promiscuous mode [ 475.655817][T26449] xfrm1: entered allmulticast mode [ 475.661618][T26449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9790'. [ 475.886785][T26462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9796'. [ 476.052159][ T5706] tipc: Node number set to 2886997007 [ 476.392286][T26483] netlink: 'syz.1.9805': attribute type 4 has an invalid length. [ 477.042609][T26508] batman_adv: batadv0: Adding interface: gretap0 [ 477.042627][T26508] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.042655][T26508] batman_adv: batadv0: Interface activated: gretap0 [ 477.135221][T26510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9818'. [ 477.512373][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9825'. [ 477.752256][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9834'. [ 477.905329][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9834'. [ 477.957530][T26546] veth0: entered promiscuous mode [ 477.978687][T26543] veth0: left promiscuous mode [ 479.087239][T26591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9857'. [ 479.339087][T26605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9862'. [ 480.779432][T26665] __nla_validate_parse: 3 callbacks suppressed [ 480.779453][T26665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9892'. [ 480.807489][T26665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9892'. [ 481.284153][T26684] tipc: Enabling of bearer rejected, failed to enable media [ 481.578064][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9909'. [ 481.667688][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9910'. [ 481.667714][T26703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9910'. [ 481.759795][T26706] openvswitch: netlink: Unknown key attributes 1 [ 481.951958][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9914'. [ 483.484755][T26760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9938'. [ 483.722773][T26747] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.722809][T26747] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.964771][T26747] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.971624][T26747] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.267495][T26747] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.267529][T26747] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.453157][T26796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9954'. [ 484.453211][T26796] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9954'. [ 484.561697][T26747] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.561732][T26747] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.748785][T26796] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9954'. [ 485.137864][T26811] openvswitch: netlink: Unknown key attributes 1 [ 485.167802][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.167840][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.233278][ T5619] udevd[5619]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 485.287767][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.287803][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.321196][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.321231][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.353701][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.353738][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.956174][T26837] __nla_validate_parse: 1 callbacks suppressed [ 485.956194][T26837] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9973'. [ 486.172713][T26850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9980'. [ 486.537958][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9986'. [ 486.816901][T26876] openvswitch: netlink: Unknown key attributes 1 [ 487.018239][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9997'. [ 487.369414][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10004'. [ 487.534409][T26909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10006'. [ 488.073873][T26936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10021'. [ 489.015999][T26964] netlink: 'syz.3.10033': attribute type 10 has an invalid length. [ 489.016254][T26964] veth0_vlan: entered allmulticast mode [ 489.053046][T26964] team0: Device veth0_vlan is already a lower device of the team interface [ 490.577476][T27030] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10063'. [ 490.617753][T27035] netlink: 'syz.3.10066': attribute type 83 has an invalid length. [ 490.981676][T27050] veth0: mtu less than device minimum [ 491.412241][T27070] netlink: 'syz.4.10083': attribute type 28 has an invalid length. [ 491.412263][T27070] netlink: 'syz.4.10083': attribute type 3 has an invalid length. [ 491.412275][T27070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10083'. [ 491.517268][ T5629] block nbd1: Receive control failed (result -32) [ 491.518766][ T5631] block nbd1: Receive control failed (result -32) [ 492.473469][T27110] Failure starting scanning (-16) [ 493.725479][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10124'. [ 494.081345][T27176] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.090895][T27176] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.230318][T27228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10154'. [ 495.394436][T27230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10156'. [ 496.634164][T27280] netlink: 'syz.1.10178': attribute type 4 has an invalid length. [ 497.166865][T27286] tipc: Disabling bearer [ 499.710988][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10218'. [ 500.252974][T27386] netlink: 'syz.2.10226': attribute type 3 has an invalid length. [ 500.252997][T27386] netlink: 'syz.2.10226': attribute type 1 has an invalid length. [ 500.253011][T27386] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10226'. [ 500.253026][T27386] NCSI netlink: No device for ifindex 813332851 [ 500.390263][T27390] sctp: [Deprecated]: syz.0.10231 (pid 27390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.390263][T27390] Use struct sctp_sack_info instead [ 500.591308][T27397] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10229'. [ 500.829615][T27404] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10235'. [ 501.936124][T27438] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10253'. [ 501.953092][T27442] netlink: 'syz.0.10254': attribute type 29 has an invalid length. [ 501.955011][T27442] netlink: 'syz.0.10254': attribute type 29 has an invalid length. [ 502.253833][T27449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10259'. [ 503.363740][T27503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.773795][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10290'. [ 503.862522][T27515] bond9 (unregistering): Released all slaves [ 505.492616][T27569] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10310'. [ 505.598190][T27573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10313'. [ 506.007309][T27583] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10318'. [ 506.100167][T27594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10323'. [ 506.100201][T27594] nbd: socks must be embedded in a SOCK_ITEM attr [ 506.126155][T27592] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.195093][T27598] netlink: 165 bytes leftover after parsing attributes in process `syz.4.10324'. [ 506.441067][T27609] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.10329'. [ 507.149788][T27635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10341'. [ 508.009579][ T1419] tipc: Subscription rejected, illegal request [ 508.698624][T27689] netlink: 'syz.2.10365': attribute type 2 has an invalid length. [ 509.333121][T27720] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10379'. [ 509.333150][T27720] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10379'. [ 509.749145][T27738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 510.963908][T27787] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 511.055528][T27795] team0: No ports can be present during mode change [ 511.229268][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10416'. [ 511.497157][T27809] nbd2: detected capacity change from 0 to 63 [ 511.503842][ T5631] block nbd2: Receive control failed (result -32) [ 511.523535][ T2047] block nbd2: Dead connection, failed to find a fallback [ 511.523561][ T2047] block nbd2: shutting down sockets [ 511.523650][ T2047] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 511.523750][ T2047] Buffer I/O error on dev nbd2, logical block 0, async page read [ 511.523960][ T2047] Buffer I/O error on dev nbd2, logical block 1, async page read [ 511.523976][ T2047] Buffer I/O error on dev nbd2, logical block 2, async page read [ 511.523990][ T2047] Buffer I/O error on dev nbd2, logical block 3, async page read [ 511.536598][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.536629][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 511.536741][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.536762][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 511.537015][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.537036][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 511.537119][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.537139][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 511.537241][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.537261][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 511.537340][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.537359][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 511.537442][ T11] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.537530][ T11] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.540044][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 511.552569][ T5619] ldm_validate_partition_table(): Disk read failed. [ 511.554262][ T5619] Dev nbd2: unable to read RDB block 0 [ 511.566902][ T5619] nbd2: unable to read partition table [ 511.629904][ T5619] ldm_validate_partition_table(): Disk read failed. [ 511.632846][ T5619] Dev nbd2: unable to read RDB block 0 [ 511.637858][ T5619] nbd2: unable to read partition table [ 511.822874][T27822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10427'. [ 512.459465][T27843] netlink: 'syz.4.10434': attribute type 4 has an invalid length. [ 513.423314][T27887] netlink: 31 bytes leftover after parsing attributes in process `syz.1.10456'. [ 513.423339][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10456'. [ 513.423356][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10456'. [ 513.423895][T27886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10455'. [ 513.460508][T27886] ipvlan2: entered allmulticast mode [ 513.460541][T27886] syz_tun: entered allmulticast mode [ 514.139817][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10465'. [ 514.146170][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10465'. [ 514.146988][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10465'. [ 516.105676][T27905] Bluetooth: hci4: command 0x0406 tx timeout [ 516.746532][T28019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10515'. [ 516.813051][T28021] netlink: 'syz.1.10518': attribute type 12 has an invalid length. [ 517.052998][T28029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10521'. [ 517.869209][T28055] gtp2: entered promiscuous mode [ 517.869236][T28055] gtp2: entered allmulticast mode [ 518.234264][T28070] ip_tables: iptables: counters copy to user failed while replacing table [ 518.312273][T28075] openvswitch: netlink: IP tunnel dst address not specified [ 518.312311][T28075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.385297][T28077] ip_tables: iptables: counters copy to user failed while replacing table [ 519.976115][T28143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10576'. [ 520.127449][T28143] team0 (unregistering): Port device team_slave_0 removed [ 520.239877][T28143] team0 (unregistering): Port device team_slave_1 removed [ 520.831740][T28162] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 520.852972][T28165] : renamed from bond0 (while UP) [ 521.023595][T28173] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10590'. [ 521.462655][T28188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10596'. [ 521.508165][T28187] vxcan0: tx address claim with dest, not broadcast [ 522.142754][T28208] netlink: 'syz.4.10608': attribute type 2 has an invalid length. [ 524.599927][T28283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10643'. [ 524.769047][T28285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10645'. [ 525.439756][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10654'. [ 525.956756][T28334] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10666'. [ 526.370628][T28353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10674'. [ 526.395680][T28355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10676'. [ 526.723164][T28371] erspan0: entered promiscuous mode [ 526.884310][T28377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10685'. [ 526.884332][T28377] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10685'. [ 526.884370][T28377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10685'. [ 527.461409][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10695'. [ 528.606432][T28448] netlink: 'syz.2.10718': attribute type 8 has an invalid length. [ 528.606454][T28448] sch_fq: defrate 0 ignored. [ 528.706001][T28454] netlink: 'syz.4.10721': attribute type 1 has an invalid length. [ 528.706022][T28454] netlink: 'syz.4.10721': attribute type 7 has an invalid length. [ 528.706034][T28454] netlink: 'syz.4.10721': attribute type 8 has an invalid length. [ 528.706048][T28454] NCSI netlink: No device for ifindex 65584 [ 529.762519][T28500] ip_tables: iptables: counters copy to user failed while replacing table [ 530.713815][T28534] netlink: 'syz.3.10758': attribute type 83 has an invalid length. [ 531.372454][T28565] sctp: [Deprecated]: syz.0.10774 (pid 28565) Use of int in max_burst socket option. [ 531.372454][T28565] Use struct sctp_assoc_value instead [ 531.578440][T28576] __nla_validate_parse: 3 callbacks suppressed [ 531.578461][T28576] netlink: 71 bytes leftover after parsing attributes in process `syz.0.10777'. [ 532.158048][T28595] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10788'. [ 532.636208][ T31] audit: type=1804 audit(1789976592.747:6): pid=28621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10801" name="/newroot/2163/cgroup.controllers" dev="tmpfs" ino=10880 res=1 errno=0 [ 532.674794][ T31] audit: type=1800 audit(1789976592.757:7): pid=28621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10801" name="cgroup.controllers" dev="tmpfs" ino=10880 res=0 errno=0 [ 533.451063][T28653] netlink: 'syz.2.10817': attribute type 11 has an invalid length. [ 534.166552][T28677] netlink: 'syz.3.10827': attribute type 1 has an invalid length. [ 534.166579][T28677] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10827'. [ 534.166638][T28677] netlink: 'syz.3.10827': attribute type 1 has an invalid length. [ 534.166650][T28677] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.10827'. [ 535.584647][T28726] netlink: 'syz.3.10852': attribute type 33 has an invalid length. [ 535.875995][T28726] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 535.925469][T28726] bond4 (unregistering): Released all slaves [ 537.546752][T28786] netlink: 'syz.0.10878': attribute type 21 has an invalid length. [ 537.546776][T28786] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10878'. [ 537.546839][T28786] netlink: 'syz.0.10878': attribute type 4 has an invalid length. [ 537.546850][T28786] netlink: 'syz.0.10878': attribute type 5 has an invalid length. [ 537.546860][T28786] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10878'. [ 537.548520][T28786] netlink: 'syz.0.10878': attribute type 21 has an invalid length. [ 537.548538][T28786] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10878'. [ 537.548581][T28786] netlink: 'syz.0.10878': attribute type 4 has an invalid length. [ 537.548593][T28786] netlink: 'syz.0.10878': attribute type 5 has an invalid length. [ 537.548601][T28786] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10878'. [ 537.799441][T28799] netlink: 'syz.1.10881': attribute type 1 has an invalid length. [ 538.767070][T28837] ip_tables: iptables: counters copy to user failed while replacing table [ 539.078054][T28848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.451667][T28863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10915'. [ 539.738415][T28867] sctp: [Deprecated]: syz.2.10914 (pid 28867) Use of int in max_burst socket option deprecated. [ 539.738415][T28867] Use struct sctp_assoc_value instead [ 540.372876][T28893] validate_nla: 1 callbacks suppressed [ 540.372965][T28893] netlink: 'syz.1.10927': attribute type 83 has an invalid length. [ 540.482350][T28900] veth1_macvtap: left promiscuous mode [ 540.647993][T28906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10935'. [ 541.396330][T28938] netlink: 'syz.4.10950': attribute type 3 has an invalid length. [ 541.926007][T28956] netlink: 'syz.1.10959': attribute type 5 has an invalid length. [ 542.167338][T28961] block nbd2: NBD_DISCONNECT [ 542.167400][T28961] block nbd2: Send disconnect failed -32 [ 542.202280][T28969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10961'. [ 542.447165][T28974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10965'. [ 542.447307][T28974] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10965'. [ 543.279646][T29006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10982'. [ 543.545403][T29014] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10987'. [ 543.903889][ T5631] block nbd2: Receive control failed (result -32) [ 544.019184][T29030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10994'. [ 545.076833][T29055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11004'. [ 545.629934][T29077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11014'. [ 546.847361][T29128] xt_hashlimit: size too large, truncated to 1048576 [ 546.989028][T29135] xt_hashlimit: size too large, truncated to 1048576 [ 547.230080][T29143] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11042'. [ 547.230101][T29143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11042'. [ 547.688764][T29156] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11049'. [ 547.939973][T29168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11054'. [ 547.939997][T29168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11054'. [ 548.494665][T29193] __nla_validate_parse: 2 callbacks suppressed [ 548.494688][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11064'. [ 548.523514][T29193] macvlan0: left promiscuous mode [ 548.540333][T29193] netlink: 'syz.1.11064': attribute type 1 has an invalid length. [ 548.540362][T29193] netlink: 'syz.1.11064': attribute type 2 has an invalid length. [ 548.822710][T29204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11069'. [ 551.087533][T29285] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11104'. [ 551.482936][T29305] smc: net device team0 applied user defined pnetid SYZ2 [ 551.494780][T29305] smc: net device team0 erased user defined pnetid SYZ2 [ 551.677898][T29308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11116'. [ 553.475118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.475347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.921650][T29386] batadv_slave_0: entered promiscuous mode [ 553.922226][T29386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11152'. [ 554.049698][T29388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11153'. [ 554.156002][T29393] netlink: 'syz.2.11156': attribute type 11 has an invalid length. [ 554.507058][T29405] netlink: 'syz.1.11159': attribute type 64 has an invalid length. [ 554.519912][T29406] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11161'. [ 554.571356][T29411] netlink: 'syz.1.11159': attribute type 64 has an invalid length. [ 554.628773][T29412] veth1_to_bond: entered allmulticast mode [ 554.633837][T29412] veth1_to_bond: entered promiscuous mode [ 554.662040][T29412] veth1_to_bond: left promiscuous mode [ 554.662278][T29412] veth1_to_bond: left allmulticast mode [ 555.150537][T29430] ip_tables: iptables: counters copy to user failed while replacing table [ 555.362254][T29436] netlink: 'syz.4.11172': attribute type 16 has an invalid length. [ 555.362280][T29436] netlink: 'syz.4.11172': attribute type 17 has an invalid length. [ 555.479199][T29434] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.481532][T29434] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.511121][T29434] tipc: Resetting bearer [ 555.514561][T29434] tipc: Resetting bearer [ 555.562871][T29436] 0XD: left allmulticast mode [ 555.627791][T29436] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.627919][T29436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.630739][T29436] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.630868][T29436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.632333][T29436] veth0_to_bond: left allmulticast mode [ 555.688625][T29436] tipc: Resetting bearer [ 555.704207][T29436] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 555.818748][T29449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11177'. [ 555.822336][T29440] pim6reg: entered allmulticast mode [ 555.832207][T29443] team0: entered allmulticast mode [ 555.832228][T29443] team_slave_0: entered allmulticast mode [ 555.832534][T29443] team_slave_1: entered allmulticast mode [ 555.832878][T29443] vlan0: entered allmulticast mode [ 555.874291][T29445] team0: left allmulticast mode [ 555.874313][T29445] team_slave_0: left allmulticast mode [ 555.874650][T29445] team_slave_1: left allmulticast mode [ 555.882512][T29445] vlan0: left allmulticast mode [ 555.883849][T29445] pim6reg: left allmulticast mode [ 556.660271][T29476] sctp: [Deprecated]: syz.2.11188 (pid 29476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.660271][T29476] Use struct sctp_sack_info instead [ 556.984658][T29489] netlink: 'syz.2.11195': attribute type 11 has an invalid length. [ 557.662123][T29505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.662509][T29505] gretap1: entered promiscuous mode [ 557.662525][T29505] gretap1: entered allmulticast mode [ 558.026762][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 558.072448][T29532] netlink: 'syz.0.11213': attribute type 4 has an invalid length. [ 558.084231][T29533] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11214'. [ 558.347522][T29546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11217'. [ 558.399324][T29547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11217'. [ 558.831974][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11219'. [ 559.225085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.225298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.342767][T29573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11228'. [ 559.343937][T29577] : renamed from dummy0 (while UP) [ 559.545227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.545435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.618610][T29573] bond4: option xmit_hash_policy: invalid value (64) [ 559.689128][T29573] bond4 (unregistering): Released all slaves [ 560.139591][T29611] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.11246'. [ 560.743331][T29630] : left allmulticast mode [ 560.781266][T29637] netlink: 'syz.0.11257': attribute type 2 has an invalid length. [ 560.791216][T29637] netlink: 'syz.0.11257': attribute type 2 has an invalid length. [ 560.791238][T29637] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11257'. [ 561.845837][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11278'. [ 562.298388][T29689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11284'. [ 562.642282][T29699] syzkaller1: entered promiscuous mode [ 562.642304][T29699] syzkaller1: entered allmulticast mode [ 563.130449][T29714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11296'. [ 563.130495][T29714] netlink: 'syz.2.11296': attribute type 10 has an invalid length. [ 563.130511][T29714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11296'. [ 563.307672][T29725] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 564.484143][T29763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11314'. [ 564.758404][T29763] bridge_slave_1 (unregistering): left allmulticast mode [ 564.758434][T29763] bridge_slave_1 (unregistering): left promiscuous mode [ 564.758510][T29763] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.857574][T29773] block nbd3: server does not support multiple connections per device. [ 564.859587][T29773] block nbd3: shutting down sockets [ 564.985176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.985665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.487277][T29787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11325'. [ 566.335721][T29813] netlink: 'syz.4.11334': attribute type 64 has an invalid length. [ 566.335742][T29813] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11334'. [ 568.091989][T29873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11355'. [ 568.092025][T29873] netlink: 'syz.3.11355': attribute type 7 has an invalid length. [ 568.092037][T29873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11355'. [ 568.652640][T29889] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 568.749108][T29894] block nbd0: reconnected socket [ 568.749714][ T5631] block nbd0: Receive control failed (result -107) [ 569.385042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.385224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.867148][T29931] netlink: 'syz.1.11382': attribute type 4 has an invalid length. [ 570.401072][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11388'. [ 570.562910][T29947] ip_tables: iptables: counters copy to user failed while replacing table [ 570.799177][T29951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11391'. [ 571.104794][T29951] [ 571.107158][T29951] ====================================================== [ 571.114226][T29951] WARNING: possible circular locking dependency detected [ 571.121914][T29951] syzkaller #0 Not tainted [ 571.126334][T29951] ------------------------------------------------------ [ 571.133412][T29951] syz.3.11391/29951 is trying to acquire lock: [ 571.139557][T29951] ffff888074141b18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 571.148567][T29951] [ 571.148567][T29951] but task is already holding lock: [ 571.155927][T29951] ffff88802c5dbd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 571.165384][T29951] [ 571.165384][T29951] which lock already depends on the new lock. [ 571.165384][T29951] [ 571.175788][T29951] [ 571.175788][T29951] the existing dependency chain (in reverse order) is: [ 571.184835][T29951] [ 571.184835][T29951] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 571.192721][T29951] __mutex_lock+0x19d/0x1550 [ 571.197915][T29951] elevator_change+0x1af/0x480 [ 571.203184][T29951] elevator_set_none+0xb5/0x140 [ 571.208540][T29951] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 571.214874][T29951] nbd_start_device+0x189/0xb30 [ 571.220283][T29951] nbd_genl_connect+0x167d/0x1cd0 [ 571.225814][T29951] genl_family_rcv_msg_doit+0x233/0x340 [ 571.231964][T29951] genl_rcv_msg+0x614/0x7a0 [ 571.236980][T29951] netlink_rcv_skb+0x226/0x4a0 [ 571.242302][T29951] genl_rcv+0x28/0x40 [ 571.246972][T29951] netlink_unicast+0x7bd/0x940 [ 571.252284][T29951] netlink_sendmsg+0x813/0xb40 [ 571.257586][T29951] sock_sendmsg_nosec+0x13a/0x180 [ 571.263194][T29951] ____sys_sendmsg+0x54e/0x850 [ 571.268539][T29951] ___sys_sendmsg+0x2a5/0x360 [ 571.273727][T29951] __x64_sys_sendmsg+0x1b1/0x290 [ 571.279183][T29951] do_syscall_64+0x166/0x520 [ 571.284383][T29951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.290817][T29951] [ 571.290817][T29951] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 571.299476][T29951] blk_alloc_queue+0x544/0x690 [ 571.304761][T29951] __blk_mq_alloc_disk+0x194/0x390 [ 571.310390][T29951] nbd_dev_add+0x494/0xb60 [ 571.315321][T29951] nbd_init+0x168/0x1f0 [ 571.320100][T29951] do_one_initcall+0x250/0x870 [ 571.325398][T29951] do_initcall_level+0x10a/0x1a0 [ 571.330916][T29951] do_initcalls+0x59/0xa0 [ 571.335756][T29951] kernel_init_freeable+0x29d/0x3e0 [ 571.341463][T29951] kernel_init+0x22/0x1d0 [ 571.346304][T29951] ret_from_fork+0x514/0xb70 [ 571.351422][T29951] ret_from_fork_asm+0x1a/0x30 [ 571.356702][T29951] [ 571.356702][T29951] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 571.363899][T29951] fs_reclaim_acquire+0x71/0x100 [ 571.369386][T29951] __kmalloc_cache_node_noprof+0x66/0x620 [ 571.375619][T29951] create_worker+0x112/0x7c0 [ 571.380760][T29951] workqueue_prepare_cpu+0xe4/0x170 [ 571.386482][T29951] cpuhp_invoke_callback+0x434/0x810 [ 571.392345][T29951] _cpu_up+0x2ce/0x5b0 [ 571.396931][T29951] cpu_up+0x1d2/0x220 [ 571.401428][T29951] cpuhp_bringup_mask+0xb2/0x1a0 [ 571.407259][T29951] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 571.413603][T29951] bringup_nonboot_cpus+0x17/0x30 [ 571.419143][T29951] smp_init+0x32/0x110 [ 571.423819][T29951] kernel_init_freeable+0x27f/0x3e0 [ 571.429529][T29951] kernel_init+0x22/0x1d0 [ 571.434383][T29951] ret_from_fork+0x514/0xb70 [ 571.439485][T29951] ret_from_fork_asm+0x1a/0x30 [ 571.444767][T29951] [ 571.444767][T29951] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 571.452487][T29951] cpus_read_lock+0x42/0x160 [ 571.457588][T29951] static_key_slow_inc+0x12/0x30 [ 571.463421][T29951] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 571.469668][T29951] nbd_genl_foreach_sock+0x265/0x450 [ 571.475475][T29951] nbd_genl_reconfigure+0xbbb/0x1040 [ 571.481272][T29951] genl_family_rcv_msg_doit+0x233/0x340 [ 571.487377][T29951] genl_rcv_msg+0x614/0x7a0 [ 571.492390][T29951] netlink_rcv_skb+0x226/0x4a0 [ 571.497666][T29951] genl_rcv+0x28/0x40 [ 571.502186][T29951] netlink_unicast+0x7bd/0x940 [ 571.507478][T29951] netlink_sendmsg+0x813/0xb40 [ 571.512769][T29951] sock_sendmsg_nosec+0x13a/0x180 [ 571.518308][T29951] ____sys_sendmsg+0x54e/0x850 [ 571.523584][T29951] ___sys_sendmsg+0x2a5/0x360 [ 571.528773][T29951] __x64_sys_sendmsg+0x1b1/0x290 [ 571.534228][T29951] do_syscall_64+0x166/0x520 [ 571.539430][T29951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.545835][T29951] [ 571.545835][T29951] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 571.553479][T29951] __mutex_lock+0x19d/0x1550 [ 571.558587][T29951] nbd_queue_rq+0x373/0xff0 [ 571.563602][T29951] blk_mq_dispatch_rq_list+0x499/0x1990 [ 571.569657][T29951] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 571.576492][T29951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 571.582979][T29951] blk_mq_run_work_fn+0x16c/0x300 [ 571.588510][T29951] process_scheduled_works+0xc3d/0x1630 [ 571.594573][T29951] worker_thread+0xa47/0xfb0 [ 571.599675][T29951] kthread+0x38b/0x480 [ 571.604257][T29951] ret_from_fork+0x514/0xb70 [ 571.609368][T29951] ret_from_fork_asm+0x1a/0x30 [ 571.614660][T29951] [ 571.614660][T29951] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 571.621859][T29951] __mutex_lock+0x19d/0x1550 [ 571.626966][T29951] nbd_queue_rq+0xc1/0xff0 [ 571.631913][T29951] blk_mq_dispatch_rq_list+0x499/0x1990 [ 571.638056][T29951] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 571.644896][T29951] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 571.651390][T29951] blk_mq_run_work_fn+0x16c/0x300 [ 571.656929][T29951] process_scheduled_works+0xc3d/0x1630 [ 571.662985][T29951] worker_thread+0xa47/0xfb0 [ 571.668105][T29951] kthread+0x38b/0x480 [ 571.672681][T29951] ret_from_fork+0x514/0xb70 [ 571.677776][T29951] ret_from_fork_asm+0x1a/0x30 [ 571.683057][T29951] [ 571.683057][T29951] -> #0 (set->srcu){.+.+}-{0:0}: [ 571.690162][T29951] __lock_acquire+0x164c/0x2de0 [ 571.695553][T29951] lock_sync+0xb3/0x130 [ 571.700240][T29951] __synchronize_srcu+0xc9/0x2f0 [ 571.705697][T29951] elevator_switch+0x1e8/0x7b0 [ 571.710970][T29951] elevator_change+0x2fa/0x480 [ 571.716265][T29951] elevator_set_default+0x375/0x440 [ 571.721971][T29951] blk_register_queue+0x3f3/0x4e0 [ 571.727510][T29951] __add_disk+0x6b8/0xdb0 [ 571.732351][T29951] add_disk_fwnode+0x100/0x3a0 [ 571.737633][T29951] nbd_dev_add+0x733/0xb60 [ 571.742557][T29951] nbd_genl_connect+0x96c/0x1cd0 [ 571.748023][T29951] genl_family_rcv_msg_doit+0x233/0x340 [ 571.754077][T29951] genl_rcv_msg+0x614/0x7a0 [ 571.759090][T29951] netlink_rcv_skb+0x226/0x4a0 [ 571.764378][T29951] genl_rcv+0x28/0x40 [ 571.768862][T29951] netlink_unicast+0x7bd/0x940 [ 571.774132][T29951] netlink_sendmsg+0x813/0xb40 [ 571.779410][T29951] sock_sendmsg_nosec+0x13a/0x180 [ 571.784938][T29951] ____sys_sendmsg+0x54e/0x850 [ 571.790212][T29951] ___sys_sendmsg+0x2a5/0x360 [ 571.795396][T29951] __x64_sys_sendmsg+0x1b1/0x290 [ 571.800843][T29951] do_syscall_64+0x166/0x520 [ 571.805939][T29951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.812337][T29951] [ 571.812337][T29951] other info that might help us debug this: [ 571.812337][T29951] [ 571.822575][T29951] Chain exists of: [ 571.822575][T29951] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 571.822575][T29951] [ 571.836454][T29951] Possible unsafe locking scenario: [ 571.836454][T29951] [ 571.843966][T29951] CPU0 CPU1 [ 571.849371][T29951] ---- ---- [ 571.854732][T29951] lock(&q->elevator_lock); [ 571.859319][T29951] lock(&q->q_usage_counter(io)#50); [ 571.867234][T29951] lock(&q->elevator_lock); [ 571.874339][T29951] sync(set->srcu); [ 571.878297][T29951] [ 571.878297][T29951] *** DEADLOCK *** [ 571.878297][T29951] [ 571.886464][T29951] locks held by syz.3.11391/29951: 6, last CPU#1: [ 571.893000][T29951] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 571.901236][T29951] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 571.910192][T29951] #2: ffff88807e0d49c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 571.920549][T29951] #3: ffff88802c5dbdf0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 571.930376][T29951] #4: ffff88802c5db878 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 571.941241][T29951] #5: ffff88802c5dbd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 571.951061][T29951] [ 571.951061][T29951] stack backtrace: [ 571.956963][T29951] CPU: 1 UID: 0 PID: 29951 Comm: syz.3.11391 Not tainted syzkaller #0 PREEMPT(full) [ 571.966441][T29951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.976497][T29951] Call Trace: [ 571.979838][T29951] [ 571.982816][T29951] dump_stack_lvl+0xe8/0x150 [ 571.987473][T29951] print_circular_bug+0x2e2/0x300 [ 571.992492][T29951] check_noncircular+0x12f/0x150 [ 571.997421][T29951] __lock_acquire+0x164c/0x2de0 [ 572.002359][T29951] ? lockdep_unlock+0x5c/0xd0 [ 572.007092][T29951] ? __lock_acquire+0x1511/0x2de0 [ 572.012121][T29951] lock_sync+0xb3/0x130 [ 572.016293][T29951] ? __synchronize_srcu+0xb5/0x2f0 [ 572.021436][T29951] ? __synchronize_srcu+0xb5/0x2f0 [ 572.026539][T29951] __synchronize_srcu+0xc9/0x2f0 [ 572.031471][T29951] ? __pfx___synchronize_srcu+0x10/0x10 [ 572.037002][T29951] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.042021][T29951] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.047879][T29951] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 572.053438][T29951] ? synchronize_srcu+0x20a/0x260 [ 572.058452][T29951] elevator_switch+0x1e8/0x7b0 [ 572.063220][T29951] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 572.068665][T29951] elevator_change+0x2fa/0x480 [ 572.073452][T29951] ? do_raw_spin_unlock+0xf5/0x200 [ 572.078573][T29951] elevator_set_default+0x375/0x440 [ 572.083760][T29951] ? __pfx_elevator_set_default+0x10/0x10 [ 572.089466][T29951] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 572.096607][T29951] ? blk_crypto_sysfs_register+0x11c/0x170 [ 572.102413][T29951] blk_register_queue+0x3f3/0x4e0 [ 572.107439][T29951] __add_disk+0x6b8/0xdb0 [ 572.111784][T29951] add_disk_fwnode+0x100/0x3a0 [ 572.116543][T29951] nbd_dev_add+0x733/0xb60 [ 572.120952][T29951] ? __pfx_nbd_dev_add+0x10/0x10 [ 572.125895][T29951] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 572.131687][T29951] ? bpf_lsm_capable+0x9/0x20 [ 572.136370][T29951] ? security_capable+0x7e/0x2c0 [ 572.141332][T29951] ? radix_tree_lookup+0x25c/0x290 [ 572.146607][T29951] nbd_genl_connect+0x96c/0x1cd0 [ 572.151559][T29951] ? __pfx_nbd_genl_connect+0x10/0x10 [ 572.156933][T29951] ? rcu_is_watching+0x16/0xb0 [ 572.161720][T29951] ? trace_kmalloc+0x2a/0xf0 [ 572.166305][T29951] ? __kmalloc_noprof+0x38c/0x720 [ 572.171320][T29951] ? __nla_parse+0x40/0x60 [ 572.175775][T29951] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 572.182153][T29951] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 572.188736][T29951] genl_family_rcv_msg_doit+0x233/0x340 [ 572.194278][T29951] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.200339][T29951] ? __lock_acquire+0x747/0x2de0 [ 572.205277][T29951] genl_rcv_msg+0x614/0x7a0 [ 572.209789][T29951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.214819][T29951] ? __pfx_nbd_genl_connect+0x10/0x10 [ 572.220194][T29951] netlink_rcv_skb+0x226/0x4a0 [ 572.224964][T29951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.230192][T29951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.235517][T29951] ? down_read+0x2be/0x330 [ 572.239947][T29951] genl_rcv+0x28/0x40 [ 572.243933][T29951] netlink_unicast+0x7bd/0x940 [ 572.248712][T29951] netlink_sendmsg+0x813/0xb40 [ 572.253484][T29951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.258769][T29951] ? apparmor_socket_sendmsg+0x98/0x360 [ 572.264346][T29951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.269627][T29951] sock_sendmsg_nosec+0x13a/0x180 [ 572.274648][T29951] ____sys_sendmsg+0x54e/0x850 [ 572.279414][T29951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.284694][T29951] ? import_iovec+0x73/0xa0 [ 572.289209][T29951] ___sys_sendmsg+0x2a5/0x360 [ 572.293880][T29951] ? __lock_acquire+0x747/0x2de0 [ 572.298815][T29951] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.304006][T29951] ? futex_wait+0x2a2/0x390 [ 572.308550][T29951] ? __fget_files+0x2a/0x420 [ 572.313283][T29951] ? __fget_files+0x3a2/0x420 [ 572.317971][T29951] __x64_sys_sendmsg+0x1b1/0x290 [ 572.322920][T29951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.328387][T29951] do_syscall_64+0x166/0x520 [ 572.332971][T29951] ? trace_irq_disable+0x3b/0x140 [ 572.338022][T29951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.344091][T29951] ? clear_bhb_loop+0x70/0xc0 [ 572.348773][T29951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.354655][T29951] RIP: 0033:0x7f61d119e159 [ 572.359129][T29951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.378777][T29951] RSP: 002b:00007f61d212a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.387235][T29951] RAX: ffffffffffffffda RBX: 00007f61d1425fa0 RCX: 00007f61d119e159 [ 572.395195][T29951] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 572.403172][T29951] RBP: 00007f61d123506b R08: 0000000000000000 R09: 0000000000000000 [ 572.411149][T29951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.419154][T29951] R13: 00007f61d1426038 R14: 00007f61d1425fa0 R15: 00007ffe86ce75d8 [ 572.427163][T29951] [ 572.648771][T29965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11397'. [ 572.860655][T29954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11391'. [ 572.860685][T29954] nbd: device at index 64 is going down [ 572.921075][ T5619] udevd[5619]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory