last executing test programs: 2.785816111s ago: executing program 0 (id=12325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0xa, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local, {[@rr={0x7, 0x13, 0x94, [@private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x3, 0x9}]}}}}}}, 0x4e) 2.271901s ago: executing program 4 (id=12334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0xce, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000001c0)) 2.064660024s ago: executing program 4 (id=12338): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write(r0, &(0x7f0000000280)="4591", 0x2) 1.819698684s ago: executing program 1 (id=12341): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 1.601538085s ago: executing program 4 (id=12343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) accept$alg(r1, 0x0, 0x0) 1.533616962s ago: executing program 4 (id=12344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 1.475002675s ago: executing program 1 (id=12345): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) 1.26221748s ago: executing program 1 (id=12348): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 1.230015353s ago: executing program 4 (id=12349): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0xce6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.131335025s ago: executing program 1 (id=12352): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)="00214717a7070000273e030600710a5e31163ceb9d04", 0x16}], 0x1, 0x0, 0x0) 1.059905947s ago: executing program 3 (id=12353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) 905.53912ms ago: executing program 2 (id=12355): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x10000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 850.006714ms ago: executing program 0 (id=12356): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x8000000000000003}, 0x18) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) close(0x3) 784.099861ms ago: executing program 2 (id=12357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 759.437898ms ago: executing program 3 (id=12358): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 752.008239ms ago: executing program 1 (id=12359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@random="7922fffa9e63", @random="75d9a786f5e8", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x5, 0x6, 0x0, @remote, @multicast2}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0xc0, 0x6, 0x0, 0x1, {[@generic={0x13, 0xd, "bbac20065feed39f97f97c"}, @timestamp={0x8, 0xa, 0x401, 0x8}, @md5sig={0x13, 0x12, "3b0cfe976e0aa7561223cf7d8ec561ae"}]}}}}}}}}, 0x66) 688.015058ms ago: executing program 2 (id=12360): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) 603.477029ms ago: executing program 0 (id=12361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1}}], 0x2, 0x142, 0x0) 542.96883ms ago: executing program 3 (id=12362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x1000, 0xffff, 0x0, 0xa}, {0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x1, 0x3, 0x80000000000000}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0xe7, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 454.441142ms ago: executing program 2 (id=12363): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) read(r2, 0x0, 0x0) read(r2, 0x0, 0x0) 416.179598ms ago: executing program 0 (id=12364): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 335.180129ms ago: executing program 3 (id=12365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000efdbdf252e00000008000300", @ANYRES32=r1, @ANYBLOB="0a00340001010101010100002400fe00"], 0x58}, 0x1, 0x0, 0x0, 0x2000894}, 0x884) 309.377307ms ago: executing program 2 (id=12366): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) 306.641788ms ago: executing program 0 (id=12367): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 254.985502ms ago: executing program 1 (id=12368): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) 145.280366ms ago: executing program 0 (id=12369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) 131.940671ms ago: executing program 3 (id=12370): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 113.576775ms ago: executing program 4 (id=12371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@remote, 0xee24, 0x0, 0x0, 0x7, 0x2}, {0x80003, 0x200000004, 0x40000000004, 0x20000a0e1, 0x100000000, 0x4, 0x200000003, 0x9}, {0xa}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x2, 0x6c}, 0x2, @in6=@loopback, 0x3502, 0x3, 0x0, 0x2, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) 45.650727ms ago: executing program 3 (id=12372): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="cd", 0x1, 0x8010, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000980)={0x2, 0x5, "d52be3dcba"}, &(0x7f0000000000)=0xd) 0s ago: executing program 2 (id=12373): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) kernel console output (not intermixed with test programs): t [ 261.333911][T14868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.391655][T14870] ieee802154 phy0 wpan0: encryption failed: -90 [ 261.437578][T14873] netlink: NAT attribute has 1 unknown bytes [ 261.437617][T14873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.472511][T14877] netlink: 'syz.3.4391': attribute type 11 has an invalid length. [ 261.472533][T14877] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4391'. [ 261.513747][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4392'. [ 261.686038][T14888] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4395'. [ 261.686064][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'. [ 261.686083][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'. [ 261.686098][T14888] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4395'. [ 261.850056][T14896] netlink: 'syz.4.4403': attribute type 24 has an invalid length. [ 261.940050][T14903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'. [ 262.327597][T14927] xt_TCPMSS: Only works on TCP SYN packets [ 262.529577][T14940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4423'. [ 262.877394][T14962] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 262.879996][T14962] bond3 (unregistering): Released all slaves [ 262.997169][T14970] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 262.997194][T14970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4439'. [ 263.197076][T14981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.381590][T14994] netlink: 'syz.2.4449': attribute type 1 has an invalid length. [ 263.761174][T15018] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.506983][T15071] netlink: 'syz.2.4488': attribute type 1 has an invalid length. [ 264.507009][T15071] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4488'. [ 264.803503][T15089] netlink: 'syz.1.4496': attribute type 2 has an invalid length. [ 264.898170][T15091] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 265.369033][T15123] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 265.716914][T15145] ip_tables: iptables: counters copy to user failed while replacing table [ 266.502348][T15193] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 267.153576][T15239] netlink: 'syz.0.4572': attribute type 2 has an invalid length. [ 267.153601][T15239] __nla_validate_parse: 2 callbacks suppressed [ 267.153614][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4572'. [ 267.292306][T15245] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 267.397224][T15250] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4577'. [ 267.683762][T15271] bond0: Error: Cannot enslave bond to itself. [ 267.767006][T15277] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 267.800961][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4590'. [ 267.800987][T15278] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4590'. [ 267.841697][T15279] netlink: 'syz.3.4592': attribute type 4 has an invalid length. [ 267.928376][T15283] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 268.356961][T15310] xt_l2tp: wrong L2TP version: 255 [ 268.667168][T15334] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4619'. [ 269.241935][T15369] xt_esp: unknown flags DD [ 269.293437][T15377] netlink: 'syz.1.4640': attribute type 11 has an invalid length. [ 269.293463][T15377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4640'. [ 269.451297][T15376] veth5: entered allmulticast mode [ 269.553364][T15389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.554513][ T5827] lo speed is unknown, defaulting to 1000 [ 269.702139][T15398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.744144][T15401] ipt_REJECT: TCP_RESET invalid for non-tcp [ 270.080739][T15423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.193006][T15430] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 270.234159][T15431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4668'. [ 270.332031][T15439] netlink: 872 bytes leftover after parsing attributes in process `syz.0.4671'. [ 270.432167][T15443] netlink: 'syz.3.4675': attribute type 3 has an invalid length. [ 270.812555][T15465] netlink: 'syz.3.4684': attribute type 11 has an invalid length. [ 270.812581][T15465] netlink: 'syz.3.4684': attribute type 4 has an invalid length. [ 270.812596][T15465] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4684'. [ 271.227597][T15491] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 271.329416][T15497] netlink: 'syz.3.4702': attribute type 21 has an invalid length. [ 271.329445][T15497] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.154688][T15535] xt_nfacct: accounting object `syz0' does not exist [ 272.478092][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'. [ 272.478133][T15558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4731'. [ 272.478155][T15558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4731'. [ 272.663716][T15572] xt_TCPMSS: Only works on TCP SYN packets [ 272.767366][T15579] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 272.957174][T15590] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.013014][T15591] TCP: TCP_TX_DELAY enabled [ 273.124431][T15600] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.436344][T15621] openvswitch: netlink: Invalid VLAN frame [ 273.579355][T15629] xt_LOG: level 8 >= 8 [ 273.625360][T15632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4765'. [ 273.625388][T15632] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4765'. [ 273.869397][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4772'. [ 274.091806][T15659] netlink: 'syz.4.4780': attribute type 4 has an invalid length. [ 274.151435][T15663] xt_l2tp: invalid flags combination: 0 [ 274.159481][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4783'. [ 274.159549][T15661] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4783'. [ 274.420229][T15679] netlink: 'syz.3.4792': attribute type 1 has an invalid length. [ 274.864149][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 275.078363][T15719] openvswitch: netlink: Multiple metadata blocks provided [ 275.270186][T15733] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4816'. [ 275.357354][T15739] ip6t_srh: unknown srh invflags 4000 [ 276.819181][T15833] netdevsim netdevsim1 : renamed from netdevsim0 [ 277.433626][T15873] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 277.777017][T15895] netlink: 'syz.2.4898': attribute type 21 has an invalid length. [ 277.777116][T15895] __nla_validate_parse: 10 callbacks suppressed [ 277.777130][T15895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4898'. [ 277.859674][T15900] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4899'. [ 278.104316][T15919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.270477][T15922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4913'. [ 278.430811][T15938] netlink: 'syz.1.4918': attribute type 49 has an invalid length. [ 278.572146][T15944] netlink: 'syz.2.4921': attribute type 1 has an invalid length. [ 278.604855][T15938] ip6gretap0: entered promiscuous mode [ 278.604882][T15938] ip6gretap0: entered allmulticast mode [ 279.706828][T16012] openvswitch: netlink: IPv4 tunnel dst address is zero [ 280.188093][T16039] ip6t_rt: unknown flags 36 [ 280.890010][T16070] Cannot find add_set index 4 as target [ 281.321449][T16099] nft_compat: unsupported protocol 0 [ 281.410256][T16107] xt_policy: neither incoming nor outgoing policy selected [ 281.742630][T16128] sock: sock_timestamping_bind_phc: sock not bind to device [ 281.804199][T16123] bond3: invalid ARP target 0.0.0.0 specified for addition [ 281.804228][T16123] bond3: option arp_ip_target: invalid value (0) [ 281.825336][T16123] bond3 (unregistering): Released all slaves [ 282.004881][T16142] openvswitch: netlink: IPv4 tunnel dst address is zero [ 282.418360][T16165] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5019'. [ 282.418391][T16165] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5019'. [ 282.418407][T16165] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5019'. [ 282.800483][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'. [ 283.250951][T16223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5049'. [ 283.429978][T16234] netlink: 3604 bytes leftover after parsing attributes in process `syz.3.5053'. [ 283.540686][T16240] ksmbd: Unknown IPC event: 1, ignore. [ 283.773574][T16255] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5064'. [ 283.773696][T16255] 0·: renamed from hsr0 (while UP) [ 283.805269][T16255] 0·: entered allmulticast mode [ 283.805296][T16255] hsr_slave_0: entered allmulticast mode [ 283.805314][T16255] hsr_slave_1: entered allmulticast mode [ 283.807693][T16255] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 284.231636][T16283] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5078'. [ 284.231872][T16283] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5078'. [ 284.231891][T16283] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5078'. [ 284.328425][T16289] netlink: set zone limit has 4 unknown bytes [ 284.519763][T16299] netlink: zone id is out of range [ 284.519781][T16299] netlink: zone id is out of range [ 284.519790][T16299] netlink: zone id is out of range [ 284.519799][T16299] netlink: zone id is out of range [ 284.519808][T16299] netlink: zone id is out of range [ 284.519816][T16299] netlink: zone id is out of range [ 284.520066][T16299] netlink: zone id is out of range [ 284.670778][T16308] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.751490][T16311] SET target dimension over the limit! [ 285.087476][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'. [ 286.058048][T16399] netlink: 'syz.3.5137': attribute type 6 has an invalid length. [ 286.143594][T16404] xt_socket: unknown flags 0xc [ 286.284611][T16413] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5141'. [ 286.344766][T16416] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5146'. [ 286.678293][T16441] IPVS: length: 239 != 24 [ 287.040396][T16461] SET target dimension over the limit! [ 287.064854][T16463] netlink: 'syz.2.5167': attribute type 2 has an invalid length. [ 287.164765][T16472] bond0: option ad_select: unable to set because the bond device is up [ 287.233835][T16474] ipt_REJECT: TCP_RESET invalid for non-tcp [ 287.679885][T16504] xt_HMARK: proto mask must be zero with L3 mode [ 287.993904][T16524] __nla_validate_parse: 1 callbacks suppressed [ 287.993926][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5199'. [ 288.349642][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5206'. [ 288.629262][T16559] veth9: entered promiscuous mode [ 288.629290][T16559] veth9: entered allmulticast mode [ 288.869633][T16579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.044148][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5225'. [ 289.347188][T16602] xt_ecn: cannot match TCP bits for non-tcp packets [ 289.487720][T16610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5239'. [ 289.487747][T16610] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5239'. [ 289.487774][T16610] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5239'. [ 290.074499][T16639] net_ratelimit: 2 callbacks suppressed [ 290.074524][T16639] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 290.333314][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5259'. [ 290.383306][T16659] bridge6: entered allmulticast mode [ 290.408349][ T1160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.408400][ T1160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.408436][ T1160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.408472][ T1160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.480189][T16661] netlink: 'syz.4.5263': attribute type 1 has an invalid length. [ 290.480214][T16661] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5263'. [ 290.778234][T16679] netlink: 'syz.3.5270': attribute type 1 has an invalid length. [ 290.972875][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5277'. [ 291.335222][T16714] netlink: 'syz.1.5287': attribute type 4 has an invalid length. [ 291.689425][T16738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5297'. [ 292.152987][T16758] bond3: entered promiscuous mode [ 292.153035][T16758] bond3: entered allmulticast mode [ 292.154789][T16758] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.360401][T16777] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 292.639680][T16795] x_tables: duplicate underflow at hook 1 [ 293.168941][T16818] bond5 (unregistering): Released all slaves [ 293.263558][T16832] xt_REDIRECT: bad MAP_IPS. [ 293.503843][T16843] netlink: 'syz.2.5335': attribute type 3 has an invalid length. [ 293.643932][T16850] __nla_validate_parse: 1 callbacks suppressed [ 293.643954][T16850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5339'. [ 294.591131][T16910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 294.607895][T16910] batman_adv: batadv0: Adding interface: gretap1 [ 294.607913][T16910] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.608396][T16910] batman_adv: batadv0: Interface activated: gretap1 [ 294.690111][T16916] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 294.690136][T16916] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 294.750523][ T52] Bluetooth: hci3: unexpected event 0x04 length: 17 > 10 [ 294.750551][ T52] Bluetooth: unknown link type 128 [ 294.857799][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5376'. [ 294.877517][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5374'. [ 294.877542][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5374'. [ 294.877569][T16928] netlink: 'syz.4.5374': attribute type 12 has an invalid length. [ 294.877584][T16928] netlink: 'syz.4.5374': attribute type 11 has an invalid length. [ 295.019196][T16931] netlink: 'syz.3.5377': attribute type 2 has an invalid length. [ 295.659702][T16973] Bluetooth: MGMT ver 1.23 [ 295.947218][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5407'. [ 296.131111][T16998] xfrm1: entered allmulticast mode [ 296.579493][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'. [ 296.765299][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 297.148206][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5441'. [ 297.148268][T17064] netlink: 'syz.2.5441': attribute type 1 has an invalid length. [ 297.522681][ T1155] IPVS: starting estimator thread 0... [ 297.605895][T17091] IPVS: using max 26 ests per chain, 62400 per kthread [ 297.704067][T17101] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 298.159992][T17131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 298.502078][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5483'. [ 298.603142][T17153] Bluetooth: hci0: unsupported parameter 5135 [ 298.603167][T17153] Bluetooth: hci0: unsupported parameter 8192 [ 298.603186][T17153] Bluetooth: hci0: unsupported parameter 5135 [ 298.603199][T17153] Bluetooth: hci0: unsupported parameter 8192 [ 298.741143][T17161] pim6reg: entered allmulticast mode [ 298.742978][T17161] pim6reg: left allmulticast mode [ 299.287771][T17195] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.363297][T17202] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5509'. [ 299.375811][T17202] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5509'. [ 299.717132][T17223] xt_NETMAP: bad MAP_IPS. [ 300.503962][T17267] netlink: 'syz.2.5538': attribute type 1 has an invalid length. [ 301.051813][T17295] tipc: Enabling of bearer rejected, failed to enable media [ 301.344951][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5564'. [ 301.562687][T17325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5568'. [ 301.565092][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 301.657471][T17332] openvswitch: netlink: Missing key (keys=40, expected=100) [ 301.918178][T17349] netlink: 'syz.0.5581': attribute type 3 has an invalid length. [ 301.918207][T17349] netlink: 'syz.0.5581': attribute type 1 has an invalid length. [ 301.918223][T17349] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5581'. [ 302.257644][T17370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.726305][T17395] netlink: 'syz.3.5603': attribute type 2 has an invalid length. [ 302.764728][T17402] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 303.164963][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5617'. [ 303.369783][T17439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5624'. [ 303.402904][T17440] tipc: Enabling of bearer rejected, failed to enable media [ 303.860171][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5642'. [ 303.860209][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5642'. [ 303.883610][T17474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.194968][T17494] Bluetooth: MGMT ver 1.23 [ 304.704126][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5667'. [ 305.494087][T17573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5690'. [ 305.978903][T17604] netlink: 'syz.1.5703': attribute type 2 has an invalid length. [ 306.461071][T17630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5715'. [ 306.699653][T17641] wireguard0: entered promiscuous mode [ 306.751753][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5721'. [ 307.032564][T17662] team0: Device ipvlan0 failed to register rx_handler [ 307.045768][T17661] tipc: Started in network mode [ 307.045798][T17661] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 307.048313][T17661] tipc: Enabled bearer , priority 10 [ 307.488779][T17684] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5733'. [ 307.488844][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5733'. [ 307.906503][T17712] Zero length message leads to an empty skb [ 308.162099][T17726] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5753'. [ 308.198719][ T30] tipc: Node number set to 10136234 [ 308.323241][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5754'. [ 308.346442][T17738] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.5756'. [ 308.346477][T17738] netlink: 'syz.0.5756': attribute type 1 has an invalid length. [ 308.958545][T17773] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5767'. [ 309.088172][T17778] IPVS: ip_vs_add_dest(): server weight less than zero [ 309.186353][T17784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.534040][T17803] netlink: 'syz.4.5781': attribute type 12 has an invalid length. [ 309.690533][T17812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.751619][T17816] netlink: 'syz.1.5788': attribute type 1 has an invalid length. [ 310.234606][T17844] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 310.346134][T17852] netlink: 'syz.1.5807': attribute type 1 has an invalid length. [ 310.346175][T17852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.543620][T17863] __nla_validate_parse: 1 callbacks suppressed [ 310.543641][T17863] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5811'. [ 310.580809][T17864] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 311.268405][T17904] ovs-s: entered promiscuous mode [ 311.290069][T17909] openvswitch: ovs-s: Dropping previously announced user features [ 311.363282][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5836'. [ 311.363320][T17916] netlink: 'syz.0.5836': attribute type 5 has an invalid length. [ 311.363336][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5836'. [ 311.819581][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5850'. [ 311.819682][T17942] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 311.819714][T17942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.550609][T17989] ip_tables: iptables: counters copy to user failed while replacing table [ 312.772302][ T1047] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.772561][ T1047] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.800120][ T5747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.076598][ T5747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.439975][ T5747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.489121][T18043] netlink: zone id is out of range [ 313.578935][T18050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.441463][T18099] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5924'. [ 314.859631][T18125] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5937'. [ 315.224826][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5948'. [ 315.294699][T18151] Bluetooth: hci0: unsupported parameter 5135 [ 315.294724][T18151] Bluetooth: hci0: unsupported parameter 8192 [ 315.294739][T18151] Bluetooth: hci0: unsupported parameter 5135 [ 315.294752][T18151] Bluetooth: hci0: unsupported parameter 8192 [ 315.757701][T18177] netlink: 'syz.1.5962': attribute type 2 has an invalid length. [ 316.498263][T18226] smc: net device lo applied user defined pnetid SYZ0 [ 316.498463][T18226] smc: smcd device lo applied user defined pnetid SYZ0 [ 316.790965][T18244] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5991'. [ 316.790993][T18244] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5991'. [ 316.791012][T18244] netlink: 'syz.2.5991': attribute type 5 has an invalid length. [ 316.791026][T18244] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5991'. [ 317.165343][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.409456][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.543506][T18284] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.556553][T18284] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 318.192221][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6025'. [ 318.331644][T18330] vlan2: entered allmulticast mode [ 318.331669][T18330] bond0: entered allmulticast mode [ 318.331683][T18330] bond_slave_0: entered allmulticast mode [ 318.331701][T18330] bond_slave_1: entered allmulticast mode [ 318.610068][T18347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6038'. [ 318.713671][T18349] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 318.944811][T18359] vlan2: entered promiscuous mode [ 318.944835][T18359] bridge0: entered promiscuous mode [ 318.963364][T18359] vlan2: entered allmulticast mode [ 318.963388][T18359] bridge0: entered allmulticast mode [ 319.418414][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6054'. [ 319.852496][T18403] netlink: 'syz.4.6065': attribute type 4 has an invalid length. [ 319.969143][T18406] Bluetooth: hci0: unsupported parameter 5135 [ 319.969165][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 319.969177][T18406] Bluetooth: hci0: unsupported parameter 5135 [ 319.969188][T18406] Bluetooth: hci0: unsupported parameter 8192 [ 320.241876][T18421] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6072'. [ 320.281597][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6075'. [ 320.281624][T18424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6075'. [ 320.696141][T18440] netlink: 'syz.4.6081': attribute type 1 has an invalid length. [ 320.696165][T18440] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6081'. [ 320.696182][T18440] netlink: 'syz.4.6081': attribute type 1 has an invalid length. [ 321.174126][T18466] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 321.902664][T18514] Bluetooth: MGMT ver 1.23 [ 322.153045][T18528] netlink: 'syz.2.6122': attribute type 9 has an invalid length. [ 322.153071][T18528] __nla_validate_parse: 1 callbacks suppressed [ 322.153084][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6122'. [ 322.964676][T18579] netlink: NAT attribute has 4 unknown bytes [ 322.964714][T18579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.296485][T18599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6157'. [ 323.296513][T18599] nbd: illegal input index 65508 [ 323.574496][T18607] bond5: (slave bond_slave_0): Device is not bonding slave [ 323.574521][T18607] bond5: option active_slave: invalid value (bond_slave_0) [ 323.590829][T18607] bond5 (unregistering): Released all slaves [ 323.990288][T18637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6175'. [ 324.433620][T18665] Bluetooth: hci0: unsupported parameter 5135 [ 324.433648][T18665] Bluetooth: hci0: unsupported parameter 8192 [ 324.433664][T18665] Bluetooth: hci0: unsupported parameter 5135 [ 324.433680][T18665] Bluetooth: hci0: unsupported parameter 8192 [ 325.006183][T18694] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 325.201909][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6210'. [ 325.260714][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6211'. [ 325.421510][T18722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6216'. [ 325.631821][T18730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.634373][T18732] xt_IDLETIMER: label is empty or not nul-terminated [ 325.670159][T18734] netlink: 'syz.2.6223': attribute type 29 has an invalid length. [ 325.725274][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 325.970496][T18751] sctp: [Deprecated]: syz.4.6231 (pid 18751) Use of int in maxseg socket option. [ 325.970496][T18751] Use struct sctp_assoc_value instead [ 326.164874][T18761] netlink: 'syz.3.6236': attribute type 1 has an invalid length. [ 326.164899][T18761] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6236'. [ 326.164917][T18761] netlink: 'syz.3.6236': attribute type 1 has an invalid length. [ 326.257780][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 326.700120][T18783] netlink: Failed to add nicvf0 helper -22 [ 326.700188][T18783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.737854][T18791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6249'. [ 327.678312][T18844] lo: entered promiscuous mode [ 327.678856][T18844] lo: left promiscuous mode [ 327.743756][T18848] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6277'. [ 327.743783][T18848] netlink: 'syz.0.6277': attribute type 9 has an invalid length. [ 327.829745][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6281'. [ 328.340467][T18887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6293'. [ 328.344854][T18887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6293'. [ 329.121911][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'. [ 329.122940][T18937] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6318'. [ 329.808116][T18976] syz.4.6336 (18976) used obsolete PPPIOCDETACH ioctl [ 330.068776][T18993] netlink: 'syz.0.6345': attribute type 46 has an invalid length. [ 330.372819][T19014] netlink: Setting conntrack mark requires 'commit' flag. [ 330.372855][T19014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.538981][T19024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.841521][T19038] netlink: zone id is out of range [ 330.841540][T19038] netlink: zone id is out of range [ 330.841682][T19038] netlink: zone id is out of range [ 331.243140][T19064] Bluetooth: MGMT ver 1.23 [ 331.728257][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6395'. [ 331.784530][T19096] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 331.793937][T19096] team0: Device ipvlan2 is already an upper device of the team interface [ 331.805851][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 332.394832][T19127] netlink: NAT attribute has 4 unknown bytes [ 332.394868][T19127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.686517][T19144] netlink: 'syz.2.6416': attribute type 142 has an invalid length. [ 333.431243][T19178] netlink: 'syz.2.6433': attribute type 11 has an invalid length. [ 333.537148][ T1155] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.788817][T19200] openvswitch: netlink: Missing valid actions attribute. [ 333.788854][T19200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.864291][T19206] tipc: Started in network mode [ 333.864327][T19206] tipc: Node identity 622d6ffc0fbd, cluster identity 4711 [ 333.864479][T19206] tipc: Enabled bearer , priority 11 [ 333.976862][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6450'. [ 334.113842][T19217] Bluetooth: hci0: unsupported parameter 5134 [ 334.113868][T19217] Bluetooth: hci0: unsupported parameter 8192 [ 334.113883][T19217] Bluetooth: hci0: unsupported parameter 5134 [ 334.113896][T19217] Bluetooth: hci0: unsupported parameter 8192 [ 334.390262][T19235] ip_tables: iptables: counters copy to user failed while replacing table [ 334.563289][ T5767] wlan1 speed is unknown, defaulting to 1000 [ 334.563332][ T5767] syz2: Port: 1 Link DOWN [ 334.996433][ T5767] tipc: Node number set to 1838182396 [ 335.328541][T19292] netlink: 'syz.1.6489': attribute type 7 has an invalid length. [ 335.786312][T19318] netlink: 'syz.3.6501': attribute type 8 has an invalid length. [ 335.786337][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6501'. [ 335.825857][T19320] ip_tables: iptables: counters copy to user failed while replacing table [ 335.894428][T19322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6503'. [ 336.277006][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6512'. [ 336.430420][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6516'. [ 336.430602][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6516'. [ 336.731995][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6527'. [ 337.004777][T19386] tipc: MTU too low for tipc bearer [ 337.174264][T19398] sctp: [Deprecated]: syz.2.6539 (pid 19398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.174264][T19398] Use struct sctp_sack_info instead [ 337.216734][T19401] tipc: Enabling of bearer rejected, media not registered [ 337.343860][T19407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.837456][T19434] digital: digital_start_poll: Unknown protocol [ 337.984112][T19442] No such timeout policy "syz1" [ 338.091286][T19449] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 338.169506][T19452] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6565'. [ 338.169686][T19454] tipc: Started in network mode [ 338.169717][T19454] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 338.170126][T19454] tipc: Enabled bearer , priority 10 [ 338.412848][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6573'. [ 338.873278][T19493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6585'. [ 339.285424][ T5767] tipc: Node number set to 10070698 [ 339.730107][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6612'. [ 340.165299][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6626'. [ 340.329848][T19580] Bluetooth: hci0: unsupported parameter 5135 [ 340.329874][T19580] Bluetooth: hci0: unsupported parameter 8192 [ 340.329888][T19580] Bluetooth: hci0: unsupported parameter 5135 [ 340.329902][T19580] Bluetooth: hci0: unsupported parameter 8192 [ 340.566915][T19590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.719301][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6638'. [ 341.515237][T19645] nbd: must specify a size in bytes for the device [ 341.725279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.923573][T19667] ovs0: entered promiscuous mode [ 341.992707][T19674] tipc: Enabling of bearer rejected, failed to enable media [ 342.178033][T19687] netlink: 'syz.3.6680': attribute type 1 has an invalid length. [ 342.451677][T19702] netlink: 'syz.0.6686': attribute type 11 has an invalid length. [ 342.694524][T19718] Bluetooth: hci0: unsupported parameter 5161 [ 342.694558][T19718] Bluetooth: hci0: unsupported parameter 8192 [ 342.694572][T19718] Bluetooth: hci0: unsupported parameter 5161 [ 342.694589][T19718] Bluetooth: hci0: unsupported parameter 8192 [ 342.843318][T19725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6697'. [ 342.927758][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6703'. [ 343.244658][T19750] netlink: 'syz.3.6711': attribute type 1 has an invalid length. [ 343.244681][T19750] netlink: 208 bytes leftover after parsing attributes in process `syz.3.6711'. [ 343.622093][T19776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6722'. [ 343.932244][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6732'. [ 344.063068][T19802] tipc: Enabled bearer , priority 9 [ 344.349814][ T31] audit: type=1800 audit(1792498609.132:2): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6742" name="memory.events" dev="tmpfs" ino=6546 res=0 errno=0 [ 344.351456][ T31] audit: type=1804 audit(1792498609.132:3): pid=19822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6742" name="/newroot/1304/memory.events" dev="tmpfs" ino=6546 res=1 errno=0 [ 344.527961][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6745'. [ 345.035306][T19863] Bluetooth: hci0: unsupported parameter 5134 [ 345.035339][T19863] Bluetooth: hci0: unsupported parameter 8192 [ 345.035355][T19863] Bluetooth: hci0: unsupported parameter 5134 [ 345.035368][T19863] Bluetooth: hci0: unsupported parameter 8192 [ 345.155255][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6764'. [ 345.155281][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6764'. [ 345.366994][T19880] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6772'. [ 345.766672][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6779'. [ 345.851342][T19905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6784'. [ 345.852097][T19905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6784'. [ 345.930142][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6785'. [ 346.553948][T19942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.731118][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6807'. [ 346.731154][T19955] netlink: 'syz.3.6807': attribute type 3 has an invalid length. [ 346.731810][T19954] xt_hashlimit: size too large, truncated to 1048576 [ 347.253045][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6819'. [ 347.314788][T19985] netlink: 'syz.2.6821': attribute type 2 has an invalid length. [ 347.333327][T19985] : entered promiscuous mode [ 347.407853][T19991] sctp: [Deprecated]: syz.4.6824 (pid 19991) Use of int in max_burst socket option deprecated. [ 347.407853][T19991] Use struct sctp_assoc_value instead [ 347.448530][T19993] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6825'. [ 347.516207][T19995] nbd: illegal input index -8454144 [ 347.944233][T20022] netlink: 'syz.2.6840': attribute type 11 has an invalid length. [ 348.490486][T20052] netlink: 'syz.3.6854': attribute type 29 has an invalid length. [ 348.592633][T20055] macvlan0: entered allmulticast mode [ 348.592658][T20055] veth1_vlan: entered allmulticast mode [ 348.619627][T20055] team0: Port device macvlan0 added [ 348.839671][T20072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.916590][T20076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 349.067973][T20084] Bluetooth: hci0: unsupported parameter 5135 [ 349.068000][T20084] Bluetooth: hci0: unsupported parameter 8192 [ 349.068015][T20084] Bluetooth: hci0: unsupported parameter 5135 [ 349.068028][T20084] Bluetooth: hci0: unsupported parameter 8192 [ 349.084954][T20086] raw_sendmsg: syz.4.6870 forgot to set AF_INET. Fix it! [ 349.510643][T20109] ip_tables: iptables: counters copy to user failed while replacing table [ 349.752994][T20125] netlink: 'syz.0.6889': attribute type 2 has an invalid length. [ 350.360234][T20164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.435533][T20169] netlink: 'syz.4.6913': attribute type 64 has an invalid length. [ 350.435556][T20169] __nla_validate_parse: 3 callbacks suppressed [ 350.435569][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6913'. [ 350.966081][T20199] netlink: 'syz.3.6925': attribute type 3 has an invalid length. [ 351.100894][T20208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6933'. [ 351.219487][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6932'. [ 351.553248][T20237] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 351.553286][T20237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.315472][T20281] tipc: Started in network mode [ 352.315496][T20281] tipc: Node identity c, cluster identity 4711 [ 352.315511][T20281] tipc: Node number set to 12 [ 352.316036][T20281] tipc: Cannot configure node identity twice [ 352.995034][T20316] Bluetooth: hci0: unsupported parameter 5161 [ 352.995057][T20316] Bluetooth: hci0: unsupported parameter 8192 [ 352.995071][T20316] Bluetooth: hci0: unsupported parameter 5161 [ 352.995084][T20316] Bluetooth: hci0: unsupported parameter 8192 [ 354.409902][T20406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7022'. [ 354.794569][T20428] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7034'. [ 355.012285][T20438] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7037'. [ 355.012341][T20438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7037'. [ 355.012357][T20438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7037'. [ 355.023157][T20440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7039'. [ 355.023274][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7039'. [ 355.853368][T20490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7065'. [ 356.107799][T20506] ieee802154 phy0 wpan0: encryption failed: -22 [ 356.176665][T20508] vlan2: entered allmulticast mode [ 356.176688][T20508] bond0: entered allmulticast mode [ 356.176703][T20508] : entered allmulticast mode [ 356.176722][T20508] bond_slave_1: entered allmulticast mode [ 356.176744][T20508] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 356.475473][T20522] ip_tables: iptables: counters copy to user failed while replacing table [ 356.602521][T20528] macsec0: entered promiscuous mode [ 356.602764][T20528] macsec0: entered allmulticast mode [ 356.602801][T20528] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 356.624793][T20528] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 356.647942][T20528] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 356.812914][T20540] netlink: 'syz.0.7090': attribute type 178 has an invalid length. [ 357.180873][T20560] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7099'. [ 357.619128][T20588] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7114'. [ 358.674715][T20631] pim6reg: entered allmulticast mode [ 358.836265][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7141'. [ 358.836293][T20639] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7141'. [ 358.836312][T20639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7141'. [ 359.143004][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7148'. [ 359.403785][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7156'. [ 359.404200][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7156'. [ 360.273117][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7183'. [ 360.273462][T20727] xt_cgroup: path and classid specified [ 360.568805][T20741] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 361.141156][T20775] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 361.141198][T20775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.227272][T20779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.405339][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 361.501146][T20794] wireguard: wg2: Could not create IPv4 socket [ 361.557224][T20797] netlink: 'syz.4.7216': attribute type 11 has an invalid length. [ 362.058070][T20833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.098762][T20833] netlink: Invalid conntrack helper [ 362.098798][T20833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.333990][T20848] nbd: socks must be embedded in a SOCK_ITEM attr [ 362.689178][T20871] __nla_validate_parse: 1 callbacks suppressed [ 362.689202][T20871] netlink: 3728 bytes leftover after parsing attributes in process `syz.2.7257'. [ 362.690132][T20871] netlink: 3784 bytes leftover after parsing attributes in process `syz.2.7257'. [ 362.891571][T20886] netlink: 'syz.0.7261': attribute type 32 has an invalid length. [ 362.891600][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7261'. [ 362.964355][T20886] bond2: Setting coupled_control to off (0) [ 363.163570][T20900] netlink: 'syz.2.7268': attribute type 4 has an invalid length. [ 363.163596][T20900] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7268'. [ 363.462316][T20919] netlink: 'syz.2.7276': attribute type 25 has an invalid length. [ 363.815354][T20936] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 363.815396][T20936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.983650][T20945] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7289'. [ 364.369715][T20968] netlink: 'syz.1.7299': attribute type 33 has an invalid length. [ 364.753783][T20992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7311'. [ 364.753815][T20992] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7311'. [ 364.753832][T20992] netlink: 'syz.4.7311': attribute type 5 has an invalid length. [ 364.753847][T20992] netlink: 'syz.4.7311': attribute type 6 has an invalid length. [ 364.753860][T20992] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7311'. [ 364.922194][T21000] netlink: 'syz.3.7319': attribute type 83 has an invalid length. [ 365.204421][T21018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7324'. [ 365.246783][T21023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7327'. [ 365.353779][T21028] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 365.528353][T21039] netlink: 'syz.0.7337': attribute type 1 has an invalid length. [ 365.528381][T21039] netlink: 'syz.0.7337': attribute type 1 has an invalid length. [ 365.729054][T21049] bond3: Invalid ad_actor_system MAC address. [ 365.729078][T21049] bond3: option ad_actor_system: invalid value (1) [ 365.733951][T21049] bond3 (unregistering): Released all slaves [ 366.108549][T21073] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 368.277743][T21203] netlink: Failed to add %pB helper -22 [ 368.277801][T21203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.525066][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 369.603331][T21276] ip_tables: iptables: counters copy to user failed while replacing table [ 370.155640][T21291] __nla_validate_parse: 8 callbacks suppressed [ 370.155666][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7458'. [ 370.157525][T21290] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7459'. [ 370.374700][T21295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7461'. [ 371.222420][T21321] xt_hashlimit: size too large, truncated to 1048576 [ 371.944927][T21344] ip_tables: iptables: counters copy to user failed while replacing table [ 372.600337][T21366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7494'. [ 372.600386][T21366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7494'. [ 372.754853][T21370] nbd: must specify an index to disconnect [ 373.288326][T21392] Bluetooth: hci0: unsupported parameter 5135 [ 373.288354][T21392] Bluetooth: hci0: unsupported parameter 8192 [ 373.288369][T21392] Bluetooth: hci0: unsupported parameter 5135 [ 373.288383][T21392] Bluetooth: hci0: unsupported parameter 8192 [ 373.955214][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7519'. [ 374.339302][T21429] netlink: zone id is out of range [ 374.339322][T21429] netlink: zone id is out of range [ 374.339332][T21429] netlink: zone id is out of range [ 374.339341][T21429] netlink: zone id is out of range [ 374.339350][T21429] netlink: zone id is out of range [ 374.339359][T21429] netlink: zone id is out of range [ 374.339373][T21429] netlink: zone id is out of range [ 374.339382][T21429] netlink: zone id is out of range [ 374.339391][T21429] netlink: zone id is out of range [ 374.339400][T21429] netlink: zone id is out of range [ 374.369038][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.058147][T21484] validate_nla: 3 callbacks suppressed [ 376.058171][T21484] netlink: 'syz.0.7549': attribute type 2 has an invalid length. [ 376.420151][T21500] nbd: must specify at least one socket [ 376.517110][T21504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7559'. [ 376.859082][T21513] sock: sock_timestamping_bind_phc: sock not bind to device [ 377.182677][T21526] netlink: 'syz.0.7567': attribute type 1 has an invalid length. [ 377.182702][T21526] netlink: 'syz.0.7567': attribute type 3 has an invalid length. [ 377.182717][T21526] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7567'. [ 377.182735][T21526] NCSI netlink: No device for ifindex 813332851 [ 377.267410][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7572'. [ 378.038488][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7588'. [ 378.312436][T21578] netlink: 604 bytes leftover after parsing attributes in process `syz.3.7595'. [ 378.775291][T21598] Bluetooth: hci0: unsupported parameter 5134 [ 378.775317][T21598] Bluetooth: hci0: unsupported parameter 8192 [ 378.775346][T21598] Bluetooth: hci0: unsupported parameter 5134 [ 378.775361][T21598] Bluetooth: hci0: unsupported parameter 8192 [ 378.852753][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.910848][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7607'. [ 379.100377][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7608'. [ 379.691869][T21637] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7624'. [ 379.691902][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7624'. [ 380.546470][T21664] netlink: 3560 bytes leftover after parsing attributes in process `syz.4.7636'. [ 381.487052][T21700] net_ratelimit: 498 callbacks suppressed [ 381.487075][T21700] ip_tables: iptables: counters copy to user failed while replacing table [ 381.712208][T21706] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7656'. [ 381.966465][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7661'. [ 381.966489][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7661'. [ 383.226324][T21771] openvswitch: netlink: Missing key (keys=40, expected=100) [ 383.907144][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7700'. [ 384.532322][T21822] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7711'. [ 385.406644][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7730'. [ 385.810936][T21875] netlink: 'syz.2.7739': attribute type 8 has an invalid length. [ 385.810961][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7739'. [ 385.810995][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7739'. [ 385.892270][T21878] netlink: 'syz.1.7740': attribute type 1 has an invalid length. [ 385.892298][T21878] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7740'. [ 385.892316][T21878] netlink: 'syz.1.7740': attribute type 1 has an invalid length. [ 386.126204][ T43] wlan1: Trigger new scan to find an IBSS to join [ 386.318642][T21892] Bluetooth: hci0: unsupported parameter 5135 [ 386.318666][T21892] Bluetooth: hci0: unsupported parameter 8192 [ 386.318683][T21892] Bluetooth: hci0: unsupported parameter 5135 [ 386.318698][T21892] Bluetooth: hci0: unsupported parameter 8192 [ 386.851017][T21913] ip_tables: iptables: counters copy to user failed while replacing table [ 387.176746][T21924] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 387.176784][T21924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.348286][T21929] ip_tables: iptables: counters copy to user failed while replacing table [ 388.241111][T21971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7786'. [ 388.544080][T21984] tipc: Enabling of bearer rejected, failed to enable media [ 388.764395][T21994] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7795'. [ 389.166669][ T1160] wlan1: Trigger new scan to find an IBSS to join [ 389.652724][T22030] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 389.840561][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7819'. [ 390.028676][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7818'. [ 390.028711][T22042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7818'. [ 390.028730][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7818'. [ 390.451593][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7828'. [ 390.531543][T22063] netlink: 'syz.3.7829': attribute type 58 has an invalid length. [ 390.531567][T22063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7829'. [ 390.582548][T22065] netlink: 'syz.0.7831': attribute type 1 has an invalid length. [ 390.582596][T22065] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7831'. [ 390.582615][T22065] netlink: 'syz.0.7831': attribute type 1 has an invalid length. [ 391.135460][T22089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7841'. [ 392.126875][ T50] wlan1: Creating new IBSS network, BSSID 2e:c4:df:a8:21:b5 [ 392.133349][ T5827] wlan1 speed is unknown, defaulting to 1000 [ 392.133480][ T5827] syz2: Port: 1 Link ACTIVE [ 392.337534][T22136] netlink: 'syz.3.7861': attribute type 9 has an invalid length. [ 392.551612][T22146] netlink: 'syz.4.7866': attribute type 10 has an invalid length. [ 392.680787][T22154] netlink: 'syz.1.7870': attribute type 3 has an invalid length. [ 393.298383][T22179] __nla_validate_parse: 5 callbacks suppressed [ 393.298407][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7882'. [ 393.298428][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7882'. [ 393.300869][T22179] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7882'. [ 393.300893][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7882'. [ 393.475026][T22184] Bluetooth: MGMT ver 1.23 [ 394.033726][T22212] netlink: 'syz.0.7898': attribute type 1 has an invalid length. [ 394.047587][T22209] SET target dimension over the limit! [ 396.102735][T22276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 396.716416][T22299] netlink: Unknown NAT attribute (type=2049, max=9) [ 396.716458][T22299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.807972][T22301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.302247][T22322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7950'. [ 397.302312][T22322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7950'. [ 397.645022][T22336] Bluetooth: hci0: unsupported parameter 5135 [ 397.645047][T22336] Bluetooth: hci0: unsupported parameter 8192 [ 397.645061][T22336] Bluetooth: hci0: unsupported parameter 5135 [ 397.645075][T22336] Bluetooth: hci0: unsupported parameter 8192 [ 397.919676][T22347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7961'. [ 398.424135][T22365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7972'. [ 398.871227][T22382] netlink: 'syz.2.7980': attribute type 1 has an invalid length. [ 398.939965][T22387] netlink: 316 bytes leftover after parsing attributes in process `syz.0.7983'. [ 398.939994][T22387] netlink: 316 bytes leftover after parsing attributes in process `syz.0.7983'. [ 399.601216][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7993'. [ 399.616265][T22411] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.806069][T22450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8013'. [ 401.583308][ T31] audit: type=1107 audit(1792498666.362:4): pid=22481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 402.408175][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8032'. [ 402.408205][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8032'. [ 402.745191][ T1160] IPVS: starting estimator thread 0... [ 402.830506][T22518] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8039'. [ 402.844294][T22515] IPVS: using max 27 ests per chain, 64800 per kthread [ 402.925726][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 403.013145][T22527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8043'. [ 403.082466][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8046'. [ 403.464822][T22545] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 404.540221][T22588] __nla_validate_parse: 4 callbacks suppressed [ 404.540243][T22588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8072'. [ 404.870751][T22602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.019733][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 406.763305][T22665] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8110'. [ 407.600066][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8124'. [ 407.601383][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8124'. [ 407.856309][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8127'. [ 408.094884][T22713] openvswitch: netlink: Missing key (keys=40, expected=100) [ 408.348028][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8137'. [ 408.602558][T22728] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8140'. [ 409.187575][T22748] sock: sock_set_timeout: `syz.4.8150' (pid 22748) tries to set negative timeout [ 410.808495][T22799] netlink: 75 bytes leftover after parsing attributes in process `syz.2.8172'. [ 410.920302][T22804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8175'. [ 411.010094][T22806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8176'. [ 411.187771][T22810] Bluetooth: hci0: unsupported parameter 5135 [ 411.187799][T22810] Bluetooth: hci0: unsupported parameter 8192 [ 411.187815][T22810] Bluetooth: hci0: unsupported parameter 5135 [ 411.187828][T22810] Bluetooth: hci0: unsupported parameter 8192 [ 412.045831][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8193'. [ 412.045875][T22840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.153893][T22844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8198'. [ 412.232086][T22846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8194'. [ 412.563278][T22863] netlink: 'syz.1.8205': attribute type 1 has an invalid length. [ 412.563304][T22863] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8205'. [ 412.564033][T22860] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 412.673835][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8208'. [ 412.758587][T22869] tipc: Enabled bearer , priority 10 [ 412.826619][T22871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.172324][T22887] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 414.142591][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8236'. [ 414.183507][T22937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8240'. [ 414.399326][T22944] tipc: Enabled bearer , priority 10 [ 414.724271][T22957] IPVS: Error connecting to the multicast addr [ 416.480258][T23021] __nla_validate_parse: 1 callbacks suppressed [ 416.480286][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8281'. [ 416.480305][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8281'. [ 416.480334][T23021] netlink: 'syz.1.8281': attribute type 14 has an invalid length. [ 416.480372][T23021] netlink: 'syz.1.8281': attribute type 13 has an invalid length. [ 416.646414][T23028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8285'. [ 417.480111][T23063] ip_tables: iptables: counters copy to user failed while replacing table [ 420.204011][ T1379] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.249341][T23185] openvswitch: netlink: Unknown key attributes 20 [ 420.889274][T23205] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8360'. [ 421.175585][T23218] ip_tables: iptables: counters copy to user failed while replacing table [ 421.403433][T23227] netlink: 252 bytes leftover after parsing attributes in process `syz.4.8373'. [ 422.837775][T23259] netlink: 'syz.4.8387': attribute type 4 has an invalid length. [ 422.837804][T23259] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8387'. [ 423.424486][T23281] atomic_op ffff8880529da1e0 conn xmit_atomic 0000000000000000 [ 423.635183][T23288] tipc: Enabling of bearer rejected, failed to enable media [ 423.752179][T23294] nftables ruleset with unbound set [ 424.168223][T23311] openvswitch: netlink: Missing key (keys=40, expected=100) [ 424.253540][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8414'. [ 425.010358][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8426'. [ 425.444678][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 425.444705][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8434'. [ 425.995420][T23380] ip_tables: iptables: counters copy to user failed while replacing table [ 426.052432][T23379] batadv0: entered promiscuous mode [ 426.068211][T23379] macsec1: entered promiscuous mode [ 426.105037][T23379] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 426.143236][T23379] batadv0: left promiscuous mode [ 426.918869][T23406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8457'. [ 427.744264][T23421] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8466'. [ 428.434916][T23440] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8475'. [ 428.970146][T23466] tipc: Bearer : already 2 bearers with priority 10 [ 428.970170][T23466] tipc: Bearer : trying with adjusted priority [ 428.970261][T23466] tipc: Enabling of bearer rejected, failed to enable media [ 429.462337][T23487] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8496'. [ 429.561705][T23456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 430.623953][T23537] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8521'. [ 431.425448][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8535'. [ 431.464665][T23566] netlink: 'syz.4.8534': attribute type 3 has an invalid length. [ 431.636818][T23571] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.884168][T23580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8542'. [ 431.884202][T23580] block nbd0: Unsupported socket: should be TCP or UNIX. [ 432.178810][T23589] netlink: 'syz.2.8546': attribute type 3 has an invalid length. [ 432.178837][T23589] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8546'. [ 432.930002][T23616] netlink: 'syz.0.8559': attribute type 3 has an invalid length. [ 432.962390][T23613] vlan3: entered allmulticast mode [ 432.962416][T23613] bond0: entered allmulticast mode [ 433.265166][T23622] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 433.384290][T23627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8565'. [ 433.724304][T23643] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 433.838712][T23645] Bluetooth: hci0: unsupported parameter 5135 [ 433.838742][T23645] Bluetooth: hci0: unsupported parameter 8192 [ 433.838756][T23645] Bluetooth: hci0: unsupported parameter 5135 [ 433.838770][T23645] Bluetooth: hci0: unsupported parameter 8192 [ 434.418927][T23674] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 434.759814][T23684] ip_tables: iptables: counters copy to user failed while replacing table [ 436.627488][T23756] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8625'. [ 436.680343][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8626'. [ 438.282594][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8649'. [ 438.302920][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8649'. [ 438.395850][T23810] ip_tables: iptables: counters copy to user failed while replacing table [ 438.678961][T23825] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 439.678197][T23865] vlan0: entered promiscuous mode [ 439.770221][T23871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.286998][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.306336][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.080625][T23916] smc: net device team0 applied user defined pnetid SYZ2 [ 441.124474][T23919] gretap0: entered promiscuous mode [ 441.143906][T23919] vlan4: entered promiscuous mode [ 442.252624][T23960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8722'. [ 442.252659][T23960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8722'. [ 442.383243][T23966] netlink: 'syz.2.8726': attribute type 1 has an invalid length. [ 442.383270][T23966] netlink: 'syz.2.8726': attribute type 2 has an invalid length. [ 442.383285][T23966] netlink: 'syz.2.8726': attribute type 3 has an invalid length. [ 442.383299][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8726'. [ 442.932021][T23986] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8733'. [ 443.509238][T24010] ip_tables: iptables: counters copy to user failed while replacing table [ 444.182559][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8755'. [ 445.243480][T24069] netlink: 'syz.4.8774': attribute type 1 has an invalid length. [ 445.337056][T24075] xt_IDLETIMER: timeout value is too big [ 445.384071][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8778'. [ 445.501589][T24079] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8779'. [ 446.453808][T24118] ip_tables: iptables: counters copy to user failed while replacing table [ 447.641754][T24163] netlink: 'syz.3.8820': attribute type 7 has an invalid length. [ 447.641780][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8820'. [ 447.641815][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8820'. [ 448.308324][T24184] Bluetooth: hci0: unsupported parameter 5134 [ 448.308352][T24184] Bluetooth: hci0: unsupported parameter 8192 [ 448.308367][T24184] Bluetooth: hci0: unsupported parameter 5134 [ 448.308388][T24184] Bluetooth: hci0: unsupported parameter 8192 [ 449.914201][T24243] netlink: 'syz.1.8857': attribute type 5 has an invalid length. [ 449.914262][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8857'. [ 450.160165][T24247] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 450.162240][T24247] team0: Device ipvlan2 is already an upper device of the team interface [ 450.313319][T24252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8862'. [ 451.129517][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 451.148734][T24272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8871'. [ 451.523373][T24282] netlink: 'syz.3.8876': attribute type 25 has an invalid length. [ 452.329748][T24313] tipc: Enabling not permitted [ 452.329787][T24313] tipc: Enabling of bearer rejected, failed to enable media [ 452.643908][T24325] netlink: 'syz.1.8894': attribute type 2 has an invalid length. [ 452.653535][T24327] ip_tables: iptables: counters copy to user failed while replacing table [ 453.225790][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8905'. [ 453.361446][T24350] netlink: 'syz.0.8906': attribute type 1 has an invalid length. [ 453.775415][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8912'. [ 453.816238][T24362] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 453.819816][T24362] bond5 (unregistering): Released all slaves [ 454.308386][T24387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8923'. [ 454.354608][T24389] vlan1: entered allmulticast mode [ 454.354858][T24389] veth0_vlan: entered allmulticast mode [ 454.823007][T24407] ip_tables: iptables: counters copy to user failed while replacing table [ 455.121697][T24419] netlink: 'syz.2.8937': attribute type 29 has an invalid length. [ 455.121725][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8937'. [ 455.162668][T24419] netlink: 'syz.2.8937': attribute type 29 has an invalid length. [ 455.162696][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8937'. [ 456.035789][T24454] netlink: 'syz.3.8956': attribute type 1 has an invalid length. [ 456.035815][T24454] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8956'. [ 456.035840][T24454] netlink: 'syz.3.8956': attribute type 1 has an invalid length. [ 456.330253][T24467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8962'. [ 456.518376][T24474] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 456.763925][T24484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8969'. [ 457.014755][T24494] netlink: 'syz.4.8973': attribute type 29 has an invalid length. [ 457.045392][T24494] netlink: 'syz.4.8973': attribute type 29 has an invalid length. [ 457.959900][T24524] netlink: 'syz.0.8989': attribute type 2 has an invalid length. [ 457.997926][T24524] : entered promiscuous mode [ 458.290044][T24539] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8998'. [ 458.290070][T24539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8998'. [ 458.290085][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8998'. [ 458.452027][T24540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8996'. [ 458.932178][T24560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.737410][T24615] A link change request failed with some changes committed already. Interface veth8 may have been left with an inconsistent configuration, please check. [ 461.000086][T24632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9036'. [ 461.244276][T24641] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9040'. [ 461.464639][T24648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9047'. [ 461.568373][T24656] netlink: 'syz.1.9049': attribute type 2 has an invalid length. [ 461.568405][T24656] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9049'. [ 461.826975][T24663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9051'. [ 463.848494][T24729] netlink: 'syz.0.9086': attribute type 1 has an invalid length. [ 464.410355][T24750] macsec1: entered promiscuous mode [ 464.478481][T24753] bridge0: port 1(bond0) entered blocking state [ 464.479026][T24753] bridge0: port 1(bond0) entered disabled state [ 464.500694][T24753] bond0: entered promiscuous mode [ 464.500716][T24753] bond_slave_0: entered promiscuous mode [ 464.501683][T24753] bond_slave_1: entered promiscuous mode [ 464.574696][T24753] bridge0: port 1(bond0) entered blocking state [ 464.574885][T24753] bridge0: port 1(bond0) entered forwarding state [ 464.773364][T24763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9101'. [ 464.876653][T24767] openvswitch: netlink: Missing valid actions attribute. [ 466.250924][T24823] netlink: 277 bytes leftover after parsing attributes in process `syz.1.9131'. [ 466.443648][T24832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9136'. [ 466.967811][T24849] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9143'. [ 467.026604][T24849] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9143'. [ 467.077865][T24856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.274808][T24861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9147'. [ 467.812517][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9158'. [ 467.812549][T24880] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9158'. [ 467.812601][T24880] netlink: 'syz.0.9158': attribute type 5 has an invalid length. [ 468.192140][T24893] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 468.273025][T24895] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 469.145311][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9179'. [ 469.307961][T24929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9180'. [ 469.553797][T24939] ip_tables: iptables: counters copy to user failed while replacing table [ 470.384082][T24964] __nla_validate_parse: 2 callbacks suppressed [ 470.384107][T24964] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9198'. [ 472.601316][T25042] pim6reg527: entered allmulticast mode [ 472.834508][T25048] tipc: New replicast peer: 0.0.0.0 [ 472.870082][T25048] tipc: Enabled bearer , priority 10 [ 473.233647][T25057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9244'. [ 474.569285][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9271'. [ 475.078907][T25133] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.079568][T25133] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.079727][T25133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.651863][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9288'. [ 476.019335][T25156] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 476.362350][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9294'. [ 476.364027][T25169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9295'. [ 477.062798][T25194] sch_fq: defrate 0 ignored. [ 477.471858][T25209] netlink: 'syz.3.9314': attribute type 5 has an invalid length. [ 477.984880][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9323'. [ 478.338445][T25234] syz.3.9323 (25234) used greatest stack depth: 18024 bytes left [ 478.522667][T25245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9328'. [ 478.522703][T25245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9328'. [ 478.739388][T25252] openvswitch: netlink: IP tunnel dst address not specified [ 478.739426][T25252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.915839][T25254] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9333'. [ 479.219608][T25268] netlink: 'syz.0.9340': attribute type 30 has an invalid length. [ 480.303075][T25310] netlink: 31 bytes leftover after parsing attributes in process `syz.1.9359'. [ 480.303107][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9359'. [ 480.303135][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9359'. [ 481.097402][T25341] __nla_validate_parse: 1 callbacks suppressed [ 481.097427][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9374'. [ 481.097445][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9374'. [ 481.722514][T25360] erspan0: entered promiscuous mode [ 482.068227][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 482.886841][T25394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9397'. [ 483.479080][T25394] netlink: 'syz.2.9397': attribute type 1 has an invalid length. [ 483.479109][T25394] netlink: 'syz.2.9397': attribute type 2 has an invalid length. [ 485.629345][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9437'. [ 486.539739][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9453'. [ 486.781476][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9456'. [ 486.781519][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9456'. [ 486.912207][T25527] sctp: [Deprecated]: syz.1.9457 (pid 25527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.912207][T25527] Use struct sctp_sack_info instead [ 487.226845][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9461'. [ 488.132088][T25563] tap0: tun_chr_ioctl cmd 1074025672 [ 488.132115][T25563] tap0: ignored: set checksum disabled [ 489.421084][T25608] netlink: 'syz.2.9496': attribute type 1 has an invalid length. [ 489.421112][T25608] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.9496'. [ 489.421130][T25608] netlink: 'syz.2.9496': attribute type 1 has an invalid length. [ 489.421145][T25608] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.9496'. [ 490.500749][T25649] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9513'. [ 491.246983][T25674] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9527'. [ 491.247013][T25674] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9527'. [ 492.116027][T25711] netlink: 'syz.2.9546': attribute type 1 has an invalid length. [ 492.116056][T25711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9546'. [ 492.228329][T25716] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9549'. [ 492.260830][T25720] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 493.492918][T25759] netlink: 'syz.3.9567': attribute type 2 has an invalid length. [ 493.492946][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9567'. [ 493.686563][T25765] netlink: 'syz.4.9569': attribute type 10 has an invalid length. [ 493.750474][T25765] team0: Port device dummy0 added [ 494.987330][T25813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9594'. [ 495.249881][ T5637] block nbd0: Receive control failed (result -32) [ 495.251317][ T52] block nbd0: Receive control failed (result -32) [ 496.214798][T25854] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.757785][T25909] netlink: 'syz.2.9640': attribute type 2 has an invalid length. [ 499.230265][T25949] netlink: 'syz.2.9658': attribute type 11 has an invalid length. [ 499.230291][T25949] netlink: 3800 bytes leftover after parsing attributes in process `syz.2.9658'. [ 499.256408][T25947] tun0: tun_chr_ioctl cmd 1074025675 [ 499.256432][T25947] tun0: persist enabled [ 499.669287][T25965] netlink: 'syz.4.9665': attribute type 1 has an invalid length. [ 499.669314][T25965] netlink: 'syz.4.9665': attribute type 2 has an invalid length. [ 499.705824][T25965] netlink: 'syz.4.9665': attribute type 1 has an invalid length. [ 499.705852][T25965] netlink: 'syz.4.9665': attribute type 2 has an invalid length. [ 499.843644][T25967] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9666'. [ 500.879189][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9680'. [ 500.960644][T26002] netlink: 'syz.0.9683': attribute type 12 has an invalid length. [ 501.020687][ T13] IPVS: starting estimator thread 0... [ 501.179957][T26005] IPVS: using max 26 ests per chain, 62400 per kthread [ 501.730728][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.837195][T26030] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9694'. [ 501.965949][T26036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9696'. [ 501.965982][T26036] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9696'. [ 502.490068][T26036] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9696'. [ 502.884238][T26004] udevd[26004]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 503.030105][T26069] sctp: [Deprecated]: syz.4.9710 (pid 26069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.030105][T26069] Use struct sctp_sack_info instead [ 503.641760][T26089] netlink: 'syz.4.9720': attribute type 2 has an invalid length. [ 503.717347][T26090] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 503.717670][T26090] syzkaller1: linktype set to 823 [ 504.586544][T26120] openvswitch: netlink: IP tunnel dst address not specified [ 504.586582][T26120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.354726][T26149] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 506.919815][T26196] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9770'. [ 507.079817][T26199] netlink: 'syz.3.9771': attribute type 12 has an invalid length. [ 507.079846][T26199] netlink: 'syz.3.9771': attribute type 29 has an invalid length. [ 507.079862][T26199] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9771'. [ 507.079901][T26199] netlink: 'syz.3.9771': attribute type 1 has an invalid length. [ 507.079916][T26199] netlink: 'syz.3.9771': attribute type 2 has an invalid length. [ 507.079931][T26199] netlink: 11 bytes leftover after parsing attributes in process `syz.3.9771'. [ 507.792373][T26222] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9782'. [ 507.792403][T26222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9782'. [ 508.316833][T26243] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9792'. [ 509.541608][T26297] netlink: 'syz.3.9818': attribute type 2 has an invalid length. [ 509.541637][T26297] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9818'. [ 509.757475][T26304] tipc: Started in network mode [ 509.757511][T26304] tipc: Node identity ac14140f, cluster identity 4711 [ 509.760919][T26304] tipc: New replicast peer: 255.255.255.255 [ 509.762169][T26304] tipc: Enabled bearer , priority 10 [ 509.862197][T26307] netlink: 'syz.4.9821': attribute type 83 has an invalid length. [ 509.877453][T26310] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9823'. [ 510.057416][T26314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9826'. [ 510.444643][T26324] veth0: entered promiscuous mode [ 510.457183][T26322] veth0: left promiscuous mode [ 510.518375][T26325] bond0: entered promiscuous mode [ 510.538151][T26325] batadv0: entered promiscuous mode [ 510.540904][T26325] debugfs: 'hsr0' already exists in 'hsr' [ 510.540930][T26325] Cannot create hsr debugfs directory [ 510.541198][T26325] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 510.587375][T26325] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 510.592753][T26325] bond0: left promiscuous mode [ 510.612693][T26325] batadv0: left promiscuous mode [ 510.876201][ T5827] tipc: Node number set to 2886997007 [ 510.933269][T26334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 510.956746][T26337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9835'. [ 512.233576][T26386] netlink: 'syz.4.9858': attribute type 83 has an invalid length. [ 512.515819][T26400] netlink: 'syz.4.9865': attribute type 4 has an invalid length. [ 513.022904][T26420] netlink: 'syz.4.9875': attribute type 11 has an invalid length. [ 513.389638][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 513.448187][T26435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9881'. [ 513.762465][T26445] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.023685][T26449] netlink: 81 bytes leftover after parsing attributes in process `syz.1.9887'. [ 514.619208][T26475] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9901'. [ 514.704241][T26471] gtp0: entered promiscuous mode [ 514.704268][T26471] gtp0: entered allmulticast mode [ 516.029388][T26527] netlink: 'syz.3.9925': attribute type 4 has an invalid length. [ 517.665630][T26583] netlink: 'syz.0.9951': attribute type 5 has an invalid length. [ 518.309048][T26599] sctp: [Deprecated]: syz.3.9967 (pid 26599) Use of int in max_burst socket option deprecated. [ 518.309048][T26599] Use struct sctp_assoc_value instead [ 518.729676][T26624] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9968'. [ 518.819473][T26626] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9970'. [ 519.236138][T26644] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9977'. [ 519.557224][T26657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9983'. [ 519.557254][T26657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9983'. [ 519.560751][T26657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9983'. [ 519.560775][T26657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9983'. [ 520.001488][T26672] xt_hashlimit: size too large, truncated to 1048576 [ 520.052331][T26676] xt_hashlimit: size too large, truncated to 1048576 [ 521.510583][T26723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10014'. [ 522.001406][T26742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10023'. [ 522.079637][T26745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10025'. [ 523.080246][T26780] IPVS: persistence engine module ip_vs_pe_À not found [ 523.212858][T26790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 524.861049][T26849] __nla_validate_parse: 4 callbacks suppressed [ 524.861075][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10070'. [ 524.896601][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10070'. [ 525.462946][T26869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10079'. [ 525.617013][T26881] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.841191][T26890] netlink: 'syz.1.10090': attribute type 2 has an invalid length. [ 526.678070][T26921] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 526.952171][T26933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10108'. [ 526.952214][T26933] netlink: 'syz.2.10108': attribute type 8 has an invalid length. [ 526.952230][T26933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10108'. [ 527.018447][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10109'. [ 527.443510][T26951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10117'. [ 527.743094][T26964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10122'. [ 527.777004][T26957] veth0: entered promiscuous mode [ 527.779616][T26956] veth0: left promiscuous mode [ 528.673123][T26998] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 529.726761][T27031] tipc: Enabled bearer , priority 10 [ 529.749847][T27031] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 530.613254][T27059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10168'. [ 531.534556][T27089] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10183'. [ 531.636080][T27092] openvswitch: netlink: IPv4 tunnel dst address is zero [ 531.636117][T27092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.799660][T27097] openvswitch: netlink: IP tunnel dst address not specified [ 531.799701][T27097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.192930][T27193] veth1_to_bond: entered allmulticast mode [ 534.193123][T27193] veth1_to_bond: left allmulticast mode [ 534.224096][T27197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10231'. [ 534.381501][T27202] xt_hashlimit: size too large, truncated to 1048576 [ 534.451080][T27205] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.10236'. [ 534.451869][T27205] 0ªX¹¦Dö»: renamed from gretap0 [ 534.549176][T27205] 0ªX¹¦Dö»: left promiscuous mode [ 534.549385][T27205] 0ªX¹¦Dö»: entered allmulticast mode [ 534.742453][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10238'. [ 534.787741][T27213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10237'. [ 534.787769][T27213] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10237'. [ 534.787818][T27213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10237'. [ 535.322192][T27226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10246'. [ 535.489413][T27230] ip_tables: iptables: counters copy to user failed while replacing table [ 535.643952][T27235] ip_tables: iptables: counters copy to user failed while replacing table [ 536.829216][T27274] nbd1: detected capacity change from 0 to 274877906944 [ 536.860433][ T5637] block nbd1: Receive control failed (result -104) [ 537.494191][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10278'. [ 538.592329][T27330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10290'. [ 538.764514][T27335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10292'. [ 538.874746][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10295'. [ 539.838458][T27379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10313'. [ 540.308379][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10323'. [ 540.421261][T27399] macvtap1: entered promiscuous mode [ 540.421366][T27399] vlan0: entered promiscuous mode [ 540.422098][T27399] macvtap1: entered allmulticast mode [ 540.422118][T27399] vlan0: entered allmulticast mode [ 540.422132][T27399] veth0_vlan: entered allmulticast mode [ 540.658198][T27402] batman_adv: batadv0: Adding interface: gretap0 [ 540.658219][T27402] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.658255][T27402] batman_adv: batadv0: Interface activated: gretap0 [ 541.608772][T27431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10338'. [ 541.710360][T27433] macvtap0: entered allmulticast mode [ 541.710386][T27433] veth0_macvtap: entered allmulticast mode [ 542.001680][T27441] openvswitch: netlink: Unknown key attributes 1 [ 542.653638][T27463] tipc: Enabling of bearer rejected, already enabled [ 542.656525][T27463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10354'. [ 542.744107][T27465] netlink: 'syz.1.10357': attribute type 28 has an invalid length. [ 542.744133][T27465] netlink: 'syz.1.10357': attribute type 3 has an invalid length. [ 542.744149][T27465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10357'. [ 543.845166][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10375'. [ 544.189516][T27520] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10382'. [ 544.189592][T27520] netlink: 'syz.3.10382': attribute type 1 has an invalid length. [ 544.189621][T27520] bond0: option mode: invalid value (105) [ 544.389353][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10385'. [ 544.414359][ T1379] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 544.912175][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10397'. [ 544.912219][T27547] netlink: 'syz.1.10397': attribute type 30 has an invalid length. [ 544.972381][T27549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10397'. [ 544.972419][T27549] netlink: 'syz.1.10397': attribute type 30 has an invalid length. [ 544.998452][T27548] team0: No ports can be present during mode change [ 545.016803][ T13] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 545.017000][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.017039][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.017076][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.400223][T27561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10402'. [ 546.140269][T27585] tap0: tun_chr_ioctl cmd 1074025676 [ 546.140297][T27585] tap0: owner set to 0 [ 546.897944][T27621] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10428'. [ 546.899527][T27618] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10428'. [ 547.868594][T27659] block nbd2: server does not support multiple connections per device. [ 547.869356][T27659] block nbd2: shutting down sockets [ 548.997240][T27711] __nla_validate_parse: 3 callbacks suppressed [ 548.997264][T27711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10469'. [ 549.952699][T27750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10485'. [ 549.952740][T27750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10485'. [ 551.042271][T27776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10498'. [ 551.392948][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10500'. [ 551.393300][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10500'. [ 551.497093][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10503'. [ 551.497831][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10503'. [ 551.499094][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10503'. [ 551.802890][T27794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10506'. [ 552.459594][T27810] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.964257][T27865] netlink: 'syz.2.10541': attribute type 1 has an invalid length. [ 553.964284][T27865] netlink: 'syz.2.10541': attribute type 3 has an invalid length. [ 553.964299][T27865] netlink: 'syz.2.10541': attribute type 7 has an invalid length. [ 553.964313][T27865] netlink: 'syz.2.10541': attribute type 8 has an invalid length. [ 553.964331][T27865] NCSI netlink: No device for ifindex 131092 [ 554.011045][ T31] audit: type=1804 audit(1792498818.792:5): pid=27867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10539" name="/newroot/2183/cgroup.controllers" dev="tmpfs" ino=10965 res=1 errno=0 [ 554.047094][ T31] audit: type=1800 audit(1792498818.832:6): pid=27867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10539" name="cgroup.controllers" dev="tmpfs" ino=10965 res=0 errno=0 [ 554.100106][T27869] sctp: [Deprecated]: syz.1.10542 (pid 27869) Use of int in maxseg socket option. [ 554.100106][T27869] Use struct sctp_assoc_value instead [ 554.617002][T27890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 554.619964][T27884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 554.743167][T27893] __nla_validate_parse: 6 callbacks suppressed [ 554.743201][T27893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10554'. [ 555.619207][T27927] netlink: Only one type of NAT may be specified [ 555.619246][T27927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.761854][T27937] netlink: 'syz.0.10575': attribute type 21 has an invalid length. [ 555.761880][T27937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10575'. [ 556.044812][T27947] sctp: [Deprecated]: syz.2.10580 (pid 27947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.044812][T27947] Use struct sctp_sack_info instead [ 556.305012][T27954] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 556.583727][T27964] ip_tables: iptables: counters copy to user failed while replacing table [ 557.216722][T27978] netlink: 'syz.1.10593': attribute type 83 has an invalid length. [ 557.218844][T27980] ip_tables: iptables: counters copy to user failed while replacing table [ 557.518058][T27989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10597'. [ 557.789903][T28002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10606'. [ 558.716600][T28029] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10619'. [ 558.914727][T28040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10625'. [ 560.718892][T28103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10653'. [ 561.119542][T28118] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10660'. [ 561.360138][T28127] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.10663'. [ 561.361425][T28126] netlink: 'syz.2.10664': attribute type 8 has an invalid length. [ 561.361808][T28126] sch_fq: defrate 0 ignored. [ 561.866734][T28146] blkio.reset_stats is deprecated [ 562.824198][T28170] netlink: 'syz.2.10686': attribute type 5 has an invalid length. [ 563.172213][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.207435][T28222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 564.446758][T28230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10710'. [ 565.015593][T28249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10722'. [ 565.162032][T28253] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10725'. [ 565.783542][T28281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10739'. [ 566.058781][T28292] netlink: 'syz.4.10743': attribute type 3 has an invalid length. [ 566.058809][T28292] netlink: 'syz.4.10743': attribute type 1 has an invalid length. [ 566.058825][T28292] netlink: 212 bytes leftover after parsing attributes in process `syz.4.10743'. [ 566.058844][T28292] NCSI netlink: No device for ifindex 813332851 [ 566.821021][T28321] netlink: 'syz.0.10758': attribute type 9 has an invalid length. [ 567.008511][ T1695] block nbd1: Possible stuck request ffff888027ea7000: control (read@0,4096B). Runtime 30 seconds [ 567.830793][T28363] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10776'. [ 567.846978][T28365] tap0: tun_chr_ioctl cmd 2148553947 [ 567.947428][T28367] netlink: 'syz.1.10780': attribute type 1 has an invalid length. [ 567.947455][T28367] netlink: 208 bytes leftover after parsing attributes in process `syz.1.10780'. [ 568.038904][T28371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10779'. [ 568.285243][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.763113][T28390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10789'. [ 570.004561][T28437] ip_tables: iptables: counters copy to user failed while replacing table [ 570.223772][T28443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10816'. [ 570.700629][T28466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10826'. [ 571.072522][T28476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10831'. [ 573.927180][T28551] netlink: 'syz.3.10865': attribute type 14 has an invalid length. [ 574.348682][T28561] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 574.717029][T28568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10873'. [ 574.717062][T28568] nbd: couldn't find a device at index 65553 [ 575.138585][T28581] netlink: 576 bytes leftover after parsing attributes in process `syz.2.10880'. [ 576.208818][T28620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10895'. [ 576.231686][T28619] netlink: 'syz.4.10896': attribute type 83 has an invalid length. [ 576.402002][T28628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10901'. [ 577.049918][T28650] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10912'. [ 579.279296][T28721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10946'. [ 579.701385][T28732] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.403629][T28781] netlink: 'syz.0.10974': attribute type 83 has an invalid length. [ 581.499095][ T12] tipc: Subscription rejected, illegal request [ 581.927738][T28794] veth0: mtu less than device minimum [ 582.892477][T28833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10998'. [ 583.926959][T28863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11010'. [ 583.965533][T28864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11011'. [ 583.977546][T28864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11011'. [ 583.977576][T28864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11011'. [ 585.344851][T28912] veth0: entered promiscuous mode [ 585.349241][T28912] veth0: left promiscuous mode [ 585.890875][T28929] vxcan0: tx address claim with dest, not broadcast [ 586.211612][T28940] IPv6: NLM_F_CREATE should be specified when creating new route [ 586.969989][T28954] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.558262][T28982] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11064'. [ 588.291176][T29002] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11072'. [ 589.046007][T29032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11089'. [ 589.117305][T29035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11091'. [ 589.194612][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11093'. [ 589.210567][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11093'. [ 589.618727][T29052] netlink: 'syz.1.11098': attribute type 3 has an invalid length. [ 589.618755][T29052] netlink: 'syz.1.11098': attribute type 2 has an invalid length. [ 590.140160][T29071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11109'. [ 590.140196][T29071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11109'. [ 590.225539][T29077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11110'. [ 591.100451][T29114] netlink: 'syz.0.11127': attribute type 1 has an invalid length. [ 591.326970][ T5637] block nbd296: Receive control failed (result -32) [ 592.127783][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11140'. [ 592.251662][T29142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11142'. [ 593.509433][T29179] __nla_validate_parse: 1 callbacks suppressed [ 593.509458][T29179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11160'. [ 593.707244][T29188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11163'. [ 593.966844][T29197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11168'. [ 593.966887][T29197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11168'. [ 594.021350][T29201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11171'. [ 594.228381][T29207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11175'. [ 594.233309][T29207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11175'. [ 595.241223][T29244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11191'. [ 595.251010][T29244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11191'. [ 595.251124][T29244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11191'. [ 595.357071][T29247] block nbd2: Unsupported socket: should be TCP or UNIX. [ 595.618198][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.048054][T29275] netlink: 'syz.3.11204': attribute type 1 has an invalid length. [ 596.498049][T29290] batman_adv: batadv0: Adding interface: macvtap1 [ 596.498069][T29290] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.498334][T29290] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 597.091471][ T1695] block nbd1: Possible stuck request ffff888027ea7000: control (read@0,4096B). Runtime 60 seconds [ 597.281108][T29322] xfrm1: entered promiscuous mode [ 597.281321][T29322] xfrm1: entered allmulticast mode [ 597.634457][T29337] netlink: 'syz.2.11234': attribute type 83 has an invalid length. [ 598.477275][ T4983] udevd[4983]: worker [27255] /devices/virtual/block/nbd1 is taking a long time [ 598.723237][T29376] __nla_validate_parse: 4 callbacks suppressed [ 598.723263][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11251'. [ 598.854849][T29378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11250'. [ 598.958031][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11251'. [ 600.146710][T29421] netlink: 'syz.3.11272': attribute type 11 has an invalid length. [ 600.503107][T29431] openvswitch: netlink: VLAN attribute unexpected. [ 600.846153][T29444] netlink: 'syz.4.11283': attribute type 6 has an invalid length. [ 602.913949][T29515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11312'. [ 602.916064][T29515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11312'. [ 604.200296][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11335'. [ 604.394774][T29568] tipc: Bearer : already 2 bearers with priority 10 [ 604.394799][T29568] tipc: Bearer : trying with adjusted priority [ 604.402626][T29568] tipc: New replicast peer: 255.255.255.255 [ 604.403500][T29568] tipc: Enabled bearer , priority 9 [ 606.320881][T29631] ip_tables: iptables: counters copy to user failed while replacing table [ 606.599173][T29640] netlink: 'syz.4.11371': attribute type 83 has an invalid length. [ 606.917098][T29653] sctp: [Deprecated]: syz.3.11379 (pid 29653) Use of int in max_burst socket option. [ 606.917098][T29653] Use struct sctp_assoc_value instead [ 607.236969][T29660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11382'. [ 607.419639][T29666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11385'. [ 607.419675][T29666] nbd: socks must be embedded in a SOCK_ITEM attr [ 608.650895][T29717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11408'. [ 609.691329][T29755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11424'. [ 609.730086][T29757] openvswitch: netlink: IP tunnel dst address not specified [ 609.730126][T29757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.842308][T29758] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 610.544156][T29777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11435'. [ 610.879983][T29783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11438'. [ 611.102185][T29792] netlink: 'syz.4.11443': attribute type 10 has an invalid length. [ 611.178847][T29796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11443'. [ 611.294554][T29792] bridge0: entered allmulticast mode [ 611.688512][T29808] netlink: 'syz.3.11449': attribute type 83 has an invalid length. [ 611.776476][T29810] openvswitch: netlink: IP tunnel dst address not specified [ 611.776515][T29810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.333970][ T1379] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.335667][ T1379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.888195][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11492'. [ 614.899190][T29934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11509'. [ 614.947710][T29937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11510'. [ 615.468267][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11518'. [ 615.468300][T29953] block nbd2: Unsupported socket: should be TCP or UNIX. [ 616.130805][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11525'. [ 616.207115][T29973] netlink: 284 bytes leftover after parsing attributes in process `syz.1.11527'. [ 618.249865][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11561'. [ 618.327180][T30047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.685918][ T5637] block nbd2: Receive control failed (result -32) [ 619.948340][T30087] netlink: 'syz.1.11580': attribute type 4 has an invalid length. [ 620.252646][T30098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11585'. [ 621.267108][T30139] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11604'. [ 621.368193][T30141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11602'. [ 621.516369][T30143] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 621.516880][T30143] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 622.122824][T30165] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11614'. [ 622.376088][T30173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11618'. [ 622.880521][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11626'. [ 624.608094][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.366567][T30277] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.641469][T30282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11669'. [ 626.030409][T30296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11675'. [ 626.641170][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 627.171254][ T1695] block nbd1: Possible stuck request ffff888027ea7000: control (read@0,4096B). Runtime 90 seconds [ 628.207503][T30362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11706'. [ 628.236295][T30362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11706'. [ 628.926731][T30391] netlink: 'syz.4.11718': attribute type 1 has an invalid length. [ 628.926758][T30391] netlink: 'syz.4.11718': attribute type 7 has an invalid length. [ 628.926773][T30391] netlink: 'syz.4.11718': attribute type 8 has an invalid length. [ 628.926786][T30391] netlink: 208 bytes leftover after parsing attributes in process `syz.4.11718'. [ 628.926803][T30391] NCSI netlink: No device for ifindex 65584 [ 629.284560][T30405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11723'. [ 630.083861][T30433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11738'. [ 630.083906][T30433] netlink: 'syz.3.11738': attribute type 7 has an invalid length. [ 630.083922][T30433] netlink: 'syz.3.11738': attribute type 8 has an invalid length. [ 630.083937][T30433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11738'. [ 630.664826][T30452] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11747'. [ 631.211682][T30470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11757'. [ 631.380918][T30470] bond3: Invalid ad_actor_system MAC address. [ 631.380944][T30470] bond3: option ad_actor_system: invalid value (1) [ 631.409995][T30470] bond3 (unregistering): Released all slaves [ 632.257217][T30505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11773'. [ 632.877584][T30527] sctp: [Deprecated]: syz.4.11783 (pid 30527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.877584][T30527] Use struct sctp_sack_info instead [ 633.237064][T30539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11789'. [ 633.391320][T30543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11791'. [ 633.670366][T30553] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 634.169935][T30568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.172457][T30574] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11805'. [ 634.545442][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.546203][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.546243][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.742584][T30613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11823'. [ 636.297537][T30636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11833'. [ 636.303532][T30636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11833'. [ 636.305153][T30636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11833'. [ 636.689401][T30650] ip_tables: iptables: counters copy to user failed while replacing table [ 636.705188][T30650] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 637.258658][T30666] tipc: Can't bind to reserved service type 1 [ 637.859401][T30683] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11856'. [ 637.920456][T30684] netlink: 'syz.2.11852': attribute type 11 has an invalid length. [ 638.614791][T30708] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 638.688652][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880327bec00: rx timeout, send abort [ 638.797367][T30713] ªªªªª»: renamed from dummy0 (while UP) [ 639.043971][T30717] netlink: 83 bytes leftover after parsing attributes in process `syz.0.11870'. [ 639.188332][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880327bc800: rx timeout, send abort [ 639.190388][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880327bec00: abort rx timeout. Force session deactivation [ 639.689890][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880327bc800: abort rx timeout. Force session deactivation [ 640.571570][T30759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11891'. [ 642.046295][T30798] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11907'. [ 642.047759][T30798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11907'. [ 642.731786][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11918'. [ 642.982975][T30826] ip_tables: iptables: counters copy to user failed while replacing table [ 643.070665][T30828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 643.859981][T30845] vcan0: tx address claim with dest, not broadcast [ 643.992209][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11931'. [ 643.993875][T30849] veth1_vlan: left allmulticast mode [ 644.097417][T30853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11933'. [ 644.101462][ T5637] block nbd3: Receive control failed (result -107) [ 644.102954][T30849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11931'. [ 644.708325][T30873] bridge0: port 3(veth0) entered blocking state [ 644.708920][T30873] bridge0: port 3(veth0) entered disabled state [ 644.709304][T30873] veth0: entered allmulticast mode [ 644.734646][T30873] veth0: entered promiscuous mode [ 645.087766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.364258][T30918] ip_tables: iptables: counters copy to user failed while replacing table [ 648.185602][T30962] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 648.280662][T30968] netlink: 'syz.2.11986': attribute type 1 has an invalid length. [ 648.329396][T30970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11985'. [ 649.220955][T31006] xt_hashlimit: size too large, truncated to 1048576 [ 649.499085][T31014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12003'. [ 649.519066][T31012] ip_tables: iptables: counters copy to user failed while replacing table [ 649.556036][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12003'. [ 650.498243][T31034] netlink: 'syz.0.12013': attribute type 17 has an invalid length. [ 650.498273][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12013'. [ 650.498303][T31034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12013'. [ 650.574739][T31034] gretap0: entered promiscuous mode [ 650.590758][T31034] gretap0: left promiscuous mode [ 651.566876][T31071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12030'. [ 651.571147][T31071] ip_tables: iptables: counters copy to user failed while replacing table [ 651.870058][T31079] netlink: 'syz.4.12034': attribute type 4 has an invalid length. [ 652.131923][T31086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12037'. [ 652.219932][T31089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.674282][T31105] ieee802154 phy0 wpan0: encryption failed: -126 [ 652.705375][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12046'. [ 652.709793][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12046'. [ 652.926114][T27708] Bluetooth: hci4: command 0x0406 tx timeout [ 653.013763][T31113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12049'. [ 653.320297][T31123] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.448283][T31123] bridge_slave_0 (unregistering): left allmulticast mode [ 653.448317][T31123] bridge_slave_0 (unregistering): left promiscuous mode [ 653.448561][T31123] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.429561][T31166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12074'. [ 655.552329][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12086'. [ 655.588793][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12086'. [ 655.790751][T31208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12088'. [ 655.904168][T31214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12091'. [ 656.000836][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888022b5d400: rx timeout, send abort [ 656.500891][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888022b5d400: abort rx timeout. Force session deactivation [ 657.245223][ T1695] block nbd1: Possible stuck request ffff888027ea7000: control (read@0,4096B). Runtime 120 seconds [ 657.771206][ T1379] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.141812][T31274] ip_tables: iptables: counters copy to user failed while replacing table [ 658.351465][T31279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12117'. [ 658.351514][T31279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12117'. [ 659.162624][T31304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12123'. [ 659.453290][T31314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12127'. [ 659.495758][T31313] syzkaller1: entered promiscuous mode [ 659.495785][T31313] syzkaller1: entered allmulticast mode [ 659.500074][T31314] netlink: 'syz.1.12127': attribute type 9 has an invalid length. [ 659.500098][T31314] netlink: 23 bytes leftover after parsing attributes in process `syz.1.12127'. [ 659.527768][T31313] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 660.004827][T31329] syzkaller1: entered promiscuous mode [ 660.006631][T31329] syzkaller1: entered allmulticast mode [ 660.034736][T31333] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 660.557866][T31351] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 660.758083][T31360] netlink: 'syz.3.12149': attribute type 1 has an invalid length. [ 660.758110][T31360] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12149'. [ 660.758135][T31360] netlink: 'syz.3.12149': attribute type 1 has an invalid length. [ 660.758149][T31360] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.12149'. [ 664.019645][T31456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12185'. [ 665.175178][T31499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12198'. [ 665.290370][T31495] rxe_eth0 speed is unknown, defaulting to 1000 [ 665.345168][T31505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12200'. [ 666.619348][T31495] wlan1 speed is unknown, defaulting to 1000 [ 666.623151][T31495] wg0 speed is unknown, defaulting to 1000 [ 667.130030][T31546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12216'. [ 668.219010][T31577] netlink: 'syz.1.12226': attribute type 4 has an invalid length. [ 669.106686][T31495] lo speed is unknown, defaulting to 1000 [ 669.129179][T31607] block nbd0: Unsupported socket: should be TCP or UNIX. [ 669.216849][T31608] netlink: 11 bytes leftover after parsing attributes in process `syz.0.12238'. [ 672.273981][T31668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.526544][T31668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.717799][T31668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.929293][T31668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.385072][T31711] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.385122][T31711] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.490513][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.496006][ T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.589608][T31764] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12284'. [ 675.297579][T31785] netlink: 'syz.2.12293': attribute type 39 has an invalid length. [ 676.008358][T31812] sctp: [Deprecated]: syz.2.12305 (pid 31812) Use of int in max_burst socket option. [ 676.008358][T31812] Use struct sctp_assoc_value instead [ 676.192025][T31816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12307'. [ 676.274723][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12312'. [ 676.274764][T31825] block nbd4: Unsupported socket: should be TCP or UNIX. [ 676.712070][T31840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12318'. [ 677.038686][T31842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12318'. [ 677.038720][T31842] nbd: nbd64 already in use [ 677.360327][T31858] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12326'. [ 677.406339][T31859] syzkaller1: entered promiscuous mode [ 677.406365][T31859] syzkaller1: entered allmulticast mode [ 677.522833][T31189] udevd[31189]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 678.226154][T31894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12340'. [ 678.628938][T31901] block nbd0: reconnected socket [ 678.629035][T31901] block nbd0: reconnected socket [ 678.630657][T27708] block nbd0: Receive control failed (result -107) [ 678.642565][ T5637] block nbd0: Receive control failed (result -32) [ 678.920451][T31916] netlink: 'syz.2.12351': attribute type 1 has an invalid length. [ 678.920483][T31916] netlink: 'syz.2.12351': attribute type 1 has an invalid length. [ 678.920496][T31916] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12351'. [ 678.920511][T31916] netlink: 'syz.2.12351': attribute type 1 has an invalid length. [ 679.777611][T31950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12365'. [ 679.956018][T31957] [ 679.958463][T31957] ====================================================== [ 679.965539][T31957] WARNING: possible circular locking dependency detected [ 679.972611][T31957] syzkaller #0 Not tainted [ 679.977060][T31957] ------------------------------------------------------ [ 679.984112][T31957] syz.0.12369/31957 is trying to acquire lock: [ 679.990295][T31957] ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 680.000753][T31957] [ 680.000753][T31957] but task is already holding lock: [ 680.008157][T31957] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 680.019124][T31957] [ 680.019124][T31957] which lock already depends on the new lock. [ 680.019124][T31957] [ 680.029570][T31957] [ 680.029570][T31957] the existing dependency chain (in reverse order) is: [ 680.038621][T31957] [ 680.038621][T31957] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 680.047417][T31957] down_read+0x4a/0x330 [ 680.052570][T31957] kernfs_remove_by_name_ns+0x3f/0x140 [ 680.058629][T31957] internal_create_group+0x58e/0x1180 [ 680.064569][T31957] sysfs_update_groups+0x60/0x130 [ 680.070162][T31957] pmu_dev_alloc+0x29b/0x300 [ 680.075390][T31957] perf_event_sysfs_init+0x76/0x100 [ 680.081300][T31957] do_one_initcall+0x250/0x870 [ 680.086692][T31957] do_initcall_level+0x10a/0x1a0 [ 680.092337][T31957] do_initcalls+0x59/0xa0 [ 680.097233][T31957] kernel_init_freeable+0x29d/0x3e0 [ 680.103004][T31957] kernel_init+0x22/0x1d0 [ 680.107906][T31957] ret_from_fork+0x514/0xb70 [ 680.113104][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.118450][T31957] [ 680.118450][T31957] -> #9 (pmus_lock){+.+.}-{4:4}: [ 680.125637][T31957] __mutex_lock+0x19d/0x1550 [ 680.130802][T31957] perf_event_init_cpu+0x1d1/0x7a0 [ 680.136471][T31957] cpuhp_invoke_callback+0x434/0x810 [ 680.142382][T31957] cpuhp_thread_fun+0x362/0x780 [ 680.147807][T31957] smpboot_thread_fn+0x565/0xa70 [ 680.153348][T31957] kthread+0x38b/0x480 [ 680.157976][T31957] ret_from_fork+0x514/0xb70 [ 680.163132][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.168454][T31957] [ 680.168454][T31957] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 680.176060][T31957] cpuhp_thread_fun+0x127/0x780 [ 680.181501][T31957] smpboot_thread_fn+0x565/0xa70 [ 680.187009][T31957] kthread+0x38b/0x480 [ 680.191642][T31957] ret_from_fork+0x514/0xb70 [ 680.196797][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.202125][T31957] [ 680.202125][T31957] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 680.209903][T31957] cpus_read_lock+0x42/0x160 [ 680.215056][T31957] static_key_slow_inc+0x12/0x30 [ 680.220561][T31957] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 680.226981][T31957] nbd_genl_foreach_sock+0x265/0x450 [ 680.232819][T31957] nbd_genl_reconfigure+0xbbb/0x1040 [ 680.238675][T31957] genl_family_rcv_msg_doit+0x233/0x340 [ 680.244909][T31957] genl_rcv_msg+0x614/0x7a0 [ 680.249965][T31957] netlink_rcv_skb+0x226/0x4a0 [ 680.255273][T31957] genl_rcv+0x28/0x40 [ 680.259807][T31957] netlink_unicast+0x8ef/0xa80 [ 680.265119][T31957] netlink_sendmsg+0x813/0xb40 [ 680.270425][T31957] sock_sendmsg_nosec+0x13a/0x180 [ 680.276123][T31957] ____sys_sendmsg+0x54e/0x850 [ 680.281455][T31957] ___sys_sendmsg+0x2a5/0x360 [ 680.286681][T31957] __x64_sys_sendmsg+0x1b1/0x290 [ 680.292160][T31957] do_syscall_64+0x166/0x520 [ 680.297379][T31957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.303844][T31957] [ 680.303844][T31957] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 680.311521][T31957] __mutex_lock+0x19d/0x1550 [ 680.316662][T31957] nbd_queue_rq+0x373/0xff0 [ 680.321720][T31957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 680.327948][T31957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 680.334893][T31957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 680.341521][T31957] blk_mq_run_work_fn+0x16c/0x300 [ 680.347108][T31957] process_scheduled_works+0xc3d/0x1630 [ 680.353212][T31957] worker_thread+0xa47/0xfb0 [ 680.358372][T31957] kthread+0x38b/0x480 [ 680.363022][T31957] ret_from_fork+0x514/0xb70 [ 680.368249][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.373582][T31957] [ 680.373582][T31957] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 680.380822][T31957] __mutex_lock+0x19d/0x1550 [ 680.385986][T31957] nbd_queue_rq+0xc1/0xff0 [ 680.391328][T31957] blk_mq_dispatch_rq_list+0x499/0x1990 [ 680.397609][T31957] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 680.404485][T31957] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 680.411022][T31957] blk_mq_run_work_fn+0x16c/0x300 [ 680.416589][T31957] process_scheduled_works+0xc3d/0x1630 [ 680.422688][T31957] worker_thread+0xa47/0xfb0 [ 680.427831][T31957] kthread+0x38b/0x480 [ 680.432458][T31957] ret_from_fork+0x514/0xb70 [ 680.437597][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.442906][T31957] [ 680.442906][T31957] -> #4 (set->srcu){.+.+}-{0:0}: [ 680.450077][T31957] __synchronize_srcu+0xc9/0x2f0 [ 680.455690][T31957] elevator_switch+0x1e8/0x7b0 [ 680.461082][T31957] elevator_change+0x2fa/0x480 [ 680.466431][T31957] elevator_set_default+0x375/0x440 [ 680.472188][T31957] blk_register_queue+0x3f3/0x4e0 [ 680.477859][T31957] __add_disk+0x6b8/0xdb0 [ 680.482824][T31957] add_disk_fwnode+0x100/0x3a0 [ 680.488152][T31957] nbd_dev_add+0x733/0xb60 [ 680.493121][T31957] nbd_init+0x168/0x1f0 [ 680.497932][T31957] do_one_initcall+0x250/0x870 [ 680.503255][T31957] do_initcall_level+0x10a/0x1a0 [ 680.508739][T31957] do_initcalls+0x59/0xa0 [ 680.513624][T31957] kernel_init_freeable+0x29d/0x3e0 [ 680.519472][T31957] kernel_init+0x22/0x1d0 [ 680.524377][T31957] ret_from_fork+0x514/0xb70 [ 680.529537][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.535037][T31957] [ 680.535037][T31957] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 680.542898][T31957] __mutex_lock+0x19d/0x1550 [ 680.548046][T31957] elevator_change+0x1af/0x480 [ 680.553369][T31957] elevator_set_none+0xb5/0x140 [ 680.558801][T31957] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 680.565177][T31957] nbd_start_device+0x189/0xb30 [ 680.570618][T31957] nbd_genl_connect+0x167d/0x1cd0 [ 680.576206][T31957] genl_family_rcv_msg_doit+0x233/0x340 [ 680.582439][T31957] genl_rcv_msg+0x614/0x7a0 [ 680.587711][T31957] netlink_rcv_skb+0x226/0x4a0 [ 680.593025][T31957] genl_rcv+0x28/0x40 [ 680.597569][T31957] netlink_unicast+0x8ef/0xa80 [ 680.602886][T31957] netlink_sendmsg+0x813/0xb40 [ 680.608198][T31957] sock_sendmsg_nosec+0x13a/0x180 [ 680.613774][T31957] ____sys_sendmsg+0x54e/0x850 [ 680.619100][T31957] ___sys_sendmsg+0x2a5/0x360 [ 680.624323][T31957] __x64_sys_sendmsg+0x1b1/0x290 [ 680.629809][T31957] do_syscall_64+0x166/0x520 [ 680.634960][T31957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.641393][T31957] [ 680.641393][T31957] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 680.650046][T31957] blk_alloc_queue+0x544/0x690 [ 680.655359][T31957] __blk_mq_alloc_disk+0x194/0x390 [ 680.661033][T31957] nbd_dev_add+0x494/0xb60 [ 680.665994][T31957] nbd_init+0x168/0x1f0 [ 680.670699][T31957] do_one_initcall+0x250/0x870 [ 680.676014][T31957] do_initcall_level+0x10a/0x1a0 [ 680.681506][T31957] do_initcalls+0x59/0xa0 [ 680.686387][T31957] kernel_init_freeable+0x29d/0x3e0 [ 680.692143][T31957] kernel_init+0x22/0x1d0 [ 680.697046][T31957] ret_from_fork+0x514/0xb70 [ 680.702179][T31957] ret_from_fork_asm+0x1a/0x30 [ 680.707481][T31957] [ 680.707481][T31957] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 680.714712][T31957] fs_reclaim_acquire+0x71/0x100 [ 680.720249][T31957] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 680.726545][T31957] alloc_inode+0xb8/0x1b0 [ 680.731440][T31957] iget_locked+0x131/0x6a0 [ 680.736416][T31957] kernfs_get_inode+0x4f/0x770 [ 680.741743][T31957] kernfs_get_tree+0x5cd/0x980 [ 680.747070][T31957] vfs_get_tree+0x92/0x2a0 [ 680.752030][T31957] do_new_mount+0x325/0xb00 [ 680.757204][T31957] __se_sys_mount+0x31d/0x420 [ 680.762452][T31957] do_syscall_64+0x166/0x520 [ 680.767588][T31957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.774026][T31957] [ 680.774026][T31957] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 680.782171][T31957] __lock_acquire+0x164c/0x2de0 [ 680.787632][T31957] lock_acquire+0x115/0x350 [ 680.792698][T31957] down_write+0x96/0x200 [ 680.797494][T31957] kernfs_remove_by_name_ns+0x4e/0x140 [ 680.803532][T31957] sysfs_slab_add+0x51/0x260 [ 680.808671][T31957] do_kmem_cache_create+0x8bf/0x970 [ 680.814435][T31957] __kmem_cache_create_args+0x322/0x460 [ 680.820579][T31957] ieee80211_mesh_init_sdata+0x371/0x620 [ 680.826889][T31957] ieee80211_setup_sdata+0x858/0xc10 [ 680.832799][T31957] ieee80211_if_add+0xdd8/0x1600 [ 680.838281][T31957] ieee80211_add_iface+0xb4/0x5c0 [ 680.843908][T31957] nl80211_new_interface+0x7c5/0x1080 [ 680.849893][T31957] genl_family_rcv_msg_doit+0x233/0x340 [ 680.855987][T31957] genl_rcv_msg+0x614/0x7a0 [ 680.861043][T31957] netlink_rcv_skb+0x226/0x4a0 [ 680.866352][T31957] genl_rcv+0x28/0x40 [ 680.870890][T31957] netlink_unicast+0x8ef/0xa80 [ 680.876201][T31957] netlink_sendmsg+0x813/0xb40 [ 680.881539][T31957] sock_sendmsg_nosec+0x13a/0x180 [ 680.887108][T31957] ____sys_sendmsg+0x54e/0x850 [ 680.892414][T31957] ___sys_sendmsg+0x2a5/0x360 [ 680.897632][T31957] __x64_sys_sendmsg+0x1b1/0x290 [ 680.903134][T31957] do_syscall_64+0x166/0x520 [ 680.908310][T31957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.914765][T31957] [ 680.914765][T31957] other info that might help us debug this: [ 680.914765][T31957] [ 680.925039][T31957] Chain exists of: [ 680.925039][T31957] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 680.925039][T31957] [ 680.938891][T31957] Possible unsafe locking scenario: [ 680.938891][T31957] [ 680.946362][T31957] CPU0 CPU1 [ 680.951743][T31957] ---- ---- [ 680.957131][T31957] rlock(&root->kernfs_supers_rwsem); [ 680.962614][T31957] lock(pmus_lock); [ 680.969055][T31957] lock(&root->kernfs_supers_rwsem); [ 680.976984][T31957] lock(&root->kernfs_rwsem); [ 680.981769][T31957] [ 680.981769][T31957] *** DEADLOCK *** [ 680.981769][T31957] [ 680.989926][T31957] locks held by syz.0.12369/31957: 5, last CPU#0: [ 680.996358][T31957] #0: ffffffff912c6948 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 681.004608][T31957] #1: ffffffff91255d00 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 681.013875][T31957] #2: ffff8880672f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xb9/0x1080 [ 681.024175][T31957] #3: ffffffff8fe730d8 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x59/0x460 [ 681.034133][T31957] #4: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 681.045471][T31957] [ 681.045471][T31957] stack backtrace: [ 681.051397][T31957] CPU: 0 UID: 0 PID: 31957 Comm: syz.0.12369 Not tainted syzkaller #0 PREEMPT(full) [ 681.061234][T31957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 681.071342][T31957] Call Trace: [ 681.074653][T31957] [ 681.077608][T31957] dump_stack_lvl+0xe8/0x150 [ 681.082230][T31957] print_circular_bug+0x2e2/0x300 [ 681.087291][T31957] check_noncircular+0x12f/0x150 [ 681.092267][T31957] __lock_acquire+0x164c/0x2de0 [ 681.097143][T31957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.103333][T31957] lock_acquire+0x115/0x350 [ 681.107884][T31957] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 681.113563][T31957] down_write+0x96/0x200 [ 681.117846][T31957] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 681.123540][T31957] ? __pfx_down_write+0x10/0x10 [ 681.128425][T31957] ? down_read+0x2be/0x330 [ 681.132874][T31957] kernfs_remove_by_name_ns+0x4e/0x140 [ 681.138379][T31957] sysfs_slab_add+0x51/0x260 [ 681.143050][T31957] do_kmem_cache_create+0x8bf/0x970 [ 681.148303][T31957] __kmem_cache_create_args+0x322/0x460 [ 681.153937][T31957] ieee80211_mesh_init_sdata+0x371/0x620 [ 681.159622][T31957] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 681.165828][T31957] ? __raw_spin_lock_init+0x45/0x100 [ 681.171208][T31957] ieee80211_setup_sdata+0x858/0xc10 [ 681.176545][T31957] ieee80211_if_add+0xdd8/0x1600 [ 681.181570][T31957] ieee80211_add_iface+0xb4/0x5c0 [ 681.186677][T31957] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 681.193308][T31957] ? nl80211_new_interface+0x682/0x1080 [ 681.198901][T31957] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 681.204573][T31957] ? __alloc_skb+0x4d0/0x7a0 [ 681.209288][T31957] nl80211_new_interface+0x7c5/0x1080 [ 681.214710][T31957] ? __pfx_nl80211_new_interface+0x10/0x10 [ 681.220571][T31957] ? nl80211_pre_doit+0x547/0x890 [ 681.225648][T31957] genl_family_rcv_msg_doit+0x233/0x340 [ 681.231239][T31957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 681.237376][T31957] ? bpf_lsm_capable+0x9/0x20 [ 681.242088][T31957] ? security_capable+0x7e/0x2c0 [ 681.247229][T31957] genl_rcv_msg+0x614/0x7a0 [ 681.251772][T31957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.256837][T31957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 681.262238][T31957] ? __pfx_nl80211_new_interface+0x10/0x10 [ 681.268160][T31957] ? __pfx_nl80211_post_doit+0x10/0x10 [ 681.273669][T31957] netlink_rcv_skb+0x226/0x4a0 [ 681.278518][T31957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.283594][T31957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.289015][T31957] ? down_read+0x2be/0x330 [ 681.293479][T31957] genl_rcv+0x28/0x40 [ 681.297539][T31957] netlink_unicast+0x8ef/0xa80 [ 681.302332][T31957] netlink_sendmsg+0x813/0xb40 [ 681.307139][T31957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.312454][T31957] ? apparmor_socket_sendmsg+0x18b/0x360 [ 681.318238][T31957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.323560][T31957] sock_sendmsg_nosec+0x13a/0x180 [ 681.328618][T31957] ____sys_sendmsg+0x54e/0x850 [ 681.333408][T31957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.338721][T31957] ? import_iovec+0x73/0xa0 [ 681.343377][T31957] ___sys_sendmsg+0x2a5/0x360 [ 681.348081][T31957] ? __lock_acquire+0x747/0x2de0 [ 681.353083][T31957] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.358310][T31957] ? futex_wait+0x2a2/0x390 [ 681.363329][T31957] ? __fget_files+0x2a/0x420 [ 681.367958][T31957] ? __fget_files+0x3a2/0x420 [ 681.372672][T31957] __x64_sys_sendmsg+0x1b1/0x290 [ 681.377648][T31957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.383155][T31957] do_syscall_64+0x166/0x520 [ 681.387817][T31957] ? trace_irq_disable+0x3b/0x140 [ 681.392925][T31957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.399025][T31957] ? clear_bhb_loop+0x70/0xc0 [ 681.403726][T31957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.409635][T31957] RIP: 0033:0x7fabb7b9f559 [ 681.414091][T31957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.433715][T31957] RSP: 002b:00007fabb89bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.442165][T31957] RAX: ffffffffffffffda RBX: 00007fabb7e25fa0 RCX: 00007fabb7b9f559 [ 681.450158][T31957] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 681.458150][T31957] RBP: 00007fabb7c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 681.466143][T31957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.474136][T31957] R13: 00007fabb7e26038 R14: 00007fabb7e25fa0 R15: 00007ffd1352a538 [ 681.482143][T31957] [ 687.332159][ T1695] block nbd1: Possible stuck request ffff888027ea7000: control (read@0,4096B). Runtime 150 seconds [ 688.797997][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)