last executing test programs: 1.63533799s ago: executing program 2 (id=12784): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x6f6) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 1.597317409s ago: executing program 2 (id=12786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendmsg$inet6(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="51eebd5cc1", 0x5}], 0x1}, 0x4000804) 1.140008004s ago: executing program 1 (id=12797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.035191567s ago: executing program 0 (id=12799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) 1.034865616s ago: executing program 4 (id=12800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0x9, 0x18, 0x65, 0x0, 0x1, 0x32, 0x0, @private=0xa010102, @empty, {[@timestamp_prespec={0x44, 0x4, 0x8e, 0x3, 0x4}]}}}}}}}, 0x2a) 945.510076ms ago: executing program 3 (id=12802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x25, 0x0, &(0x7f0000000240)) 922.824983ms ago: executing program 1 (id=12803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x4814) 863.471213ms ago: executing program 0 (id=12804): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'ip6gretap0\x00', @random="e32579d14a8f"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 845.48603ms ago: executing program 4 (id=12805): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0)='4', 0x1) tee(r1, r0, 0xffffffffffffffff, 0x2) 825.932835ms ago: executing program 1 (id=12806): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x0, 0x0, 0x6, 0x2008, 0xfffd}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 763.504768ms ago: executing program 3 (id=12807): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4010) 759.702756ms ago: executing program 4 (id=12808): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 669.926618ms ago: executing program 2 (id=12809): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 642.247034ms ago: executing program 1 (id=12810): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 641.27237ms ago: executing program 3 (id=12811): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x10}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="195460834a99a429f70514ac92908eb82b8ec5cab5831001a79783e8ccd53ac56f0173563f96330997b4f72b9079748e1de27c238f03bf"], 0xdd12}], 0x1, 0x0, 0x0, 0x10008882}, 0x0) 583.249503ms ago: executing program 4 (id=12812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000fd"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 467.197523ms ago: executing program 2 (id=12813): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) 463.22937ms ago: executing program 3 (id=12814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000280)) 383.46428ms ago: executing program 0 (id=12815): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef40900008800b791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 382.953934ms ago: executing program 4 (id=12816): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c845) 321.456795ms ago: executing program 3 (id=12817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x2}], 0x1, 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 279.127429ms ago: executing program 2 (id=12818): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 239.212527ms ago: executing program 1 (id=12819): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 196.681491ms ago: executing program 3 (id=12820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x1, 0xa, 0x0, 0x1, 0xc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={r1, 0x5, 0x8}, &(0x7f0000000500)=0x8) 134.684844ms ago: executing program 4 (id=12821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 134.179058ms ago: executing program 0 (id=12822): r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0x20}}}}}, 0x0) 81.837536ms ago: executing program 0 (id=12823): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000000000000000000020000100000004000200040001"], 0x40}}, 0x0) 22.04033ms ago: executing program 2 (id=12824): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@multicast1, 0xfffc, 0x3, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x3}, 0x7fffffff, 0x6e6bb9, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4d6, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x48, 0x2c19, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 365.062碌s ago: executing program 0 (id=12825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=12826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): in process `syz.4.4822'. [ 259.597193][ T12] IPVS: starting estimator thread 0... [ 259.685405][T15923] IPVS: using max 25 ests per chain, 60000 per kthread [ 259.691321][T15928] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 259.895140][T15940] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4849'. [ 259.895170][T15940] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4849'. [ 259.895185][T15940] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4849'. [ 260.160215][T15960] netlink: 'syz.0.4856': attribute type 1 has an invalid length. [ 260.160238][T15960] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4856'. [ 260.195651][T15955] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 260.238221][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4860'. [ 260.534444][T15979] netlink: 'syz.3.4866': attribute type 2 has an invalid length. [ 260.534472][T15979] netlink: 'syz.3.4866': attribute type 2 has an invalid length. [ 260.646966][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4872'. [ 261.420942][T16037] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 261.820750][T16060] lo: entered promiscuous mode [ 261.831814][T16060] netlink: 'syz.0.4906': attribute type 2 has an invalid length. [ 261.831839][T16060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.832518][ T5728] lo speed is unknown, defaulting to 1000 [ 261.832540][ T5728] syz0: Port: 1 Link DOWN [ 261.832765][ T5728] lo speed is unknown, defaulting to 1000 [ 262.375039][T16095] netlink: 'syz.3.4925': attribute type 1 has an invalid length. [ 262.602984][T16112] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 262.919805][T16131] __nla_validate_parse: 2 callbacks suppressed [ 262.919827][T16131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4941'. [ 263.058016][T16137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.174375][T16147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4951'. [ 263.870812][T16191] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4971'. [ 263.870848][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4971'. [ 263.870867][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4971'. [ 263.870883][T16191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4971'. [ 264.403108][T16224] openvswitch: netlink: Key type 8708 is out of range max 32 [ 264.515518][T16232] netlink: 'syz.0.4992': attribute type 32 has an invalid length. [ 264.835961][T16256] bond0: option ad_select: unable to set because the bond device is up [ 265.051845][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5007'. [ 265.425981][T16293] xt_limit: Overflow, try lower: 536871034/0 [ 265.712353][T16312] ip6t_frag: unknown flags 6 [ 266.125216][T16336] netlink: 'syz.4.5043': attribute type 2 has an invalid length. [ 266.437382][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 266.462116][T16354] netlink: 'syz.0.5052': attribute type 1 has an invalid length. [ 266.462141][T16354] netlink: 'syz.0.5052': attribute type 1 has an invalid length. [ 266.904607][T16378] netlink: 'syz.2.5064': attribute type 30 has an invalid length. [ 267.121145][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5066'. [ 267.207807][T16391] openvswitch: netlink: Duplicate or invalid key (type 0). [ 267.285544][T16395] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 267.489525][T16402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.510155][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.573741][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5076'. [ 268.062206][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5092'. [ 268.284557][T16445] bond1: Removing last arp target with arp_interval on [ 268.374358][T16455] netlink: 'syz.2.5099': attribute type 6 has an invalid length. [ 268.447255][T16460] veth0_macvtap: entered allmulticast mode [ 268.447425][T16460] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 268.510517][T16465] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 268.727177][T16479] netlink: 344 bytes leftover after parsing attributes in process `syz.2.5112'. [ 269.262235][T16513] tunl0: entered promiscuous mode [ 269.268462][T16513] netlink: 'syz.3.5129': attribute type 3 has an invalid length. [ 269.268483][T16513] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5129'. [ 269.710163][T16532] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5138'. [ 269.945696][T16546] netlink: 'syz.3.5144': attribute type 2 has an invalid length. [ 269.945721][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5144'. [ 270.167713][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5152'. [ 270.167741][T16562] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5152'. [ 270.584482][T16583] bridge_slave_0: left allmulticast mode [ 270.584512][T16583] bridge_slave_0: left promiscuous mode [ 270.584774][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.636296][T16583] bridge_slave_1: left allmulticast mode [ 270.636325][T16583] bridge_slave_1: left promiscuous mode [ 270.636586][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.687520][T16583] bond0: (slave bond_slave_0): Releasing backup interface [ 270.737912][T16583] bond0: (slave bond_slave_1): Releasing backup interface [ 270.768718][T16594] xt_connbytes: Forcing CT accounting to be enabled [ 270.768890][T16594] set match dimension is over the limit! [ 270.794664][T16583] team0: Port device team_slave_0 removed [ 270.826548][T16583] team0: Port device team_slave_1 removed [ 270.831258][T16583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.831284][T16583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.863367][T16583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.863410][T16583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.873826][T16583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.922541][ T1571] syz1: Port: 1 Link DOWN [ 271.144475][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5177'. [ 271.260269][T16620] netlink: 'syz.0.5181': attribute type 5 has an invalid length. [ 271.260294][T16620] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5181'. [ 271.789533][T16652] netlink: 'syz.4.5196': attribute type 1 has an invalid length. [ 271.859804][T16659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.238800][T16686] openvswitch: netlink: Invalid VLAN frame [ 272.633223][T16711] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 272.794768][T16719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5230'. [ 272.987481][T16733] xt_hashlimit: invalid interval [ 273.060760][T16737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.216171][T16749] openvswitch: netlink: Multiple metadata blocks provided [ 273.471290][T16763] xt_policy: output policy not valid in PREROUTING and INPUT [ 273.531763][T16765] __nla_validate_parse: 1 callbacks suppressed [ 273.531795][T16765] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5253'. [ 273.531814][T16765] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5253'. [ 273.589485][T16773] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 273.768193][T16784] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 273.772587][T16783] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 274.064309][T16799] netlink: 'syz.4.5274': attribute type 1 has an invalid length. [ 274.440388][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5283'. [ 275.903155][T16922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5329'. [ 276.228173][T16943] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5340'. [ 276.282557][T16947] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5342'. [ 276.368799][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5347'. [ 276.440367][T16957] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.512194][T16961] pim6reg: entered allmulticast mode [ 277.221241][T17003] bond3: entered promiscuous mode [ 277.221316][T17003] bond3: entered allmulticast mode [ 277.221848][T17003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.741373][T17040] x_tables: duplicate entry at hook 3 [ 277.806591][T17043] netlink: 'syz.2.5390': attribute type 1 has an invalid length. [ 277.806618][T17043] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5390'. [ 278.053289][T17060] netlink: 'syz.0.5397': attribute type 2 has an invalid length. [ 278.053313][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5397'. [ 278.131761][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5399'. [ 278.277767][T17071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.491373][T17151] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 279.533391][T17154] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5444'. [ 279.952582][T17179] IPv6: sit2: Disabled Multicast RS [ 280.521246][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5474'. [ 280.573540][T17217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5475'. [ 280.603965][T17222] Bluetooth: MGMT ver 1.23 [ 280.604006][T17222] Bluetooth: hci0: unsupported parameter 5161 [ 280.604021][T17222] Bluetooth: hci0: unsupported parameter 8192 [ 280.604033][T17222] Bluetooth: hci0: unsupported parameter 5161 [ 280.604044][T17222] Bluetooth: hci0: unsupported parameter 8192 [ 280.791799][T17232] ip_tables: iptables: counters copy to user failed while replacing table [ 280.836931][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5484'. [ 280.922575][T17238] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5486'. [ 280.944632][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5488'. [ 280.944664][T17240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5488'. [ 280.944683][T17240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5488'. [ 280.994323][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5487'. [ 281.068114][T17226] syz.2.5479 (17226) used greatest stack depth: 17632 bytes left [ 281.208705][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5493'. [ 281.426886][T17265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 281.432155][T17268] ip_tables: iptables: counters copy to user failed while replacing table [ 281.663184][T17281] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 281.894194][T17298] Bluetooth: MGMT ver 1.23 [ 282.043620][T17304] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.300880][T17321] Bluetooth: hci0: unsupported parameter 5135 [ 282.300903][T17321] Bluetooth: hci0: unsupported parameter 8192 [ 282.300914][T17321] Bluetooth: hci0: unsupported parameter 5135 [ 282.300924][T17321] Bluetooth: hci0: unsupported parameter 8192 [ 282.914990][T17357] Timeout policy `syz1' can only be used by L3 protocol number 1550 [ 283.297470][T17379] netlink: 'syz.0.5556': attribute type 2 has an invalid length. [ 283.798465][T17411] netlink: 'syz.2.5572': attribute type 29 has an invalid length. [ 283.799846][T17411] netlink: 'syz.2.5572': attribute type 29 has an invalid length. [ 283.944346][T17421] netlink: 'syz.4.5577': attribute type 11 has an invalid length. [ 284.611198][T17459] ip_tables: iptables: counters copy to user failed while replacing table [ 284.751265][T17468] raw_sendmsg: syz.3.5598 forgot to set AF_INET. Fix it! [ 284.871652][T17477] __nla_validate_parse: 9 callbacks suppressed [ 284.871675][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5605'. [ 285.027787][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 285.078724][T17488] netlink: 'syz.1.5608': attribute type 1 has an invalid length. [ 285.283080][T17499] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 285.283122][T17499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.454958][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5619'. [ 286.443420][T17564] ip_tables: iptables: counters copy to user failed while replacing table [ 286.716521][T17580] bridge_slave_1: entered promiscuous mode [ 287.167794][T17608] netlink: 'syz.3.5667': attribute type 3 has an invalid length. [ 287.395995][T17620] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 287.564404][T17629] rdma_op ffff8880564f5238 conn xmit_rdma 0000000000000000 [ 287.839102][T17645] netlink: 'syz.3.5683': attribute type 1 has an invalid length. [ 287.898056][T17647] pimreg3: entered allmulticast mode [ 288.142433][T17663] Zero length message leads to an empty skb [ 288.249320][T17669] netlink: 'syz.2.5694': attribute type 29 has an invalid length. [ 288.312310][T17674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5698'. [ 288.312340][T17674] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5698'. [ 288.312357][T17674] netlink: 'syz.1.5698': attribute type 5 has an invalid length. [ 288.312370][T17674] netlink: 'syz.1.5698': attribute type 6 has an invalid length. [ 288.312383][T17674] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5698'. [ 288.384757][T17675] pim6reg: entered allmulticast mode [ 288.415405][T17675] pim6reg: left allmulticast mode [ 288.647587][T17692] netlink: 'syz.2.5706': attribute type 1 has an invalid length. [ 288.647614][T17692] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5706'. [ 289.115792][T17720] netlink: 'syz.2.5720': attribute type 46 has an invalid length. [ 289.217207][T17725] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5723'. [ 289.217239][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5723'. [ 289.862620][T17765] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 289.862665][T17765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.192056][T17782] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5753'. [ 290.192082][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5753'. [ 290.192095][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5753'. [ 290.544212][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5762'. [ 290.756366][T17816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5767'. [ 290.948926][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5774'. [ 290.948954][T17829] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5774'. [ 290.949010][T17829] netlink: 'syz.4.5774': attribute type 5 has an invalid length. [ 291.047490][T17832] netlink: Failed to add nicvf0 helper -22 [ 291.047553][T17832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.166024][T17837] Bluetooth: hci0: unsupported parameter 5134 [ 291.166053][T17837] Bluetooth: hci0: unsupported parameter 8192 [ 291.166065][T17837] Bluetooth: hci0: unsupported parameter 5134 [ 291.166077][T17837] Bluetooth: hci0: unsupported parameter 8192 [ 291.327690][T17849] vlan2: entered promiscuous mode [ 291.327713][T17849] bridge0: entered promiscuous mode [ 291.327953][T17849] vlan2: entered allmulticast mode [ 291.327967][T17849] bridge0: entered allmulticast mode [ 291.880743][T17881] Bluetooth: hci0: unsupported parameter 5161 [ 291.880769][T17881] Bluetooth: hci0: unsupported parameter 8192 [ 291.880781][T17881] Bluetooth: hci0: unsupported parameter 5161 [ 291.880794][T17881] Bluetooth: hci0: unsupported parameter 8192 [ 292.416353][T17904] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 292.416393][T17904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.676712][T17917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.676739][T17917] IPv6: NLM_F_CREATE should be set when creating new route [ 292.676789][T17917] IPv6: NLM_F_CREATE should be set when creating new route [ 292.676816][T17917] IPv6: NLM_F_CREATE should be set when creating new route [ 292.679801][T17917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.768681][T17922] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 292.870277][T17928] tipc: Enabling of bearer rejected, failed to enable media [ 292.871505][T17927] ip_tables: iptables: counters copy to user failed while replacing table [ 293.001496][T17934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.083261][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5825'. [ 293.083843][T17942] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5826'. [ 293.137809][T17938] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 293.153870][T17938] bond7 (unregistering): Released all slaves [ 293.280250][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'. [ 293.464420][T17960] netlink: 'syz.4.5835': attribute type 1 has an invalid length. [ 293.464449][T17960] netlink: 'syz.4.5835': attribute type 1 has an invalid length. [ 293.615040][T17969] vlan2: entered promiscuous mode [ 293.615065][T17969] macsec0: entered promiscuous mode [ 293.627206][T17969] vlan2: entered allmulticast mode [ 293.627226][T17969] macsec0: entered allmulticast mode [ 293.627239][T17969] veth1_macvtap: entered allmulticast mode [ 293.682777][T17973] netlink: 'syz.0.5843': attribute type 2 has an invalid length. [ 293.947436][T17988] ip_tables: iptables: counters copy to user failed while replacing table [ 294.291485][T18010] Bluetooth: MGMT ver 1.23 [ 295.360523][T18076] __nla_validate_parse: 4 callbacks suppressed [ 295.360545][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5894'. [ 295.679409][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 296.470949][T18139] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 298.149815][T18235] ip_tables: iptables: counters copy to user failed while replacing table [ 298.707485][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5986'. [ 299.544282][T18314] netlink: Invalid conntrack helper [ 299.544319][T18314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.365905][T18361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.581102][T18372] netlink: 'syz.1.6033': attribute type 1 has an invalid length. [ 300.617276][T18374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6032'. [ 300.617301][T18374] tipc: Invalid UDP bearer configuration [ 300.617348][T18374] tipc: Enabling of bearer rejected, failed to enable media [ 300.797947][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6040'. [ 300.881618][T18390] netlink: 'syz.4.6039': attribute type 1 has an invalid length. [ 301.301486][T18415] netlink: 'syz.2.6050': attribute type 7 has an invalid length. [ 303.126460][T18521] ip_tables: iptables: counters copy to user failed while replacing table [ 303.350279][T18531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6094'. [ 303.351751][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6094'. [ 303.602693][T18541] netlink: 'syz.4.6103': attribute type 1 has an invalid length. [ 303.602717][T18541] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6103'. [ 303.602733][T18541] netlink: 'syz.4.6103': attribute type 1 has an invalid length. [ 304.284233][T18585] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6122'. [ 304.284257][T18585] nbd: illegal input index -8454144 [ 305.243517][T18647] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.401548][T18654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6154'. [ 305.401592][T18654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6154'. [ 305.433204][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6158'. [ 305.560997][T18664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6162'. [ 305.854809][T18687] netlink: Unknown nat attribute (0) [ 305.854849][T18687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.980201][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6173'. [ 306.032710][T18696] netlink: 'syz.4.6175': attribute type 1 has an invalid length. [ 306.032754][T18696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.189705][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6178'. [ 306.381993][T18717] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6183'. [ 306.473952][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 306.496170][ T535] IPVS: starting estimator thread 0... [ 306.584020][T18720] IPVS: Scheduler module ip_vs_mh not found [ 306.586063][T18723] IPVS: using max 27 ests per chain, 64800 per kthread [ 307.106727][T18758] netlink: 'syz.3.6202': attribute type 4 has an invalid length. [ 307.290222][T18768] Bluetooth: hci0: unsupported parameter 5161 [ 307.290247][T18768] Bluetooth: hci0: unsupported parameter 8192 [ 307.290260][T18768] Bluetooth: hci0: unsupported parameter 5161 [ 307.290272][T18768] Bluetooth: hci0: unsupported parameter 8192 [ 307.471292][T18778] tipc: Enabling of bearer rejected, failed to enable media [ 307.484009][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6213'. [ 307.577812][T18783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6216'. [ 307.577841][T18783] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6216'. [ 307.577857][T18783] netlink: 'syz.0.6216': attribute type 6 has an invalid length. [ 307.577871][T18783] netlink: 'syz.0.6216': attribute type 5 has an invalid length. [ 307.577883][T18783] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6216'. [ 307.647333][T18788] tipc: Started in network mode [ 307.647366][T18788] tipc: Node identity ac14142f, cluster identity 4711 [ 307.648007][T18788] tipc: Enabling of bearer rejected, failed to enable media [ 307.734094][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6222'. [ 307.797422][T18793] netlink: zone id is out of range [ 307.833547][T18796] xt_hashlimit: size too large, truncated to 1048576 [ 307.964701][T18807] ip_tables: iptables: counters copy to user failed while replacing table [ 308.402194][T18826] netlink: NAT attribute has 4 unknown bytes [ 308.402235][T18826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.243139][T18862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6254'. [ 309.986545][T18898] sctp: [Deprecated]: syz.4.6270 (pid 18898) Use of int in maxseg socket option. [ 309.986545][T18898] Use struct sctp_assoc_value instead [ 310.458766][T18926] openvswitch: netlink: Missing key (keys=40, expected=100) [ 311.018510][T18962] __nla_validate_parse: 3 callbacks suppressed [ 311.018532][T18962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6301'. [ 311.175628][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6305'. [ 311.762048][T19006] netlink: 'syz.4.6323': attribute type 49 has an invalid length. [ 311.798621][T19009] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6324'. [ 311.827106][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6325'. [ 312.119183][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6334'. [ 312.120855][T19031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.121074][T19031] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6334'. [ 312.610980][T19053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 313.272266][T19095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.272289][T19095] IPv6: NLM_F_CREATE should be set when creating new route [ 313.459751][T19107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.068123][T19144] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 314.644848][T19173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6403'. [ 314.920691][T19191] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6412'. [ 315.060341][T19201] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6417'. [ 315.232232][T19214] Bluetooth: hci0: unsupported parameter 5135 [ 315.232257][T19214] Bluetooth: hci0: unsupported parameter 8192 [ 315.232269][T19214] Bluetooth: hci0: unsupported parameter 5135 [ 315.232281][T19214] Bluetooth: hci0: unsupported parameter 8192 [ 315.394684][T19224] Dead loop on virtual device ip6_vti0 (net 39), fix it urgently! [ 315.618697][T19235] Bluetooth: hci0: unsupported parameter 5135 [ 315.618724][T19235] Bluetooth: hci0: unsupported parameter 8192 [ 315.618740][T19235] Bluetooth: hci0: unsupported parameter 5135 [ 315.618751][T19235] Bluetooth: hci0: unsupported parameter 8192 [ 316.536995][T19276] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 316.595815][T19282] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.595916][T19282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6456'. [ 317.120525][T19314] netlink: 'syz.2.6472': attribute type 2 has an invalid length. [ 317.164840][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6473'. [ 317.164867][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6473'. [ 317.164890][T19316] netlink: 'syz.4.6473': attribute type 14 has an invalid length. [ 317.164905][T19316] netlink: 'syz.4.6473': attribute type 13 has an invalid length. [ 317.224988][T19318] Bluetooth: hci0: unsupported parameter 5161 [ 317.225012][T19318] Bluetooth: hci0: unsupported parameter 8192 [ 317.225024][T19318] Bluetooth: hci0: unsupported parameter 5161 [ 317.225055][T19318] Bluetooth: hci0: unsupported parameter 8192 [ 317.312747][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.499452][T19334] xt_IDLETIMER: timeout value is too big [ 317.934512][T19364] netlink: 'syz.0.6499': attribute type 1 has an invalid length. [ 317.934537][T19364] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6499'. [ 318.141846][T19377] netlink: 'syz.3.6504': attribute type 1 has an invalid length. [ 318.141869][T19377] netlink: 'syz.3.6504': attribute type 2 has an invalid length. [ 318.141882][T19377] netlink: 'syz.3.6504': attribute type 3 has an invalid length. [ 318.141894][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6504'. [ 318.464976][T19393] xt_hashlimit: size too large, truncated to 1048576 [ 318.509648][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6511'. [ 318.882853][T19417] tipc: Started in network mode [ 318.882887][T19417] tipc: Node identity ac141441, cluster identity 4711 [ 318.884055][T19417] tipc: Enabled bearer , priority 10 [ 318.914432][T19418] Bluetooth: hci0: unsupported parameter 5135 [ 318.914454][T19418] Bluetooth: hci0: unsupported parameter 8192 [ 318.914466][T19418] Bluetooth: hci0: unsupported parameter 5135 [ 318.914477][T19418] Bluetooth: hci0: unsupported parameter 8192 [ 319.063156][T19427] netlink: 'syz.0.6525': attribute type 2 has an invalid length. [ 319.080716][T19427] : entered promiscuous mode [ 319.240599][T19435] netlink: zone id is out of range [ 319.240619][T19435] netlink: zone id is out of range [ 319.240782][T19435] netlink: zone id is out of range [ 319.244206][T19436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6530'. [ 319.251204][T19436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6530'. [ 319.571942][T19457] netlink: 'syz.4.6541': attribute type 62 has an invalid length. [ 319.777955][T19470] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 319.961133][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6551'. [ 320.000217][ T30] tipc: Node number set to 2886997057 [ 320.499986][T19510] sock: sock_timestamping_bind_phc: sock not bind to device [ 320.738826][T19522] netlink: 'syz.1.6572': attribute type 4 has an invalid length. [ 320.738868][T19522] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6572'. [ 320.874403][T19531] netlink: 'syz.3.6578': attribute type 11 has an invalid length. [ 320.995540][ T31] audit: type=1800 audit(1791378513.981:2): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6579" name="memory.events" dev="tmpfs" ino=6466 res=0 errno=0 [ 321.003113][ T31] audit: type=1804 audit(1791378513.991:3): pid=19537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6579" name="/newroot/1288/memory.events" dev="tmpfs" ino=6466 res=1 errno=0 [ 322.700818][T19629] __nla_validate_parse: 4 callbacks suppressed [ 322.700841][T19629] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6624'. [ 322.895765][T19635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 323.444137][T19658] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 323.617074][T19667] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6642'. [ 323.890899][T19677] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 324.248314][T19695] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 324.401336][T19703] vcan0: entered allmulticast mode [ 324.504307][T19710] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6659'. [ 324.643520][T19718] netlink: 'syz.1.6664': attribute type 2 has an invalid length. [ 324.793425][T19725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.292806][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6684'. [ 325.417444][T19766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.854194][T19796] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.539240][T19839] nbd: must specify at least one socket [ 326.755534][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6727'. [ 327.582510][T19903] netlink: 'syz.2.6755': attribute type 2 has an invalid length. [ 327.582536][T19903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6755'. [ 327.647057][T19907] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 327.832983][T19913] vlan3: entered promiscuous mode [ 327.833005][T19913] geneve1: entered promiscuous mode [ 327.833215][T19913] vlan3: entered allmulticast mode [ 327.833228][T19913] geneve1: entered allmulticast mode [ 327.951076][T19917] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.6762'. [ 327.951211][T19917] 0猉功D龌: renamed from gretap0 (while UP) [ 327.988502][T19917] 0猉功D龌: entered allmulticast mode [ 329.038168][T19979] tipc: Enabling of bearer rejected, failed to enable media [ 329.153510][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 329.241263][T19990] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.251218][T19989] ip_tables: iptables: counters copy to user failed while replacing table [ 329.413724][T20000] Bluetooth: hci0: unsupported parameter 5135 [ 329.413748][T20000] Bluetooth: hci0: unsupported parameter 8192 [ 329.413760][T20000] Bluetooth: hci0: unsupported parameter 5135 [ 329.413772][T20000] Bluetooth: hci0: unsupported parameter 8192 [ 329.553678][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6809'. [ 329.671373][T20015] netlink: 'syz.4.6813': attribute type 23 has an invalid length. [ 329.688208][T20013] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 329.757608][T20020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6812'. [ 329.766931][T20020] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6812'. [ 330.098344][T20035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6819'. [ 330.098377][T20035] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6819'. [ 330.212486][T20040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.310402][T20044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6825'. [ 330.310427][T20044] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6825'. [ 330.310477][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6825'. [ 331.160538][T20091] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 331.691241][T20125] openvswitch: netlink: Missing key (keys=40, expected=100) [ 331.718934][T20128] netlink: 'syz.2.6865': attribute type 1 has an invalid length. [ 331.718957][T20128] netlink: 'syz.2.6865': attribute type 3 has an invalid length. [ 331.718973][T20128] NCSI netlink: No device for ifindex 813332851 [ 331.972708][T20146] ip_tables: iptables: counters copy to user failed while replacing table [ 331.975292][T20146] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 332.382133][T20170] netlink: 'syz.2.6885': attribute type 1 has an invalid length. [ 332.628717][T20185] netlink: 'syz.3.6892': attribute type 10 has an invalid length. [ 333.128387][T20213] __nla_validate_parse: 4 callbacks suppressed [ 333.128410][T20213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6905'. [ 333.371812][T20228] tipc: Started in network mode [ 333.371843][T20228] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 333.372199][T20228] tipc: Enabled bearer , priority 10 [ 333.475067][T20233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6915'. [ 333.612101][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6919'. [ 333.799387][T20252] netlink: 'syz.2.6923': attribute type 5 has an invalid length. [ 333.799432][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6923'. [ 334.003476][T20262] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6928'. [ 334.003502][T20262] nbd: illegal input index 65508 [ 334.248413][T20274] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6937'. [ 334.248476][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6937'. [ 334.490696][ T1571] tipc: Node number set to 10070698 [ 334.613448][T20296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6944'. [ 334.734858][T20304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6952'. [ 334.828981][T20312] Bluetooth: hci0: unsupported parameter 5135 [ 334.829006][T20312] Bluetooth: hci0: unsupported parameter 8192 [ 334.829018][T20312] Bluetooth: hci0: unsupported parameter 5135 [ 334.829030][T20312] Bluetooth: hci0: unsupported parameter 8192 [ 335.202327][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6962'. [ 335.479379][T20347] ip_tables: iptables: counters copy to user failed while replacing table [ 336.191590][T20383] macvtap1: entered allmulticast mode [ 336.191618][T20383] dummy0: entered allmulticast mode [ 336.191850][T20383] dummy0: entered promiscuous mode [ 336.263798][ T59] IPVS: starting estimator thread 0... [ 336.346518][T20389] IPVS: using max 24 ests per chain, 57600 per kthread [ 337.103492][T20417] ip_tables: iptables: counters copy to user failed while replacing table [ 337.294429][T20427] Bluetooth: hci0: unsupported parameter 5134 [ 337.294453][T20427] Bluetooth: hci0: unsupported parameter 8192 [ 337.294467][T20427] Bluetooth: hci0: unsupported parameter 5134 [ 337.294479][T20427] Bluetooth: hci0: unsupported parameter 8192 [ 337.329376][T20432] openvswitch: netlink: Missing key (keys=40, expected=100) [ 337.537577][T20441] netlink: 'syz.2.7014': attribute type 5 has an invalid length. [ 338.828361][T20522] netlink: 'syz.2.7055': attribute type 2 has an invalid length. [ 338.882571][T20524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.131967][T20541] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.653260][T20625] netlink: 'syz.1.7105': attribute type 3 has an invalid length. [ 340.850776][T20637] netlink: 'syz.1.7116': attribute type 3 has an invalid length. [ 340.850799][T20637] __nla_validate_parse: 6 callbacks suppressed [ 340.850812][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7116'. [ 341.503391][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7132'. [ 341.930977][T20698] nbd: must specify an index to disconnect [ 342.299788][T20720] ip_tables: iptables: counters copy to user failed while replacing table [ 342.464665][T20731] netlink: 'syz.2.7157': attribute type 13 has an invalid length. [ 342.958290][T20759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7170'. [ 343.140611][T20768] tipc: MTU too low for tipc bearer [ 343.826351][T20814] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7196'. [ 343.918135][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.959289][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7201'. [ 344.321954][T20839] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7211'. [ 344.950028][T20882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7232'. [ 345.194336][T20897] netlink: 'syz.4.7238': attribute type 4 has an invalid length. [ 345.424038][T20910] netlink: 'syz.1.7246': attribute type 3 has an invalid length. [ 345.424062][T20910] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7246'. [ 345.498521][T20916] netlink: 'syz.0.7249': attribute type 32 has an invalid length. [ 345.498545][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7249'. [ 345.527248][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7248'. [ 345.558291][T20916] bond2: option coupled_control: invalid value (192) [ 345.572721][T20916] bond2 (unregistering): Released all slaves [ 345.782016][T20931] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 345.915949][T20938] __nla_validate_parse: 1 callbacks suppressed [ 345.915971][T20938] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7261'. [ 345.992577][T20943] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.219894][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7267'. [ 346.442502][T20974] ip_tables: iptables: counters copy to user failed while replacing table [ 346.571870][T20981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7280'. [ 346.571899][T20981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7280'. [ 346.572719][T20981] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7280'. [ 346.572742][T20981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7280'. [ 346.988154][T21007] netlink: 'syz.4.7293': attribute type 11 has an invalid length. [ 347.333558][T21028] netlink: 59 bytes leftover after parsing attributes in process `syz.2.7304'. [ 347.577501][T21042] netlink: 'syz.0.7311': attribute type 1 has an invalid length. [ 347.752522][T21052] tipc: Started in network mode [ 347.752556][T21052] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 347.774987][T21052] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 347.784513][T21052] tipc: Enabled bearer , priority 10 [ 348.300986][T21087] netlink: 'syz.4.7332': attribute type 25 has an invalid length. [ 348.618029][T21110] netlink: 'syz.0.7345': attribute type 2 has an invalid length. [ 348.885385][ T5728] tipc: Node number set to 1 [ 349.118323][T21140] tipc: Enabling not permitted [ 349.118361][T21140] tipc: Enabling of bearer rejected, failed to enable media [ 349.299892][T21149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7366'. [ 349.445173][T21159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7368'. [ 349.478880][T21163] tipc: Enabling of bearer rejected, media not registered [ 349.886010][T21181] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7380'. [ 350.059878][T21193] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 350.061082][T21193] batman_adv: batadv0: Adding interface: gretap2 [ 350.061099][T21193] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.061143][T21193] batman_adv: batadv0: Interface activated: gretap2 [ 350.444600][T21217] netlink: NAT attribute has 4 unknown bytes [ 350.444638][T21217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.198803][T21260] openvswitch: netlink: Missing key (keys=40, expected=100) [ 351.385935][T21267] nbd: must specify a size in bytes for the device [ 351.480225][T21275] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7425'. [ 351.540691][T21281] atomic_op ffff8880299de9e0 conn xmit_atomic 0000000000000000 [ 351.789715][T21293] smc: net device team0 applied user defined pnetid SYZ2 [ 351.819913][T21297] netlink: 'syz.1.7434': attribute type 2 has an invalid length. [ 352.150704][T21317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.535279][T21341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.769479][T21355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7464'. [ 353.051459][T21371] netlink: 'syz.2.7473': attribute type 29 has an invalid length. [ 353.052358][T21371] netlink: 'syz.2.7473': attribute type 29 has an invalid length. [ 353.212221][T21382] openvswitch: netlink: Unknown key attributes 20 [ 354.005769][T21429] xt_IDLETIMER: label is empty or not nul-terminated [ 354.374623][T21451] sit1: entered promiscuous mode [ 354.374649][T21451] sit1: entered allmulticast mode [ 354.471934][T21459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7514'. [ 354.695164][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7520'. [ 355.351296][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7540'. [ 355.489834][T21519] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7544'. [ 355.638661][T21530] netlink: 'syz.0.7548': attribute type 1 has an invalid length. [ 355.791669][T21536] ip_tables: iptables: counters copy to user failed while replacing table [ 355.801968][T21532] vlan4: entered allmulticast mode [ 355.801992][T21532] bond0: entered allmulticast mode [ 355.802005][T21532] bond_slave_0: entered allmulticast mode [ 355.802021][T21532] bond_slave_1: entered allmulticast mode [ 355.802050][T21532] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 356.568707][T21587] netlink: 'syz.3.7575': attribute type 142 has an invalid length. [ 356.715432][T21595] netlink: 'syz.2.7577': attribute type 3 has an invalid length. [ 356.921968][T21608] Bluetooth: hci0: unsupported parameter 5135 [ 356.921991][T21608] Bluetooth: hci0: unsupported parameter 8192 [ 356.922023][T21608] Bluetooth: hci0: unsupported parameter 5135 [ 356.922034][T21608] Bluetooth: hci0: unsupported parameter 8192 [ 357.289132][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7595'. [ 357.339169][T21633] tipc: Enabled bearer , priority 10 [ 358.383207][T21692] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.737533][T21711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7633'. [ 358.886510][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7639'. [ 358.886537][T21722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7639'. [ 359.089266][T21730] syz.0.7643 (21730) used obsolete PPPIOCDETACH ioctl [ 359.265679][T21743] vlan1: entered allmulticast mode [ 359.265703][T21743] veth0_vlan: entered allmulticast mode [ 359.356568][T21748] tipc: Enabling of bearer rejected, media not registered [ 359.358411][T21750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7653'. [ 359.413796][T21753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7656'. [ 359.445603][T21755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7654'. [ 359.447431][T21755] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7654'. [ 359.650305][T21768] tipc: Bearer : already 2 bearers with priority 10 [ 359.650327][T21768] tipc: Bearer : trying with adjusted priority [ 359.650465][T21768] tipc: Enabling of bearer rejected, failed to enable media [ 359.845469][T21778] netlink: 'syz.1.7668': attribute type 33 has an invalid length. [ 360.597920][T21823] Bluetooth: hci0: unsupported parameter 5161 [ 360.597946][T21823] Bluetooth: hci0: unsupported parameter 8192 [ 360.597959][T21823] Bluetooth: hci0: unsupported parameter 5161 [ 360.597973][T21823] Bluetooth: hci0: unsupported parameter 8192 [ 360.719337][T21829] netlink: Failed to add %pB helper -22 [ 360.719402][T21829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.752452][T21834] Bluetooth: hci0: unsupported parameter 5135 [ 360.752476][T21834] Bluetooth: hci0: unsupported parameter 8192 [ 360.752488][T21834] Bluetooth: hci0: unsupported parameter 5135 [ 360.752501][T21834] Bluetooth: hci0: unsupported parameter 8192 [ 360.822601][T21836] tipc: Enabling of bearer rejected, failed to enable media [ 360.953873][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7700'. [ 361.123294][T21852] netlink: 'syz.1.7705': attribute type 1 has an invalid length. [ 361.123317][T21852] nbd: error processing sock list [ 361.568380][T21879] netlink: 'syz.1.7715': attribute type 2 has an invalid length. [ 361.568406][T21879] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7715'. [ 362.365763][T21926] netlink: 'syz.3.7738': attribute type 1 has an invalid length. [ 363.125648][T21976] __nla_validate_parse: 3 callbacks suppressed [ 363.125695][T21976] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7762'. [ 363.125714][T21976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7762'. [ 363.698526][T22010] netlink: 'syz.4.7779': attribute type 3 has an invalid length. [ 363.932668][T22023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7785'. [ 363.932734][T22023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7785'. [ 364.359252][T22048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.703857][T22068] ip_tables: iptables: counters copy to user failed while replacing table [ 364.851156][T22078] IPVS: ip_vs_edit_dest(): server weight less than zero [ 364.894948][T22080] veth3: entered allmulticast mode [ 365.033244][T22088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7816'. [ 365.292163][T22106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.591378][T22124] block nbd4: not configured, cannot reconfigure [ 365.739211][T22133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7840'. [ 366.027721][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7848'. [ 366.089195][T22158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7850'. [ 366.089232][T22158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7850'. [ 366.117922][T22153] bond4: Invalid ad_actor_system MAC address. [ 366.117944][T22153] bond4: option ad_actor_system: invalid value (1) [ 366.120898][T22153] bond4 (unregistering): Released all slaves [ 366.435536][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7859'. [ 366.583378][T22182] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 366.583415][T22182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.660588][T22184] nftables ruleset with unbound set [ 367.709293][T22220] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.877040][T22220] bond0: (slave netdevsim1): Releasing backup interface [ 367.879214][T22220] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 367.884936][T22220] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.019659][T22220] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.355685][ T535] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.456416][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.531335][T22275] __nla_validate_parse: 1 callbacks suppressed [ 368.531358][T22275] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7900'. [ 368.545776][ T203] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.545845][ T203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.549686][T22278] Bluetooth: MGMT ver 1.23 [ 368.674418][T22281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7903'. [ 368.683229][T22281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7903'. [ 368.988974][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7913'. [ 370.285012][T22375] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.354762][T22379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7952'. [ 371.111577][T22410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7966'. [ 371.275715][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7973'. [ 371.654142][T22444] tipc: Enabled bearer , priority 9 [ 372.533116][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8011'. [ 372.668308][T22512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.741259][T22516] netlink: 13 bytes leftover after parsing attributes in process `syz.4.8017'. [ 372.931432][T22527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.102122][T22535] Bluetooth: hci0: unsupported parameter 5134 [ 373.102146][T22535] Bluetooth: hci0: unsupported parameter 8192 [ 373.102159][T22535] Bluetooth: hci0: unsupported parameter 5134 [ 373.102171][T22535] Bluetooth: hci0: unsupported parameter 8192 [ 373.134235][T22533] gretap0: entered promiscuous mode [ 373.149374][T22533] vlan5: entered promiscuous mode [ 373.797785][T22577] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 375.010222][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 375.744946][T22673] macsec1: entered promiscuous mode [ 375.932881][T22686] ip_tables: iptables: counters copy to user failed while replacing table [ 376.382371][T22714] Bluetooth: hci0: unsupported parameter 5135 [ 376.382400][T22714] Bluetooth: hci0: unsupported parameter 8192 [ 376.382414][T22714] Bluetooth: hci0: unsupported parameter 5135 [ 376.382427][T22714] Bluetooth: hci0: unsupported parameter 8192 [ 376.567231][T22725] netlink: 'syz.1.8116': attribute type 7 has an invalid length. [ 376.567256][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8116'. [ 376.567297][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8116'. [ 376.572682][T22724] netlink: 312 bytes leftover after parsing attributes in process `syz.4.8115'. [ 376.827591][T22742] netlink: 'syz.0.8124': attribute type 3 has an invalid length. [ 376.827617][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8124'. [ 378.091955][T22815] Bluetooth: hci0: unsupported parameter 5135 [ 378.091983][T22815] Bluetooth: hci0: unsupported parameter 8192 [ 378.091995][T22815] Bluetooth: hci0: unsupported parameter 5135 [ 378.092007][T22815] Bluetooth: hci0: unsupported parameter 8192 [ 378.156038][T22821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8163'. [ 378.224162][T22825] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8165'. [ 378.377163][T22833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8169'. [ 378.676382][T22853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8178'. [ 378.676424][T22853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8178'. [ 378.837774][T22857] bond2: (slave bond_slave_0): Device is not our slave [ 378.837802][T22857] bond2: option active_slave: invalid value (bond_slave_0) [ 378.871237][T22857] bond2 (unregistering): Released all slaves [ 378.886271][T22866] netlink: 'syz.3.8183': attribute type 1 has an invalid length. [ 378.886297][T22866] netlink: 'syz.3.8183': attribute type 1 has an invalid length. [ 379.063942][T22875] openvswitch: netlink: Missing valid actions attribute. [ 379.063979][T22875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.702432][ T203] tipc: Subscription rejected, illegal request [ 379.819494][T22922] netlink: 'syz.3.8212': attribute type 1 has an invalid length. [ 380.194026][T22946] __nla_validate_parse: 3 callbacks suppressed [ 380.194051][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8224'. [ 380.194068][T22946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8224'. [ 380.546235][T22967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.681431][T22974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8240'. [ 380.751653][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8239'. [ 380.819044][T22983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8241'. [ 380.979633][T22993] netlink: Setting conntrack mark requires 'commit' flag. [ 380.979671][T22993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.198482][T23006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.328587][T23011] netlink: Unknown conntrack attr (type=205, max=9) [ 382.181722][T23054] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.599406][T23081] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8288'. [ 382.964999][T23106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.082834][T23111] openvswitch: netlink: Unknown nsh attribute 0 [ 383.204843][T23118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.754193][T23154] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 384.288761][T23189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.483577][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8348'. [ 384.483604][T23202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8348'. [ 384.750174][T23216] tipc: Enabled bearer , priority 10 [ 385.053128][T23235] pim6reg527: entered allmulticast mode [ 385.084370][T23237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8366'. [ 385.253881][T23243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8369'. [ 385.276890][T23245] Bluetooth: hci0: unsupported parameter 5135 [ 385.276926][T23245] Bluetooth: hci0: unsupported parameter 8192 [ 385.276940][T23245] Bluetooth: hci0: unsupported parameter 5135 [ 385.276952][T23245] Bluetooth: hci0: unsupported parameter 8192 [ 385.726074][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8376'. [ 386.323809][T23287] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 386.324392][T23287] team0: Device ipvlan1 is already an upper device of the team interface [ 386.644099][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8400'. [ 387.154805][T23335] tipc: Enabling of bearer rejected, already enabled [ 387.166318][ T96] IPVS: starting estimator thread 0... [ 387.257802][T23341] IPVS: using max 30 ests per chain, 72000 per kthread [ 387.387103][T23352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8416'. [ 387.682008][T23368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8423'. [ 387.877623][T23378] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8429'. [ 387.901541][T23379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8430'. [ 387.901567][T23379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8430'. [ 388.230921][T23397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8437'. [ 388.593238][T23420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8449'. [ 388.839290][T23432] net_ratelimit: 1 callbacks suppressed [ 388.839383][T23432] netlink: zone id is out of range [ 388.839393][T23432] netlink: zone id is out of range [ 388.839402][T23432] netlink: zone id is out of range [ 388.839409][T23432] netlink: zone id is out of range [ 388.839418][T23432] netlink: zone id is out of range [ 388.839426][T23432] netlink: zone id is out of range [ 388.839439][T23432] netlink: zone id is out of range [ 388.839447][T23432] netlink: zone id is out of range [ 388.839456][T23432] netlink: zone id is out of range [ 388.839463][T23432] netlink: zone id is out of range [ 389.661737][T23473] netlink: 'syz.0.8476': attribute type 2 has an invalid length. [ 390.303840][T23512] netlink: 'syz.4.8494': attribute type 1 has an invalid length. [ 390.821135][T23543] netlink: 'syz.1.8510': attribute type 1 has an invalid length. [ 390.833212][T23545] __nla_validate_parse: 2 callbacks suppressed [ 390.833231][T23545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8511'. [ 391.122606][T23562] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 391.301609][T23576] netlink: 'syz.0.8525': attribute type 2 has an invalid length. [ 391.888322][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8544'. [ 392.098819][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8550'. [ 392.697123][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8564'. [ 392.894808][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8569'. [ 392.917683][T23666] netlink: 'syz.4.8567': attribute type 2 has an invalid length. [ 394.386687][T23758] Bluetooth: hci0: unsupported parameter 5134 [ 394.386712][T23758] Bluetooth: hci0: unsupported parameter 8192 [ 394.386726][T23758] Bluetooth: hci0: unsupported parameter 5134 [ 394.386738][T23758] Bluetooth: hci0: unsupported parameter 8192 [ 394.390959][T23757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8613'. [ 394.899174][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8625'. [ 394.899214][T23783] netlink: 'syz.4.8625': attribute type 3 has an invalid length. [ 395.330210][T23810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8638'. [ 395.609129][T23828] pim6reg: entered allmulticast mode [ 395.642192][T23827] net_ratelimit: 498 callbacks suppressed [ 395.642216][T23827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.694591][T23831] netlink: 'syz.0.8649': attribute type 32 has an invalid length. [ 395.694615][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8649'. [ 395.781584][T23831] bond2: Setting coupled_control to off (0) [ 396.506233][T23859] veth0_to_bond: entered allmulticast mode [ 397.239773][T23908] Bluetooth: hci0: unsupported parameter 5134 [ 397.239800][T23908] Bluetooth: hci0: unsupported parameter 8192 [ 397.239814][T23908] Bluetooth: hci0: unsupported parameter 5134 [ 397.239827][T23908] Bluetooth: hci0: unsupported parameter 8192 [ 397.405079][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8690'. [ 398.226310][T23972] netlink: 'syz.0.8716': attribute type 8 has an invalid length. [ 398.226334][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8716'. [ 398.226817][T23972] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.227327][T23972] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.484697][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8724'. [ 398.936893][T24015] netlink: 'syz.3.8737': attribute type 1 has an invalid length. [ 398.936920][T24015] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8737'. [ 398.936936][T24015] netlink: 'syz.3.8737': attribute type 1 has an invalid length. [ 399.116411][T24027] sctp: [Deprecated]: syz.3.8743 (pid 24027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.116411][T24027] Use struct sctp_sack_info instead [ 399.719997][T24064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8763'. [ 399.720765][T24064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8763'. [ 400.381442][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8782'. [ 400.381467][T24105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8782'. [ 400.566939][T24115] macvlan0: entered promiscuous mode [ 400.739851][T24129] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.8793'. [ 400.739879][T24129] netlink: 'syz.1.8793': attribute type 1 has an invalid length. [ 400.831906][T24132] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8795'. [ 401.343544][T24166] xt_IDLETIMER: label is empty or not nul-terminated [ 401.401362][T24168] ip_tables: iptables: counters copy to user failed while replacing table [ 401.727734][T24188] netlink: 'syz.2.8822': attribute type 2 has an invalid length. [ 403.234997][T24283] netlink: 'syz.4.8868': attribute type 3 has an invalid length. [ 403.235023][T24283] netlink: 'syz.4.8868': attribute type 1 has an invalid length. [ 403.235037][T24283] __nla_validate_parse: 1 callbacks suppressed [ 403.235049][T24283] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8868'. [ 403.842069][T24319] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 403.842126][T24319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.041963][T24327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8892'. [ 404.041995][T24327] block nbd0: Unsupported socket: should be TCP or UNIX. [ 404.064157][T24328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8889'. [ 404.573690][T24356] batadv0: entered promiscuous mode [ 404.573839][T24356] macsec1: entered promiscuous mode [ 404.581417][T24356] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 404.599160][T24356] batadv0: left promiscuous mode [ 404.774458][T24370] netlink: 'syz.2.8909': attribute type 1 has an invalid length. [ 404.774484][T24370] netlink: 500 bytes leftover after parsing attributes in process `syz.2.8909'. [ 404.903788][T24381] ip_tables: iptables: counters copy to user failed while replacing table [ 406.029869][T24438] netlink: 'syz.2.8941': attribute type 1 has an invalid length. [ 406.029895][T24438] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8941'. [ 406.029911][T24438] netlink: 'syz.2.8941': attribute type 1 has an invalid length. [ 406.496834][T24463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8954'. [ 406.692026][T24474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8960'. [ 407.190250][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8974'. [ 407.448188][T24514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8978'. [ 407.448221][T24514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8978'. [ 407.580615][T24524] erspan0: entered promiscuous mode [ 408.012893][T24556] netlink: 'syz.0.8996': attribute type 1 has an invalid length. [ 408.012922][T24556] netlink: 'syz.0.8996': attribute type 1 has an invalid length. [ 408.311210][T24571] __nla_validate_parse: 2 callbacks suppressed [ 408.311234][T24571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9001'. [ 408.328440][T24571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9001'. [ 408.328704][T24571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9001'. [ 408.824769][T24604] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 409.028911][T24613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9023'. [ 409.394970][T24629] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.554607][T24645] netlink: 'syz.4.9039': attribute type 1 has an invalid length. [ 409.564076][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9038'. [ 409.592707][T24647] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 409.817631][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9044'. [ 410.307311][T24682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 410.307516][T24681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9056'. [ 410.714106][T24704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9066'. [ 410.964914][T24720] openvswitch: netlink: IP tunnel dst address not specified [ 410.964955][T24720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.098814][T24725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9077'. [ 411.863693][T24773] erspan0: entered promiscuous mode [ 412.089494][T24779] bond4 (unregistering): Released all slaves [ 412.140380][T24791] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9109'. [ 412.535145][T24813] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.747598][T24827] netlink: 'syz.3.9126': attribute type 4 has an invalid length. [ 413.191072][T24852] openvswitch: netlink: Unknown key attributes 1 [ 413.417073][T24869] openvswitch: netlink: IP tunnel dst address not specified [ 413.417109][T24869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.082596][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9166'. [ 414.116151][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9167'. [ 414.116180][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9167'. [ 414.117781][T24910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9167'. [ 414.117803][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9167'. [ 414.493200][T24933] TCP: TCP_TX_DELAY enabled [ 414.615870][T24940] netlink: 'syz.3.9179': attribute type 11 has an invalid length. [ 414.615893][T24940] netlink: 3800 bytes leftover after parsing attributes in process `syz.3.9179'. [ 414.736055][T24947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9187'. [ 414.736893][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9187'. [ 414.736944][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9187'. [ 415.004573][T24951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9185'. [ 415.077778][T24968] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 415.228026][T24972] netlink: 'syz.0.9194': attribute type 1 has an invalid length. [ 416.183713][T25017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.621334][ T31] audit: type=1804 audit(1791378609.611:4): pid=25049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9231" name="/newroot/1831/cgroup.controllers" dev="tmpfs" ino=9192 res=1 errno=0 [ 416.621614][ T31] audit: type=1800 audit(1791378609.611:5): pid=25049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9231" name="cgroup.controllers" dev="tmpfs" ino=9192 res=0 errno=0 [ 416.873103][T25061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.993151][T25069] netlink: 'syz.0.9243': attribute type 83 has an invalid length. [ 417.089440][T25078] netlink: Only one type of NAT may be specified [ 417.089480][T25078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.943978][T25109] netlink: 'syz.0.9263': attribute type 83 has an invalid length. [ 418.276206][T25132] netlink: 'syz.3.9269': attribute type 4 has an invalid length. [ 418.974553][T25164] tap0: tun_chr_ioctl cmd 1074025676 [ 418.974579][T25164] tap0: owner set to 0 [ 419.087270][T25170] sctp: [Deprecated]: syz.1.9289 (pid 25170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.087270][T25170] Use struct sctp_sack_info instead [ 419.236000][T25178] __nla_validate_parse: 12 callbacks suppressed [ 419.236024][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9292'. [ 419.648384][T25196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 419.678985][T25198] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 419.680374][T25197] IPVS: stopping backup sync thread 25198 ... [ 420.355152][T25229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9316'. [ 420.460716][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9317'. [ 420.545829][T25234] team0 (unregistering): Port device team_slave_0 removed [ 420.570452][T25234] team0 (unregistering): Port device team_slave_1 removed [ 420.960357][T25260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9331'. [ 421.321728][T25277] bond0: option miimon: invalid value (18446744071829782528) [ 421.321759][T25277] bond0: option miimon: allowed values 0 - 2147483647 [ 421.647214][T25287] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 421.822608][T25297] netlink: 'syz.2.9349': attribute type 2 has an invalid length. [ 421.822633][T25297] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9349'. [ 422.064306][T25311] netlink: 'syz.3.9354': attribute type 10 has an invalid length. [ 422.085566][T25311] team0: Device veth0_vlan failed to register rx_handler [ 422.228274][T25318] tipc: Bearer : already 2 bearers with priority 10 [ 422.228296][T25318] tipc: Bearer : trying with adjusted priority [ 422.228344][T25318] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9357'. [ 422.228359][T25318] tipc: Invalid UDP bearer configuration [ 422.228417][T25318] tipc: Enabling of bearer rejected, failed to enable media [ 422.840651][T25350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9374'. [ 422.840684][T25350] nbd: couldn't find a device at index 65553 [ 423.035133][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9381'. [ 423.230304][T25374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9386'. [ 423.954199][T25415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9406'. [ 424.786233][T25464] openvswitch: netlink: IP tunnel dst address not specified [ 424.786273][T25464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.204598][T25544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.300012][T25557] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 426.492615][T25566] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9478'. [ 426.494164][T25564] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9478'. [ 426.927780][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9489'. [ 427.421957][T25616] netlink: 'syz.2.9501': attribute type 21 has an invalid length. [ 427.421985][T25616] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9501'. [ 427.663454][T25631] netlink: 'syz.3.9509': attribute type 1 has an invalid length. [ 427.663480][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9509'. [ 427.980405][T25652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9519'. [ 428.249581][T25666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9526'. [ 428.363666][T25672] batman_adv: batadv0: Adding interface: macvtap1 [ 428.363687][T25672] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.363716][T25672] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 428.555064][T25684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9534'. [ 428.694212][T25688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9535'. [ 428.694245][T25688] nbd: socks must be embedded in a SOCK_ITEM attr [ 429.314339][T25729] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9555'. [ 429.390464][T25732] netlink: 'syz.3.9558': attribute type 10 has an invalid length. [ 429.452480][T25732] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 429.481173][ T5728] syz1: Port: 1 Link ACTIVE [ 429.524835][T25742] netlink: 'syz.2.9561': attribute type 30 has an invalid length. [ 429.534039][T25732] bond0: (slave bridge0): Releasing backup interface [ 429.684477][ T30] syz1: Port: 1 Link DOWN [ 432.203698][T25900] __nla_validate_parse: 8 callbacks suppressed [ 432.203722][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9634'. [ 432.204094][T25900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9634'. [ 432.513788][T25917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9642'. [ 432.641566][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9644'. [ 432.641599][T25924] block nbd0: Unsupported socket: should be TCP or UNIX. [ 432.780668][T25933] netlink: 'syz.4.9649': attribute type 3 has an invalid length. [ 432.780694][T25933] netlink: 'syz.4.9649': attribute type 2 has an invalid length. [ 433.338854][T25961] batman_adv: batadv0: Adding interface: gretap3 [ 433.338875][T25961] batman_adv: batadv0: The MTU of interface gretap3 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.338911][T25961] batman_adv: batadv0: Interface activated: gretap3 [ 433.828529][T25992] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9677'. [ 434.483745][T26026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9693'. [ 434.584844][T26031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9695'. [ 434.584921][T26031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9695'. [ 435.052346][T26062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9709'. [ 436.066796][T26115] team0: Cannot enslave team device to itself [ 436.574838][T26136] block nbd0: Unsupported socket: should be TCP or UNIX. [ 437.152264][T26173] sctp: [Deprecated]: syz.4.9759 (pid 26173) Use of int in max_burst socket option deprecated. [ 437.152264][T26173] Use struct sctp_assoc_value instead [ 437.789273][T26212] Bluetooth: hci0: Invalid link key type 76 for 00:00:4c:00:00:00 [ 438.123826][T26234] tipc: New replicast peer: 255.255.255.255 [ 438.131240][T26234] tipc: Enabled bearer , priority 10 [ 438.526636][T26255] netlink: 'syz.3.9795': attribute type 83 has an invalid length. [ 438.743834][T26268] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9802'. [ 438.811006][T26270] tipc: Started in network mode [ 438.811040][T26270] tipc: Node identity ac14142f, cluster identity 6 [ 438.812150][T26270] tipc: Enabled bearer , priority 10 [ 438.812764][T26270] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 438.898870][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9803'. [ 439.170934][T26293] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 439.922126][T26335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9833'. [ 439.925999][ T5347] tipc: Node number set to 2886997039 [ 439.972818][T26339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9836'. [ 440.064691][T26344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9840'. [ 440.076669][T26344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9840'. [ 441.538457][T26432] ip_tables: iptables: counters copy to user failed while replacing table [ 442.541213][T26484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9898'. [ 442.648045][T26492] veth0: entered promiscuous mode [ 442.648760][T26490] veth0: left promiscuous mode [ 443.166670][T26518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9910'. [ 443.280545][T26524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9912'. [ 443.861933][T26553] netlink: 'syz.0.9923': attribute type 29 has an invalid length. [ 443.874404][T26553] netlink: 'syz.0.9923': attribute type 29 has an invalid length. [ 444.401507][T26577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.473627][T26579] netlink: 'syz.4.9934': attribute type 2 has an invalid length. [ 444.830730][T26601] blkio.reset_stats is deprecated [ 445.154047][T26619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9949'. [ 447.844008][T26759] netlink: 71 bytes leftover after parsing attributes in process `syz.1.10001'. [ 448.534064][T26796] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.10015'. [ 448.639335][T26802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10017'. [ 449.227848][T26836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10032'. [ 449.656438][T26860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10038'. [ 449.656467][T26860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10038'. [ 449.746869][T26863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10041'. [ 450.016493][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10045'. [ 450.068054][T26881] tipc: Enabling of bearer rejected, already enabled [ 450.198718][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10053'. [ 450.567663][T26908] macvtap0: entered allmulticast mode [ 450.567688][T26908] veth0_macvtap: entered allmulticast mode [ 451.605096][T26953] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10074'. [ 451.605126][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10074'. [ 451.605145][T26953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10074'. [ 452.172549][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10088'. [ 452.671196][T27010] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 453.423749][T27034] netlink: 'syz.4.10112': attribute type 12 has an invalid length. [ 453.668728][T27044] nbd0: detected capacity change from 0 to 274877906944 [ 453.678843][ T5629] block nbd0: Receive control failed (result -104) [ 453.828848][T27050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10118'. [ 454.302250][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10133'. [ 454.496610][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10138'. [ 454.501629][T27089] netlink: Unknown NAT attribute (type=2049, max=9) [ 454.501671][T27089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.528269][T27090] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 454.618749][T27095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10142'. [ 454.622845][T27093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10140'. [ 454.797219][T27104] team0: No ports can be present during mode change [ 455.770849][T27167] netlink: 'syz.2.10174': attribute type 2 has an invalid length. [ 455.770876][T27167] __nla_validate_parse: 4 callbacks suppressed [ 455.770889][T27167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10174'. [ 456.311411][T27196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.814273][T27224] netlink: 'syz.4.10197': attribute type 21 has an invalid length. [ 456.814301][T27224] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10197'. [ 456.814355][T27224] netlink: 'syz.4.10197': attribute type 4 has an invalid length. [ 456.814370][T27224] netlink: 'syz.4.10197': attribute type 5 has an invalid length. [ 456.814383][T27224] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10197'. [ 456.864288][T27224] netlink: 'syz.4.10197': attribute type 21 has an invalid length. [ 456.864311][T27224] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10197'. [ 456.864362][T27224] netlink: 'syz.4.10197': attribute type 4 has an invalid length. [ 456.864393][T27224] netlink: 'syz.4.10197': attribute type 5 has an invalid length. [ 456.864407][T27224] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10197'. [ 456.937214][T27229] IPv6: Can't replace route, no match found [ 456.938006][T27229] IPv6: Can't replace route, no match found [ 457.656084][T27265] netlink: 576 bytes leftover after parsing attributes in process `syz.4.10215'. [ 457.776746][T27274] tipc: Enabling of bearer rejected, already enabled [ 457.779801][T27274] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10219'. [ 458.066675][T27288] Bluetooth: hci1: too big key_count value 32778 [ 458.372733][T27311] netlink: 'syz.0.10237': attribute type 33 has an invalid length. [ 458.442275][T27311] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 458.444077][T27311] bond3 (unregistering): Released all slaves [ 458.488381][T27313] netlink: 'syz.2.10239': attribute type 8 has an invalid length. [ 458.488576][T27313] sch_fq: defrate 0 ignored. [ 459.208007][T27363] veth0: entered promiscuous mode [ 459.210888][T27363] veth0: left promiscuous mode [ 459.952919][T27407] netlink: 'syz.1.10285': attribute type 3 has an invalid length. [ 460.074068][T27412] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10284'. [ 461.601275][T27495] openvswitch: netlink: IP tunnel dst address not specified [ 461.601315][T27495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.665124][T27496] netlink: 'syz.2.10326': attribute type 83 has an invalid length. [ 461.780946][T27504] openvswitch: netlink: EtherType 2 is less than min 600 [ 461.798899][T27508] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10327'. [ 462.371004][T27512] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.371912][T27512] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.814897][T27512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.848553][T27512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.025704][T27512] macvlan0: left promiscuous mode [ 463.091785][T27512] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 463.144877][T27512] bridge1: left promiscuous mode [ 463.144897][T27512] bridge1: left allmulticast mode [ 463.307645][T27551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10345'. [ 463.345357][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.347497][T13465] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.347543][T13465] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.347577][T13465] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.600121][T27566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10352'. [ 464.352128][T27613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10373'. [ 464.380427][T27613] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 464.383090][T27613] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 464.402561][T27616] tipc: Enabling of bearer rejected, already enabled [ 464.992373][T27649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.789844][T27749] ip_tables: iptables: counters copy to user failed while replacing table [ 467.500277][T27788] veth0: mtu less than device minimum [ 467.522384][T27790] netlink: 'syz.4.10456': attribute type 1 has an invalid length. [ 467.522409][T27790] netlink: 'syz.4.10456': attribute type 2 has an invalid length. [ 467.524469][T27790] netlink: 'syz.4.10456': attribute type 1 has an invalid length. [ 467.524489][T27790] netlink: 'syz.4.10456': attribute type 2 has an invalid length. [ 467.535203][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10454'. [ 467.597957][T27793] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10458'. [ 467.849952][T27810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10467'. [ 468.648542][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10485'. [ 468.648581][T27853] netlink: 'syz.4.10485': attribute type 30 has an invalid length. [ 468.692372][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10485'. [ 468.692410][T27853] netlink: 'syz.4.10485': attribute type 30 has an invalid length. [ 468.716115][ T96] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.718142][T26750] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.718958][T26750] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.718993][T26750] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.136925][T27867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10492'. [ 469.490999][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10499'. [ 470.150268][T27922] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 470.348839][T27934] netlink: 'syz.0.10521': attribute type 3 has an invalid length. [ 470.348866][T27934] netlink: 'syz.0.10521': attribute type 1 has an invalid length. [ 470.348880][T27934] netlink: 212 bytes leftover after parsing attributes in process `syz.0.10521'. [ 470.348897][T27934] NCSI netlink: No device for ifindex 813332851 [ 470.582794][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10530'. [ 470.603461][T27949] hsr_slave_0: left promiscuous mode [ 470.611500][T27949] hsr_slave_1: left promiscuous mode [ 470.638128][T27951] block nbd1: server does not support multiple connections per device. [ 470.658641][T27951] block nbd1: shutting down sockets [ 470.903755][T27963] h: entered promiscuous mode [ 471.010549][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10540'. [ 471.157642][T27980] netlink: 'syz.1.10545': attribute type 11 has an invalid length. [ 472.237652][T28048] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 472.494366][T28064] ip_tables: iptables: counters copy to user failed while replacing table [ 472.863411][T28081] bond7: (slave syz_tun): Device is not bonding slave [ 472.863437][T28081] bond7: option active_slave: invalid value (syz_tun) [ 472.882318][T28081] bond7 (unregistering): Released all slaves [ 473.390676][T28118] __nla_validate_parse: 5 callbacks suppressed [ 473.390709][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10608'. [ 473.932189][T28150] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10623'. [ 474.059499][T28156] sctp: [Deprecated]: syz.3.10629 (pid 28156) Use of int in max_burst socket option. [ 474.059499][T28156] Use struct sctp_assoc_value instead [ 474.158122][T28165] gtp1: entered promiscuous mode [ 474.158149][T28165] gtp1: entered allmulticast mode [ 474.336959][T28175] netlink: 'syz.0.10636': attribute type 15 has an invalid length. [ 474.857655][T28209] tap0: tun_chr_ioctl cmd 2148553947 [ 475.202509][T28227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10663'. [ 476.069880][T28276] openvswitch: netlink: IPv4 tunnel dst address is zero [ 476.069918][T28276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.847987][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10709'. [ 477.141774][T28343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10718'. [ 477.432853][T28360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10726'. [ 477.579961][T28369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10729'. [ 477.667885][ T5629] block nbd1: Receive control failed (result -32) [ 477.779296][T28369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 477.787676][T28369] bond0: (slave bond5): Enslaving as an active interface with an up link [ 477.822703][ T30] syz1: Port: 1 Link ACTIVE [ 477.988067][T28384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10740'. [ 478.146400][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10744'. [ 478.229454][T28400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10747'. [ 478.440842][T28412] netlink: 'syz.3.10752': attribute type 1 has an invalid length. [ 478.440868][T28412] netlink: 'syz.3.10752': attribute type 3 has an invalid length. [ 478.440882][T28412] netlink: 'syz.3.10752': attribute type 7 has an invalid length. [ 478.440923][T28412] netlink: 'syz.3.10752': attribute type 8 has an invalid length. [ 478.440937][T28412] netlink: 184 bytes leftover after parsing attributes in process `syz.3.10752'. [ 478.440955][T28412] NCSI netlink: No device for ifindex 131092 [ 478.532047][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10753'. [ 478.750134][T28429] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.10759'. [ 479.028789][T28448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10766'. [ 479.202851][T28459] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 479.413501][T28472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10777'. [ 479.517531][T28475] openvswitch: netlink: IP tunnel dst address not specified [ 479.517570][T28475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.704476][T28489] ip_tables: iptables: counters copy to user failed while replacing table [ 480.272867][T28525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10803'. [ 480.640365][T28549] netlink: 'syz.3.10813': attribute type 5 has an invalid length. [ 480.813072][T28558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10818'. [ 480.833003][T28558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10818'. [ 481.052260][T28573] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 481.116289][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10828'. [ 481.116317][T28577] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10828'. [ 481.466505][T28592] ip_tables: iptables: counters copy to user failed while replacing table [ 481.522268][T28595] netlink: 'syz.4.10836': attribute type 10 has an invalid length. [ 482.489729][T28651] netlink: 'syz.3.10863': attribute type 5 has an invalid length. [ 482.977136][T28679] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 483.573457][T28721] netlink: 'syz.4.10894': attribute type 11 has an invalid length. [ 483.710232][ T1951] block nbd0: Possible stuck request ffff8880273a0000: control (read@0,4096B). Runtime 30 seconds [ 485.043792][T28810] __nla_validate_parse: 10 callbacks suppressed [ 485.043815][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10938'. [ 485.294163][T28826] tun0: tun_chr_ioctl cmd 1074025675 [ 485.294186][T28826] tun0: persist disabled [ 485.461087][T28834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10948'. [ 485.644725][T28845] netlink: 'syz.0.10955': attribute type 14 has an invalid length. [ 485.700530][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10954'. [ 485.700568][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10954'. [ 485.809062][T28857] sch_fq: defrate 0 ignored. [ 485.824609][ T35] tipc: Subscription rejected, illegal request [ 486.214705][T28882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 487.287797][T28948] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11002'. [ 487.306169][T28950] netlink: 'syz.3.11003': attribute type 5 has an invalid length. [ 487.613978][T28965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11012'. [ 488.472970][T29019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11038'. [ 489.020649][T29052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11055'. [ 489.689268][T29081] netlink: 'syz.1.11069': attribute type 2 has an invalid length. [ 490.063861][T29097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11077'. [ 490.172500][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11081'. [ 490.172565][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11081'. [ 490.174254][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11081'. [ 490.174704][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11081'. [ 490.216463][T29101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11078'. [ 490.804742][T29132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11093'. [ 490.837587][T29134] sctp: [Deprecated]: syz.0.11094 (pid 29134) Use of int in maxseg socket option. [ 490.837587][T29134] Use struct sctp_assoc_value instead [ 490.925137][T29138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11098'. [ 491.290317][T29158] netlink: 'syz.3.11105': attribute type 4 has an invalid length. [ 491.747737][T29187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11117'. [ 491.748676][T29186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11118'. [ 492.290586][T29217] netlink: 'syz.3.11132': attribute type 83 has an invalid length. [ 492.841544][T29242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 495.152209][T29386] __nla_validate_parse: 8 callbacks suppressed [ 495.152233][T29386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11210'. [ 495.153027][T29386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11210'. [ 495.407512][T29400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11221'. [ 495.484369][T29406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11218'. [ 495.497024][T29405] netlink: 'syz.4.11220': attribute type 83 has an invalid length. [ 495.736417][T29423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11229'. [ 496.136451][T29446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 496.370349][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11247'. [ 496.440429][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11246'. [ 496.655028][T29472] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 496.760102][T29476] veth0_to_bond: left allmulticast mode [ 496.774751][T29476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 496.861821][T29484] netlink: 'syz.4.11256': attribute type 2 has an invalid length. [ 497.121814][T29498] ip6tnl0: Caught tx_queue_len zero misconfig [ 497.192184][T29502] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:aa to non-existent VLAN 8 [ 497.577674][T29518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11273'. [ 497.578183][T29518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11273'. [ 497.786298][T29531] sctp: [Deprecated]: syz.0.11279 (pid 29531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.786298][T29531] Use struct sctp_sack_info instead [ 498.001823][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11282'. [ 498.001863][T29539] netlink: 'syz.2.11282': attribute type 1 has an invalid length. [ 498.001879][T29539] netlink: 'syz.2.11282': attribute type 2 has an invalid length. [ 500.283932][T29664] team0: No ports can be present during mode change [ 500.322647][T29668] __nla_validate_parse: 5 callbacks suppressed [ 500.322667][T29668] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11343'. [ 501.291817][T29727] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11368'. [ 501.314305][T29728] tun1: tun_chr_ioctl cmd 1074025675 [ 501.314330][T29728] tun1: persist enabled [ 501.497343][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11374'. [ 501.623118][T29745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11378'. [ 501.635474][T29747] netlink: 'syz.3.11377': attribute type 1 has an invalid length. [ 501.635496][T29747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11377'. [ 502.096030][ T5622] block nbd2: Receive control failed (result -32) [ 502.100717][ T5629] block nbd2: Receive control failed (result -32) [ 502.747356][T29805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11405'. [ 502.963491][T29817] ip_tables: iptables: counters copy to user failed while replacing table [ 503.126911][T29825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11416'. [ 503.664534][T29857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11431'. [ 503.769086][T29860] ip_tables: iptables: counters copy to user failed while replacing table [ 504.876899][T29922] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 504.876926][T29922] syzkaller1: group set to 0 [ 504.940419][T29928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.389701][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11502'. [ 506.740837][T30031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11513'. [ 506.977020][T30045] lo: Caught tx_queue_len zero misconfig [ 507.970632][T30101] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11546'. [ 508.289169][T30117] veth0: Caught tx_queue_len zero misconfig [ 508.431370][T30125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11557'. [ 508.537848][T30132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11560'. [ 508.537892][T30132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11560'. [ 508.537907][T30132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11560'. [ 509.135021][T30166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11578'. [ 509.206467][T30174] xt_hashlimit: size too large, truncated to 1048576 [ 509.264199][T30178] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.11582'. [ 509.264332][T30178] 0猉功D龌: renamed from gretap0 (while UP) [ 509.292761][T30178] 0猉功D龌: entered allmulticast mode [ 509.293485][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11583'. [ 509.973562][T30207] bond0: Caught tx_queue_len zero misconfig [ 511.327907][T30288] netlink: 'syz.4.11633': attribute type 3 has an invalid length. [ 511.736479][T30312] __nla_validate_parse: 3 callbacks suppressed [ 511.736502][T30312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11646'. [ 511.795627][T30317] vxcan0: tx address claim with dest, not broadcast [ 512.008453][T30326] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11653'. [ 512.223950][T30335] netlink: 'syz.0.11657': attribute type 12 has an invalid length. [ 512.223978][T30335] netlink: 'syz.0.11657': attribute type 29 has an invalid length. [ 512.223991][T30335] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11657'. [ 512.224010][T30335] netlink: 'syz.0.11657': attribute type 2 has an invalid length. [ 512.428917][T30347] openvswitch: netlink: Unknown key attributes 1 [ 512.548498][T30353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11665'. [ 513.278463][T30389] bond4: entered promiscuous mode [ 513.692247][T30414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11698'. [ 513.806826][ T1951] block nbd0: Possible stuck request ffff8880273a0000: control (read@0,4096B). Runtime 60 seconds [ 513.972579][T30432] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 514.019680][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11703'. [ 514.311909][ T4981] udevd[4981]: worker [27039] /devices/virtual/block/nbd0 is taking a long time [ 514.351957][T30454] batadv_slave_0: Caught tx_queue_len zero misconfig [ 514.595059][T30469] xt_hashlimit: size too large, truncated to 1048576 [ 514.657944][T30475] xt_hashlimit: size too large, truncated to 1048576 [ 514.791445][T30485] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 515.860497][T30540] bond_slave_0: Caught tx_queue_len zero misconfig [ 515.970897][T30548] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 516.555724][T30579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11772'. [ 516.630820][T30583] openvswitch: netlink: VLAN attribute unexpected. [ 516.723362][T30592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11774'. [ 517.596640][T30643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11800'. [ 518.269855][T30680] sctp: [Deprecated]: syz.3.11816 (pid 30680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.269855][T30680] Use struct sctp_sack_info instead [ 519.155923][T30736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11841'. [ 519.367874][T30746] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 521.204281][T30847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11894'. [ 521.217821][T30847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11894'. [ 521.583361][T30867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11905'. [ 521.936296][T30885] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11913'. [ 521.936327][T30885] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11913'. [ 521.995455][T30889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11915'. [ 521.995483][T30889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11915'. [ 522.261208][T30904] netlink: 'syz.2.11921': attribute type 17 has an invalid length. [ 522.261235][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11921'. [ 522.297864][T30904] gretap0: entered promiscuous mode [ 522.304246][T30904] gretap0: left promiscuous mode [ 522.783752][T30933] erspan0: entered promiscuous mode [ 522.783922][T30933] __nla_validate_parse: 1 callbacks suppressed [ 522.783938][T30933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11934'. [ 522.790849][T30935] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.954285][T30944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11937'. [ 522.954326][T30944] netlink: 'syz.4.11937': attribute type 10 has an invalid length. [ 522.954343][T30944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11937'. [ 522.998491][T30947] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11941'. [ 524.035970][T30997] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 524.336280][T31015] vcan0: tx address claim with dest, not broadcast [ 524.519236][T31023] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 525.134950][T31061] netlink: 'syz.1.11992': attribute type 39 has an invalid length. [ 525.784875][T31096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12008'. [ 525.874887][T31100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12011'. [ 526.355865][T31120] macvlan0: entered promiscuous mode [ 526.654665][T31135] syzkaller1: entered promiscuous mode [ 526.654691][T31135] syzkaller1: entered allmulticast mode [ 527.984350][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12052'. [ 528.140619][T31195] lo speed is unknown, defaulting to 1000 [ 528.340369][T31217] : renamed from dummy0 (while UP) [ 528.435979][T31213] IPVS: Scheduler module ip_vs_sip not found [ 528.962750][T31247] bridge_slave_0 (unregistering): left allmulticast mode [ 528.962776][T31247] bridge_slave_0 (unregistering): left promiscuous mode [ 528.962855][T31247] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.725732][T31277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12085'. [ 530.253963][T31305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12096'. [ 530.318251][T31308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12099'. [ 530.570080][T31321] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 530.644802][T31327] vcan0: tx address claim with dlc 0 [ 530.823553][T31337] batadv_slave_0: entered promiscuous mode [ 530.901182][T31340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12114'. [ 530.901223][T31340] netlink: 'syz.1.12114': attribute type 7 has an invalid length. [ 530.901237][T31340] netlink: 'syz.1.12114': attribute type 8 has an invalid length. [ 530.901251][T31340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12114'. [ 530.972722][T31336] batadv_slave_0: left promiscuous mode [ 530.973339][T31345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12115'. [ 531.283323][T31360] syzkaller1: entered promiscuous mode [ 531.283350][T31360] syzkaller1: entered allmulticast mode [ 531.361511][T31362] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12127'. [ 531.361535][T31362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12127'. [ 531.605528][T31376] netlink: 'syz.0.12131': attribute type 11 has an invalid length. [ 531.764578][T31388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 531.971979][T31400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12143'. [ 532.388110][T31425] ip_tables: iptables: counters copy to user failed while replacing table [ 535.000303][T31561] __nla_validate_parse: 1 callbacks suppressed [ 535.000326][T31561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12207'. [ 535.003255][T31559] geneve4: entered promiscuous mode [ 535.011008][T31561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12207'. [ 535.011343][T31561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12207'. [ 535.015397][T13465] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 47531 - 0 [ 535.015438][T13465] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 47531 - 0 [ 535.015468][T13465] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 47531 - 0 [ 535.015498][T13465] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 47531 - 0 [ 535.354696][T31577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12213'. [ 535.549676][T31586] syzkaller1: entered promiscuous mode [ 535.549702][T31586] syzkaller1: entered allmulticast mode [ 536.754559][T31652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12248'. [ 536.904649][T31666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12252'. [ 536.904686][T31666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12252'. [ 536.905749][T31665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12253'. [ 536.906835][T31665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.027809][T31665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.802724][T31711] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12273'. [ 537.802849][T31711] 0{X功: renamed from gretap0 [ 537.830215][T31711] 0{X功: entered allmulticast mode [ 538.021961][T31727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 538.155208][T31732] vcan0: tx address claim with different name [ 538.385990][T31747] netlink: 'syz.2.12292': attribute type 2 has an invalid length. [ 538.422437][T31750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12293'. [ 538.981515][T31784] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.347933][T31801] netlink: 'syz.1.12316': attribute type 4 has an invalid length. [ 540.099042][T31842] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 540.229726][T31850] __nla_validate_parse: 1 callbacks suppressed [ 540.229751][T31850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12339'. [ 540.229775][T31850] block nbd3: Unsupported socket: should be TCP or UNIX. [ 540.452537][T31863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 540.723421][T31876] netlink: 'syz.1.12352': attribute type 1 has an invalid length. [ 540.723446][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12352'. [ 541.110711][T31899] netlink: 'syz.1.12362': attribute type 1 has an invalid length. [ 541.110738][T31899] netlink: 'syz.1.12362': attribute type 1 has an invalid length. [ 541.110752][T31899] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12362'. [ 541.110767][T31899] netlink: 'syz.1.12362': attribute type 1 has an invalid length. [ 541.448716][T31918] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 541.484542][T31920] netlink: 'syz.4.12373': attribute type 1 has an invalid length. [ 541.484567][T31920] netlink: 'syz.4.12373': attribute type 2 has an invalid length. [ 542.035006][T31956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12386'. [ 542.039614][T31954] netlink: 11 bytes leftover after parsing attributes in process `syz.3.12387'. [ 543.220637][T32017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12404'. [ 543.236549][T32017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12404'. [ 543.866907][ T1951] block nbd0: Possible stuck request ffff8880273a0000: control (read@0,4096B). Runtime 90 seconds [ 544.087071][T32061] syzkaller1: entered promiscuous mode [ 544.087096][T32061] syzkaller1: entered allmulticast mode [ 544.089154][T32061] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 544.103354][T32064] netlink: 'syz.3.12426': attribute type 1 has an invalid length. [ 544.160738][T32067] tipc: Can't bind to reserved service type 1 [ 544.382995][T32077] sock: sock_set_timeout: `syz.1.12433' (pid 32077) tries to set negative timeout [ 544.570616][T32087] macvlan0: entered promiscuous mode [ 544.849695][T32103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12446'. [ 544.853086][T32103] macvlan0: left promiscuous mode [ 544.888371][T32103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12446'. [ 545.324848][T32125] lo speed is unknown, defaulting to 1000 [ 546.081091][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12468'. [ 546.081131][T32155] netlink: 'syz.1.12468': attribute type 30 has an invalid length. [ 546.149314][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12468'. [ 546.149353][T32155] netlink: 'syz.1.12468': attribute type 30 has an invalid length. [ 546.325838][T20036] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.336135][ T96] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.336195][ T96] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.336226][ T96] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.471444][T32170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12475'. [ 546.586560][T32177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12477'. [ 546.607284][ T5629] block nbd3: Receive control failed (result -107) [ 546.842076][T32188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12482'. [ 547.626357][T32216] bridge0: port 3(veth0) entered blocking state [ 547.626639][T32216] bridge0: port 3(veth0) entered disabled state [ 547.626838][T32216] veth0: entered allmulticast mode [ 547.640374][T32216] veth0: entered promiscuous mode [ 547.642823][T32216] bridge0: port 3(veth0) entered blocking state [ 547.642943][T32216] bridge0: port 3(veth0) entered forwarding state [ 547.956897][T32233] sctp: [Deprecated]: syz.1.12500 (pid 32233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.956897][T32233] Use struct sctp_sack_info instead [ 548.183614][T32246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12506'. [ 548.842362][T32278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.183541][T32297] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12526'. [ 549.293470][T32299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12527'. [ 549.890836][T32319] syzkaller1: entered promiscuous mode [ 549.890862][T32319] syzkaller1: entered allmulticast mode [ 550.308504][T32341] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 550.627533][T32362] sctp: [Deprecated]: syz.3.12556 (pid 32362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.627533][T32362] Use struct sctp_sack_info instead [ 551.057959][T32377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.057980][T32377] IPv6: NLM_F_CREATE should be set when creating new route [ 551.058031][T32377] IPv6: NLM_F_CREATE should be set when creating new route [ 551.222446][T32390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12571'. [ 551.506110][T32406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12576'. [ 551.644197][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12578'. [ 551.883937][T32428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12585'. [ 551.883975][T32428] netlink: 'syz.1.12585': attribute type 7 has an invalid length. [ 551.883992][T32428] netlink: 'syz.1.12585': attribute type 8 has an invalid length. [ 551.884006][T32428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12585'. [ 552.164500][T32437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.173886][T32437] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.187960][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.188381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.191376][T32437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.280361][T32437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.287604][T32437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.304473][T32437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.304500][T32437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.317770][T32437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 552.351722][T32441] wg0: Caught tx_queue_len zero misconfig [ 552.380885][T13465] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.381003][T13465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.744415][T32467] veth0: entered promiscuous mode [ 552.754862][T32466] veth0: left promiscuous mode [ 552.947291][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.371336][T32498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12618'. [ 553.424062][T32501] block nbd0: reconnected socket [ 553.424351][ T5629] block nbd0: Receive control failed (result -107) [ 553.651910][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888032aa9800: rx timeout, send abort [ 553.700096][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12628'. [ 553.701246][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12628'. [ 554.026749][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.073818][T32533] xt_hashlimit: size too large, truncated to 1048576 [ 554.152553][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888032aa9000: rx timeout, send abort [ 554.153358][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888032aa9800: abort rx timeout. Force session deactivation [ 554.652614][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888032aa9000: abort rx timeout. Force session deactivation [ 554.877150][T32562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12647'. [ 554.877181][T32562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12647'. [ 555.070847][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.080655][T32576] trusted_key: syz.1.12652 sent an empty control message without MSG_MORE. [ 555.284011][T32585] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 555.309506][T32585] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 555.692139][T32612] netlink: 'syz.1.12672': attribute type 7 has an invalid length. [ 556.134429][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.661487][T32661] team_slave_1: Caught tx_queue_len zero misconfig [ 556.753973][T32666] __nla_validate_parse: 5 callbacks suppressed [ 556.753997][T32666] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12701'. [ 557.083149][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12708'. [ 557.083187][T32685] netlink: 'syz.3.12708': attribute type 30 has an invalid length. [ 557.146448][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.161689][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12708'. [ 557.161747][T32685] netlink: 'syz.3.12708': attribute type 30 has an invalid length. [ 557.351931][T32700] netlink: 'syz.0.12714': attribute type 16 has an invalid length. [ 557.351955][T32700] netlink: 'syz.0.12714': attribute type 17 has an invalid length. [ 557.466918][T32698] tipc: Resetting bearer [ 557.473235][T32698] tipc: Resetting bearer [ 557.587648][T32700] lo: left promiscuous mode [ 557.609257][T32700] 0猉功D龌: left allmulticast mode [ 557.643827][T32700] bond0: left allmulticast mode [ 557.643854][T32700] bond_slave_0: left allmulticast mode [ 557.643871][T32700] bond_slave_1: left allmulticast mode [ 557.652540][T32700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.696486][T32700] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.696663][T32700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.714671][T32700] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.714819][T32700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.769288][T32700] tipc: Resetting bearer [ 557.809681][T32700] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 557.810285][T32700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.811015][T32700] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 557.813559][T32700] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 557.813580][T32700] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 557.869012][ T30] lo speed is unknown, defaulting to 1000 [ 557.882791][ T30] syz0: Port: 1 Link ACTIVE [ 557.931904][T32718] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 557.937578][ T540] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.939353][T20036] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.939401][T20036] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.939441][T20036] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.953517][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.953851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.959173][ T540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.960531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.963831][ T5721] lo speed is unknown, defaulting to 1000 [ 558.187506][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.362524][T32733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.436877][T32739] ovs-dp0: entered promiscuous mode [ 558.627203][T32750] netlink: 'syz.4.12735': attribute type 11 has an invalid length. [ 559.798406][ T327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12756'. [ 560.132848][ T342] bond0: (slave bond_slave_1): Releasing backup interface [ 560.182640][ T342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.350206][ T353] netlink: 'syz.1.12768': attribute type 12 has an invalid length. [ 560.350233][ T353] netlink: 'syz.1.12768': attribute type 29 has an invalid length. [ 560.350247][ T353] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12768'. [ 560.350267][ T353] netlink: 'syz.1.12768': attribute type 3 has an invalid length. [ 560.350280][ T353] netlink: 'syz.1.12768': attribute type 2 has an invalid length. [ 560.350293][ T353] netlink: 35 bytes leftover after parsing attributes in process `syz.1.12768'. [ 560.357389][ T352] netlink: 'syz.3.12767': attribute type 10 has an invalid length. [ 560.453722][ T352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.464852][ T357] netlink: 'syz.4.12771': attribute type 1 has an invalid length. [ 560.486319][ T352] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 560.873390][ T380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12781'. [ 561.118653][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12787'. [ 561.211937][ T397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.306877][ T5721] net_ratelimit: 11 callbacks suppressed [ 561.306899][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.276785][ T452] ip_tables: iptables: counters copy to user failed while replacing table [ 562.277688][ T452] C: renamed from lo (while UP) [ 562.285094][ T452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 562.333909][ T454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12817'. [ 562.359643][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12817'. [ 562.519797][ T464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.520589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.655656][ T468] [ 562.658045][ T468] ====================================================== [ 562.665127][ T468] WARNING: possible circular locking dependency detected [ 562.672259][ T468] syzkaller #0 Not tainted [ 562.676764][ T468] ------------------------------------------------------ [ 562.683805][ T468] syz.1.12826/468 is trying to acquire lock: [ 562.689823][ T468] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 562.699087][ T468] [ 562.699087][ T468] but task is already holding lock: [ 562.706450][ T468] ffff888077696540 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 562.715955][ T468] [ 562.715955][ T468] which lock already depends on the new lock. [ 562.715955][ T468] [ 562.726354][ T468] [ 562.726354][ T468] the existing dependency chain (in reverse order) is: [ 562.735366][ T468] [ 562.735366][ T468] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 562.742994][ T468] __might_fault+0xcb/0x130 [ 562.748034][ T468] _copy_from_iter+0x100/0x1660 [ 562.753495][ T468] tcp_sendmsg_locked+0x20cf/0x5400 [ 562.759303][ T468] tcp_sendmsg+0x2f/0x50 [ 562.764070][ T468] sock_sendmsg_nosec+0x10e/0x180 [ 562.769679][ T468] sock_write_iter+0x2de/0x3e0 [ 562.774963][ T468] vfs_write+0x612/0xba0 [ 562.779749][ T468] ksys_write+0x150/0x270 [ 562.784598][ T468] do_syscall_64+0x166/0x520 [ 562.789814][ T468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.796294][ T468] [ 562.796294][ T468] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 562.803944][ T468] lock_sock_nested+0x41/0x100 [ 562.809261][ T468] inet_shutdown+0x6a/0x390 [ 562.814323][ T468] nbd_mark_nsock_dead+0x2cb/0x550 [ 562.820015][ T468] recv_work+0x1cee/0x1e10 [ 562.824959][ T468] process_scheduled_works+0xc3d/0x1630 [ 562.831061][ T468] worker_thread+0xa47/0xfb0 [ 562.836184][ T468] kthread+0x38b/0x480 [ 562.840775][ T468] ret_from_fork+0x514/0xb70 [ 562.845911][ T468] ret_from_fork_asm+0x1a/0x30 [ 562.851234][ T468] [ 562.851234][ T468] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 562.858880][ T468] __mutex_lock+0x19d/0x1550 [ 562.864044][ T468] nbd_queue_rq+0x373/0xff0 [ 562.869069][ T468] blk_mq_dispatch_rq_list+0x499/0x1990 [ 562.875186][ T468] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 562.882078][ T468] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 562.888583][ T468] blk_mq_run_work_fn+0x16c/0x300 [ 562.894161][ T468] process_scheduled_works+0xc3d/0x1630 [ 562.900235][ T468] worker_thread+0xa47/0xfb0 [ 562.905358][ T468] kthread+0x38b/0x480 [ 562.909964][ T468] ret_from_fork+0x514/0xb70 [ 562.915082][ T468] ret_from_fork_asm+0x1a/0x30 [ 562.920376][ T468] [ 562.920376][ T468] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 562.927602][ T468] __mutex_lock+0x19d/0x1550 [ 562.932722][ T468] nbd_queue_rq+0xc1/0xff0 [ 562.937662][ T468] blk_mq_dispatch_rq_list+0x499/0x1990 [ 562.943737][ T468] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 562.950592][ T468] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 562.957098][ T468] blk_mq_run_work_fn+0x16c/0x300 [ 562.962649][ T468] process_scheduled_works+0xc3d/0x1630 [ 562.968721][ T468] worker_thread+0xa47/0xfb0 [ 562.973838][ T468] kthread+0x38b/0x480 [ 562.978431][ T468] ret_from_fork+0x514/0xb70 [ 562.983543][ T468] ret_from_fork_asm+0x1a/0x30 [ 562.988865][ T468] [ 562.988865][ T468] -> #3 (set->srcu){.+.+}-{0:0}: [ 562.996005][ T468] __synchronize_srcu+0xc9/0x2f0 [ 563.001501][ T468] elevator_switch+0x1e8/0x7b0 [ 563.006863][ T468] elevator_change+0x2fa/0x480 [ 563.012184][ T468] elevator_set_default+0x375/0x440 [ 563.017913][ T468] blk_register_queue+0x3f3/0x4e0 [ 563.023544][ T468] __add_disk+0x6b8/0xdb0 [ 563.028436][ T468] add_disk_fwnode+0x100/0x3a0 [ 563.033732][ T468] nbd_dev_add+0x733/0xb60 [ 563.038676][ T468] nbd_init+0x168/0x1f0 [ 563.043473][ T468] do_one_initcall+0x250/0x870 [ 563.048787][ T468] do_initcall_level+0x10a/0x1a0 [ 563.054310][ T468] do_initcalls+0x59/0xa0 [ 563.059168][ T468] kernel_init_freeable+0x29d/0x3e0 [ 563.064892][ T468] kernel_init+0x22/0x1d0 [ 563.069772][ T468] ret_from_fork+0x514/0xb70 [ 563.074902][ T468] ret_from_fork_asm+0x1a/0x30 [ 563.080286][ T468] [ 563.080286][ T468] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 563.088112][ T468] __mutex_lock+0x19d/0x1550 [ 563.093234][ T468] elevator_change+0x1af/0x480 [ 563.098608][ T468] elevator_set_none+0xb5/0x140 [ 563.103979][ T468] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 563.110309][ T468] nbd_start_device+0x189/0xb30 [ 563.115684][ T468] nbd_genl_connect+0x167d/0x1cd0 [ 563.121239][ T468] genl_family_rcv_msg_doit+0x233/0x340 [ 563.127390][ T468] genl_rcv_msg+0x614/0x7a0 [ 563.132430][ T468] netlink_rcv_skb+0x226/0x4a0 [ 563.137711][ T468] genl_rcv+0x28/0x40 [ 563.142221][ T468] netlink_unicast+0x7bd/0x940 [ 563.147558][ T468] netlink_sendmsg+0x813/0xb40 [ 563.152849][ T468] sock_sendmsg_nosec+0x13a/0x180 [ 563.158396][ T468] ____sys_sendmsg+0x54e/0x850 [ 563.163745][ T468] ___sys_sendmsg+0x2a5/0x360 [ 563.168948][ T468] __x64_sys_sendmsg+0x1b1/0x290 [ 563.174417][ T468] do_syscall_64+0x166/0x520 [ 563.179536][ T468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.185952][ T468] [ 563.185952][ T468] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 563.194600][ T468] blk_alloc_queue+0x544/0x690 [ 563.199900][ T468] __blk_mq_alloc_disk+0x194/0x390 [ 563.205547][ T468] nbd_dev_add+0x494/0xb60 [ 563.210503][ T468] nbd_init+0x168/0x1f0 [ 563.215198][ T468] do_one_initcall+0x250/0x870 [ 563.220496][ T468] do_initcall_level+0x10a/0x1a0 [ 563.225968][ T468] do_initcalls+0x59/0xa0 [ 563.230829][ T468] kernel_init_freeable+0x29d/0x3e0 [ 563.236553][ T468] kernel_init+0x22/0x1d0 [ 563.241421][ T468] ret_from_fork+0x514/0xb70 [ 563.246534][ T468] ret_from_fork_asm+0x1a/0x30 [ 563.251836][ T468] [ 563.251836][ T468] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 563.259055][ T468] __lock_acquire+0x164c/0x2de0 [ 563.264483][ T468] lock_acquire+0x115/0x350 [ 563.269523][ T468] fs_reclaim_acquire+0x71/0x100 [ 563.274995][ T468] prepare_alloc_pages+0x149/0x600 [ 563.280634][ T468] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 563.286969][ T468] alloc_pages_mpol+0x21e/0x390 [ 563.292372][ T468] folio_alloc_mpol_noprof+0x39/0x160 [ 563.298270][ T468] vma_alloc_folio_noprof+0xe1/0x1e0 [ 563.304078][ T468] do_pte_missing+0x173a/0x34b0 [ 563.309451][ T468] handle_mm_fault+0x1a53/0x3750 [ 563.314920][ T468] do_user_addr_fault+0x746/0x1340 [ 563.320737][ T468] exc_page_fault+0x6a/0xc0 [ 563.325794][ T468] asm_exc_page_fault+0x26/0x30 [ 563.331191][ T468] __put_user_4+0xd/0x30 [ 563.335971][ T468] pppox_ioctl+0x1de/0x3f0 [ 563.341002][ T468] sock_do_ioctl+0x101/0x320 [ 563.346125][ T468] sock_ioctl+0x57a/0x7e0 [ 563.350980][ T468] __se_sys_ioctl+0xfc/0x170 [ 563.356103][ T468] do_syscall_64+0x166/0x520 [ 563.361224][ T468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.367645][ T468] [ 563.367645][ T468] other info that might help us debug this: [ 563.367645][ T468] [ 563.377869][ T468] Chain exists of: [ 563.377869][ T468] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 563.377869][ T468] [ 563.390444][ T468] Possible unsafe locking scenario: [ 563.390444][ T468] [ 563.397935][ T468] CPU0 CPU1 [ 563.403305][ T468] ---- ---- [ 563.408672][ T468] rlock(&mm->mmap_lock); [ 563.413179][ T468] lock(sk_lock-AF_INET); [ 563.420115][ T468] lock(&mm->mmap_lock); [ 563.426965][ T468] lock(fs_reclaim); [ 563.430945][ T468] [ 563.430945][ T468] *** DEADLOCK *** [ 563.430945][ T468] [ 563.439124][ T468] locks held by syz.1.12826/468: 2, last CPU#0: [ 563.445413][ T468] #0: ffff88802a120260 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppox_ioctl+0x4d/0x3f0 [ 563.454786][ T468] #1: ffff888077696540 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 563.464706][ T468] [ 563.464706][ T468] stack backtrace: [ 563.470601][ T468] CPU: 0 UID: 0 PID: 468 Comm: syz.1.12826 Not tainted syzkaller #0 PREEMPT(full) [ 563.479884][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 563.489946][ T468] Call Trace: [ 563.493279][ T468] [ 563.496266][ T468] dump_stack_lvl+0xe8/0x150 [ 563.500911][ T468] print_circular_bug+0x2e2/0x300 [ 563.505948][ T468] check_noncircular+0x12f/0x150 [ 563.510899][ T468] __lock_acquire+0x164c/0x2de0 [ 563.515763][ T468] ? is_bpf_text_address+0x26/0x2b0 [ 563.521108][ T468] ? __lock_acquire+0x747/0x2de0 [ 563.526219][ T468] lock_acquire+0x115/0x350 [ 563.530723][ T468] ? prepare_alloc_pages+0x149/0x600 [ 563.536015][ T468] fs_reclaim_acquire+0x71/0x100 [ 563.540954][ T468] ? prepare_alloc_pages+0x149/0x600 [ 563.546240][ T468] prepare_alloc_pages+0x149/0x600 [ 563.551358][ T468] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 563.557172][ T468] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.563507][ T468] ? __pfx_policy_nodemask+0x10/0x10 [ 563.568802][ T468] ? __lock_acquire+0x747/0x2de0 [ 563.573745][ T468] alloc_pages_mpol+0x21e/0x390 [ 563.578602][ T468] folio_alloc_mpol_noprof+0x39/0x160 [ 563.583981][ T468] vma_alloc_folio_noprof+0xe1/0x1e0 [ 563.589270][ T468] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 563.595171][ T468] ? lock_acquire+0x115/0x350 [ 563.599865][ T468] do_pte_missing+0x173a/0x34b0 [ 563.604725][ T468] handle_mm_fault+0x1a53/0x3750 [ 563.609677][ T468] ? handle_mm_fault+0xf1/0x3750 [ 563.614629][ T468] ? __pfx_handle_mm_fault+0x10/0x10 [ 563.619928][ T468] ? __lock_acquire+0x747/0x2de0 [ 563.624873][ T468] ? lock_mm_and_find_vma+0xa7/0x340 [ 563.630168][ T468] do_user_addr_fault+0x746/0x1340 [ 563.635291][ T468] exc_page_fault+0x6a/0xc0 [ 563.639804][ T468] asm_exc_page_fault+0x26/0x30 [ 563.644657][ T468] RIP: 0010:__put_user_4+0xd/0x30 [ 563.649708][ T468] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 96 03 00 90 90 90 90 90 90 90 90 90 90 [ 563.669463][ T468] RSP: 0018:ffffc90005ed7c78 EFLAGS: 00050206 [ 563.675580][ T468] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 0000200000001300 [ 563.683556][ T468] RDX: 0000000018ea3640 RSI: ffffffff8e69f8da RDI: ffffffff8c6dad80 [ 563.691532][ T468] RBP: 00000000ffffffff R08: ffffffff821ed4ef R09: 0000000000000000 [ 563.699507][ T468] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 0000200000001300 [ 563.707479][ T468] R13: 1ffff11005424002 R14: ffff88802a120000 R15: dffffc0000000000 [ 563.715457][ T468] ? __might_fault+0xaf/0x130 [ 563.720166][ T468] pppox_ioctl+0x1de/0x3f0 [ 563.724592][ T468] sock_do_ioctl+0x101/0x320 [ 563.729184][ T468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 563.734298][ T468] ? hook_file_ioctl+0x1f2/0x600 [ 563.739298][ T468] sock_ioctl+0x57a/0x7e0 [ 563.743631][ T468] ? __pfx_sock_ioctl+0x10/0x10 [ 563.748485][ T468] ? __fget_files+0x2a/0x420 [ 563.753093][ T468] ? __fget_files+0x3a2/0x420 [ 563.757775][ T468] ? __fget_files+0x2a/0x420 [ 563.762371][ T468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 563.767335][ T468] ? __pfx_sock_ioctl+0x10/0x10 [ 563.772187][ T468] __se_sys_ioctl+0xfc/0x170 [ 563.776784][ T468] do_syscall_64+0x166/0x520 [ 563.781385][ T468] ? trace_irq_disable+0x3b/0x140 [ 563.786414][ T468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.792483][ T468] ? clear_bhb_loop+0x70/0xc0 [ 563.797163][ T468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.803056][ T468] RIP: 0033:0x7fd48bf9e199 [ 563.807473][ T468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.827093][ T468] RSP: 002b:00007fd48ce8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.835511][ T468] RAX: ffffffffffffffda RBX: 00007fd48c225fa0 RCX: 00007fd48bf9e199 [ 563.843494][ T468] RDX: 0000200000001300 RSI: 0000000080047437 RDI: 0000000000000003 [ 563.851470][ T468] RBP: 00007fd48c0358e0 R08: 0000000000000000 R09: 0000000000000000 [ 563.859445][ T468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.867421][ T468] R13: 00007fd48c226038 R14: 00007fd48c225fa0 R15: 00007fffa6265008 [ 563.875411][ T468] [ 563.890558][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.890797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.892457][T20036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.892643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.914287][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.066604][ T30] net_ratelimit: 4 callbacks suppressed [ 567.066622][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.105705][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.146200][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.467364][ T203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.467600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.468141][T13465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.468341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.185609][ T1571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.225827][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.266420][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog