last executing test programs: 1.328386801s ago: executing program 4 (id=9053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 1.217611222s ago: executing program 2 (id=9055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x300, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xfff1, 0x6}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.111831142s ago: executing program 4 (id=9057): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x13c8, 0x0, 0x1250, 0x11b0, 0x11b0, 0xc0, 0x1420, 0x1420, 0x1420, 0x1420, 0x1420, 0x6, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'bridge0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'ip6gre0\x00', 'veth1_macvtap\x00'}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'wg2\x00', 'lo\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428) 1.037674778s ago: executing program 4 (id=9060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) 961.4751ms ago: executing program 0 (id=9062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x9}]}, 0x3c}}, 0x0) 961.213749ms ago: executing program 2 (id=9063): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='5\x00\x00\x00'], 0x10) 881.812337ms ago: executing program 1 (id=9064): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001340)=""/4088, 0xff8}], 0x1}, 0x1}], 0x2, 0x0, 0x0) 881.114789ms ago: executing program 4 (id=9065): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@llu, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 850.698087ms ago: executing program 3 (id=9066): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470"], 0x60}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 783.571761ms ago: executing program 2 (id=9067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 778.746548ms ago: executing program 0 (id=9068): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @ipv4}], 0x1c) 737.276618ms ago: executing program 1 (id=9069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 665.590651ms ago: executing program 3 (id=9070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) 648.241505ms ago: executing program 2 (id=9071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 576.801469ms ago: executing program 0 (id=9072): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r0, &(0x7f00000004c0), 0x0}, 0x20) 570.195934ms ago: executing program 1 (id=9073): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0x0, 0x2}, 0xe) 487.833157ms ago: executing program 3 (id=9074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00fbffffff000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000090) 442.183915ms ago: executing program 2 (id=9075): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x6, 0x9, 0x4}, 0xc) 398.276678ms ago: executing program 1 (id=9076): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) 384.166304ms ago: executing program 0 (id=9077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0xf}, 0x1) 377.56943ms ago: executing program 3 (id=9078): unshare(0x2040400) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, 0x0, 0x0) 333.800118ms ago: executing program 4 (id=9079): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x11, 0x6, @random="626853a093d6"}, 0x10) 300.766165ms ago: executing program 2 (id=9080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000170000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 237.3538ms ago: executing program 3 (id=9081): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83", 0x1e, 0x840, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b00"], 0x28}}, 0x0) 236.830403ms ago: executing program 0 (id=9082): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002340), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000005210000000a0001007770616e33060000050020000100000009001f"], 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4050) 178.340063ms ago: executing program 4 (id=9083): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r1], 0x44}}, 0x0) 123.383196ms ago: executing program 1 (id=9084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000080)) 100.290377ms ago: executing program 3 (id=9085): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x0) 94.36497ms ago: executing program 0 (id=9086): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x5, &(0x7f0000000000)=@gcm_128={{}, "868a2dee9523d346", "bd4a1bd98174a620f0d347e8ca6a5dfb", "452c74c9", "bea3db3b3a60aa72"}, 0x28) 0s ago: executing program 1 (id=9087): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): process `syz.0.2644'. [ 178.779295][T11535] netlink: 'syz.0.2651': attribute type 2 has an invalid length. [ 178.788958][T11537] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2652'. [ 178.839786][T11535] f: entered promiscuous mode [ 179.154551][T11557] x_tables: unsorted entry at hook 1 [ 179.175387][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'. [ 179.335003][T11568] netlink: 'syz.1.2667': attribute type 2 has an invalid length. [ 180.386618][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 180.400748][T11623] SET target dimension over the limit! [ 180.437375][T11626] netlink: 'syz.3.2696': attribute type 10 has an invalid length. [ 180.464047][T11626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2696'. [ 180.473834][T11629] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 180.501221][T11626] batman_adv: batadv0: Adding interface: virt_wifi0 [ 180.517762][T11626] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.611194][T11626] batman_adv: batadv0: Interface activated: virt_wifi0 [ 181.666685][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 181.733465][T11698] x_tables: ip_tables: osf match: only valid for protocol 6 [ 181.860586][T11702] netlink: set zone limit has 8 unknown bytes [ 181.926946][T11706] netlink: 'syz.2.2725': attribute type 21 has an invalid length. [ 181.945875][T11706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2725'. [ 182.177355][T11718] xt_bpf: check failed: parse error [ 182.528709][T11739] netlink: 'syz.3.2741': attribute type 2 has an invalid length. [ 182.540288][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2741'. [ 182.692690][T11746] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 182.726869][T11751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.553626][T11792] xt_hashlimit: max too large, truncated to 1048576 [ 183.663392][T11794] openvswitch: netlink: IP tunnel TTL not specified. [ 183.674347][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2769'. [ 183.954028][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2777'. [ 183.988566][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 184.365756][T11834] Cannot find del_set index 4 as target [ 184.437808][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 184.508215][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 184.698711][T11853] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.738297][T11853] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 185.176343][T11878] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 185.224564][T11878] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 185.489688][T11900] __nla_validate_parse: 3 callbacks suppressed [ 185.489708][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2816'. [ 185.705841][T11912] x_tables: unsorted underflow at hook 2 [ 186.035920][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2831'. [ 186.277112][T11947] IPv6: addrconf: prefix option has invalid lifetime [ 186.314439][T11943] lo speed is unknown, defaulting to 1000 [ 186.452581][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 186.452603][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 186.459862][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 186.465291][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 186.476456][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 186.483995][T11954] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2840'. [ 186.614911][T11961] ip6t_REJECT: ECHOREPLY is not supported [ 187.334721][T11990] netlink: 'syz.2.2857': attribute type 3 has an invalid length. [ 187.376614][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2857'. [ 187.415375][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2856'. [ 187.449354][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2856'. [ 187.486835][T11991] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2856'. [ 187.801385][T12011] netlink: 'syz.2.2864': attribute type 1 has an invalid length. [ 187.823639][T12011] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2864'. [ 188.250014][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 188.350946][T12048] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2878'. [ 188.741798][T12067] netlink: 'syz.3.2885': attribute type 3 has an invalid length. [ 189.879533][T12131] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 189.918600][T12134] SET target dimension over the limit! [ 189.933386][T12136] netlink: 'syz.2.2914': attribute type 30 has an invalid length. [ 189.997524][T12136] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 190.014253][T12136] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 190.114216][T12144] netlink: 'syz.1.2918': attribute type 3 has an invalid length. [ 191.009906][T12195] delete_channel: no stack [ 191.116947][T12199] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 191.156656][T12201] sctp: [Deprecated]: syz.1.2947 (pid 12201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.156656][T12201] Use struct sctp_sack_info instead [ 191.161074][T12204] openvswitch: netlink: Multiple metadata blocks provided [ 191.268917][T12207] netlink: 'syz.3.2949': attribute type 8 has an invalid length. [ 191.322132][T12209] __nla_validate_parse: 5 callbacks suppressed [ 191.322151][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'. [ 191.358019][T12212] netlink: 'syz.0.2951': attribute type 3 has an invalid length. [ 191.365817][T12212] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2951'. [ 191.396534][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 192.054208][T12248] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2969'. [ 192.345346][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.152656][T12315] netlink: 'syz.0.3003': attribute type 1 has an invalid length. [ 193.171995][T12315] netlink: 'syz.0.3003': attribute type 2 has an invalid length. [ 193.186939][T12315] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3003'. [ 194.235189][T12374] netlink: ct family unspecified [ 194.245051][T12374] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.618259][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.624985][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.647634][T12394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3042'. [ 194.723445][T12398] netlink: 'syz.1.3044': attribute type 13 has an invalid length. [ 195.706632][T12452] : renamed from lo [ 195.786766][T12457] netlink: 'syz.0.3073': attribute type 2 has an invalid length. [ 195.815954][T12457] netlink: 'syz.0.3073': attribute type 8 has an invalid length. [ 195.824168][T12457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3073'. [ 196.106001][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 196.276637][T12484] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3087'. [ 196.438958][T12490] netlink: 'syz.0.3090': attribute type 10 has an invalid length. [ 196.454886][T12490] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3090'. [ 196.465226][T12490] team0: entered promiscuous mode [ 196.485093][T12490] team_slave_0: entered promiscuous mode [ 196.501143][T12490] team_slave_1: entered promiscuous mode [ 196.524640][T12490] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 196.567442][T12490] bridge0: port 3(team0) entered blocking state [ 196.584368][T12490] bridge0: port 3(team0) entered disabled state [ 196.591797][T12490] team0: entered allmulticast mode [ 196.620924][T12490] team_slave_0: entered allmulticast mode [ 196.634376][T12490] team_slave_1: entered allmulticast mode [ 196.640830][T12490] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 196.652342][T12490] bridge0: port 3(team0) entered blocking state [ 196.659118][T12490] bridge0: port 3(team0) entered forwarding state [ 197.169960][T12527] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.179476][T12527] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.188724][T12527] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.197870][T12527] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.223799][T12527] vxlan0: entered promiscuous mode [ 197.230721][T12527] vxlan0: entered allmulticast mode [ 197.256776][T12527] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.265783][T12527] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.274977][T12527] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.284171][T12527] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.782019][T12564] !: renamed from bond_slave_0 (while UP) [ 197.828870][T12567] netlink: 'syz.1.3124': attribute type 8 has an invalid length. [ 198.510419][T12587] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 199.241238][T12617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.070618][T12656] netlink: 'syz.0.3165': attribute type 3 has an invalid length. [ 200.090894][T12656] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3165'. [ 200.295341][T12666] IPv6: sit1: Disabled Multicast RS [ 200.414788][T12672] netlink: 'syz.4.3172': attribute type 1 has an invalid length. [ 200.426684][T12672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3172'. [ 200.557253][T12676] openvswitch: netlink: Actions may not be safe on all matching packets [ 200.971451][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3183'. [ 200.996697][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3183'. [ 201.192199][T12702] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 201.418972][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3195'. [ 201.503197][T12720] netlink: 'syz.0.3197': attribute type 5 has an invalid length. [ 201.536853][T12720] : entered promiscuous mode [ 201.546145][T12723] netlink: 'syz.4.3198': attribute type 10 has an invalid length. [ 201.616798][T12723] macvlan0: entered allmulticast mode [ 201.626247][T12723] veth1_vlan: entered allmulticast mode [ 201.662590][T12723] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 201.862902][T12741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3207'. [ 202.436673][T12772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3223'. [ 203.382440][T12829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.427204][T12829] batadv_slave_0: entered promiscuous mode [ 203.443405][T12829] batadv_slave_0: entered allmulticast mode [ 203.678762][T12842] netlink: 'syz.4.3258': attribute type 10 has an invalid length. [ 203.787038][T12842] syz_tun: entered promiscuous mode [ 203.820499][T12842] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 203.851565][T12852] netlink: 'syz.2.3263': attribute type 10 has an invalid length. [ 204.075331][T12865] bridge3: entered allmulticast mode [ 204.796802][T12905] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 204.877840][T12912] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 204.915125][T12910] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3292'. [ 204.976039][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3292'. [ 205.022146][T12917] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.238077][T12929] netlink: 'syz.1.3300': attribute type 10 has an invalid length. [ 205.245946][T12929] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3300'. [ 205.298066][T12929] team0: entered promiscuous mode [ 205.315375][T12929] team_slave_0: entered promiscuous mode [ 205.342728][T12929] team_slave_1: entered promiscuous mode [ 205.356251][T12929] bridge0: port 3(team0) entered blocking state [ 205.387163][T12929] bridge0: port 3(team0) entered disabled state [ 205.436756][T12929] team0: entered allmulticast mode [ 205.456796][T12929] team_slave_0: entered allmulticast mode [ 205.462704][T12929] team_slave_1: entered allmulticast mode [ 205.485919][T12929] bridge0: port 3(team0) entered blocking state [ 205.492323][T12929] bridge0: port 3(team0) entered forwarding state [ 205.725385][T12955] openvswitch: netlink: IP tunnel dst address not specified [ 206.110913][T12975] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 206.111890][T12974] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 206.250191][T12981] sctp: [Deprecated]: syz.1.3327 (pid 12981) Use of int in maxseg socket option. [ 206.250191][T12981] Use struct sctp_assoc_value instead [ 206.372161][T12987] ip6t_srh: unknown srh match flags 4000 [ 206.536638][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 206.594872][T13002] netlink: 'syz.1.3332': attribute type 1 has an invalid length. [ 206.613278][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 207.306809][T13043] nftables ruleset with unbound set [ 207.889353][T13077] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 208.058619][T13082] SET target dimension over the limit! [ 208.523657][T13107] xt_nat: multiple ranges no longer supported [ 208.729348][T13115] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 208.743729][T13117] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 208.762942][T13119] xt_hashlimit: invalid rate [ 208.828960][T13115] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.866607][T13115] gretap0: entered promiscuous mode [ 208.902060][T13115] gretap0: entered allmulticast mode [ 209.141916][T13136] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3388'. [ 209.170715][T13136] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3388'. [ 209.230890][T13136] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3388'. [ 209.714202][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 209.737165][T13174] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3400'. [ 210.194690][T13196] netlink: 'syz.2.3411': attribute type 7 has an invalid length. [ 210.227458][T13196] netlink: 'syz.2.3411': attribute type 8 has an invalid length. [ 210.272881][T13196] netlink: 'syz.2.3411': attribute type 15 has an invalid length. [ 210.412881][T13206] netlink: 'syz.4.3414': attribute type 10 has an invalid length. [ 210.460167][T13206] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 210.737271][T13227] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 211.444371][T13268] ip6gre1: entered promiscuous mode [ 211.556785][T13274] netlink: 'syz.4.3442': attribute type 1 has an invalid length. [ 211.556832][T13273] SET target dimension over the limit! [ 211.592764][T13274] NCSI netlink: No device for ifindex 0 [ 211.940827][T13296] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 211.954667][T13296] netlink: 'syz.3.3455': attribute type 2 has an invalid length. [ 211.973397][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 212.465184][T13325] openvswitch: netlink: IPv4 tunnel dst address is zero [ 212.967822][T13354] netlink: 'syz.4.3483': attribute type 7 has an invalid length. [ 213.020932][T13357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3484'. [ 213.168950][T13360] xt_CT: No such helper "netbios-ns" [ 213.482559][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'. [ 213.673648][T13394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3502'. [ 213.719543][T13396] netlink: 'syz.3.3504': attribute type 2 has an invalid length. [ 213.755756][T13396] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3504'. [ 214.136602][T13418] Cannot find del_set index 65533 as target [ 214.215433][T13420] netlink: 'syz.2.3516': attribute type 10 has an invalid length. [ 214.265472][T13420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.307677][T13420] team0: Port device batadv0 added [ 214.490022][T13435] nftables ruleset with unbound chain [ 214.892117][T13454] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3532'. [ 215.020974][T13463] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 215.057674][T13463] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 215.279693][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3542'. [ 215.307902][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.356560][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.387583][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.408946][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.418223][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.426659][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.434583][T13481] netlink: 'syz.2.3544': attribute type 4 has an invalid length. [ 215.686197][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'. [ 215.818349][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 216.570402][T13544] speed is unknown, defaulting to 1000 [ 216.884975][T13559] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 217.130012][T13569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3587'. [ 217.271457][T13577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3591'. [ 217.493547][T13586] xt_TCPMSS: Only works on TCP SYN packets [ 218.048184][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 219.399260][T13682] validate_nla: 48 callbacks suppressed [ 219.399279][T13682] netlink: 'syz.0.3643': attribute type 21 has an invalid length. [ 219.991060][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3656'. [ 220.037801][T13718] veth1_macvtap: left promiscuous mode [ 220.283688][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3665'. [ 220.314316][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3665'. [ 220.575521][T13746] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 220.643542][T13751] netlink: 'syz.3.3677': attribute type 29 has an invalid length. [ 221.281278][T13783] gretap1: entered promiscuous mode [ 221.475817][T13795] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 221.490203][T13797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3699'. [ 222.430932][T13847] xt_connbytes: Forcing CT accounting to be enabled [ 222.438691][T13847] xt_bpf: check failed: parse error [ 222.607635][T13857] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3729'. [ 222.991154][T13879] SET target dimension over the limit! [ 222.999175][T13881] xt_limit: Overflow, try lower: 262144/524288 [ 223.397457][T13903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3750'. [ 223.790913][T13926] raw_sendmsg: syz.3.3758 forgot to set AF_INET. Fix it! [ 224.021147][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3764'. [ 224.081946][T13945] netlink: 'syz.2.3766': attribute type 1 has an invalid length. [ 224.095790][T13947] Illegal XDP return value 721144889 on prog (id 432) dev N/A, expect packet loss! [ 224.108984][T13945] netlink: 'syz.2.3766': attribute type 1 has an invalid length. [ 224.307055][T13953] veth0_vlan: left promiscuous mode [ 224.314522][T13953] vlan0: entered promiscuous mode [ 224.914806][T13982] netlink: 'syz.0.3784': attribute type 1 has an invalid length. [ 225.123670][T13990] netlink: 'syz.0.3788': attribute type 1 has an invalid length. [ 225.146966][T13990] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3788'. [ 225.222237][T13996] netlink: 'syz.2.3790': attribute type 1 has an invalid length. [ 225.254954][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3790'. [ 225.794272][T14019] netlink: 'syz.1.3802': attribute type 21 has an invalid length. [ 225.808101][T14019] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.838694][T14019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.846005][T14019] IPv6: NLM_F_CREATE should be set when creating new route [ 225.853441][T14019] IPv6: NLM_F_CREATE should be set when creating new route [ 225.860730][T14019] IPv6: NLM_F_CREATE should be set when creating new route [ 225.972980][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3807'. [ 226.649592][T14069] netlink: 'syz.2.3825': attribute type 21 has an invalid length. [ 226.787133][T14076] netlink: 'syz.0.3828': attribute type 32 has an invalid length. [ 226.815181][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3831'. [ 226.844915][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3831'. [ 226.967124][T14087] netlink: 'syz.0.3835': attribute type 16 has an invalid length. [ 227.003780][T14087] netlink: 'syz.0.3835': attribute type 3 has an invalid length. [ 227.027862][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3835'. [ 227.535477][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3852'. [ 227.544738][T14121] netlink: 'syz.4.3852': attribute type 2 has an invalid length. [ 227.745684][T14131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3855'. [ 228.044822][T14146] netlink: 'syz.0.3864': attribute type 12 has an invalid length. [ 228.066216][T14146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3864'. [ 228.390835][T14162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.710268][T14180] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3880'. [ 229.136072][T14209] delete_channel: no stack [ 229.327292][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.333553][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.378720][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.430373][T14215] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 229.509170][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.544165][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.561115][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.589981][T14215] batadv0 speed is unknown, defaulting to 1000 [ 229.611362][T14215] batadv0 speed is unknown, defaulting to 1000 [ 230.009918][T14250] validate_nla: 2 callbacks suppressed [ 230.009936][T14250] netlink: 'syz.3.3915': attribute type 9 has an invalid length. [ 230.063928][T14250] netlink: 'syz.3.3915': attribute type 6 has an invalid length. [ 230.486120][T14282] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 230.536615][T14282] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 230.615767][T14289] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 230.718849][T14292] bridge0: port 3(netdevsim2) entered blocking state [ 230.746586][T14292] bridge0: port 3(netdevsim2) entered disabled state [ 230.765580][T14292] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 230.778062][T14292] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 231.081210][T14310] __nla_validate_parse: 4 callbacks suppressed [ 231.081228][T14310] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3943'. [ 231.176641][T14310] netlink: zone id is out of range [ 231.181829][T14310] netlink: zone id is out of range [ 231.224103][T14310] netlink: zone id is out of range [ 231.236830][T14310] netlink: zone id is out of range [ 231.242205][T14310] netlink: zone id is out of range [ 231.252342][T14310] netlink: zone id is out of range [ 231.278765][T14310] netlink: zone id is out of range [ 231.296519][T14310] netlink: zone id is out of range [ 231.301750][T14310] netlink: zone id is out of range [ 231.322986][T14310] netlink: zone id is out of range [ 231.532268][T14338] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3952'. [ 231.669091][T14345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3954'. [ 232.036093][T14363] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3963'. [ 232.485566][T14392] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3974'. [ 232.528250][T14392] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3974'. [ 232.788805][T14411] netlink: 'syz.4.3981': attribute type 32 has an invalid length. [ 232.993385][T14421] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3985'. [ 233.098842][T14426] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 233.118342][T14426] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3987'. [ 233.438748][T14443] netlink: 'syz.1.3995': attribute type 1 has an invalid length. [ 233.469973][T14443] netlink: 'syz.1.3995': attribute type 11 has an invalid length. [ 233.520782][T14443] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3995'. [ 233.911060][T14471] netlink: 'syz.4.4004': attribute type 2 has an invalid length. [ 234.082505][T14480] --map-set only usable from mangle table [ 234.283870][T14493] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 234.897021][T14524] bond1: entered promiscuous mode [ 234.927529][T14530] netlink: 'syz.3.4026': attribute type 2 has an invalid length. [ 234.944817][T14524] bond1: entered allmulticast mode [ 234.954135][T14524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.189642][T14543] validate_nla: 1 callbacks suppressed [ 235.189662][T14543] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 235.224589][T14543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4030'. [ 235.836520][T14578] netlink: 'syz.3.4047': attribute type 5 has an invalid length. [ 235.887080][T14578] ip6erspan0: entered promiscuous mode [ 236.586806][T14604] __nla_validate_parse: 2 callbacks suppressed [ 236.586825][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 236.630311][T14607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4061'. [ 236.679706][T14610] bridge4: entered promiscuous mode [ 236.699371][T14610] bridge4: entered allmulticast mode [ 236.798382][T14615] SET target dimension over the limit! [ 236.845993][T14619] netlink: 'syz.4.4066': attribute type 3 has an invalid length. [ 236.890880][T14621] net_ratelimit: 76 callbacks suppressed [ 236.890897][T14621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.319285][T14631] netlink: 'syz.2.4073': attribute type 13 has an invalid length. [ 237.364340][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4073'. [ 237.428996][T14631] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 237.591787][T14639] ieee802154 phy1 wpan1: encryption failed: -90 [ 238.046164][T14660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4088'. [ 238.280411][T14674] netlink: 'syz.2.4094': attribute type 1 has an invalid length. [ 238.315858][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4094'. [ 238.792336][T14703] netlink: 'syz.2.4107': attribute type 6 has an invalid length. [ 238.811913][T14703] netlink: 'syz.2.4107': attribute type 30 has an invalid length. [ 239.378577][T14738] @: renamed from bond_slave_0 (while UP) [ 239.580150][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4129'. [ 239.637841][T14748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4129'. [ 240.997431][T14828] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 241.005565][T14828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.807014][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'. [ 241.978146][T14880] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.4194'. [ 242.015928][T14880] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.4194'. [ 242.548808][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4209'. [ 242.584558][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4212'. [ 243.598961][T14973] openvswitch: netlink: EtherType 50a is less than min 600 [ 243.701904][T14977] netlink: 'syz.0.4242': attribute type 9 has an invalid length. [ 243.751439][T14977] netlink: 'syz.0.4242': attribute type 6 has an invalid length. [ 243.756757][T14982] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.768296][T14977] netlink: 'syz.0.4242': attribute type 7 has an invalid length. [ 243.776060][T14977] netlink: 'syz.0.4242': attribute type 8 has an invalid length. [ 243.855376][T14987] netlink: 'syz.1.4247': attribute type 1 has an invalid length. [ 243.907331][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 244.475421][T15019] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 244.589612][T15024] xt_TCPMSS: Only works on TCP SYN packets [ 244.962701][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'. [ 245.281012][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4283'. [ 245.307258][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4283'. [ 245.413636][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4287'. [ 245.567248][T15080] netlink: 'syz.4.4291': attribute type 3 has an invalid length. [ 245.627522][T15082] netlink: 'syz.0.4292': attribute type 3 has an invalid length. [ 246.329634][T15125] netlink: 'syz.1.4309': attribute type 1 has an invalid length. [ 246.853564][T15155] x_tables: duplicate underflow at hook 2 [ 246.862421][T15156] __nla_validate_parse: 4 callbacks suppressed [ 246.862440][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4321'. [ 246.895183][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4324'. [ 247.351968][T15182] netlink: 'syz.4.4335': attribute type 1 has an invalid length. [ 247.449259][T15188] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 247.559162][T15184] bridge0: port 3(team0) entered disabled state [ 247.596822][T15184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.838090][T15184] syz.0.4336 (15184) used greatest stack depth: 18288 bytes left [ 247.871351][T15207] netlink: 'syz.1.4347': attribute type 11 has an invalid length. [ 248.187225][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4354'. [ 248.327951][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4358'. [ 248.380755][T15229] netlink: 'syz.3.4358': attribute type 1 has an invalid length. [ 248.616485][T15248] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4368'. [ 249.466012][T15295] IPv6: Can't replace route, no match found [ 249.692768][T15307] validate_nla: 1 callbacks suppressed [ 249.692787][T15307] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 249.737382][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4396'. [ 249.751268][T15312] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 249.946593][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4404'. [ 250.172081][T15335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4410'. [ 250.257059][T15333] 0XD: left allmulticast mode [ 250.678996][T15333] bridge0: port 3(team0) entered disabled state [ 250.685873][T15333] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.694244][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.052119][T15333] batadv_slave_0: left promiscuous mode [ 251.064761][T15333] batadv_slave_0: left allmulticast mode [ 251.077716][T15333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.363866][T15333] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.380696][T15333] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.389783][T15333] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.398910][T15333] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.416287][T15333] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 251.494635][T15333] ip6tnl1: left promiscuous mode [ 251.506428][T15333] ip6tnl1: left allmulticast mode [ 251.525101][T15333] gretap0: left promiscuous mode [ 251.530547][T15333] gretap0: left allmulticast mode [ 251.755912][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 251.776746][T15362] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 251.797644][T15362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.994084][T15371] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.301773][T15388] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4436'. [ 252.347658][T15378] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.355943][T15378] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.489585][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 252.505568][T15378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.521710][T15378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.589456][T15378] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.598691][T15378] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.608816][T15378] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.620015][T15378] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.632134][T15378] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 252.678630][T15378] bond1: left promiscuous mode [ 252.683488][T15378] bond1: left allmulticast mode [ 252.698340][T15378] bridge4: left promiscuous mode [ 252.703349][T15378] bridge4: left allmulticast mode [ 253.204911][T15421] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 253.213887][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4450'. [ 253.251245][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4450'. [ 253.520892][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4457'. [ 253.859380][T15455] IPv6: Can't replace route, no match found [ 253.939090][T15461] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.121755][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'. [ 254.143917][T15473] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.788722][T15508] x_tables: duplicate underflow at hook 1 [ 255.279655][T15537] openvswitch: netlink: IPv4 tun info is not correct [ 255.369912][T15542] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4510'. [ 255.676309][T15559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4521'. [ 255.827159][T15568] openvswitch: netlink: IP tunnel dst address not specified [ 256.050004][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.064112][T15579] ax25_connect(): syz.2.4529 uses autobind, please contact jreuter@yaina.de [ 256.713112][T15617] netlink: 'syz.1.4549': attribute type 1 has an invalid length. [ 256.774332][T15617] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4549'. [ 257.104256][T15637] xt_hashlimit: max too large, truncated to 1048576 [ 257.152483][T15637] No such timeout policy "syz1" [ 257.371807][T15651] dvmrp0: entered allmulticast mode [ 257.586877][T15665] netlink: 'syz.2.4570': attribute type 1 has an invalid length. [ 257.756604][T15673] lo: entered allmulticast mode [ 257.778443][T15673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.172396][T15692] openvswitch: netlink: IP tunnel dst address not specified [ 258.247872][T15697] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 258.436737][T15705] xt_hashlimit: invalid interval [ 259.578571][T15773] netlink: 'syz.0.4626': attribute type 2 has an invalid length. [ 260.488952][T15825] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4652'. [ 260.534551][T15825] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4652'. [ 260.788840][T15840] netlink: 'syz.1.4661': attribute type 13 has an invalid length. [ 260.807788][T15840] macvtap0: entered promiscuous mode [ 260.867498][T15840] macvtap0: refused to change device tx_queue_len [ 260.940805][T15846] netlink: 'syz.4.4665': attribute type 21 has an invalid length. [ 260.952396][T15847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4664'. [ 260.966156][T15846] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4665'. [ 262.193696][T15910] ip_vti0: entered promiscuous mode [ 262.419092][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4701'. [ 262.428504][T15922] netlink: 'syz.1.4701': attribute type 2 has an invalid length. [ 262.802755][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 262.816932][T15938] netlink: 'syz.0.4709': attribute type 11 has an invalid length. [ 262.824811][T15938] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4709'. [ 262.886646][T15942] syz.1.4711: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.976143][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.1.4711 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 262.976194][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.976223][T15942] Call Trace: [ 262.976229][T15942] [ 262.976237][T15942] dump_stack_lvl+0x241/0x360 [ 262.976276][T15942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.976296][T15942] ? __pfx__printk+0x10/0x10 [ 262.976318][T15942] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 262.976344][T15942] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 262.976365][T15942] warn_alloc+0x278/0x410 [ 262.976384][T15942] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 262.976400][T15942] ? __pfx_warn_alloc+0x10/0x10 [ 262.976417][T15942] ? kasan_save_track+0x3f/0x80 [ 262.976432][T15942] ? __kasan_kmalloc+0x98/0xb0 [ 262.976451][T15942] ? xsk_setsockopt+0x4aa/0x810 [ 262.976472][T15942] ? do_sock_setsockopt+0x3af/0x720 [ 262.976488][T15942] ? __x64_sys_setsockopt+0x1ee/0x280 [ 262.976503][T15942] ? do_syscall_64+0xf3/0x230 [ 262.976520][T15942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.976559][T15942] __vmalloc_node_range_noprof+0x126/0x1380 [ 262.976603][T15942] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.976625][T15942] ? __kasan_kmalloc+0x98/0xb0 [ 262.976646][T15942] vmalloc_user_noprof+0x74/0x80 [ 262.976661][T15942] ? xskq_create+0xb6/0x170 [ 262.976682][T15942] xskq_create+0xb6/0x170 [ 262.976706][T15942] xsk_init_queue+0xa1/0x100 [ 262.976730][T15942] xsk_setsockopt+0x4aa/0x810 [ 262.976755][T15942] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.976778][T15942] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.976803][T15942] ? aa_sock_opt_perm+0x79/0x120 [ 262.976828][T15942] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.976849][T15942] do_sock_setsockopt+0x3af/0x720 [ 262.976870][T15942] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 262.976890][T15942] ? __fget_files+0x395/0x410 [ 262.976912][T15942] ? __fget_files+0x2a/0x410 [ 262.976941][T15942] __x64_sys_setsockopt+0x1ee/0x280 [ 262.976964][T15942] do_syscall_64+0xf3/0x230 [ 262.976981][T15942] ? clear_bhb_loop+0x35/0x90 [ 262.977005][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.977031][T15942] RIP: 0033:0x7f164db8d169 [ 262.977051][T15942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.977064][T15942] RSP: 002b:00007f164e992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.977083][T15942] RAX: ffffffffffffffda RBX: 00007f164dda5fa0 RCX: 00007f164db8d169 [ 262.977095][T15942] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 262.977106][T15942] RBP: 00007f164dc0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 262.977116][T15942] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.977126][T15942] R13: 0000000000000000 R14: 00007f164dda5fa0 R15: 00007ffd0c705558 [ 262.977154][T15942] [ 263.279597][T15948] IPv6: sit2: Disabled Multicast RS [ 263.296568][T15942] Mem-Info: [ 263.301164][T15942] active_anon:4854 inactive_anon:0 isolated_anon:0 [ 263.301164][T15942] active_file:1150 inactive_file:38374 isolated_file:0 [ 263.301164][T15942] unevictable:768 dirty:303 writeback:0 [ 263.301164][T15942] slab_reclaimable:10461 slab_unreclaimable:103219 [ 263.301164][T15942] mapped:28554 shmem:1419 pagetables:939 [ 263.301164][T15942] sec_pagetables:0 bounce:0 [ 263.301164][T15942] kernel_misc_reclaimable:0 [ 263.301164][T15942] free:1328745 free_pcp:510 free_cma:0 [ 263.355931][T15954] x_tables: duplicate underflow at hook 3 [ 263.392285][T15942] Node 0 active_anon:19416kB inactive_anon:0kB active_file:4600kB inactive_file:153420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114216kB dirty:1212kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11152kB pagetables:3656kB sec_pagetables:0kB all_unreclaimable? no [ 263.433561][T15942] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 263.456698][T15958] netlink: 'syz.4.4718': attribute type 1 has an invalid length. [ 263.464977][T15942] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.499307][T15942] lowmem_reserve[]: 0 2489 2490 0 0 [ 263.504607][T15942] Node 0 DMA32 free:1398200kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19580kB inactive_anon:0kB active_file:4600kB inactive_file:153092kB unevictable:1536kB writepending:1212kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:1196kB local_pcp:396kB free_cma:0kB [ 263.535671][T15942] lowmem_reserve[]: 0 0 0 0 0 [ 263.540867][T15942] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.568928][T15942] lowmem_reserve[]: 0 0 0 0 0 [ 263.573816][T15942] Node 1 Normal free:3902368kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.676472][T15942] lowmem_reserve[]: 0 0 0 0 0 [ 263.681294][T15942] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 263.734221][T15942] Node 0 DMA32: 91*4kB (UME) 105*8kB (UME) 65*16kB (UME) 23*32kB (UME) 422*64kB (UME) 351*128kB (UME) 142*256kB (UM) 39*512kB (UM) 39*1024kB (UME) 9*2048kB (UME) 295*4096kB (UM) = 1397924kB [ 263.802696][T15942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 263.868420][T15942] Node 1 Normal: 206*4kB (UE) 59*8kB (UME) 51*16kB (UME) 229*32kB (UME) 97*64kB (UME) 31*128kB (UME) 19*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 944*4096kB (UM) = 3902368kB [ 263.939244][T15942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.964202][T15942] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.989650][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4728'. [ 264.031739][T15977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4728'. [ 264.043393][T15942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.095592][T15977] netlink: 'syz.2.4728': attribute type 6 has an invalid length. [ 264.103746][T15942] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.123093][T15942] 40943 total pagecache pages [ 264.128164][T15942] 0 pages in swap cache [ 264.128812][T15979] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4729'. [ 264.132584][T15942] Free swap = 124996kB [ 264.148978][T15942] Total swap = 124996kB [ 264.153181][T15942] 2097051 pages RAM [ 264.158558][T15942] 0 pages HighMem/MovableOnly [ 264.169284][T15942] 427897 pages reserved [ 264.173485][T15942] 0 pages cma reserved [ 264.556699][T16006] netlink: 'syz.4.4741': attribute type 2 has an invalid length. [ 264.575442][T16006] netlink: 'syz.4.4741': attribute type 8 has an invalid length. [ 264.780148][T16015] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 265.217407][T16042] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.529525][T16059] __nla_validate_parse: 1 callbacks suppressed [ 265.529545][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 265.735881][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'. [ 265.736121][T16072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4775'. [ 265.907610][T16078] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 265.915407][T16078] netlink: 'syz.3.4778': attribute type 3 has an invalid length. [ 265.961066][T16078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4778'. [ 266.208163][T16091] netlink: 'syz.0.4785': attribute type 21 has an invalid length. [ 266.233119][T16091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4785'. [ 266.818718][T16121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.845595][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 267.331047][T16154] x_tables: duplicate entry at hook 2 [ 267.344881][T16156] xt_connbytes: Forcing CT accounting to be enabled [ 267.357361][T16156] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 268.020770][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4835'. [ 268.189608][T16203] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4839'. [ 268.220333][T16203] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 268.295947][T16209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.401558][T16213] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4844'. [ 268.447483][T16213] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4844'. [ 268.467578][T16213] netlink: 'syz.1.4844': attribute type 4 has an invalid length. [ 268.849113][T16236] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 268.904458][T16237] bond0: entered promiscuous mode [ 268.909811][T16237] @: entered promiscuous mode [ 268.914924][T16237] bond_slave_1: entered promiscuous mode [ 268.929451][T16237] team0: entered promiscuous mode [ 268.939702][T16237] team_slave_0: entered promiscuous mode [ 268.966810][T16237] team_slave_1: entered promiscuous mode [ 268.986917][T16237] batadv0: entered promiscuous mode [ 269.207533][T16253] siw: device registration error -23 [ 269.941051][T16297] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 270.149860][T16309] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 270.218138][T16312] netlink: 'syz.1.4893': attribute type 9 has an invalid length. [ 270.594644][T16333] netlink: 'syz.2.4902': attribute type 10 has an invalid length. [ 270.644716][T16333] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 270.659202][T16333] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 270.687723][T16333] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 270.943948][T16353] __nla_validate_parse: 4 callbacks suppressed [ 270.943967][T16353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4913'. [ 271.202621][T16365] openvswitch: netlink: Key type 29 is not supported [ 271.321993][T16370] xt_policy: output policy not valid in PREROUTING and INPUT [ 271.330176][T16371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4922'. [ 271.546770][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4927'. [ 271.615053][T16382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.676674][T16382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.693966][T16382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.714335][T16382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.726480][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4934'. [ 271.875101][T16395] netlink: 'syz.3.4935': attribute type 2 has an invalid length. [ 272.482764][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4953'. [ 272.555090][T16436] openvswitch: netlink: IPv4 tunnel dst address is zero [ 273.455958][T16489] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4982'. [ 273.705974][T16502] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4987'. [ 273.766647][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4989'. [ 274.049948][T16520] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4995'. [ 274.271000][T16535] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 274.449362][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5007'. [ 274.982958][T16573] netlink: 'syz.1.5023': attribute type 21 has an invalid length. [ 275.133699][T16581] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 275.254169][T16589] netlink: 'syz.3.5030': attribute type 11 has an invalid length. [ 275.763275][T16620] IPv6: sit2: Disabled Multicast RS [ 275.998418][T16631] __nla_validate_parse: 1 callbacks suppressed [ 275.998437][T16631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5049'. [ 276.036773][T16631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5049'. [ 276.550429][T16664] netlink: 'syz.3.5066': attribute type 1 has an invalid length. [ 277.638529][T16720] xt_l2tp: invalid flags combination: c [ 277.696868][T16724] ipt_ECN: cannot use operation on non-tcp rule [ 278.167334][T16752] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 278.414165][T16765] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5117'. [ 278.608864][T16772] xt_CT: No such helper "syz0" [ 279.220214][T16809] netlink: 7084 bytes leftover after parsing attributes in process `syz.3.5138'. [ 279.267528][T16814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.506081][T16821] bond2: entered promiscuous mode [ 279.526288][T16821] bond2: entered allmulticast mode [ 279.548556][T16821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.792321][T16840] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5153'. [ 279.814125][T16844] netlink: 'syz.3.5154': attribute type 21 has an invalid length. [ 279.832512][T16844] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5154'. [ 279.842235][T16844] netlink: 'syz.3.5154': attribute type 4 has an invalid length. [ 279.851638][T16844] netlink: 'syz.3.5154': attribute type 3 has an invalid length. [ 279.885436][T16844] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5154'. [ 279.961222][T16848] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.068265][T16855] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5161'. [ 280.304514][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5166'. [ 280.376042][T16873] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5168'. [ 280.562810][T16884] netlink: 'syz.4.5174': attribute type 1 has an invalid length. [ 280.849686][T16896] netlink: 'syz.3.5181': attribute type 4 has an invalid length. [ 280.890490][T16901] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.007515][T16906] SET target dimension over the limit! [ 281.116666][T16912] __nla_validate_parse: 4 callbacks suppressed [ 281.116686][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5189'. [ 281.174505][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5189'. [ 281.906891][T16956] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5210'. [ 282.675320][T16998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.715008][T16998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.727129][T16998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.743006][T16998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.804057][T17002] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5232'. [ 282.815784][T17004] veth0_macvtap: left promiscuous mode [ 282.824657][T17008] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5236'. [ 282.900317][T15351] batadv0 speed is unknown, defaulting to 1000 [ 282.907785][T15351] infiniband syz1: ib_query_port failed (-19) [ 282.952730][T17014] xt_time: unknown flags 0x4 [ 282.991274][T17016] netlink: 'syz.0.5240': attribute type 4 has an invalid length. [ 283.230951][T17027] netlink: 'syz.2.5246': attribute type 41 has an invalid length. [ 283.366376][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.374099][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.398830][T17027] bond0: left promiscuous mode [ 283.404283][T17027] @: left promiscuous mode [ 283.410547][T17034] netlink: 'syz.0.5250': attribute type 2 has an invalid length. [ 283.415681][T17027] bond_slave_1: left promiscuous mode [ 283.433407][T17027] team0: left promiscuous mode [ 283.441951][T17034] netlink: 'syz.0.5250': attribute type 1 has an invalid length. [ 283.458943][T17027] team_slave_0: left promiscuous mode [ 283.471788][T17027] team_slave_1: left promiscuous mode [ 283.478272][T17027] batadv0: left promiscuous mode [ 283.485680][T17027] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 283.799017][T17027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.814396][T17027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.183977][T17027] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.203658][T17027] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.231591][T17027] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.247650][T17027] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.278119][T17027] ip6gre1: left promiscuous mode [ 284.292741][T17027] gretap1: left promiscuous mode [ 284.322191][T17073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5268'. [ 285.623272][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5305'. [ 285.642066][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'. [ 285.713615][T17147] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5305'. [ 285.899890][T17159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.055081][T17167] netlink: 'syz.2.5314': attribute type 10 has an invalid length. [ 286.389279][T17181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5323'. [ 286.425227][T17181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5323'. [ 286.455054][T17185] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.562055][T17191] openvswitch: netlink: IP tunnel dst address not specified [ 287.346200][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5347'. [ 288.180786][T17221] syz.1.5343: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.201457][T17221] CPU: 1 UID: 0 PID: 17221 Comm: syz.1.5343 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 288.201477][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.201487][T17221] Call Trace: [ 288.201492][T17221] [ 288.201499][T17221] dump_stack_lvl+0x241/0x360 [ 288.201524][T17221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.201541][T17221] ? __pfx__printk+0x10/0x10 [ 288.201559][T17221] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 288.201578][T17221] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 288.201599][T17221] warn_alloc+0x278/0x410 [ 288.201620][T17221] ? __pfx_warn_alloc+0x10/0x10 [ 288.201641][T17221] ? veth_dev_init+0x35f/0x550 [ 288.201656][T17221] ? __get_vm_area_node+0x1c8/0x2d0 [ 288.201678][T17221] ? __get_vm_area_node+0x25c/0x2d0 [ 288.201705][T17221] __vmalloc_node_range_noprof+0x62f/0x1380 [ 288.201719][T17221] ? look_up_lock_class+0x77/0x170 [ 288.201758][T17221] ? rcu_is_watching+0x15/0xb0 [ 288.201774][T17221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.201790][T17221] ? rcu_is_watching+0x15/0xb0 [ 288.201809][T17221] ? trace_kmalloc+0x1f/0xd0 [ 288.201828][T17221] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 288.201860][T17221] ? __kvmalloc_node_noprof+0x72/0x190 [ 288.201889][T17221] __kvmalloc_node_noprof+0x142/0x190 [ 288.201913][T17221] ? veth_dev_init+0x35f/0x550 [ 288.201930][T17221] veth_dev_init+0x35f/0x550 [ 288.201950][T17221] register_netdevice+0x6d7/0x1b70 [ 288.201969][T17221] ? _get_random_bytes+0x25d/0x2c0 [ 288.201994][T17221] ? snprintf+0xda/0x120 [ 288.202019][T17221] ? __pfx_register_netdevice+0x10/0x10 [ 288.202037][T17221] ? __pfx_snprintf+0x10/0x10 [ 288.202060][T17221] ? __asan_memset+0x23/0x50 [ 288.202084][T17221] veth_newlink+0x66a/0xb70 [ 288.202110][T17221] ? __pfx_veth_newlink+0x10/0x10 [ 288.202193][T17221] ? alloc_netdev_mqs+0xe01/0x1210 [ 288.202219][T17221] ? rtnl_create_link+0x95b/0xc90 [ 288.202239][T17221] ? __pfx_veth_newlink+0x10/0x10 [ 288.202263][T17221] rtnl_newlink_create+0x37b/0xbd0 [ 288.202292][T17221] ? __pfx_aa_get_newest_label+0x10/0x10 [ 288.202319][T17221] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 288.202346][T17221] ? __pfx___mutex_lock+0x10/0x10 [ 288.202375][T17221] ? ns_capable+0x8a/0xf0 [ 288.202398][T17221] rtnl_newlink+0x167a/0x1d90 [ 288.202422][T17221] ? is_bpf_text_address+0x285/0x2a0 [ 288.202444][T17221] ? is_bpf_text_address+0x26/0x2a0 [ 288.202481][T17221] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.202502][T17221] ? __pfx_validate_chain+0x10/0x10 [ 288.202600][T17221] ? __pfx_lock_release+0x10/0x10 [ 288.202638][T17221] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.202662][T17221] rtnetlink_rcv_msg+0x791/0xcf0 [ 288.202682][T17221] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 288.202704][T17221] ? __lock_acquire+0x1397/0x2100 [ 288.202727][T17221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.202765][T17221] netlink_rcv_skb+0x206/0x480 [ 288.202788][T17221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.202812][T17221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.202860][T17221] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.202884][T17221] netlink_unicast+0x7f6/0x990 [ 288.202912][T17221] ? __pfx_netlink_unicast+0x10/0x10 [ 288.202929][T17221] ? __virt_addr_valid+0x45f/0x530 [ 288.202946][T17221] ? __phys_addr_symbol+0x2f/0x70 [ 288.202960][T17221] ? __check_object_size+0x47a/0x730 [ 288.202986][T17221] netlink_sendmsg+0x8de/0xcb0 [ 288.203020][T17221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.203045][T17221] ? aa_sock_msg_perm+0x91/0x160 [ 288.203073][T17221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.203093][T17221] __sock_sendmsg+0x221/0x270 [ 288.203117][T17221] ____sys_sendmsg+0x53a/0x860 [ 288.203143][T17221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.203159][T17221] ? __fget_files+0x2a/0x410 [ 288.203183][T17221] ? __fget_files+0x2a/0x410 [ 288.203218][T17221] __sys_sendmsg+0x269/0x350 [ 288.203242][T17221] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.203300][T17221] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.203326][T17221] ? do_syscall_64+0x100/0x230 [ 288.203348][T17221] ? do_syscall_64+0xb6/0x230 [ 288.203370][T17221] do_syscall_64+0xf3/0x230 [ 288.203389][T17221] ? clear_bhb_loop+0x35/0x90 [ 288.203414][T17221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.203433][T17221] RIP: 0033:0x7f164db8d169 [ 288.203449][T17221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.203462][T17221] RSP: 002b:00007f164e992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.203480][T17221] RAX: ffffffffffffffda RBX: 00007f164dda5fa0 RCX: 00007f164db8d169 [ 288.203492][T17221] RDX: 0000000000000800 RSI: 0000400000000280 RDI: 0000000000000003 [ 288.203502][T17221] RBP: 00007f164dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.203512][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.203522][T17221] R13: 0000000000000000 R14: 00007f164dda5fa0 R15: 00007ffd0c705558 [ 288.203547][T17221] [ 288.203555][T17221] Mem-Info: [ 288.689457][T17221] active_anon:4950 inactive_anon:0 isolated_anon:0 [ 288.689457][T17221] active_file:1150 inactive_file:38384 isolated_file:0 [ 288.689457][T17221] unevictable:768 dirty:301 writeback:0 [ 288.689457][T17221] slab_reclaimable:10424 slab_unreclaimable:105323 [ 288.689457][T17221] mapped:28572 shmem:1428 pagetables:886 [ 288.689457][T17221] sec_pagetables:0 bounce:0 [ 288.689457][T17221] kernel_misc_reclaimable:0 [ 288.689457][T17221] free:1324827 free_pcp:333 free_cma:0 [ 288.737227][T17221] Node 0 active_anon:19776kB inactive_anon:0kB active_file:4600kB inactive_file:153460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114288kB dirty:1200kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11156kB pagetables:3604kB sec_pagetables:0kB all_unreclaimable? no [ 288.770020][T17221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 288.800411][T17221] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.827920][T17221] lowmem_reserve[]: 0 2489 2490 0 0 [ 288.833194][T17221] Node 0 DMA32 free:1381492kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19740kB inactive_anon:0kB active_file:4600kB inactive_file:153132kB unevictable:1536kB writepending:1200kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:1588kB local_pcp:992kB free_cma:0kB [ 288.864441][T17221] lowmem_reserve[]: 0 0 0 0 0 [ 288.869359][T17221] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.896942][T17221] lowmem_reserve[]: 0 0 0 0 0 [ 288.901724][T17221] Node 1 Normal free:3902368kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.931440][T17221] lowmem_reserve[]: 0 0 0 0 0 [ 288.936204][T17221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.949670][T17221] Node 0 DMA32: 2*4kB (UM) 5*8kB (E) 1*16kB (U) 4*32kB (ME) 335*64kB (UE) 352*128kB (UME) 141*256kB (UM) 40*512kB (UM) 38*1024kB (UME) 7*2048kB (UME) 294*4096kB (UM) = 1380736kB [ 288.967614][T17221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 288.979572][T17221] Node 1 Normal: 206*4kB (UE) 59*8kB (UME) 51*16kB (UME) 229*32kB (UME) 97*64kB (UME) 31*128kB (UME) 19*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 944*4096kB (UM) = 3902368kB [ 288.998372][T17221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.008423][T17221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.017907][T17221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.027514][T17221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.037131][T17221] 40962 total pagecache pages [ 289.042440][T17221] 0 pages in swap cache [ 289.046661][T17221] Free swap = 124996kB [ 289.050816][T17221] Total swap = 124996kB [ 289.054958][T17221] 2097051 pages RAM [ 289.058947][T17221] 0 pages HighMem/MovableOnly [ 289.063628][T17221] 427897 pages reserved [ 289.067847][T17221] 0 pages cma reserved [ 289.835369][T17260] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 289.863224][T17260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 290.090803][T17272] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 290.162526][T17276] netlink: 'syz.1.5368': attribute type 21 has an invalid length. [ 290.194447][T17276] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5368'. [ 290.218936][T17276] netlink: 'syz.1.5368': attribute type 5 has an invalid length. [ 290.233811][T17276] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5368'. [ 290.280896][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5372'. [ 290.438185][T17290] netlink: 'syz.1.5376': attribute type 34 has an invalid length. [ 290.965462][T17323] netlink: 'syz.4.5391': attribute type 13 has an invalid length. [ 290.983589][T17323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5391'. [ 291.177278][T17333] netlink: 'syz.4.5397': attribute type 13 has an invalid length. [ 291.202879][T17333] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5397'. [ 291.253088][T17333] syz_tun: refused to change device tx_queue_len [ 291.262624][T17333] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 291.613546][T17356] netlink: 'syz.3.5408': attribute type 1 has an invalid length. [ 291.623793][T17356] netlink: 'syz.3.5408': attribute type 1 has an invalid length. [ 291.881612][T17371] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 291.918430][T17371] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 292.662120][T17400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5430'. [ 293.070098][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5436'. [ 293.099939][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5436'. [ 294.237792][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5469'. [ 294.271746][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5469'. [ 294.660046][T17504] netlink: 'syz.3.5479': attribute type 1 has an invalid length. [ 295.015037][T17523] xt_hashlimit: overflow, try lower: 0/0 [ 295.105163][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5492'. [ 295.357033][T17542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5497'. [ 295.454582][T17547] netlink: 'syz.3.5500': attribute type 9 has an invalid length. [ 295.533593][T17551] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 295.539450][T17553] netlink: 'syz.1.5503': attribute type 1 has an invalid length. [ 295.591888][T17553] netlink: 'syz.1.5503': attribute type 2 has an invalid length. [ 296.149893][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5518'. [ 296.553501][T17603] netlink: 'syz.0.5526': attribute type 1 has an invalid length. [ 296.563731][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5528'. [ 296.584374][T17603] netlink: 'syz.0.5526': attribute type 3 has an invalid length. [ 296.604002][T17603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5526'. [ 297.486802][T17651] No such timeout policy "syz1" [ 297.686639][T17664] sctp: [Deprecated]: syz.1.5556 (pid 17664) Use of int in maxseg socket option. [ 297.686639][T17664] Use struct sctp_assoc_value instead [ 298.361599][T17702] netlink: 'syz.3.5575': attribute type 25 has an invalid length. [ 298.398702][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5575'. [ 298.954795][T17725] netlink: 'syz.1.5586': attribute type 1 has an invalid length. [ 298.996103][T17725] netlink: 'syz.1.5586': attribute type 2 has an invalid length. [ 299.414704][T17752] xt_hashlimit: max too large, truncated to 1048576 [ 300.225320][T17801] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 300.653979][T17822] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 300.683547][T17824] netlink: 'syz.1.5634': attribute type 12 has an invalid length. [ 300.718198][T17827] openvswitch: netlink: Flow actions attr not present in new flow. [ 300.738593][T17828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.872179][T17832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5638'. [ 300.919459][T17832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5638'. [ 301.046814][T17843] netlink: 'syz.3.5643': attribute type 10 has an invalid length. [ 301.091442][T17843] team0: Device veth1_vlan failed to register rx_handler [ 301.207923][T17851] netlink: 'syz.4.5646': attribute type 32 has an invalid length. [ 301.240202][T17852] netlink: 'syz.1.5648': attribute type 11 has an invalid length. [ 301.377187][T17858] openvswitch: netlink: Actions may not be safe on all matching packets [ 301.439118][T17864] netlink: 'syz.2.5654': attribute type 1 has an invalid length. [ 301.450453][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5653'. [ 301.469780][T17864] netlink: 784 bytes leftover after parsing attributes in process `syz.2.5654'. [ 301.479109][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5653'. [ 301.506802][T17863] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5653'. [ 301.604626][T17868] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 301.856793][T17881] netlink: 'syz.3.5663': attribute type 1 has an invalid length. [ 302.559140][T17922] netlink: 'syz.2.5681': attribute type 21 has an invalid length. [ 302.606732][T17922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5681'. [ 303.096220][T17949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5696'. [ 303.108405][T17950] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5697'. [ 303.462838][T17971] __nla_validate_parse: 3 callbacks suppressed [ 303.462856][T17971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5707'. [ 303.496609][T17971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5707'. [ 304.079635][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5725'. [ 304.642970][T18043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5741'. [ 305.535197][T18081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5761'. [ 305.576281][T18081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5761'. [ 305.800437][T18092] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 305.990393][T18102] netdevsim netdevsim4 : renamed from netdevsim0 [ 306.058347][T18108] xt_TCPMSS: Only works on TCP SYN packets [ 306.339295][T18124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5782'. [ 306.825186][T18154] netlink: 'syz.0.5797': attribute type 41 has an invalid length. [ 306.847149][T18155] IPv6: Can't replace route, no match found [ 306.875846][T18154] ip_vti0: left promiscuous mode [ 306.897700][T18154] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 306.931286][T18154] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.967884][T18162] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5801'. [ 306.977170][T18154] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 306.994080][T18154] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.028596][T18154] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.072844][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5803'. [ 307.185068][T18174] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 307.245452][T18177] netlink: 'syz.0.5808': attribute type 13 has an invalid length. [ 307.557657][T18193] veth1_vlan: left allmulticast mode [ 307.640993][T18200] netlink: 'syz.1.5819': attribute type 41 has an invalid length. [ 307.676599][T18200] macvtap0: left promiscuous mode [ 307.695694][T18200] bond2: left promiscuous mode [ 307.717159][T18204] netlink: 'syz.4.5821': attribute type 16 has an invalid length. [ 307.725171][T18200] bond2: left allmulticast mode [ 307.735031][T18204] netlink: 'syz.4.5821': attribute type 17 has an invalid length. [ 307.909585][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.917098][T18204] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.213019][T18204] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.222073][T18204] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.231412][T18204] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.240727][T18204] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.362921][T18224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5832'. [ 308.615466][T18239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.293388][T18280] netlink: 'syz.1.5858': attribute type 3 has an invalid length. [ 309.791319][T18307] xt_hashlimit: max too large, truncated to 1048576 [ 309.929729][T18316] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5875'. [ 309.954110][T18317] netlink: 'syz.4.5876': attribute type 1 has an invalid length. [ 309.986490][T18317] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5876'. [ 310.265002][T18335] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 310.463537][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5890'. [ 310.665280][T18359] 8021q: VLANs not supported on lo [ 311.170089][T18389] netlink: 'syz.1.5912': attribute type 2 has an invalid length. [ 311.410315][T18402] ip6erspan0: entered promiscuous mode [ 311.646818][T18412] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 311.781141][T18422] tc_dump_action: action bad kind [ 311.816606][ T25] IPVS: starting estimator thread 0... [ 311.826543][T18423] netlink: 'syz.4.5929': attribute type 4 has an invalid length. [ 311.916577][T18426] IPVS: using max 33 ests per chain, 79200 per kthread [ 312.115857][T18441] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 312.123550][T18443] netlink: 'syz.3.5939': attribute type 8 has an invalid length. [ 312.166388][T18449] netlink: 'syz.1.5940': attribute type 3 has an invalid length. [ 312.300262][T18454] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 312.436779][T18461] Unknown options in mask 1f4 [ 312.504240][T18465] ip6tnl2: entered promiscuous mode [ 312.536191][T18465] ip6tnl2: entered allmulticast mode [ 312.627768][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5950'. [ 312.787707][T18482] openvswitch: netlink: Missing valid actions attribute. [ 312.794821][T18482] openvswitch: netlink: Actions may not be safe on all matching packets [ 312.948032][T18493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5962'. [ 313.524233][T18523] netlink: 'syz.0.5979': attribute type 5 has an invalid length. [ 313.623760][T18529] xt_CT: No such helper "pptp" [ 314.319251][T18573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6001'. [ 314.373904][T18579] netlink: 'syz.1.6002': attribute type 1 has an invalid length. [ 314.416623][T18579] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6002'. [ 315.106507][T18621] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 315.165917][T18629] xt_TCPMSS: Only works on TCP SYN packets [ 315.323700][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 315.825803][T18667] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 316.839811][T18726] netlink: 'syz.3.6076': attribute type 1 has an invalid length. [ 316.870159][T18726] netlink: 'syz.3.6076': attribute type 1 has an invalid length. [ 317.151396][T18745] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 317.297002][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6091'. [ 317.429642][T18764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6096'. [ 317.492544][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.543937][T18768] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 318.213576][T18811] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 318.765593][T18846] netlink: 'syz.1.6133': attribute type 21 has an invalid length. [ 318.965453][T18858] netlink: 'syz.0.6136': attribute type 7 has an invalid length. [ 319.366503][T18885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6147'. [ 319.375509][T18885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6147'. [ 319.510745][T18896] SET target dimension over the limit! [ 319.815653][T18912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6157'. [ 319.894481][T18912] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6157'. [ 319.950885][T18912] netlink: 'syz.0.6157': attribute type 6 has an invalid length. [ 319.981922][T18912] netlink: 'syz.0.6157': attribute type 5 has an invalid length. [ 320.008453][T18912] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6157'. [ 320.628607][T18967] xt_socket: unknown flags 0x8 [ 320.634711][T18962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6176'. [ 320.785110][T18971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6180'. [ 320.881977][T18979] xt_l2tp: wrong L2TP version: 0 [ 321.705279][T19025] sock: sock_timestamping_bind_phc: sock not bind to device [ 321.933584][T19038] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6214'. [ 322.355736][T19063] SET target dimension over the limit! [ 322.446610][T19069] netlink: 'syz.0.6228': attribute type 3 has an invalid length. [ 322.523984][T19072] siw: device registration error -23 [ 322.831716][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6238'. [ 322.906591][T19094] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 322.965597][T19096] netlink: 'syz.4.6242': attribute type 10 has an invalid length. [ 323.028137][T19096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 323.255009][T19109] ieee802154 phy1 wpan1: encryption failed: -90 [ 323.258606][T19110] netlink: 'syz.0.6249': attribute type 1 has an invalid length. [ 323.318756][T19114] netlink: 'syz.3.6251': attribute type 11 has an invalid length. [ 323.673268][T19129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6258'. [ 324.665390][T19186] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 325.587111][T19240] veth4: entered allmulticast mode [ 325.600557][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6310'. [ 325.667792][T19247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6313'. [ 326.129871][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6326'. [ 326.159468][T19276] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 326.284584][T19278] netlink: 'syz.0.6328': attribute type 1 has an invalid length. [ 326.308291][T19283] openvswitch: netlink: IPv6 tunnel dst address is zero [ 326.333214][T19278] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6328'. [ 326.816895][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6345'. [ 327.533262][T19353] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 327.743439][T19368] xt_CONNSECMARK: invalid mode: 0 [ 328.262345][T19400] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 328.389468][T19405] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6391'. [ 328.426616][T19405] unsupported nlmsg_type 40 [ 328.546578][T19413] netlink: 'syz.2.6394': attribute type 10 has an invalid length. [ 328.586619][T19413] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 328.623015][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6396'. [ 329.330939][T19439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6408'. [ 329.376639][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6409'. [ 329.521792][T19451] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6413'. [ 329.546644][T19451] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6413'. [ 329.555871][T19451] 8021q: VLANs not supported on gre0 [ 330.164353][T19491] netlink: 'syz.1.6432': attribute type 75 has an invalid length. [ 330.848241][T19529] __nla_validate_parse: 5 callbacks suppressed [ 330.848261][T19529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6451'. [ 330.891009][T19533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6452'. [ 331.103814][T19543] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 331.145785][T19547] netlink: 'syz.2.6459': attribute type 1 has an invalid length. [ 331.165218][T19547] netlink: 'syz.2.6459': attribute type 2 has an invalid length. [ 331.187117][T19551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6462'. [ 331.215879][T19550] netlink: 'syz.0.6461': attribute type 1 has an invalid length. [ 331.360348][T19554] bond3: entered promiscuous mode [ 331.376547][T19554] bond3: entered allmulticast mode [ 331.389607][T19554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 331.587016][T19569] delete_channel: no stack [ 331.781283][T19583] netlink: 'syz.1.6477': attribute type 3 has an invalid length. [ 331.814524][T19583] netlink: 'syz.1.6477': attribute type 3 has an invalid length. [ 331.849663][T19583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6477'. [ 332.001699][T19593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6481'. [ 332.005614][T19594] No such timeout policy "syz0" [ 332.237076][T19609] xt_NFQUEUE: number of total queues is 0 [ 332.942973][T19650] netlink: 'syz.1.6509': attribute type 6 has an invalid length. [ 332.953098][T19649] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6510'. [ 332.994652][T19650] netlink: 'syz.1.6509': attribute type 7 has an invalid length. [ 333.006912][T19650] netlink: 'syz.1.6509': attribute type 8 has an invalid length. [ 333.016240][T19649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.405983][T19675] xt_nfacct: accounting object `syz1' does not exists [ 333.767317][T19697] netlink: 'syz.2.6534': attribute type 3 has an invalid length. [ 333.784783][T19697] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6534'. [ 333.978382][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6541'. [ 334.029419][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6541'. [ 334.433083][T19737] netlink: 'syz.1.6552': attribute type 9 has an invalid length. [ 334.466682][T19737] netlink: 'syz.1.6552': attribute type 7 has an invalid length. [ 334.499909][T19737] netlink: 'syz.1.6552': attribute type 8 has an invalid length. [ 334.508387][T19742] netlink: 'syz.2.6555': attribute type 1 has an invalid length. [ 334.540925][T19742] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6555'. [ 334.931358][T19763] team0: Device veth0_vlan failed to register rx_handler [ 335.304807][T19784] Tq: entered promiscuous mode [ 335.875390][T19824] x_tables: unsorted entry at hook 2 [ 335.879004][T19821] openvswitch: netlink: IP tunnel dst address not specified [ 336.107742][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6603'. [ 336.210826][T19841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6605'. [ 336.246502][T19846] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6607'. [ 336.456063][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6612'. [ 336.722835][T19874] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6621'. [ 336.819655][T19880] netlink: 596 bytes leftover after parsing attributes in process `syz.2.6624'. [ 336.936746][T19884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.969625][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6626'. [ 337.148425][T19898] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6631'. [ 337.163256][T19897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6634'. [ 337.173830][T19898] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6631'. [ 337.185409][T19903] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 337.419624][T19915] xt_cluster: node mask cannot exceed total number of nodes [ 337.526144][T19917] validate_nla: 5 callbacks suppressed [ 337.526163][T19917] netlink: 'syz.0.6642': attribute type 10 has an invalid length. [ 337.575225][T19917] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 337.591690][T19917] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 337.606238][T19917] team0: Port device netdevsim0 added [ 337.736753][T19929] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 337.776370][T19929] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 337.883585][T19939] wg2: entered promiscuous mode [ 337.903327][T19941] netlink: 'syz.0.6653': attribute type 1 has an invalid length. [ 337.916439][T19939] wg2: entered allmulticast mode [ 338.692758][T19986] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 338.739510][T19991] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 339.307061][T20025] openvswitch: netlink: Actions may not be safe on all matching packets [ 339.899868][T20053] netlink: 'syz.3.6709': attribute type 1 has an invalid length. [ 339.937422][T20056] netlink: 'syz.0.6711': attribute type 1 has an invalid length. [ 340.808658][T20111] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61695) [ 340.845034][T20111] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 341.397081][T20143] netlink: 'syz.4.6752': attribute type 21 has an invalid length. [ 341.417971][T20143] netlink: 'syz.4.6752': attribute type 1 has an invalid length. [ 341.866455][T20171] __nla_validate_parse: 10 callbacks suppressed [ 341.866476][T20171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6765'. [ 341.946957][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6767'. [ 342.230779][T20191] net veth1_virt_wifi : renamed from virt_wifi0 [ 342.705803][T20217] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6788'. [ 342.743570][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6788'. [ 343.230838][T20254] ipt_rpfilter: unknown options [ 343.498755][T20267] delete_channel: no stack [ 343.838406][T20290] netlink: 'syz.4.6824': attribute type 3 has an invalid length. [ 343.858694][T20290] netlink: 'syz.4.6824': attribute type 1 has an invalid length. [ 344.028129][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6831'. [ 344.156934][T20309] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6834'. [ 344.426889][T20328] bridge5: entered promiscuous mode [ 344.439165][T20328] bridge5: entered allmulticast mode [ 344.548195][T20335] sctp: [Deprecated]: syz.3.6848 (pid 20335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.548195][T20335] Use struct sctp_sack_info instead [ 344.767208][T20352] netlink: 'syz.2.6854': attribute type 7 has an invalid length. [ 344.777266][T20351] netlink: 'syz.4.6856': attribute type 21 has an invalid length. [ 344.796154][T20351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6856'. [ 345.174612][T20375] netlink: 'syz.1.6868': attribute type 10 has an invalid length. [ 345.216719][T20375] wlan1: mtu less than device minimum [ 345.507631][T20395] netlink: 'syz.4.6876': attribute type 16 has an invalid length. [ 345.515503][T20395] netlink: 'syz.4.6876': attribute type 3 has an invalid length. [ 345.576224][T20395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6876'. [ 345.764689][T20413] delete_channel: no stack [ 345.892406][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6889'. [ 346.077421][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6896'. [ 346.373447][T20451] pimreg: entered allmulticast mode [ 346.569155][T20461] netlink: 'syz.0.6910': attribute type 4 has an invalid length. [ 347.067645][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'. [ 347.089751][T20498] netlink: 34 bytes leftover after parsing attributes in process `syz.3.6928'. [ 347.626685][T20534] SET target dimension over the limit! [ 347.959356][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6956'. [ 348.271501][T20573] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 349.008881][T20621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6989'. [ 349.031042][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6989'. [ 349.283720][T20638] geneve3: entered promiscuous mode [ 349.313959][T20638] geneve3: entered allmulticast mode [ 349.964032][T20675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7015'. [ 349.990797][T20676] netlink: 'syz.4.7016': attribute type 2 has an invalid length. [ 349.996208][T20675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7015'. [ 350.229829][T20691] netlink: 'syz.4.7021': attribute type 2 has an invalid length. [ 350.244070][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7021'. [ 350.307407][T20696] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 350.785487][T20712] netlink: 'syz.4.7034': attribute type 5 has an invalid length. [ 351.125278][T20695] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 351.132157][T20730] netlink: 'syz.0.7043': attribute type 1 has an invalid length. [ 351.166500][T20730] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7043'. [ 351.919000][T20768] netlink: 'syz.4.7060': attribute type 1 has an invalid length. [ 351.984412][T20772] xt_ecn: cannot match TCP bits for non-tcp packets [ 352.046590][T20776] netlink: 'syz.2.7064': attribute type 2 has an invalid length. [ 352.071254][T20776] f: entered promiscuous mode [ 352.096586][T20778] openvswitch: netlink: IPv4 tunnel dst address is zero [ 352.154524][T20780] netlink: 'syz.1.7065': attribute type 2 has an invalid length. [ 352.257063][T20788] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 352.331525][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7072'. [ 352.367868][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 352.472726][T20802] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.709837][T20816] ipt_REJECT: ECHOREPLY no longer supported. [ 352.719121][T20818] netlink: 'syz.3.7085': attribute type 1 has an invalid length. [ 352.746744][T20818] netlink: 'syz.3.7085': attribute type 3 has an invalid length. [ 352.754527][T20818] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7085'. [ 352.852456][T20823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7087'. [ 352.880769][T20826] netlink: 'syz.3.7089': attribute type 8 has an invalid length. [ 353.122402][T20839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.628418][T20868] SET target dimension over the limit! [ 353.688213][T20874] netlink: del zone limit has 4 unknown bytes [ 354.300342][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7131'. [ 354.346814][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7131'. [ 354.382363][T20910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7131'. [ 354.684884][T20938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7143'. [ 354.802043][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7145'. [ 355.036963][T20960] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7154'. [ 355.143103][T20964] validate_nla: 1 callbacks suppressed [ 355.143124][T20964] netlink: 'syz.4.7156': attribute type 5 has an invalid length. [ 355.185769][T20967] netlink: 'syz.3.7158': attribute type 49 has an invalid length. [ 355.372786][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7164'. [ 355.561018][T20987] ipvlan1: entered promiscuous mode [ 355.961113][T21013] openvswitch: netlink: EtherType 0 is less than min 600 [ 356.502652][T21048] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 356.840134][T21070] netlink: 'syz.4.7206': attribute type 6 has an invalid length. [ 356.896539][T21070] netlink: 'syz.4.7206': attribute type 7 has an invalid length. [ 356.904322][T21070] netlink: 'syz.4.7206': attribute type 8 has an invalid length. [ 357.464212][T21094] netlink: 'syz.4.7218': attribute type 5 has an invalid length. [ 357.511082][T21094] : entered promiscuous mode [ 357.565574][T21097] __nla_validate_parse: 15 callbacks suppressed [ 357.565620][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 357.611785][T21097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7219'. [ 357.818073][T21106] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7222'. [ 358.282016][T21134] netlink: 'syz.4.7237': attribute type 1 has an invalid length. [ 358.298675][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 358.924228][T21176] netlink: 'syz.2.7256': attribute type 8 has an invalid length. [ 359.176596][T21188] xt_cgroup: xt_cgroup: no path or classid specified [ 359.358898][T21203] netlink: 'syz.2.7269': attribute type 3 has an invalid length. [ 359.385546][T21203] netlink: 'syz.2.7269': attribute type 3 has an invalid length. [ 359.407046][T21203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7269'. [ 360.363428][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7301'. [ 360.432535][T21266] pimreg: left allmulticast mode [ 360.524632][T21268] Bluetooth: MGMT ver 1.23 [ 360.706875][T21278] netlink: 'syz.2.7308': attribute type 29 has an invalid length. [ 360.750298][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7310'. [ 361.308957][T21314] netlink: 'syz.3.7326': attribute type 4 has an invalid length. [ 361.330037][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7326'. [ 361.718010][T21340] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 361.745209][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 361.786629][T21339] Zero length message leads to an empty skb [ 361.900753][T21348] tipc: Started in network mode [ 361.905842][T21348] tipc: Node identity 1, cluster identity 8 [ 361.934413][T21348] tipc: Node number set to 1 [ 362.242931][T21371] tipc: Enabling of bearer rejected, failed to enable media [ 362.777652][T21401] netlink: 'syz.3.7369': attribute type 1 has an invalid length. [ 362.785806][T21401] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7369'. [ 362.801809][T21401] netlink: 'syz.3.7369': attribute type 1 has an invalid length. [ 363.116742][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7376'. [ 363.122369][T21419] netlink: 'syz.2.7377': attribute type 1 has an invalid length. [ 363.143889][T21419] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7377'. [ 363.153353][T21419] NCSI netlink: No device for ifindex 813332851 [ 363.259391][T21425] netlink: 'syz.3.7381': attribute type 10 has an invalid length. [ 363.285908][T21425] team0: Device veth1_macvtap failed to register rx_handler [ 364.327198][T21485] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7411'. [ 364.420024][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7412'. [ 364.491693][T21495] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7415'. [ 364.664180][ T29] audit: type=1800 audit(1741409771.037:2): pid=21504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7419" name="memory.events" dev="tmpfs" ino=7420 res=0 errno=0 [ 364.745845][ T29] audit: type=1800 audit(1741409771.077:3): pid=21504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7419" name="memory.events" dev="tmpfs" ino=7420 res=0 errno=0 [ 365.271450][T21543] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7436'. [ 365.311273][T21543] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 365.638543][T21560] netlink: 'syz.0.7446': attribute type 1 has an invalid length. [ 366.066804][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7458'. [ 366.385972][T21598] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7464'. [ 366.399239][T21600] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 366.424386][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7468'. [ 366.438964][T21603] nbd: socks must be embedded in a SOCK_ITEM attr [ 366.523578][T21606] smc: net device bond0 applied user defined pnetid S [ 366.956535][T21632] netlink: 'syz.1.7482': attribute type 1 has an invalid length. [ 368.177167][ T5910] IPVS: starting estimator thread 0... [ 368.286727][T21704] IPVS: using max 27 ests per chain, 64800 per kthread [ 368.354139][T21712] __nla_validate_parse: 2 callbacks suppressed [ 368.354159][T21712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7521'. [ 368.392954][T21712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7521'. [ 368.892662][T21742] netlink: 'syz.3.7536': attribute type 9 has an invalid length. [ 368.911146][T21742] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.7536'. [ 368.957644][T21744] ip6tnl3: entered promiscuous mode [ 368.980861][T21744] ip6tnl3: entered allmulticast mode [ 368.987726][T21744] team0: Device ip6tnl3 is of different type [ 369.245091][T15351] IPVS: starting estimator thread 0... [ 369.346454][T21754] IPVS: using max 19 ests per chain, 45600 per kthread [ 369.876190][T21777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 370.368143][T21808] Bluetooth: MGMT ver 1.23 [ 370.372916][T21810] openvswitch: netlink: Duplicate or invalid key (type 1). [ 370.396528][T21810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.445145][T21811] xt_CT: No such helper "pptp" [ 371.879645][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7598'. [ 372.686537][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 372.849931][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7615'. [ 373.280853][T21953] macsec0: entered promiscuous mode [ 373.307507][T21953] macsec0: left promiscuous mode [ 373.362966][T21959] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.111865][T22003] netlink: 120 bytes leftover after parsing attributes in process `syz.4.7652'. [ 374.132926][T22003] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 374.156654][T22003] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7652'. [ 374.455611][T22022] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7661'. [ 374.809302][T22042] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7670'. [ 375.204668][T22058] netlink: 216 bytes leftover after parsing attributes in process `syz.4.7678'. [ 375.266132][T22062] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7679'. [ 375.587719][T22080] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.7689'. [ 375.906983][T22096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7697'. [ 376.250550][T22119] netlink: 211456 bytes leftover after parsing attributes in process `syz.3.7708'. [ 376.274766][T22119] netlink: zone id is out of range [ 376.300099][T22119] netlink: get zone limit has 8 unknown bytes [ 376.631305][T22135] netlink: 'syz.1.7714': attribute type 11 has an invalid length. [ 376.696644][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 377.307333][T22175] bond0: option arp_all_targets: invalid value (254) [ 377.338789][T22171] tipc: Enabling of bearer <|i:> rejected, media not registered [ 377.937982][T22214] netlink: 'syz.4.7754': attribute type 30 has an invalid length. [ 378.060345][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.081973][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.114594][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7758'. [ 378.115481][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.142203][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.146726][T22225] netlink: 'syz.4.7758': attribute type 20 has an invalid length. [ 378.152310][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.176661][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.184795][T22219] netlink: 'syz.0.7756': attribute type 29 has an invalid length. [ 378.938100][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.226492][T22267] __nla_validate_parse: 3 callbacks suppressed [ 379.226512][T22267] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7778'. [ 379.603774][T22288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7790'. [ 379.636909][T22291] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 379.652259][T22290] vlan1: entered promiscuous mode [ 379.684348][T22290] gretap0: entered promiscuous mode [ 379.716617][T22290] vlan1: entered allmulticast mode [ 379.726736][T22290] gretap0: entered allmulticast mode [ 380.371807][T22330] openvswitch: netlink: Message has 1247 unknown bytes. [ 380.397689][T22330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.418313][T22332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7809'. [ 380.578666][T22338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 380.825025][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7818'. [ 380.854889][T22350] nbd: illegal input index -381222912 [ 381.082225][T22362] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 381.186809][T22366] IPVS: ip_vs_add_dest(): server weight less than zero [ 381.258694][T22370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7827'. [ 381.296352][T22370] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 381.532559][T22385] sctp: [Deprecated]: syz.0.7835 (pid 22385) Use of int in max_burst socket option deprecated. [ 381.532559][T22385] Use struct sctp_assoc_value instead [ 381.546975][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7833'. [ 381.748230][T22398] tipc: Enabling of bearer rejected, failed to enable media [ 381.850267][T22402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7845'. [ 381.898509][T22405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7844'. [ 381.919658][T22405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7844'. [ 382.601269][T22444] validate_nla: 27 callbacks suppressed [ 382.601289][T22444] netlink: 'syz.3.7864': attribute type 4 has an invalid length. [ 383.705444][T22511] netlink: 'syz.1.7897': attribute type 10 has an invalid length. [ 383.742173][T22511] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 383.764827][T22511] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 383.774843][T22511] team0: Port device netdevsim0 added [ 383.788726][T22515] netlink: 'syz.1.7897': attribute type 10 has an invalid length. [ 383.804229][T22515] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 383.834622][T22515] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 383.905314][T22515] team0: Port device netdevsim0 removed [ 384.333412][T22540] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 384.650435][T22554] __nla_validate_parse: 6 callbacks suppressed [ 384.650455][T22554] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.7916'. [ 384.676821][T22554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.498242][ T5910] IPVS: starting estimator thread 0... [ 385.504126][T22593] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 385.606498][T22594] IPVS: using max 25 ests per chain, 60000 per kthread [ 385.662428][T22603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7939'. [ 385.692476][T22603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.699838][T22603] IPv6: NLM_F_CREATE should be set when creating new route [ 385.707188][T22603] IPv6: NLM_F_CREATE should be set when creating new route [ 385.725321][T22606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7941'. [ 385.882437][T22616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7946'. [ 385.981846][T22620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.132311][T22630] netlink: 'syz.2.7953': attribute type 10 has an invalid length. [ 386.384547][T22639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7958'. [ 386.447484][T22639] netlink: 'syz.2.7958': attribute type 9 has an invalid length. [ 386.455285][T22639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7958'. [ 386.496503][T22639] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7958'. [ 387.237302][T22691] IPVS: Unknown mcast interface: pimreg [ 387.712598][T22722] ax25_connect(): syz.1.7997 uses autobind, please contact jreuter@yaina.de [ 387.733090][T22726] openvswitch: netlink: nsh attr 2 has unexpected len 0 expected 16 [ 387.743960][T22726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.881847][T22734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8002'. [ 388.029251][T22739] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8006'. [ 388.132520][T22745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8008'. [ 388.182218][T22745] gretap0: entered promiscuous mode [ 388.203453][T22745] gretap0: left promiscuous mode [ 388.926402][T22788] netlink: 'syz.4.8028': attribute type 10 has an invalid length. [ 389.166858][T22801] netlink: 'syz.1.8034': attribute type 4 has an invalid length. [ 390.077811][T22844] tipc: Enabling of bearer rejected, failed to enable media [ 390.386570][T22863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8061'. [ 390.418570][T22862] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8060'. [ 390.435794][T22862] netlink: 'syz.0.8060': attribute type 9 has an invalid length. [ 390.570972][T22874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8067'. [ 390.718527][T22883] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.101798][T22902] netlink: 'syz.0.8081': attribute type 15 has an invalid length. [ 391.458983][T22916] openvswitch: netlink: Actions may not be safe on all matching packets [ 391.691412][T22924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8090'. [ 391.703267][T22929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.797531][T22933] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8096'. [ 392.133789][T22951] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8105'. [ 392.271076][T22959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8108'. [ 392.280573][T22963] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 392.292421][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8108'. [ 392.316445][T22959] netlink: 'syz.2.8108': attribute type 5 has an invalid length. [ 392.358380][T22966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8112'. [ 392.405347][T22966] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8112'. [ 392.431993][T22966] tipc: Invalid UDP bearer configuration [ 392.432039][T22966] tipc: Enabling of bearer rejected, failed to enable media [ 395.154208][T23130] netlink: 'syz.1.8190': attribute type 3 has an invalid length. [ 395.393265][T23144] dvmrp1: entered allmulticast mode [ 395.428265][T23144] pimreg: entered allmulticast mode [ 395.996196][T23177] pim6reg: entered allmulticast mode [ 396.015151][T23177] pim6reg: left allmulticast mode [ 396.628745][T23212] netlink: 'syz.2.8230': attribute type 5 has an invalid length. [ 396.989485][T23232] __nla_validate_parse: 3 callbacks suppressed [ 396.989504][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8240'. [ 397.256266][T23250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8248'. [ 397.272384][T23250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8248'. [ 397.407265][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8252'. [ 397.418268][T23258] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 397.667959][T23272] netlink: 'syz.0.8259': attribute type 4 has an invalid length. [ 397.726657][T23272] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8259'. [ 397.999609][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8267'. [ 398.604259][T23324] tipc: Started in network mode [ 398.625180][T23324] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 398.643254][T23324] tipc: Enabled bearer , priority 10 [ 398.789214][T23337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8288'. [ 398.818135][T23338] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8289'. [ 398.861196][T23338] netlink: 'syz.0.8289': attribute type 3 has an invalid length. [ 399.235611][T23364] dummy0: entered promiscuous mode [ 399.246950][T23363] dummy0: left promiscuous mode [ 399.756703][T23397] netlink: 'syz.0.8318': attribute type 1 has an invalid length. [ 399.767572][ T5910] tipc: Node number set to 43690 [ 399.772267][T23397] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8318'. [ 399.989331][T23408] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 400.029676][T23408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.378474][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8335'. [ 401.648530][T23504] tipc: Started in network mode [ 401.659360][T23504] tipc: Node identity ac14140f, cluster identity 4711 [ 401.681601][T23504] tipc: Enabled bearer , priority 1 [ 402.503097][T23556] Bluetooth: MGMT ver 1.23 [ 402.559225][T23558] __nla_validate_parse: 4 callbacks suppressed [ 402.559246][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8397'. [ 402.612192][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8397'. [ 402.634434][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8400'. [ 402.692664][T23562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8400'. [ 402.750485][T23570] tipc: Enabled bearer , priority 10 [ 402.796472][ T5910] tipc: Node number set to 2886997007 [ 402.848254][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8405'. [ 403.325723][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8414'. [ 403.334812][T23597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8416'. [ 403.334843][T23597] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8416'. [ 403.334860][T23597] netlink: 'syz.4.8416': attribute type 5 has an invalid length. [ 403.334891][T23597] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8416'. [ 403.387694][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8414'. [ 403.716766][T23620] netlink: 'syz.3.8427': attribute type 5 has an invalid length. [ 404.101014][T23644] openvswitch: netlink: Flow key attribute not present in set flow. [ 404.529624][T23667] netlink: 'syz.1.8453': attribute type 8 has an invalid length. [ 405.628810][T23722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.724805][T23727] netlink: 'syz.0.8481': attribute type 2 has an invalid length. [ 406.785151][T23787] tipc: Started in network mode [ 406.796497][T23787] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 406.816729][T23787] tipc: Enabling of bearer rejected, failed to enable media [ 407.535611][T23822] netlink: 'syz.3.8526': attribute type 1 has an invalid length. [ 407.834025][T23838] atomic_op ffff888024c0a998 conn xmit_atomic 0000000000000000 [ 407.888312][T23843] __nla_validate_parse: 4 callbacks suppressed [ 407.888332][T23843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8537'. [ 407.997017][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8539'. [ 408.060788][T23849] gretap2: entered promiscuous mode [ 408.066053][T23849] gretap2: entered allmulticast mode [ 408.655812][T23892] netlink: 'syz.0.8557': attribute type 7 has an invalid length. [ 409.000356][T23909] netlink: 'syz.3.8565': attribute type 3 has an invalid length. [ 409.133414][T23918] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8568'. [ 409.286115][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8572'. [ 409.918825][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8589'. [ 410.144259][T23972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8595'. [ 410.154997][T23972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8595'. [ 410.345907][T23981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8599'. [ 410.709603][T23995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8606'. [ 411.289131][T24032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8625'. [ 411.440995][T24041] netlink: 'syz.4.8629': attribute type 46 has an invalid length. [ 411.697224][T24054] Bluetooth: MGMT ver 1.23 [ 412.993299][T24133] bridge0: port 3(hsr0) entered blocking state [ 413.021391][T24133] bridge0: port 3(hsr0) entered disabled state [ 413.042689][T24133] hsr0: entered allmulticast mode [ 413.055467][T24133] hsr_slave_0: entered allmulticast mode [ 413.073795][T24133] hsr_slave_1: entered allmulticast mode [ 413.091801][T24133] hsr0: entered promiscuous mode [ 413.192815][T24145] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 413.338185][T24151] __nla_validate_parse: 1 callbacks suppressed [ 413.338204][T24151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8683'. [ 413.399657][T24151] netlink: 'syz.1.8683': attribute type 1 has an invalid length. [ 413.426842][T24151] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8683'. [ 414.344119][T24206] netlink: 'syz.3.8709': attribute type 4 has an invalid length. [ 414.382483][T24206] netlink: 'syz.3.8709': attribute type 2 has an invalid length. [ 414.626565][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8718'. [ 414.635566][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8718'. [ 414.727207][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8721'. [ 414.770964][T24229] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8721'. [ 414.951654][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8725'. [ 415.136115][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8729'. [ 415.550135][T24272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8740'. [ 415.831952][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8746'. [ 415.873988][T24283] netlink: 'syz.1.8746': attribute type 20 has an invalid length. [ 416.763667][T24339] nbd: must specify a device to reconfigure [ 417.041841][T24353] vlan0: entered promiscuous mode [ 417.363379][T24365] netlink: 'syz.0.8787': attribute type 13 has an invalid length. [ 417.373151][ T29] audit: type=1800 audit(1741409823.767:4): pid=24370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8788" name="memory.events" dev="tmpfs" ino=8841 res=0 errno=0 [ 417.388096][T24365] netlink: 'syz.0.8787': attribute type 12 has an invalid length. [ 417.451428][ T29] audit: type=1804 audit(1741409823.777:5): pid=24370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8788" name="/newroot/1762/memory.events" dev="tmpfs" ino=8841 res=1 errno=0 [ 418.059023][T24393] bond0: (slave macvlan0): Releasing backup interface [ 418.092678][T24401] netlink: 'syz.2.8804': attribute type 30 has an invalid length. [ 418.351656][T24419] netlink: 'syz.1.8812': attribute type 2 has an invalid length. [ 419.245098][T24469] __nla_validate_parse: 9 callbacks suppressed [ 419.245119][T24469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8837'. [ 419.283364][T24469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8837'. [ 420.317151][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8869'. [ 420.342370][T24532] vlan2: entered allmulticast mode [ 421.323027][T24577] "syz.4.8893" (24577) uses obsolete ecb(arc4) skcipher [ 421.485185][T24597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8899'. [ 422.106469][T24624] tipc: Enabling of bearer rejected, failed to enable media [ 422.597131][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8925'. [ 423.415005][T24689] rdma_op ffff88807b67a9f0 conn xmit_rdma 0000000000000000 [ 423.783706][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8955'. [ 423.887974][T24721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8958'. [ 424.122747][T15351] IPVS: starting estimator thread 0... [ 424.162419][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8963'. [ 424.216477][T24733] IPVS: using max 21 ests per chain, 50400 per kthread [ 425.091549][T24787] vxcan1: entered allmulticast mode [ 425.287234][T24799] netlink: 'syz.4.8996': attribute type 29 has an invalid length. [ 425.314385][T24799] netlink: 'syz.4.8996': attribute type 29 has an invalid length. [ 425.407279][T24803] macvlan0: entered promiscuous mode [ 425.434548][T24803] bridge0: entered promiscuous mode [ 425.599353][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9003'. [ 425.684964][T24821] netlink: 'syz.3.9004': attribute type 3 has an invalid length. [ 425.804112][T24826] netlink: 'syz.2.9009': attribute type 4 has an invalid length. [ 425.848035][T24830] netlink: 'syz.2.9009': attribute type 4 has an invalid length. [ 426.173548][T24847] netlink: 'syz.4.9019': attribute type 8 has an invalid length. [ 426.502827][T24866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9028'. [ 426.527654][T24866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9028'. [ 426.546461][T24866] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9028'. [ 427.047479][T24901] vxcan1: left allmulticast mode [ 427.159878][T24906] netlink: 'syz.4.9046': attribute type 29 has an invalid length. [ 427.175985][T24906] netlink: 'syz.4.9046': attribute type 29 has an invalid length. [ 427.409373][T24925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9052'. [ 427.473835][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9055'. [ 427.537047][T24928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9055'. [ 427.848632][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9066'. [ 427.870931][T24952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9066'. [ 428.300619][T24971] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.9076'. [ 428.363744][T24971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.609672][T24986] [ 428.612054][T24986] ====================================================== [ 428.619085][T24986] WARNING: possible circular locking dependency detected [ 428.626094][T24986] 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 Not tainted [ 428.633190][T24986] ------------------------------------------------------ [ 428.640196][T24986] syz.4.9083/24986 is trying to acquire lock: [ 428.646246][T24986] ffff88805de4cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 428.655841][T24986] [ 428.655841][T24986] but task is already holding lock: [ 428.663195][T24986] ffff888062cbce00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 428.672868][T24986] [ 428.672868][T24986] which lock already depends on the new lock. [ 428.672868][T24986] [ 428.683558][T24986] [ 428.683558][T24986] the existing dependency chain (in reverse order) is: [ 428.692559][T24986] [ 428.692559][T24986] -> #2 (team->team_lock_key#5){+.+.}-{4:4}: [ 428.700733][T24986] lock_acquire+0x1ed/0x550 [ 428.705759][T24986] __mutex_lock+0x19c/0x1010 [ 428.710861][T24986] team_set_mac_address+0x122/0x280 [ 428.716572][T24986] netif_set_mac_address+0x327/0x510 [ 428.722373][T24986] do_setlink+0xaa6/0x40f0 [ 428.727304][T24986] rtnl_newlink+0x15a6/0x1d90 [ 428.732496][T24986] rtnetlink_rcv_msg+0x791/0xcf0 [ 428.737941][T24986] netlink_rcv_skb+0x206/0x480 [ 428.743218][T24986] netlink_unicast+0x7f6/0x990 [ 428.748491][T24986] netlink_sendmsg+0x8de/0xcb0 [ 428.753766][T24986] __sock_sendmsg+0x221/0x270 [ 428.758953][T24986] __sys_sendto+0x363/0x4c0 [ 428.763969][T24986] __x64_sys_sendto+0xde/0x100 [ 428.769243][T24986] do_syscall_64+0xf3/0x230 [ 428.774269][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.780672][T24986] [ 428.780672][T24986] -> #1 (&dev_instance_lock_key#11){+.+.}-{4:4}: [ 428.789184][T24986] lock_acquire+0x1ed/0x550 [ 428.794218][T24986] __mutex_lock+0x19c/0x1010 [ 428.799345][T24986] dev_set_mac_address+0x2a/0x50 [ 428.804820][T24986] bond_set_mac_address+0x28e/0x830 [ 428.810539][T24986] netif_set_mac_address+0x327/0x510 [ 428.816342][T24986] do_setlink+0xaa6/0x40f0 [ 428.821275][T24986] rtnl_newlink+0x15a6/0x1d90 [ 428.826482][T24986] rtnetlink_rcv_msg+0x791/0xcf0 [ 428.831955][T24986] netlink_rcv_skb+0x206/0x480 [ 428.837241][T24986] netlink_unicast+0x7f6/0x990 [ 428.842522][T24986] netlink_sendmsg+0x8de/0xcb0 [ 428.847814][T24986] __sock_sendmsg+0x221/0x270 [ 428.853018][T24986] ____sys_sendmsg+0x53a/0x860 [ 428.858298][T24986] __sys_sendmsg+0x269/0x350 [ 428.863403][T24986] do_syscall_64+0xf3/0x230 [ 428.868420][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.874840][T24986] [ 428.874840][T24986] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 428.883276][T24986] validate_chain+0x18ef/0x5920 [ 428.888654][T24986] __lock_acquire+0x1397/0x2100 [ 428.894024][T24986] lock_acquire+0x1ed/0x550 [ 428.899042][T24986] __mutex_lock+0x19c/0x1010 [ 428.904140][T24986] __dev_open+0x5cb/0x8a0 [ 428.908983][T24986] netif_open+0xae/0x1b0 [ 428.913733][T24986] dev_open+0x13e/0x260 [ 428.918397][T24986] team_add_slave+0xabe/0x28a0 [ 428.923676][T24986] do_set_master+0x579/0x730 [ 428.928781][T24986] rtnl_newlink_create+0x6e6/0xbd0 [ 428.934402][T24986] rtnl_newlink+0x167a/0x1d90 [ 428.939588][T24986] rtnetlink_rcv_msg+0x791/0xcf0 [ 428.945034][T24986] netlink_rcv_skb+0x206/0x480 [ 428.950305][T24986] netlink_unicast+0x7f6/0x990 [ 428.955582][T24986] netlink_sendmsg+0x8de/0xcb0 [ 428.960858][T24986] __sock_sendmsg+0x221/0x270 [ 428.966043][T24986] ____sys_sendmsg+0x53a/0x860 [ 428.971313][T24986] __sys_sendmsg+0x269/0x350 [ 428.976415][T24986] do_syscall_64+0xf3/0x230 [ 428.981434][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.987838][T24986] [ 428.987838][T24986] other info that might help us debug this: [ 428.987838][T24986] [ 428.998047][T24986] Chain exists of: [ 428.998047][T24986] &dev_instance_lock_key#2 --> &dev_instance_lock_key#11 --> team->team_lock_key#5 [ 428.998047][T24986] [ 429.013265][T24986] Possible unsafe locking scenario: [ 429.013265][T24986] [ 429.020698][T24986] CPU0 CPU1 [ 429.026046][T24986] ---- ---- [ 429.031395][T24986] lock(team->team_lock_key#5); [ 429.036334][T24986] lock(&dev_instance_lock_key#11); [ 429.044154][T24986] lock(team->team_lock_key#5); [ 429.051604][T24986] lock(&dev_instance_lock_key#2); [ 429.056802][T24986] [ 429.056802][T24986] *** DEADLOCK *** [ 429.056802][T24986] [ 429.064944][T24986] 3 locks held by syz.4.9083/24986: [ 429.070146][T24986] #0: ffffffff903d43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 429.079660][T24986] #1: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 429.088718][T24986] #2: ffff888062cbce00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 429.098818][T24986] [ 429.098818][T24986] stack backtrace: [ 429.104691][T24986] CPU: 0 UID: 0 PID: 24986 Comm: syz.4.9083 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 429.104706][T24986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 429.104714][T24986] Call Trace: [ 429.104720][T24986] [ 429.104728][T24986] dump_stack_lvl+0x241/0x360 [ 429.104747][T24986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.104760][T24986] ? __pfx__printk+0x10/0x10 [ 429.104776][T24986] print_circular_bug+0x13a/0x1b0 [ 429.104793][T24986] check_noncircular+0x36a/0x4a0 [ 429.104809][T24986] ? __pfx_check_noncircular+0x10/0x10 [ 429.104823][T24986] ? lockdep_lock+0x123/0x2b0 [ 429.104843][T24986] validate_chain+0x18ef/0x5920 [ 429.104863][T24986] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 429.104877][T24986] ? __pfx_validate_chain+0x10/0x10 [ 429.104893][T24986] ? stack_depot_save_flags+0x7b4/0x940 [ 429.104915][T24986] ? kasan_save_track+0x51/0x80 [ 429.104928][T24986] ? kasan_save_track+0x3f/0x80 [ 429.104940][T24986] ? __kasan_kmalloc+0x98/0xb0 [ 429.104952][T24986] ? __kmalloc_noprof+0x285/0x4c0 [ 429.104968][T24986] ? bond_update_slave_arr+0x150/0xd50 [ 429.104981][T24986] ? bond_open+0xe36/0xfa0 [ 429.104994][T24986] ? __dev_open+0x45a/0x8a0 [ 429.105010][T24986] ? netif_open+0xae/0x1b0 [ 429.105024][T24986] ? dev_open+0x13e/0x260 [ 429.105041][T24986] ? team_add_slave+0xabe/0x28a0 [ 429.105055][T24986] ? do_set_master+0x579/0x730 [ 429.105071][T24986] ? rtnl_newlink_create+0x6e6/0xbd0 [ 429.105088][T24986] ? rtnl_newlink+0x167a/0x1d90 [ 429.105103][T24986] ? rtnetlink_rcv_msg+0x791/0xcf0 [ 429.105118][T24986] ? netlink_rcv_skb+0x206/0x480 [ 429.105134][T24986] ? netlink_unicast+0x7f6/0x990 [ 429.105147][T24986] ? netlink_sendmsg+0x8de/0xcb0 [ 429.105162][T24986] ? ____sys_sendmsg+0x53a/0x860 [ 429.105175][T24986] ? __sys_sendmsg+0x269/0x350 [ 429.105187][T24986] ? mark_lock+0x9a/0x360 [ 429.105200][T24986] __lock_acquire+0x1397/0x2100 [ 429.105222][T24986] lock_acquire+0x1ed/0x550 [ 429.105238][T24986] ? __dev_open+0x5cb/0x8a0 [ 429.105256][T24986] ? __pfx_lock_acquire+0x10/0x10 [ 429.105272][T24986] ? lockdep_rtnl_is_held+0x26/0x40 [ 429.105286][T24986] ? __pfx___might_resched+0x10/0x10 [ 429.105302][T24986] ? bond_update_slave_arr+0x844/0xd50 [ 429.105323][T24986] __mutex_lock+0x19c/0x1010 [ 429.105337][T24986] ? __dev_open+0x5cb/0x8a0 [ 429.105353][T24986] ? bond_alb_initialize+0x4c3/0x5f0 [ 429.105372][T24986] ? __dev_open+0x5cb/0x8a0 [ 429.105388][T24986] ? __pfx___mutex_lock+0x10/0x10 [ 429.105408][T24986] __dev_open+0x5cb/0x8a0 [ 429.105425][T24986] ? __pfx___dev_open+0x10/0x10 [ 429.105441][T24986] ? ref_tracker_alloc+0x332/0x490 [ 429.105460][T24986] netif_open+0xae/0x1b0 [ 429.105475][T24986] ? __pfx_netif_open+0x10/0x10 [ 429.105494][T24986] dev_open+0x13e/0x260 [ 429.105512][T24986] team_add_slave+0xabe/0x28a0 [ 429.105532][T24986] ? __pfx_team_add_slave+0x10/0x10 [ 429.105547][T24986] ? nlmsg_notify+0x14c/0x1c0 [ 429.105564][T24986] ? __dev_notify_flags+0x316/0x400 [ 429.105581][T24986] ? dev_set_rx_mode+0xb8/0x2e0 [ 429.105600][T24986] ? __pfx___dev_notify_flags+0x10/0x10 [ 429.105616][T24986] ? __dev_change_flags+0x515/0x6f0 [ 429.105629][T24986] ? mutex_is_locked+0x17/0x50 [ 429.105642][T24986] do_set_master+0x579/0x730 [ 429.105662][T24986] rtnl_newlink_create+0x6e6/0xbd0 [ 429.105684][T24986] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 429.105702][T24986] ? __pfx___mutex_lock+0x10/0x10 [ 429.105719][T24986] ? ns_capable+0x8a/0xf0 [ 429.105735][T24986] rtnl_newlink+0x167a/0x1d90 [ 429.105752][T24986] ? is_bpf_text_address+0x285/0x2a0 [ 429.105770][T24986] ? is_bpf_text_address+0x26/0x2a0 [ 429.105792][T24986] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.105808][T24986] ? __pfx_validate_chain+0x10/0x10 [ 429.105827][T24986] ? validate_chain+0x11e/0x5920 [ 429.105840][T24986] ? __pfx_lock_acquire+0x10/0x10 [ 429.105857][T24986] ? __pfx_lock_release+0x10/0x10 [ 429.105875][T24986] ? __pfx_validate_chain+0x10/0x10 [ 429.105889][T24986] ? mark_lock+0x9a/0x360 [ 429.105901][T24986] ? __lock_acquire+0x1397/0x2100 [ 429.105928][T24986] ? __pfx_lock_release+0x10/0x10 [ 429.105949][T24986] ? __pfx_rtnl_newlink+0x10/0x10 [ 429.105966][T24986] rtnetlink_rcv_msg+0x791/0xcf0 [ 429.105981][T24986] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 429.105997][T24986] ? __lock_acquire+0x1397/0x2100 [ 429.106014][T24986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.106036][T24986] netlink_rcv_skb+0x206/0x480 [ 429.106052][T24986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.106068][T24986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.106091][T24986] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.106107][T24986] netlink_unicast+0x7f6/0x990 [ 429.106124][T24986] ? __pfx_netlink_unicast+0x10/0x10 [ 429.106138][T24986] ? __virt_addr_valid+0x45f/0x530 [ 429.106150][T24986] ? __phys_addr_symbol+0x2f/0x70 [ 429.106161][T24986] ? __check_object_size+0x47a/0x730 [ 429.106178][T24986] netlink_sendmsg+0x8de/0xcb0 [ 429.106197][T24986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.106215][T24986] ? aa_sock_msg_perm+0x91/0x160 [ 429.106235][T24986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.106250][T24986] __sock_sendmsg+0x221/0x270 [ 429.106268][T24986] ____sys_sendmsg+0x53a/0x860 [ 429.106286][T24986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.106300][T24986] ? __fget_files+0x2a/0x410 [ 429.106325][T24986] ? __fget_files+0x2a/0x410 [ 429.106343][T24986] __sys_sendmsg+0x269/0x350 [ 429.106357][T24986] ? __pfx___sys_sendmsg+0x10/0x10 [ 429.106384][T24986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 429.106401][T24986] ? do_syscall_64+0x100/0x230 [ 429.106417][T24986] ? do_syscall_64+0xb6/0x230 [ 429.106432][T24986] do_syscall_64+0xf3/0x230 [ 429.106446][T24986] ? clear_bhb_loop+0x35/0x90 [ 429.106464][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.106480][T24986] RIP: 0033:0x7f908bf8d169 [ 429.106493][T24986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.106504][T24986] RSP: 002b:00007f908ce5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.106518][T24986] RAX: ffffffffffffffda RBX: 00007f908c1a5fa0 RCX: 00007f908bf8d169 [ 429.106528][T24986] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 429.106537][T24986] RBP: 00007f908c00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 429.106545][T24986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.106553][T24986] R13: 0000000000000000 R14: 00007f908c1a5fa0 R15: 00007ffdea5d07d8 [ 429.106568][T24986] [ 429.769489][T24986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 429.778261][T24986] team0: Port device bond7 added