last executing test programs: 2.408247663s ago: executing program 4 (id=12324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) 2.392845635s ago: executing program 4 (id=12325): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0xc080) 2.243738471s ago: executing program 4 (id=12330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) 2.184342729s ago: executing program 4 (id=12332): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 1.510727941s ago: executing program 0 (id=12343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000004000000080200002100"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r1, r0}, 0xc) 1.393303159s ago: executing program 0 (id=12346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57", 0x3) 914.58823ms ago: executing program 4 (id=12355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 858.068806ms ago: executing program 2 (id=12357): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) 857.349529ms ago: executing program 3 (id=12358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x28, 0x0, &(0x7f0000000b00)="3d25ff0706000000000000c186dd11204073a07132e48ee336c64ca9c82d8c50c0dd37003d515720", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 821.944575ms ago: executing program 4 (id=12359): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 736.021259ms ago: executing program 2 (id=12360): unshare(0x60600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x112}) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) 713.254445ms ago: executing program 1 (id=12361): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x9e2696008603fac1}) 710.208226ms ago: executing program 3 (id=12362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 601.254905ms ago: executing program 3 (id=12363): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 592.013401ms ago: executing program 2 (id=12364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) 578.513278ms ago: executing program 1 (id=12365): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 437.71561ms ago: executing program 1 (id=12366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x0) 392.19058ms ago: executing program 0 (id=12367): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 346.295755ms ago: executing program 0 (id=12368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000010}) close(0x3) 345.958803ms ago: executing program 1 (id=12369): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"], 0x5c}}, 0x0) 271.961485ms ago: executing program 2 (id=12370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) 271.791586ms ago: executing program 3 (id=12371): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) 190.578416ms ago: executing program 3 (id=12372): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @loopback, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1, 0xfffffff8}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 188.19939ms ago: executing program 2 (id=12373): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0x2}, {}, {0xfff3, 0xfff9}}}, 0x24}}, 0x44080) 164.567047ms ago: executing program 0 (id=12374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 104.226887ms ago: executing program 1 (id=12375): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="b70000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 89.04604ms ago: executing program 3 (id=12376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) 47.963262ms ago: executing program 2 (id=12377): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000170100000200000000000000000000001800000000000000140100a266"], 0x30}, 0x0) 37.077566ms ago: executing program 1 (id=12378): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) readv(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1) 0s ago: executing program 0 (id=12379): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) kernel console output (not intermixed with test programs): [ 267.225152][T15209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4457'. [ 267.481712][T15226] sctp: [Deprecated]: syz.0.4466 (pid 15226) Use of int in max_burst socket option. [ 267.481712][T15226] Use struct sctp_assoc_value instead [ 268.152073][T15275] netlink: 'syz.4.4490': attribute type 30 has an invalid length. [ 268.333249][T15284] net_ratelimit: 10 callbacks suppressed [ 268.333272][T15284] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 268.435922][T15290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4497'. [ 268.603316][T15300] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 269.012625][T15314] netlink: 'syz.3.4509': attribute type 3 has an invalid length. [ 269.034588][T15314] netlink: 'syz.3.4509': attribute type 3 has an invalid length. [ 269.085488][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4509'. [ 269.308685][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 269.749701][T15365] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 269.749701][T15365] Please contact the netfilter-devel mailing list or update your nftables rules. [ 269.917512][T15371] veth2: entered allmulticast mode [ 270.223376][T15379] team0: entered promiscuous mode [ 270.229779][T15379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 270.309723][T15395] xt_bpf: check failed: parse error [ 270.605233][T15414] netlink: 'syz.3.4560': attribute type 2 has an invalid length. [ 270.620895][T15414] netlink: 'syz.3.4560': attribute type 5 has an invalid length. [ 270.768457][T15425] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4564'. [ 271.076531][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4573'. [ 272.945691][T15492] xt_connbytes: Forcing CT accounting to be enabled [ 272.973488][T15492] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 273.174281][T15501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4603'. [ 273.197911][T15504] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.4601'. [ 273.690977][T15522] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4612'. [ 273.720177][T15522] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4612'. [ 274.204671][T15548] xt_TCPMSS: Only works on TCP SYN packets [ 274.257965][T15554] netlink: 'syz.0.4627': attribute type 2 has an invalid length. [ 274.297961][T15554] hmac(sha224: entered promiscuous mode [ 275.160894][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4652'. [ 275.164331][T15607] netlink: 'syz.1.4653': attribute type 6 has an invalid length. [ 275.581009][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4665'. [ 275.941707][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4675'. [ 276.089227][T15661] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4679'. [ 276.184194][T15661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.244396][T15661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.265249][T15661] bond0 (unregistering): Released all slaves [ 276.533583][T15680] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 276.822749][T15703] SET target dimension over the limit! [ 277.377247][T15741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 277.459672][T15750] ip6erspan0: entered promiscuous mode [ 277.468757][T15750] ip6erspan0: entered allmulticast mode [ 277.590056][T15758] netlink: 'syz.4.4727': attribute type 1 has an invalid length. [ 277.995496][T15788] team0: entered allmulticast mode [ 278.001753][T15788] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.009156][T15788] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 278.046892][T15791] netlink: 'syz.3.4744': attribute type 10 has an invalid length. [ 278.526981][T15818] xt_limit: Overflow, try lower: 28676/2147483648 [ 278.563515][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4758'. [ 278.607023][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4758'. [ 278.726157][T15830] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4764'. [ 278.744862][T15832] netlink: 'syz.2.4763': attribute type 1 has an invalid length. [ 278.874591][T15840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.968186][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4773'. [ 279.296533][T15869] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4782'. [ 279.522727][T15885] macvtap0: entered promiscuous mode [ 279.798646][T15905] tipc: Can't bind to reserved service type 0 [ 279.833423][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4802'. [ 280.091257][T15928] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.158013][T15930] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 280.516145][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4824'. [ 280.554049][T15958] netlink: 'syz.2.4826': attribute type 4 has an invalid length. [ 280.582910][T15958] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4826'. [ 280.717833][T15967] netlink: 'syz.0.4827': attribute type 13 has an invalid length. [ 280.906774][T15967] gretap0: refused to change device tx_queue_len [ 280.924027][T15967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.053854][T15981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.314872][T15997] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.626026][T16020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4852'. [ 281.847964][T16030] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 281.863553][T16037] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4864'. [ 282.964036][T16107] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 283.164628][T16119] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 283.242799][T16125] netlink: 'syz.1.4905': attribute type 10 has an invalid length. [ 283.297701][T16125] team0: Port device dummy0 added [ 283.593353][T16143] netlink: 'syz.0.4917': attribute type 3 has an invalid length. [ 283.749056][T16157] openvswitch: netlink: IP tunnel dst address not specified [ 283.759170][T16155] openvswitch: netlink: Missing key (keys=40, expected=80) [ 284.053525][T16175] netlink: 'syz.1.4930': attribute type 1 has an invalid length. [ 284.094942][T16175] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4930'. [ 284.117619][T16181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4932'. [ 284.141828][T16181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4932'. [ 284.204270][T16183] xt_socket: unknown flags 0x4 [ 284.679380][T16214] gre1: entered allmulticast mode [ 285.122285][T16239] xt_hashlimit: invalid rate [ 285.274957][T16246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4964'. [ 285.386227][T16252] SET target dimension over the limit! [ 285.654834][T16266] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 285.737469][T16274] nftables ruleset with unbound chain [ 285.795018][T16278] netlink: 'syz.3.4981': attribute type 1 has an invalid length. [ 285.813169][T16278] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4981'. [ 285.905054][T16283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4983'. [ 285.927733][T16283] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4983'. [ 285.955690][T16283] netlink: 'syz.2.4983': attribute type 5 has an invalid length. [ 285.977561][T16283] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4983'. [ 286.370812][T16316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.378147][T16316] IPv6: NLM_F_CREATE should be set when creating new route [ 286.385597][T16316] IPv6: NLM_F_CREATE should be set when creating new route [ 286.512927][T16324] netlink: 'syz.2.5003': attribute type 4 has an invalid length. [ 286.536829][T16324] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5003'. [ 286.564973][T16324] .`: renamed from bond0 (while UP) [ 287.350928][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5031'. [ 287.959261][T16417] hm3): entered promiscuous mode [ 288.059517][T16421] bond2: option arp_all_targets: invalid value (129) [ 288.068298][T16421] bond2 (unregistering): Released all slaves [ 288.795321][T16471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.379804][T16506] __nla_validate_parse: 1 callbacks suppressed [ 289.379826][T16506] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5094'. [ 289.461084][T16506] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5094'. [ 289.744697][T16530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5105'. [ 289.767807][T16530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5105'. [ 289.883302][T16537] netlink: 'syz.2.5107': attribute type 2 has an invalid length. [ 290.161038][T16559] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 290.554119][T16587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5133'. [ 290.626389][T16589] ip6t_srh: unknown srh invflags BA61 [ 290.656217][T16593] netlink: 'syz.0.5136': attribute type 33 has an invalid length. [ 290.664393][T16593] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5136'. [ 290.684041][T16593] `: renamed from team0 [ 291.048925][T16615] geneve2: entered promiscuous mode [ 291.067507][T16618] netlink: 'syz.4.5149': attribute type 1 has an invalid length. [ 291.076540][T16615] geneve2: entered allmulticast mode [ 291.102757][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.121213][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.151624][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.179570][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.274911][T16631] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 291.333287][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5156'. [ 291.513410][T16647] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5163'. [ 291.544533][T16647] bridge_slave_1: default FDB implementation only supports local addresses [ 291.616942][T16652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.255724][T16694] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5186'. [ 292.316992][T16694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.355410][T16694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.384146][T16694] bond0 (unregistering): Released all slaves [ 292.495565][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5190'. [ 292.792425][T16721] SET target dimension over the limit! [ 292.937968][T16731] xt_addrtype: ipv6 does not support BROADCAST matching [ 293.245118][T16751] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 294.192352][T16812] netlink: 'syz.2.5242': attribute type 21 has an invalid length. [ 294.227861][T16812] netlink: 'syz.2.5242': attribute type 4 has an invalid length. [ 294.603117][T16842] __nla_validate_parse: 8 callbacks suppressed [ 294.603140][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5257'. [ 295.560792][T16908] netlink: 'syz.4.5290': attribute type 31 has an invalid length. [ 295.620561][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5291'. [ 295.651240][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5291'. [ 295.936767][T16935] netlink: 'syz.2.5304': attribute type 32 has an invalid length. [ 296.050193][T16942] netlink: 'syz.0.5306': attribute type 1 has an invalid length. [ 296.180945][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5310'. [ 297.916811][T17060] bridge6: entered promiscuous mode [ 297.981560][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'. [ 298.104627][T17074] netlink: 'syz.0.5368': attribute type 21 has an invalid length. [ 298.313445][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5374'. [ 298.353145][T17093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5376'. [ 298.363530][T17093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5376'. [ 298.857353][T17123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5395'. [ 298.866643][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5395'. [ 298.881168][T17123] netlink: 'syz.1.5395': attribute type 1 has an invalid length. [ 299.244037][T17151] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 299.361996][T17155] netlink: 'syz.0.5407': attribute type 3 has an invalid length. [ 299.861106][T17179] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.033246][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5424'. [ 300.191134][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5429'. [ 300.214016][T17197] netlink: 'syz.2.5428': attribute type 1 has an invalid length. [ 300.238081][T17197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.483452][T17215] netlink: 'syz.1.5439': attribute type 4 has an invalid length. [ 301.094455][T17249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 301.304837][T17261] netlink: 'syz.3.5460': attribute type 2 has an invalid length. [ 301.349854][T17261] netlink: 'syz.3.5460': attribute type 9 has an invalid length. [ 301.371098][T17261] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5460'. [ 302.036588][T17305] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 302.053492][T17308] netlink: 'syz.2.5483': attribute type 2 has an invalid length. [ 302.071152][T17306] ip6t_srh: unknown srh match flags 4000 [ 302.072269][T17308] netlink: 'syz.2.5483': attribute type 1 has an invalid length. [ 302.848317][T17359] netlink: 'syz.3.5508': attribute type 1 has an invalid length. [ 302.877581][T17359] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5508'. [ 302.881623][T17364] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5511'. [ 303.145384][T17380] validate_nla: 1 callbacks suppressed [ 303.145403][T17380] netlink: 'syz.1.5519': attribute type 21 has an invalid length. [ 303.189892][T17376] bond0: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 303.231406][T17376] bond0: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 303.454783][T17400] xt_hashlimit: max too large, truncated to 1048576 [ 303.462875][T17400] xt_bpf: check failed: parse error [ 303.792566][T17422] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 303.854280][T17429] netlink: 'syz.1.5541': attribute type 32 has an invalid length. [ 303.922113][T17433] netlink: 'syz.0.5544': attribute type 11 has an invalid length. [ 304.181036][T17451] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5553'. [ 304.457117][T17470] netlink: 'syz.1.5560': attribute type 1 has an invalid length. [ 304.593501][T17477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5563'. [ 304.610937][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5563'. [ 304.629530][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5563'. [ 305.204191][T17518] netlink: 'syz.1.5583': attribute type 9 has an invalid length. [ 305.226602][T17517] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 305.320018][T17523] netlink: 'syz.3.5585': attribute type 1 has an invalid length. [ 305.339239][T17523] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5585'. [ 305.344191][T17524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5586'. [ 305.741812][T17550] netlink: 'syz.1.5599': attribute type 7 has an invalid length. [ 305.771553][T17552] netlink: 'syz.3.5600': attribute type 2 has an invalid length. [ 305.793513][T17552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5600'. [ 305.899698][T17559] unsupported nlmsg_type 40 [ 306.093592][T17575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.342443][T17592] bridge0: port 1(dummy0) entered disabled state [ 306.356860][T17592] bridge0: entered allmulticast mode [ 306.474914][T17600] netlink: 'syz.0.5624': attribute type 1 has an invalid length. [ 306.526335][T17600] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5624'. [ 306.742463][T17618] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.804895][T17622] netlink: 'syz.0.5634': attribute type 1 has an invalid length. [ 307.070971][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.245644][T17652] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5649'. [ 307.265473][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5649'. [ 307.277460][T17652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5649'. [ 307.427160][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5654'. [ 307.652660][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5661'. [ 307.846496][T17678] xt_CT: No such helper "syz0" [ 307.896509][T17688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.006484][T17695] set match dimension is over the limit! [ 308.154494][T17703] validate_nla: 1 callbacks suppressed [ 308.154517][T17703] netlink: 'syz.4.5674': attribute type 1 has an invalid length. [ 308.205778][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5676'. [ 308.462881][T17729] openvswitch: netlink: Message has 1 unknown bytes. [ 308.470469][T17729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.208237][T17783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.282879][T17785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.712252][T17817] netlink: 'syz.0.5729': attribute type 1 has an invalid length. [ 310.039269][T17833] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 310.061192][T17833] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 310.200988][T17845] xt_hashlimit: max too large, truncated to 1048576 [ 310.533280][T17860] batadv2: entered promiscuous mode [ 310.550787][T17860] batadv2: entered allmulticast mode [ 310.762004][T17810] wg1 speed is unknown, defaulting to 1000 [ 310.841077][T17875] __nla_validate_parse: 2 callbacks suppressed [ 310.841100][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5758'. [ 311.027783][T17884] xt_CONNSECMARK: invalid mode: 254 [ 311.236890][T17898] netlink: 'syz.3.5769': attribute type 8 has an invalid length. [ 311.651311][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5777'. [ 311.660270][T17915] netlink: 'syz.0.5777': attribute type 3 has an invalid length. [ 311.907574][T17928] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.063477][T17933] netlink: 'syz.2.5785': attribute type 62 has an invalid length. [ 312.608441][T17966] netlink: 'syz.1.5802': attribute type 11 has an invalid length. [ 312.791290][T17976] xt_CT: No such helper "netbios-ns" [ 313.025652][T17996] netlink: 'syz.4.5816': attribute type 2 has an invalid length. [ 313.048633][T17996] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 313.069580][T17996] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5816'. [ 313.222602][T18009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.133608][T18069] openvswitch: netlink: Invalid VLAN frame [ 314.182877][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5851'. [ 314.271277][T18077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.278749][T18077] IPv6: NLM_F_CREATE should be set when creating new route [ 314.286094][T18077] IPv6: NLM_F_CREATE should be set when creating new route [ 314.470870][T18087] netlink: 'syz.1.5859': attribute type 1 has an invalid length. [ 314.498957][T18087] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5859'. [ 314.923881][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5872'. [ 314.970886][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5872'. [ 315.008044][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5872'. [ 315.042552][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5876'. [ 315.072576][T18126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5878'. [ 315.340498][T18145] 8021q: VLANs not supported on lo [ 315.439861][T18151] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 315.463939][T18151] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 315.670947][T18168] netlink: 'syz.4.5898': attribute type 21 has an invalid length. [ 316.090950][T18195] __nla_validate_parse: 2 callbacks suppressed [ 316.090971][T18195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5911'. [ 316.284439][T18210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.345976][T18214] openvswitch: netlink: Duplicate key (type 21). [ 316.707440][T18240] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 316.872726][T18249] x9: renamed from bridge_slave_0 (while UP) [ 316.916805][T18254] netlink: 'syz.3.5942': attribute type 10 has an invalid length. [ 316.929508][T18254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5942'. [ 317.085279][T18264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5947'. [ 317.286238][T18278] netlink: 'syz.2.5953': attribute type 8 has an invalid length. [ 317.431004][T18286] netlink: 'syz.0.5958': attribute type 1 has an invalid length. [ 317.523913][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5960'. [ 317.547700][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5960'. [ 317.877777][T18314] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 318.605294][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5994'. [ 318.668812][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'. [ 319.240615][T18409] vlan0: entered promiscuous mode [ 319.454144][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6024'. [ 319.517004][T18425] Cannot find set identified by id 65534 to match [ 320.016476][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6043'. [ 320.049786][T18463] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6044'. [ 320.327437][T18480] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 321.102891][T18537] netlink: 'syz.2.6081': attribute type 1 has an invalid length. [ 321.135422][T18537] netlink: 'syz.2.6081': attribute type 2 has an invalid length. [ 321.227195][T18545] openvswitch: netlink: EtherType 50a is less than min 600 [ 321.383479][T18553] __nla_validate_parse: 2 callbacks suppressed [ 321.383503][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6089'. [ 321.621502][T18572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6099'. [ 321.701256][T18577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6101'. [ 321.728356][T18577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6101'. [ 321.855596][T18586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6104'. [ 321.874750][T18589] xt_CONNSECMARK: invalid mode: 0 [ 322.028101][T18597] netlink: 'syz.1.6111': attribute type 2 has an invalid length. [ 322.053355][T18599] x_tables: duplicate underflow at hook 3 [ 322.057214][T18597] tipc: Started in network mode [ 322.069144][T18597] tipc: Node identity 1340008, cluster identity 4711 [ 322.076436][T18597] tipc: Node number set to 20185096 [ 322.142792][T18605] netlink: 'syz.3.6115': attribute type 2 has an invalid length. [ 322.151041][T18605] netlink: 'syz.3.6115': attribute type 1 has an invalid length. [ 322.161211][T18605] netlink: 'syz.3.6115': attribute type 1 has an invalid length. [ 322.353333][T18619] netlink: 'syz.4.6120': attribute type 5 has an invalid length. [ 322.576039][T18635] netlink: 'syz.3.6130': attribute type 21 has an invalid length. [ 322.603719][T18637] : renamed from veth0_to_bond [ 322.620068][T18635] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6130'. [ 322.629415][T18639] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6132'. [ 322.651265][T18639] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 322.966963][T18661] netlink: 'syz.4.6143': attribute type 3 has an invalid length. [ 323.091040][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6147'. [ 323.109473][T18669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6147'. [ 323.193504][T18675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6149'. [ 323.359946][T18684] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 323.434739][T18691] netlink: 'syz.0.6158': attribute type 1 has an invalid length. [ 323.592730][T18697] m1Ie5: entered promiscuous mode [ 325.516854][T18809] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 325.528832][T18809] bond2: entered promiscuous mode [ 325.534661][T18809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 326.368302][T18862] validate_nla: 2 callbacks suppressed [ 326.368326][T18862] netlink: 'syz.0.6242': attribute type 1 has an invalid length. [ 326.395145][T18862] netlink: 'syz.0.6242': attribute type 2 has an invalid length. [ 326.417918][T18867] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 326.447761][T18869] __nla_validate_parse: 8 callbacks suppressed [ 326.447785][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 326.481008][T18869] openvswitch: netlink: Invalid VLAN frame [ 326.569731][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6248'. [ 326.670994][T18881] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 326.725528][T18884] netlink: 'syz.2.6254': attribute type 1 has an invalid length. [ 326.752268][T18884] netlink: 936 bytes leftover after parsing attributes in process `syz.2.6254'. [ 326.795198][T18887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.937719][T18900] netlink: 'syz.2.6258': attribute type 2 has an invalid length. [ 327.007512][T18900] hmac(sha224): entered promiscuous mode [ 327.230085][T18918] netlink: 'syz.0.6269': attribute type 10 has an invalid length. [ 327.377570][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6274'. [ 327.391053][T18931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6274'. [ 327.512971][T18936] No such timeout policy "syz1" [ 327.767587][T18951] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 327.786249][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6284'. [ 327.805569][T18951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.154124][T18970] netlink: 'syz.3.6293': attribute type 1 has an invalid length. [ 328.694739][T19008] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 328.952366][T19025] openvswitch: netlink: Flow key attribute not present in set flow. [ 329.014293][T19030] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6323'. [ 329.041134][T19032] netlink: 'syz.2.6325': attribute type 6 has an invalid length. [ 329.049260][T19032] netlink: 'syz.2.6325': attribute type 7 has an invalid length. [ 329.057738][T19032] netlink: 'syz.2.6325': attribute type 8 has an invalid length. [ 329.496390][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6339'. [ 329.796405][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6349'. [ 329.933669][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6352'. [ 330.314411][T19122] sctp: [Deprecated]: syz.1.6364 (pid 19122) Use of int in max_burst socket option. [ 330.314411][T19122] Use struct sctp_assoc_value instead [ 331.435457][T19191] xt_CT: No such helper "snmp_trap" [ 331.604779][T19210] validate_nla: 4 callbacks suppressed [ 331.604801][T19210] netlink: 'syz.0.6409': attribute type 28 has an invalid length. [ 331.667926][T19212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.693601][T19214] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 331.711774][T19214] __nla_validate_parse: 3 callbacks suppressed [ 331.711795][T19214] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6411'. [ 331.813855][T19222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6415'. [ 331.878679][T19226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.013971][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6421'. [ 332.194088][T19241] netlink: 'syz.1.6425': attribute type 21 has an invalid length. [ 332.210896][T19241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6425'. [ 332.237604][T19241] netlink: 'syz.1.6425': attribute type 4 has an invalid length. [ 332.255631][T19241] netlink: 'syz.1.6425': attribute type 5 has an invalid length. [ 332.307200][T19241] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6425'. [ 332.919361][T19271] netlink: 'syz.1.6439': attribute type 21 has an invalid length. [ 332.939177][T19271] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.958543][T19271] netlink: 'syz.1.6439': attribute type 1 has an invalid length. [ 333.093888][T19278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6441'. [ 333.122458][T19280] netlink: 'syz.0.6440': attribute type 1 has an invalid length. [ 333.173799][T19284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6442'. [ 333.599074][T19303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.621511][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6452'. [ 333.669529][T19309] netlink: 'syz.3.6453': attribute type 1 has an invalid length. [ 333.682978][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6453'. [ 333.914910][T19323] netlink: 'syz.2.6460': attribute type 13 has an invalid length. [ 334.253629][T19347] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 334.667138][T19376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6485'. [ 334.678570][T19374] team0 (unregistering): Port device team_slave_0 removed [ 334.698123][T19374] team0 (unregistering): Port device team_slave_1 removed [ 335.796060][T19443] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 335.997613][T19456] geneve3: entered promiscuous mode [ 336.014756][ T166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.027969][ T166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.054369][ T166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.081425][ T1351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.187255][T19470] veth0_virt_wifi: entered allmulticast mode [ 337.335333][T19537] validate_nla: 6 callbacks suppressed [ 337.335354][T19537] netlink: 'syz.2.6563': attribute type 21 has an invalid length. [ 337.792243][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.853351][T19566] veth1_macvtap: entered allmulticast mode [ 337.859259][T19566] veth1_macvtap: entered promiscuous mode [ 337.881584][T19566] macsec0: left promiscuous mode [ 337.887126][T19566] veth1_macvtap: left promiscuous mode [ 337.898323][T19566] macsec0: left allmulticast mode [ 337.908246][T19566] veth1_macvtap: left allmulticast mode [ 338.042929][T19578] netlink: 'syz.2.6582': attribute type 1 has an invalid length. [ 338.076856][T19578] __nla_validate_parse: 2 callbacks suppressed [ 338.076875][T19578] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6582'. [ 338.402149][T19601] bond2: option arp_interval: invalid value (18446744073709551615) [ 338.410238][T19601] bond2: option arp_interval: allowed values 0 - 2147483647 [ 338.420603][T19601] bond2 (unregistering): Released all slaves [ 338.735958][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6604'. [ 338.932062][T19637] xt_hashlimit: size too large, truncated to 1048576 [ 338.939178][T19637] xt_hashlimit: invalid interval [ 338.982121][T19640] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 339.118456][T19648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6615'. [ 339.155904][T19648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6615'. [ 339.183993][T19654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.325175][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6624'. [ 340.024852][T19712] IPv6: sit2: Disabled Multicast RS [ 340.338331][T19731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6656'. [ 340.512383][T19744] xt_bpf: check failed: parse error [ 340.529884][T19739] bond2 (unregistering): Released all slaves [ 340.704002][T19754] SET target dimension over the limit! [ 340.726812][T19758] netlink: 'syz.2.6667': attribute type 1 has an invalid length. [ 341.063768][T19779] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 341.103155][T19779] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.152505][T19787] netlink: 'syz.0.6683': attribute type 1 has an invalid length. [ 341.532748][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6695'. [ 341.563674][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6695'. [ 341.618280][T19816] netlink: 'syz.2.6697': attribute type 4 has an invalid length. [ 341.657717][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6697'. [ 341.996222][T19835] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6704'. [ 342.050805][T19839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.335351][T19857] openvswitch: netlink: Actions may not be safe on all matching packets [ 342.488296][T19869] netlink: 'syz.0.6721': attribute type 1 has an invalid length. [ 342.497643][T19865] team0: left allmulticast mode [ 342.521217][T19869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.130408][T19908] netlink: 'syz.3.6739': attribute type 13 has an invalid length. [ 343.175346][T19908] netlink: 'syz.3.6739': attribute type 17 has an invalid length. [ 343.216924][T19908] netlink: 'syz.3.6739': attribute type 27 has an invalid length. [ 343.256740][T19918] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 343.424108][T19932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.584141][T19930] bond2 (unregistering): Released all slaves [ 343.764823][T19947] __nla_validate_parse: 1 callbacks suppressed [ 343.764843][T19947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6757'. [ 343.868068][T19954] tc_dump_action: action bad kind [ 343.879277][T19955] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6760'. [ 343.941941][T19959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6762'. [ 343.973294][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6762'. [ 344.506256][T19999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6783'. [ 345.160949][T20037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.257353][T20044] vti0: entered promiscuous mode [ 345.309327][T20048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.419370][T20055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6811'. [ 345.441633][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6810'. [ 345.460185][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6812'. [ 345.585807][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 345.620849][T20066] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6816'. [ 345.926093][T20087] netlink: 'syz.4.6827': attribute type 1 has an invalid length. [ 345.980094][T20087] netlink: 'syz.4.6827': attribute type 3 has an invalid length. [ 346.012390][T20091] bond2 (unregistering): Released all slaves [ 346.120967][T20101] pim6reg: entered allmulticast mode [ 346.361840][T20115] netlink: 'syz.1.6839': attribute type 7 has an invalid length. [ 346.703481][T20141] netlink: 'syz.4.6852': attribute type 29 has an invalid length. [ 346.977404][T20155] ip6t_srh: unknown srh invflags 4000 [ 347.228462][T20175] netlink: 'syz.1.6871': attribute type 21 has an invalid length. [ 347.270823][T20175] netlink: 'syz.1.6871': attribute type 20 has an invalid length. [ 347.812392][T20207] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 347.832444][T20207] bond3 (unregistering): Released all slaves [ 347.877928][ T1351] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.891145][ T1351] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.904041][ T1351] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.913520][ T1351] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 348.545322][T20247] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 348.707086][T20254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.714444][T20254] IPv6: NLM_F_CREATE should be set when creating new route [ 348.721785][T20254] IPv6: NLM_F_CREATE should be set when creating new route [ 348.880394][T20263] netlink: 'syz.4.6912': attribute type 3 has an invalid length. [ 348.965012][T20268] __nla_validate_parse: 2 callbacks suppressed [ 348.965034][T20268] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6915'. [ 349.559060][T20303] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 349.639515][T20309] netlink: 'syz.1.6934': attribute type 1 has an invalid length. [ 349.651738][T20309] netlink: 'syz.1.6934': attribute type 2 has an invalid length. [ 349.672083][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6934'. [ 349.826080][T20319] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6939'. [ 349.847874][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6941'. [ 349.892431][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6941'. [ 350.598721][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6968'. [ 350.608419][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6968'. [ 351.002029][T20401] bond4: option min_links: invalid value (18446744073709551612) [ 351.009877][T20401] bond4: option min_links: allowed values 0 - 2147483647 [ 351.024688][T20401] bond4 (unregistering): Released all slaves [ 351.274508][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6989'. [ 352.024009][T20445] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.031453][T20445] bridge0: port 1(1x9) entered disabled state [ 352.295219][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7017'. [ 352.307568][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7017'. [ 352.318437][T20479] netlink: 'syz.4.7017': attribute type 12 has an invalid length. [ 352.327582][T20479] netlink: 'syz.4.7017': attribute type 13 has an invalid length. [ 352.925311][T20464] veth1_to_bridge: entered allmulticast mode [ 352.938781][T20464] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 352.999398][ T1210] wg1 speed is unknown, defaulting to 1000 [ 352.999424][ T1351] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.017116][ T1210] syz0: Port: 1 Link DOWN [ 353.026439][ T1351] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.097331][ T1351] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.117031][ T1351] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.293731][T20513] netlink: 'syz.0.7024': attribute type 10 has an invalid length. [ 353.427293][T20520] delete_channel: no stack [ 353.779350][T20545] Bluetooth: MGMT ver 1.23 [ 353.972654][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.983915][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.047535][T20554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.390464][T20583] __nla_validate_parse: 2 callbacks suppressed [ 354.390488][T20583] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7059'. [ 354.635275][T20595] sit2: entered promiscuous mode [ 355.463158][T20650] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7087'. [ 355.641999][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7090'. [ 355.662442][T20657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7090'. [ 355.686365][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7093'. [ 355.784284][T20671] netlink: 'syz.4.7096': attribute type 1 has an invalid length. [ 355.948775][T20682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7101'. [ 355.984230][T20684] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7102'. [ 355.993979][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7102'. [ 356.003571][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7102'. [ 356.235746][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7108'. [ 357.148824][T20745] netlink: 'syz.0.7130': attribute type 10 has an invalid length. [ 357.668099][T20782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.815868][T20792] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.338227][T20827] ipvlan0: entered allmulticast mode [ 358.378901][T20827] syz_tun: entered allmulticast mode [ 358.667601][T20843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.887012][T20862] netlink: 'syz.1.7185': attribute type 30 has an invalid length. [ 359.199438][T20879] Bluetooth: MGMT ver 1.23 [ 359.689246][T20905] tipc: MTU too low for tipc bearer [ 359.822290][T20911] netlink: 'syz.1.7210': attribute type 8 has an invalid length. [ 359.896348][T20914] netlink: 'syz.4.7212': attribute type 1 has an invalid length. [ 359.913036][T20914] __nla_validate_parse: 10 callbacks suppressed [ 359.913058][T20914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7212'. [ 360.206392][T20928] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7218'. [ 360.219914][T20928] netlink: 'syz.2.7218': attribute type 9 has an invalid length. [ 360.250316][T20928] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7218'. [ 360.261302][T20928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7218'. [ 360.392531][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7223'. [ 360.530906][T20948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7228'. [ 360.639089][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7230'. [ 360.908200][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7240'. [ 361.075159][ T138] wlan1: Trigger new scan to find an IBSS to join [ 361.111282][T20988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7248'. [ 361.439246][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7255'. [ 362.650548][T21082] rdma_op ffff88807b8a01f0 conn xmit_rdma 0000000000000000 [ 363.492486][T21129] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 363.563090][T21133] tipc: Started in network mode [ 363.568057][T21133] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 363.594668][T21133] tipc: Enabling of bearer rejected, failed to enable media [ 364.063946][T21168] netlink: 'syz.3.7331': attribute type 5 has an invalid length. [ 364.447806][T21194] netlink: 'syz.2.7344': attribute type 4 has an invalid length. [ 364.595750][T21205] netlink: 'syz.2.7349': attribute type 6 has an invalid length. [ 365.012828][T21232] xt_policy: too many policy elements [ 365.150864][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 365.659135][T21267] netlink: 'syz.0.7381': attribute type 1 has an invalid length. [ 365.670901][T21267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.723788][T21268] pim6reg: entered allmulticast mode [ 365.753777][T21268] pim6reg: left allmulticast mode [ 366.032113][ T138] wlan1: Trigger new scan to find an IBSS to join [ 366.916745][T21334] __nla_validate_parse: 5 callbacks suppressed [ 366.916768][T21334] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7410'. [ 366.937108][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7410'. [ 366.969186][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.046855][T21339] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 367.190085][T21350] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7419'. [ 368.976928][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7467'. [ 369.191914][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7473'. [ 369.201489][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7473'. [ 369.447999][T21478] netlink: 'syz.2.7478': attribute type 2 has an invalid length. [ 370.186652][T21509] "syz.4.7493" (21509) uses obsolete ecb(arc4) skcipher [ 370.235049][T21523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7498'. [ 370.765906][T21557] pimreg9: entered allmulticast mode [ 370.793762][T21559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7517'. [ 370.833144][T21559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7517'. [ 370.842931][T21559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7517'. [ 371.194422][T21584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.441125][T21603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.001425][T21642] __nla_validate_parse: 2 callbacks suppressed [ 372.001449][T21642] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7557'. [ 372.050826][T21642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7557'. [ 372.428379][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7566'. [ 372.898050][T21691] netlink: 'syz.2.7579': attribute type 1 has an invalid length. [ 373.365844][T21724] netlink: 'syz.2.7595': attribute type 1 has an invalid length. [ 373.414102][T21728] wg1: Master is either lo or non-ether device [ 374.106812][T21770] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 374.217885][T21778] netlink: 'syz.2.7620': attribute type 1 has an invalid length. [ 374.240497][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7622'. [ 374.402984][T21788] ip6tnl1: entered promiscuous mode [ 374.417208][T21788] ip6tnl1: entered allmulticast mode [ 374.586816][T21798] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 374.630271][T21798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.784457][T21808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7634'. [ 375.137111][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7641'. [ 375.987532][T21821] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 376.013072][T21826] xt_hashlimit: size too large, truncated to 1048576 [ 376.020119][T21821] macsec1: entered promiscuous mode [ 376.463378][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7656'. [ 376.506502][T21853] netlink: 'syz.4.7654': attribute type 1 has an invalid length. [ 376.652894][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7660'. [ 376.667335][T21864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7660'. [ 376.848266][T21876] netlink: 'syz.3.7667': attribute type 1 has an invalid length. [ 377.503239][T21924] tipc: Started in network mode [ 377.508279][T21924] tipc: Node identity ac1414aa, cluster identity 4711 [ 377.526333][T21924] tipc: New replicast peer: 100.1.1.1 [ 377.544037][T21924] tipc: Enabled bearer , priority 10 [ 377.816259][T21946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7701'. [ 377.992415][T21955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7704'. [ 378.006459][T21955] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7704'. [ 378.097250][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7709'. [ 378.136191][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7711'. [ 378.596851][T21995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7726'. [ 378.662404][ T1210] tipc: Node number set to 2886997162 [ 378.728200][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7728'. [ 378.840889][T22011] nftables ruleset with unbound set [ 379.627008][T22064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7757'. [ 380.500976][T22124] netlink: 'syz.0.7786': attribute type 4 has an invalid length. [ 380.571519][T22128] tipc: Started in network mode [ 380.576466][T22128] tipc: Node identity ac14140f, cluster identity 4711 [ 380.611808][T22128] tipc: New replicast peer: 255.255.255.255 [ 380.618646][T22128] tipc: Enabled bearer , priority 10 [ 380.928613][T22155] netlink: 'syz.0.7801': attribute type 1 has an invalid length. [ 380.939783][T22155] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7801'. [ 380.949384][T22155] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7801'. [ 380.958813][T22155] netlink: 'syz.0.7801': attribute type 1 has an invalid length. [ 381.058319][ T10] IPVS: starting estimator thread 0... [ 381.170827][T22163] IPVS: using max 30 ests per chain, 72000 per kthread [ 381.571716][T22196] macsec0: entered promiscuous mode [ 381.580798][T22196] macsec0: left promiscuous mode [ 381.730846][ T1210] tipc: Node number set to 2886997007 [ 381.890189][T22207] netlink: 'syz.3.7823': attribute type 1 has an invalid length. [ 382.867135][T22275] netlink: 'syz.0.7855': attribute type 1 has an invalid length. [ 383.229974][T22298] lo: Caught tx_queue_len zero misconfig [ 384.517323][T22381] __nla_validate_parse: 4 callbacks suppressed [ 384.517348][T22381] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7907'. [ 385.155342][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7923'. [ 385.717087][T22441] "syz.0.7935" (22441) uses obsolete ecb(arc4) skcipher [ 386.248644][ T10] IPVS: starting estimator thread 0... [ 386.361194][T22473] IPVS: using max 27 ests per chain, 64800 per kthread [ 386.723666][T22503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7965'. [ 386.945715][T22511] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7969'. [ 386.971451][T22511] netlink: 'syz.0.7969': attribute type 9 has an invalid length. [ 386.988506][T22511] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7969'. [ 387.001433][T22511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7969'. [ 387.510297][T22544] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 388.061924][T22574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7998'. [ 388.082336][T22574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7998'. [ 388.981046][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8022'. [ 389.257753][T22631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8027'. [ 389.410244][T22637] netlink: 'syz.0.8030': attribute type 3 has an invalid length. [ 391.629663][T22718] netlink: 504 bytes leftover after parsing attributes in process `syz.3.8067'. [ 391.930315][T22738] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8076'. [ 391.949286][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8076'. [ 392.301010][T22752] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8083'. [ 393.000809][T22785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8098'. [ 393.398830][T22805] netlink: 'syz.1.8108': attribute type 142 has an invalid length. [ 393.743388][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8115'. [ 393.875715][T22827] netlink: 'syz.3.8118': attribute type 32 has an invalid length. [ 393.913158][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8118'. [ 393.992301][T22827] bond3: option coupled_control: invalid value (12) [ 394.045474][T22827] bond3 (unregistering): Released all slaves [ 394.183451][T22841] sock: sock_set_timeout: `syz.0.8125' (pid 22841) tries to set negative timeout [ 395.501161][T22895] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8153'. [ 395.655387][T22908] macsec0: entered allmulticast mode [ 395.680435][T22908] veth1_macvtap: entered allmulticast mode [ 395.690760][T22908] macsec0: left allmulticast mode [ 395.695863][T22908] veth1_macvtap: left allmulticast mode [ 396.309109][T22931] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8165'. [ 396.511109][T22946] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8173'. [ 396.761251][T22958] netlink: 804 bytes leftover after parsing attributes in process `syz.4.8179'. [ 396.829205][T22962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8181'. [ 396.977401][T22975] IPVS: Error connecting to the multicast addr [ 398.050958][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8215'. [ 398.849317][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8239'. [ 399.151152][T23095] syz.2.8244 (23095) used greatest stack depth: 15400 bytes left [ 399.230832][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 399.247020][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 399.570133][T23120] smc: net device hsr0 applied user defined pnetid SYZ2 [ 399.625211][T23126] sctp: [Deprecated]: syz.2.8257 (pid 23126) Use of int in max_burst socket option. [ 399.625211][T23126] Use struct sctp_assoc_value instead [ 399.890880][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8264'. [ 400.230092][T23153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8271'. [ 400.706672][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8279'. [ 401.123168][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.150845][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8288'. [ 401.211617][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.219550][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8288'. [ 401.261270][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.280776][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8288'. [ 401.289942][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.331175][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.350847][T23202] : renamed from team_slave_1 [ 401.376449][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.397701][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.421158][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.437075][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.473677][T23190] netlink: 'syz.4.8288': attribute type 29 has an invalid length. [ 401.605206][T23215] rdma_op ffff888021f399f0 conn xmit_rdma 0000000000000000 [ 401.797407][T23226] __nla_validate_parse: 25 callbacks suppressed [ 401.797433][T23226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8307'. [ 402.071632][T23244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8316'. [ 402.098884][T23245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8317'. [ 402.198171][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8320'. [ 402.325974][T23261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8324'. [ 402.336489][T23261] netlink: 35 bytes leftover after parsing attributes in process `syz.1.8324'. [ 402.348195][T23263] netlink: 272 bytes leftover after parsing attributes in process `syz.4.8323'. [ 402.541502][T23274] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8329'. [ 402.730544][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8334'. [ 402.793695][T23290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8338'. [ 403.923969][T23360] openvswitch: netlink: Missing valid actions attribute. [ 403.986272][T23360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.422676][T23385] tipc: Enabling of bearer rejected, failed to enable media [ 405.134722][T23429] veth5: entered promiscuous mode [ 405.887596][T23466] sctp: [Deprecated]: syz.1.8414 (pid 23466) Use of int in maxseg socket option. [ 405.887596][T23466] Use struct sctp_assoc_value instead [ 405.994879][T23472] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 406.161702][T23478] validate_nla: 22 callbacks suppressed [ 406.161727][T23478] netlink: 'syz.2.8421': attribute type 29 has an invalid length. [ 407.165883][T23518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.628417][T23540] __nla_validate_parse: 6 callbacks suppressed [ 407.628441][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8451'. [ 407.670744][T23540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8451'. [ 407.701116][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8451'. [ 407.710064][T23540] netlink: 'syz.4.8451': attribute type 5 has an invalid length. [ 407.927865][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8459'. [ 408.080386][ T29] audit: type=1800 audit(1775913277.615:4): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8461" name="memory.events" dev="tmpfs" ino=8633 res=0 errno=0 [ 408.119652][ T29] audit: type=1804 audit(1775913277.655:5): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8461" name="/newroot/1721/memory.events" dev="tmpfs" ino=8633 res=1 errno=0 [ 408.146495][T23573] netlink: 'syz.0.8462': attribute type 58 has an invalid length. [ 408.154662][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8462'. [ 408.553399][T23592] netlink: 'syz.4.8475': attribute type 58 has an invalid length. [ 409.511913][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8490'. [ 409.531117][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8490'. [ 409.991456][T23651] smc: net device wlan0 applied user defined pnetid SYZ0 [ 410.784684][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8520'. [ 411.572945][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8546'. [ 412.191078][T23787] netlink: 'syz.4.8565': attribute type 11 has an invalid length. [ 412.199433][T23787] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.8565'. [ 412.397038][T23799] tipc: Cannot configure node identity twice [ 412.574055][T23811] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 413.028791][T23837] tipc: Enabling of bearer rejected, failed to enable media [ 413.437696][T23863] ip6gretap0: entered promiscuous mode [ 414.042541][T23902] __nla_validate_parse: 2 callbacks suppressed [ 414.042563][T23902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8622'. [ 414.074857][T23902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8622'. [ 414.267070][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8626'. [ 414.465065][T23920] netlink: 277 bytes leftover after parsing attributes in process `syz.4.8631'. [ 414.923958][T23954] sctp: [Deprecated]: syz.3.8650 (pid 23954) Use of int in max_burst socket option. [ 414.923958][T23954] Use struct sctp_assoc_value instead [ 415.361622][T23983] tipc: Enabling of bearer rejected, failed to enable media [ 415.479433][T23995] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8667'. [ 415.733440][T24009] Bluetooth: MGMT ver 1.23 [ 416.017907][T24025] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8682'. [ 416.286437][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8688'. [ 416.321815][T24037] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8688'. [ 416.782835][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8699'. [ 416.812186][T24059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8699'. [ 417.031078][T24073] netlink: 'syz.1.8704': attribute type 10 has an invalid length. [ 417.136948][T24076] pim6reg: entered allmulticast mode [ 417.734087][ T5905] IPVS: starting estimator thread 0... [ 417.821021][T24111] IPVS: using max 25 ests per chain, 60000 per kthread [ 418.227663][T24132] netlink: 'syz.1.8735': attribute type 5 has an invalid length. [ 418.563302][T24152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.186014][T24184] __nla_validate_parse: 3 callbacks suppressed [ 419.186036][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8760'. [ 419.810786][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8778'. [ 419.830091][T24220] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8778'. [ 419.850413][T24220] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8778'. [ 419.870962][T24220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8778'. [ 419.888338][T24220] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8778'. [ 419.899715][T24220] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8778'. [ 419.954539][T24222] vlan2: entered promiscuous mode [ 419.973563][T24222] bridge0: entered promiscuous mode [ 420.324653][T24241] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.8788'. [ 421.172382][T24285] nbd: must specify at least one socket [ 421.301789][T24293] netlink: 'syz.2.8815': attribute type 5 has an invalid length. [ 421.394785][T24301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8818'. [ 421.739221][T24323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8828'. [ 422.325074][T24359] netlink: 'syz.3.8845': attribute type 1 has an invalid length. [ 423.007179][T24404] netlink: 'syz.0.8867': attribute type 29 has an invalid length. [ 423.033060][T24404] netlink: 'syz.0.8867': attribute type 29 has an invalid length. [ 423.262037][T24422] netlink: 'syz.4.8876': attribute type 3 has an invalid length. [ 423.643629][T24443] vlan2: entered promiscuous mode [ 423.648852][T24443] geneve1: entered promiscuous mode [ 423.674481][T24443] vlan2: entered allmulticast mode [ 423.693156][T24443] geneve1: entered allmulticast mode [ 424.047466][T24471] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 424.657017][T24505] __nla_validate_parse: 8 callbacks suppressed [ 424.657041][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8917'. [ 424.700761][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8917'. [ 425.001018][T24522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8925'. [ 426.326839][T24606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.785177][T24613] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8970'. [ 427.838295][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9004'. [ 427.847908][T24683] tipc: Enabling of bearer rejected, failed to enable media [ 428.331250][T24716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9019'. [ 428.481641][T24724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9023'. [ 428.662480][T24730] vlan0: entered promiscuous mode [ 428.664682][T24734] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9028'. [ 428.667585][T24730] gretap0: entered promiscuous mode [ 428.978971][T24752] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9036'. [ 428.994404][T24751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.195306][T24758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.326546][T24758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.555772][T24758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.719178][T24758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.958688][T24750] wg1 speed is unknown, defaulting to 1000 [ 429.964853][ T58] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.973443][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.046835][ T138] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.160439][ T138] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.522944][T24813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9065'. [ 431.230750][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.563849][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9095'. [ 431.573689][T24872] netlink: 'syz.2.9095': attribute type 1 has an invalid length. [ 431.582690][T24872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9095'. [ 432.097430][T24902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9109'. [ 432.589491][ T24] IPVS: starting estimator thread 0... [ 432.680799][T24937] IPVS: using max 29 ests per chain, 69600 per kthread [ 432.714290][T24939] vxcan3: entered promiscuous mode [ 432.991853][T24960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9131'. [ 433.210509][T24965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.264270][T24973] netlink: 'syz.1.9136': attribute type 4 has an invalid length. [ 433.295306][T24973] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9136'. [ 433.357590][T24965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.514438][T24965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.694760][T24965] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.011655][ T1351] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.058452][ T1351] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.101414][ T1351] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.153224][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.130998][T24999] wg1 speed is unknown, defaulting to 1000 [ 435.301883][T25068] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9175'. [ 435.710232][T25084] netlink: 'syz.2.9182': attribute type 10 has an invalid length. [ 435.758863][T25085] netlink: 'syz.2.9182': attribute type 10 has an invalid length. [ 435.780875][T25085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9182'. [ 436.836875][T25117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9194'. [ 437.411314][T25142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9204'. [ 438.298821][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9222'. [ 438.593281][T25190] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9227'. [ 438.711907][T25194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9229'. [ 438.937735][T25208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9236'. [ 439.300238][T25226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9245'. [ 439.552099][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.679846][ T5905] IPVS: starting estimator thread 0... [ 439.801932][T25249] IPVS: using max 29 ests per chain, 69600 per kthread [ 440.095323][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9263'. [ 440.192222][T25274] netlink: 'syz.2.9265': attribute type 11 has an invalid length. [ 440.220939][T25274] netlink: 'syz.2.9265': attribute type 4 has an invalid length. [ 440.228749][T25274] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.9265'. [ 440.467040][T25087] Set syz1 is full, maxelem 65536 reached [ 440.872160][T25307] tipc: Enabling of bearer rejected, failed to enable media [ 441.031588][T25320] __nla_validate_parse: 2 callbacks suppressed [ 441.031611][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9286'. [ 441.450485][T25349] tipc: MTU too low for tipc bearer [ 441.511759][T25355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9303'. [ 441.531186][T25355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9303'. [ 441.540191][T25355] netlink: 'syz.4.9303': attribute type 13 has an invalid length. [ 441.886821][T25375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9312'. [ 442.003602][T25386] netlink: 'syz.3.9318': attribute type 1 has an invalid length. [ 442.304031][T25402] netlink: 'syz.3.9325': attribute type 61 has an invalid length. [ 443.059852][T25438] netlink: 'syz.3.9342': attribute type 13 has an invalid length. [ 443.676904][T25463] netlink: 'syz.4.9353': attribute type 27 has an invalid length. [ 444.041311][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.228263][ T29] audit: type=1804 audit(1775913313.765:6): pid=25486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9365" name="/newroot/1837/cgroup.controllers" dev="tmpfs" ino=9217 res=1 errno=0 [ 444.270575][ T29] audit: type=1800 audit(1775913313.805:7): pid=25486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9365" name="cgroup.controllers" dev="tmpfs" ino=9217 res=0 errno=0 [ 444.294452][T25487] netlink: 'syz.3.9364': attribute type 3 has an invalid length. [ 444.573628][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9375'. [ 445.321367][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.978952][T25584] : option downdelay: invalid value (18446744073709547007) [ 445.987040][T25584] : option downdelay: allowed values 0 - 2147483647 [ 446.006565][T25584]  (unregistering): Released all slaves [ 446.475797][T25617] netlink: 'syz.2.9427': attribute type 13 has an invalid length. [ 446.676449][T25624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9431'. [ 446.685998][ T138] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.694882][ T138] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.709468][T25630] xt_hashlimit: size too large, truncated to 1048576 [ 446.722191][ T138] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.760999][ T138] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.951468][T25642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9437'. [ 447.340853][T25659] IPVS: Unknown mcast interface: veth0_to_bond [ 448.006065][T25706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9460'. [ 448.195826][T25715] macsec1: entered promiscuous mode [ 448.231301][T25717] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9466'. [ 448.597111][T25740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9477'. [ 448.619957][T25740] vlan0: entered promiscuous mode [ 448.625573][T25740] bridge0: entered promiscuous mode [ 448.990086][T25757] x_tables: ip6_tables: mark.1 match: invalid size 16 (kernel) != (user) 24 [ 449.390489][T25782] netlink: 'syz.4.9497': attribute type 13 has an invalid length. [ 449.791198][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.808303][T25792] nbd: socks must be embedded in a SOCK_ITEM attr [ 450.389053][T25817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9512'. [ 450.431150][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.486722][T25824] tipc: Started in network mode [ 450.494726][T25824] tipc: Node identity , cluster identity 4711 [ 450.501346][T25824] tipc: Failed to obtain node identity [ 450.517236][T25824] tipc: Enabling of bearer rejected, failed to enable media [ 451.235373][T25858] vlan3: entered promiscuous mode [ 451.240559][T25858] bridge0: entered promiscuous mode [ 451.388674][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9536'. [ 451.400534][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9536'. [ 451.530517][T25876] macvtap0: entered promiscuous mode [ 451.546103][T25876] syz_tun: entered promiscuous mode [ 451.555469][T25876] syz_tun: left promiscuous mode [ 452.404304][T25935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9568'. [ 452.733438][T25957] netlink: 'syz.2.9580': attribute type 1 has an invalid length. [ 452.746179][T25957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.941608][T25969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.863734][T26030] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9616'. [ 453.988833][T26036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9620'. [ 454.004019][T26038] netlink: 'syz.3.9618': attribute type 1 has an invalid length. [ 454.020919][T26038] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9618'. [ 454.041195][T26038] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9618'. [ 454.050137][T26038] netlink: 'syz.3.9618': attribute type 1 has an invalid length. [ 454.167850][T26045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9623'. [ 454.182238][T26045] netlink: 'syz.4.9623': attribute type 14 has an invalid length. [ 454.187153][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9624'. [ 454.192177][T26045] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9623'. [ 454.275097][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9626'. [ 454.461701][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9633'. [ 454.471425][T26060] nbd: illegal input index -1113835520 [ 454.581883][T26063] vlan0: entered promiscuous mode [ 454.601553][T26063] bridge0: entered promiscuous mode [ 455.144640][T26098] xt_time: unknown flags 0xf4 [ 455.207425][T26104] netlink: 'syz.4.9651': attribute type 1 has an invalid length. [ 455.265209][T26104] netlink: 'syz.4.9651': attribute type 1 has an invalid length. [ 455.461742][T26118] ksmbd: Unknown IPC event: 1, ignore. [ 455.555855][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.210821][T26158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.287902][T26162] openvswitch: netlink: Message has 2 unknown bytes. [ 456.430265][T26169] Bluetooth: MGMT ver 1.23 [ 456.846710][T26191] netlink: 'syz.1.9688': attribute type 18 has an invalid length. [ 457.460839][T26222] netlink: 'syz.2.9701': attribute type 4 has an invalid length. [ 457.694093][T26236] __nla_validate_parse: 10 callbacks suppressed [ 457.694119][T26236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9706'. [ 457.938744][T26247] netlink: 'syz.3.9711': attribute type 28 has an invalid length. [ 458.967412][T26303] sctp: [Deprecated]: syz.1.9731 (pid 26303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.967412][T26303] Use struct sctp_sack_info instead [ 459.016434][T26303] sctp: [Deprecated]: syz.1.9731 (pid 26303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.016434][T26303] Use struct sctp_sack_info instead [ 459.841519][T26346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9752'. [ 459.892363][T26350] Cannot find set identified by id 28724 to match [ 459.926404][T26353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9755'. [ 459.941327][T26353] tipc: Invalid UDP bearer configuration [ 459.941388][T26353] tipc: Enabling of bearer rejected, failed to enable media [ 459.978625][T26355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9756'. [ 460.141383][T26364] netlink: 'syz.2.9759': attribute type 4 has an invalid length. [ 460.149215][T26364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9759'. [ 460.189166][T26366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9761'. [ 460.218382][T26366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9761'. [ 460.237768][T26366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9761'. [ 460.257789][T26366] netlink: 'syz.4.9761': attribute type 3 has an invalid length. [ 460.280933][T26366] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9761'. [ 460.311450][T26366] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9761'. [ 461.022314][T26419] netlink: 'syz.3.9786': attribute type 11 has an invalid length. [ 461.031195][T26419] netlink: 'syz.3.9786': attribute type 4 has an invalid length. [ 461.321044][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.589595][T26448] sctp: [Deprecated]: syz.0.9799 (pid 26448) Use of int in max_burst socket option. [ 461.589595][T26448] Use struct sctp_assoc_value instead [ 462.942811][T26511] netlink: 'syz.4.9829': attribute type 3 has an invalid length. [ 462.983736][T26511] __nla_validate_parse: 4 callbacks suppressed [ 462.983757][T26511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9829'. [ 463.266684][T26530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9839'. [ 463.392784][T26534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9841'. [ 463.902257][ T166] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 463.911108][ T166] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 463.931190][ T1210] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 464.173902][ T1210] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 464.191285][ T1210] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 465.675979][T26675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9905'. [ 465.736385][T26677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9906'. [ 465.894671][T26685] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9910'. [ 466.126478][T26693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9914'. [ 466.275497][T26679] ipvlan2: entered promiscuous mode [ 466.413025][T26701] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9917'. [ 466.432593][T26701] netlink: 'syz.4.9917': attribute type 2 has an invalid length. [ 466.640866][T26711] netlink: 'syz.2.9922': attribute type 62 has an invalid length. [ 466.985767][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9933'. [ 467.010875][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9933'. [ 467.071150][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.532552][T26758] macsec1: entered allmulticast mode [ 467.537958][T26758] macsec0: entered allmulticast mode [ 468.161831][T26792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9962'. [ 468.197108][T26794] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9963'. [ 468.337582][T26802] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9966'. [ 468.350975][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 468.543301][T26816] netlink: 348 bytes leftover after parsing attributes in process `syz.3.9973'. [ 468.720887][T26825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9979'. [ 469.244614][T26862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9997'. [ 469.381252][T26873] netlink: 'syz.1.10003': attribute type 11 has an invalid length. [ 469.607741][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10010'. [ 469.631275][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.799314][T26900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.164633][T26927] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 470.286681][T26933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10032'. [ 470.617985][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10043'. [ 471.701520][T27022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10076'. [ 472.001382][T27048] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 472.019824][T27048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.270438][T27063] macvlan2: entered allmulticast mode [ 472.277843][T27063] bridge0: port 1(macvlan2) entered blocking state [ 472.285064][T27063] bridge0: port 1(macvlan2) entered disabled state [ 472.794514][T27096] netlink: 'syz.1.10112': attribute type 3 has an invalid length. [ 472.832035][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.313618][T27124] ipvlan2: entered promiscuous mode [ 473.341115][T27128] netlink: 'syz.2.10127': attribute type 1 has an invalid length. [ 473.368711][T27128] nbd: error processing sock list [ 473.423299][T27130] __nla_validate_parse: 4 callbacks suppressed [ 473.423323][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10129'. [ 473.440856][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10129'. [ 473.451331][T27130] netlink: 'syz.1.10129': attribute type 14 has an invalid length. [ 473.479418][T27130] netlink: 'syz.1.10129': attribute type 13 has an invalid length. [ 473.668053][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10137'. [ 473.703004][T27147] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 474.496313][T27189] netlink: 'syz.0.10156': attribute type 3 has an invalid length. [ 474.522983][T27189] netlink: 772 bytes leftover after parsing attributes in process `syz.0.10156'. [ 474.542139][T27189] netlink: 'syz.0.10156': attribute type 3 has an invalid length. [ 474.557100][T27189] netlink: 772 bytes leftover after parsing attributes in process `syz.0.10156'. [ 475.296272][T27233] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.10180'. [ 475.400229][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.071397][T27272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10195'. [ 476.653472][T27292] dummy0: left allmulticast mode [ 476.658526][T27292] dummy0: left promiscuous mode [ 476.670830][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 476.687076][T27292] bridge0: port 1(dummy0) entered disabled state [ 476.715187][T27292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.891630][T27301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10210'. [ 477.063482][T27312] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10214'. [ 478.592024][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.122222][T27410] sctp: [Deprecated]: syz.2.10259 (pid 27410) Use of int in max_burst socket option deprecated. [ 479.122222][T27410] Use struct sctp_assoc_value instead [ 479.440024][T27431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10272'. [ 479.510409][T27434] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10273'. [ 479.586695][T27439] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10276'. [ 479.710537][T27445] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 479.719090][T27445] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 480.532226][T27495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10303'. [ 480.551997][T27497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10305'. [ 480.879085][T27519] netlink: 'syz.2.10316': attribute type 1 has an invalid length. [ 480.897666][T27519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.151387][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.716747][T27560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10335'. [ 481.866128][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10339'. [ 481.994853][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10343'. [ 482.073405][T27574] macvtap1: entered promiscuous mode [ 482.078869][T27574] veth1_to_hsr: entered promiscuous mode [ 482.102497][T27574] macvtap1: entered allmulticast mode [ 482.107981][T27574] veth1_to_hsr: entered allmulticast mode [ 482.456645][ T166] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.465173][ T166] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.485529][ T166] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.530904][ T166] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.762805][T27619] tipc: Started in network mode [ 482.767790][T27619] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 482.805308][T27619] tipc: Enabling of bearer rejected, failed to enable media [ 482.862774][T27628] nbd: couldn't find a device at index 0 [ 483.446216][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10387'. [ 483.863407][T27690] netlink: 'syz.3.10395': attribute type 9 has an invalid length. [ 484.351264][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.690386][T27739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10421'. [ 484.714501][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10421'. [ 484.733891][T27739] netlink: 'syz.2.10421': attribute type 14 has an invalid length. [ 484.994161][T27759] pim6reg: entered allmulticast mode [ 485.008711][T27759] pim6reg: left allmulticast mode [ 485.256178][T27775] netlink: 'syz.3.10439': attribute type 11 has an invalid length. [ 485.283382][T27775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10439'. [ 485.665681][T27799] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10450'. [ 485.678248][T27799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10450'. [ 486.139808][T27828] macsec0: entered promiscuous mode [ 486.145598][T27828] macsec0: entered allmulticast mode [ 486.258188][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10466'. [ 486.348422][T27842] tipc: Enabling of bearer rejected, already enabled [ 486.622476][T27858] dvmrp0: entered allmulticast mode [ 486.776246][T27868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10483'. [ 486.911131][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.127010][T27890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10492'. [ 487.324394][T27902] tipc: Enabling of bearer rejected, failed to enable media [ 487.364888][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10502'. [ 487.488036][T27914] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10504'. [ 487.498165][T27914] openvswitch: netlink: Key type 30 is not supported [ 489.858285][T28067] __nla_validate_parse: 3 callbacks suppressed [ 489.858309][T28067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10578'. [ 489.967493][T28067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10578'. [ 490.044181][T28076] block nbd64: NBD_DISCONNECT [ 490.111805][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.360442][T28075] udevd[28075]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 491.089239][T28141] syz_tun: entered allmulticast mode [ 491.097843][T28140] syz_tun: left allmulticast mode [ 491.200012][T28145] sctp: [Deprecated]: syz.2.10612 (pid 28145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.200012][T28145] Use struct sctp_sack_info instead [ 492.242830][T28209] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10642'. [ 492.271856][T28209] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.10642'. [ 492.511983][T28230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.543995][T28232] tipc: New replicast peer: 255.255.255.255 [ 492.563096][T28232] tipc: Enabled bearer , priority 26 [ 492.671136][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.704238][T28236] bond2 (unregistering): Released all slaves [ 492.873705][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10659'. [ 493.882957][T28304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10685'. [ 493.950802][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 494.036754][T28312] batadv_slave_0: entered promiscuous mode [ 494.043828][T28311] batadv_slave_0: left promiscuous mode [ 494.131839][T28319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10693'. [ 494.272630][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10696'. [ 494.913755][T28366] netlink: 'syz.4.10715': attribute type 2 has an invalid length. [ 494.959277][T28366] !: entered promiscuous mode [ 494.991380][T28366] netlink: 'syz.4.10715': attribute type 2 has an invalid length. [ 495.131148][T28382] C: renamed from team_slave_0 [ 495.148698][T28382] netlink: 'syz.4.10724': attribute type 2 has an invalid length. [ 495.170993][T28382] netlink: 116 bytes leftover after parsing attributes in process `syz.4.10724'. [ 495.186742][T28382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 495.390034][T28395] netlink: 'syz.1.10727': attribute type 11 has an invalid length. [ 495.413928][T28398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10729'. [ 495.872741][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.307822][T28458] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 496.523457][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 497.034043][T28498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10773'. [ 497.194868][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10776'. [ 497.204174][T28503] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10776'. [ 497.214300][T28503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10776'. [ 497.712885][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.158305][T28555] batman_adv: batadv0: Adding interface: macvtap1 [ 498.166086][T28555] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.195314][T28555] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 498.351498][T28563] xt_hashlimit: size too large, truncated to 1048576 [ 498.390869][T28567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10802'. [ 498.561482][T28567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10802'. [ 498.959995][T28578] pimreg0: tun_chr_ioctl cmd 1074025681 [ 499.803535][T28626] nbd: socks must be embedded in a SOCK_ITEM attr [ 499.818333][T28626] block nbd2: shutting down sockets [ 499.835303][T28630] netlink: 'syz.0.10830': attribute type 3 has an invalid length. [ 500.492449][T28670] netlink: 'syz.2.10848': attribute type 3 has an invalid length. [ 500.506895][T28670] netlink: 'syz.2.10848': attribute type 1 has an invalid length. [ 500.525845][T28670] netlink: 212 bytes leftover after parsing attributes in process `syz.2.10848'. [ 500.545683][T28670] NCSI netlink: No device for ifindex 813332851 [ 500.917026][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.058331][T28709] netlink: 556 bytes leftover after parsing attributes in process `syz.3.10865'. [ 501.187401][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10867'. [ 501.220401][T28716] netlink: 'syz.0.10867': attribute type 15 has an invalid length. [ 501.257896][T28716] netlink: 'syz.0.10867': attribute type 25 has an invalid length. [ 501.290722][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10867'. [ 501.786908][T28752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10884'. [ 501.809153][T28752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10884'. [ 502.303164][T28780] netlink: 'syz.3.10898': attribute type 1 has an invalid length. [ 502.328417][T28780] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10898'. [ 502.338537][T28780] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10898'. [ 502.368419][T28780] netlink: 'syz.3.10898': attribute type 1 has an invalid length. [ 502.390085][T28780] netlink: 634 bytes leftover after parsing attributes in process `syz.3.10898'. [ 502.704859][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10908'. [ 502.903437][T28821] erspan0: entered promiscuous mode [ 503.422718][T28846] bond2: entered promiscuous mode [ 503.436278][T28846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.462681][T28846] bridge0: port 3(bond2) entered blocking state [ 503.470210][T28846] bridge0: port 3(bond2) entered disabled state [ 503.503252][T28846] bond2: entered allmulticast mode [ 503.551752][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.284078][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.738782][T28984] tap0: tun_chr_ioctl cmd 1074025676 [ 506.752502][T28984] tap0: owner set to 0 [ 506.843512][T28988] __nla_validate_parse: 1 callbacks suppressed [ 506.843537][T28988] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10987'. [ 507.137430][T28998] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.10993'. [ 507.381962][T29013] netlink: 'syz.2.10997': attribute type 11 has an invalid length. [ 507.930037][T29046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.937384][T29046] IPv6: NLM_F_CREATE should be set when creating new route [ 507.944731][T29046] IPv6: NLM_F_CREATE should be set when creating new route [ 507.984930][T29046] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11012'. [ 508.039635][T29050] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11016'. [ 508.998392][T29104] sctp: [Deprecated]: syz.3.11040 (pid 29104) Use of int in maxseg socket option. [ 508.998392][T29104] Use struct sctp_assoc_value instead [ 509.312178][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.079038][T29151] netlink: 'syz.4.11062': attribute type 2 has an invalid length. [ 510.107232][T29151] !9: entered promiscuous mode [ 510.159088][T29154] netlink: 'syz.4.11062': attribute type 2 has an invalid length. [ 510.213069][T29154] !9: left promiscuous mode [ 510.399166][T29166] tipc: Enabling of bearer rejected, failed to enable media [ 510.494650][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11072'. [ 510.520225][T29175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11072'. [ 511.211501][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11082'. [ 511.511635][T29220] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11090'. [ 511.536392][T29220] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 511.587179][T29222] dummy0: entered promiscuous mode [ 511.611906][T29221] dummy0: left promiscuous mode [ 511.881060][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.154754][T29252] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 513.003788][T29288] nbd2: detected capacity change from 0 to 127 [ 513.019485][ T5834] block nbd2: Receive control failed (result -32) [ 513.028717][ T5845] block nbd2: Receive control failed (result -32) [ 513.039823][T29303] block nbd2: Dead connection, failed to find a fallback [ 513.048449][T29303] block nbd2: shutting down sockets [ 513.055191][T29303] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.066564][T29303] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.075614][T29303] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.085535][T29303] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.093498][T29303] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.103251][T29303] Buffer I/O error on dev nbd2, logical block 2, async page read [ 513.112141][T29303] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.122148][T29303] Buffer I/O error on dev nbd2, logical block 3, async page read [ 513.130069][T29303] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.139784][T29303] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.147844][T29303] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.157721][T29303] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.165726][T29303] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.175694][T29303] Buffer I/O error on dev nbd2, logical block 2, async page read [ 513.183766][T29303] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.193526][T29303] Buffer I/O error on dev nbd2, logical block 3, async page read [ 513.201552][T29303] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.211247][T29303] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.219126][T29303] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.240703][T29303] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.271506][T29303] ldm_validate_partition_table(): Disk read failed. [ 513.279508][T29303] Dev nbd2: unable to read RDB block 0 [ 513.306639][T29303] nbd2: unable to read partition table [ 513.334763][T29303] ldm_validate_partition_table(): Disk read failed. [ 513.352400][T29303] Dev nbd2: unable to read RDB block 0 [ 513.357971][ T29] audit: type=1804 audit(1775913382.895:8): pid=29308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11128" name="/newroot/2282/cgroup.controllers" dev="tmpfs" ino=11450 res=1 errno=0 [ 513.390999][T29310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11130'. [ 513.392877][T29303] nbd2: unable to read partition table [ 513.443389][ T29] audit: type=1800 audit(1775913382.895:9): pid=29308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11128" name="cgroup.controllers" dev="tmpfs" ino=11450 res=0 errno=0 [ 513.471869][T29303] ldm_validate_partition_table(): Disk read failed. [ 513.479191][T29303] Dev nbd2: unable to read RDB block 0 [ 513.485828][T29303] nbd2: unable to read partition table [ 513.496994][T29303] ldm_validate_partition_table(): Disk read failed. [ 513.514654][T29303] Dev nbd2: unable to read RDB block 0 [ 513.541517][T29303] nbd2: unable to read partition table [ 513.696778][T29321] netlink: 'syz.0.11135': attribute type 8 has an invalid length. [ 514.033831][T29337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11143'. [ 514.351256][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.585619][T29367] netlink: 'syz.1.11156': attribute type 1 has an invalid length. [ 514.602145][T29367] netlink: 'syz.1.11156': attribute type 7 has an invalid length. [ 514.620352][T29367] netlink: 'syz.1.11156': attribute type 8 has an invalid length. [ 514.655294][T29367] netlink: 208 bytes leftover after parsing attributes in process `syz.1.11156'. [ 514.675774][T29367] NCSI netlink: No device for ifindex 1073545264 [ 514.711463][T29374] block nbd3: Unsupported socket: should be TCP or UNIX. [ 515.045262][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11167'. [ 515.068755][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11167'. [ 515.081217][T29392] netlink: 'syz.2.11167': attribute type 18 has an invalid length. [ 515.682737][T29430] netlink: 'syz.2.11186': attribute type 1 has an invalid length. [ 515.695876][T29430] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11186'. [ 516.116111][T29455] netlink: 'syz.4.11196': attribute type 2 has an invalid length. [ 516.147922][T29455] !: entered promiscuous mode [ 516.171268][T29455] netlink: 'syz.4.11196': attribute type 2 has an invalid length. [ 516.191047][T29455] !: left promiscuous mode [ 516.520275][T29476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11206'. [ 516.559429][T29476] bond4: entered promiscuous mode [ 516.565908][T29476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.599098][T29476] bond4 (unregistering): Released all slaves [ 517.208453][T29494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11214'. [ 517.631211][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.034872][T29516] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 518.261867][T29516] bond4 (unregistering): Released all slaves [ 518.954095][T29553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11240'. [ 518.965520][T29553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11240'. [ 519.031420][T29558] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11243'. [ 519.053159][T29558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11243'. [ 519.084519][T29562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11245'. [ 519.552398][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.978705][T29613] netlink: 'syz.3.11268': attribute type 83 has an invalid length. [ 520.671298][T29639] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11281'. [ 522.110815][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 522.197323][T29709] sctp: [Deprecated]: syz.4.11313 (pid 29709) Use of int in max_burst socket option. [ 522.197323][T29709] Use struct sctp_assoc_value instead [ 522.322191][T29711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11310'. [ 522.341251][T29711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11310'. [ 522.683661][T29735] tap0: tun_chr_ioctl cmd 2147767520 [ 522.814700][T29743] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 523.391987][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 524.396368][T29808] bond3: option ad_user_port_key: invalid value (65535) [ 524.403819][T29808] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 524.450727][T29808] bond3 (unregistering): Released all slaves [ 524.613042][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11352'. [ 524.653629][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11352'. [ 524.701202][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11352'. [ 524.741161][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11352'. [ 524.750450][T29814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11352'. [ 525.044354][T29839] sctp: [Deprecated]: syz.3.11364 (pid 29839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.044354][T29839] Use struct sctp_sack_info instead [ 525.311103][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.456616][T29862] tun0: tun_chr_ioctl cmd 2148553947 [ 526.536512][T29934] netlink: 2076 bytes leftover after parsing attributes in process `syz.3.11407'. [ 526.566241][T29934] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 526.585459][T29936] bridge0: port 1(syz_tun) entered blocking state [ 526.601281][T29936] bridge0: port 1(syz_tun) entered disabled state [ 526.637166][T29936] syz_tun: entered promiscuous mode [ 526.655030][T29936] bridge0: port 1(syz_tun) entered blocking state [ 526.662502][T29936] bridge0: port 1(syz_tun) entered forwarding state [ 527.356251][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11430'. [ 527.406757][T29984] macvlan3: entered allmulticast mode [ 527.416392][T29984] hsr0: entered allmulticast mode [ 527.423187][T29984] hsr_slave_0: entered allmulticast mode [ 527.428918][T29984] hsr_slave_1: entered allmulticast mode [ 527.484529][T29990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11432'. [ 527.820742][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11442'. [ 527.844896][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11442'. [ 528.700025][T30057] batadv_slave_1: entered promiscuous mode [ 528.729444][T30056] batadv_slave_1: left promiscuous mode [ 529.100114][T30085] netlink: 'syz.1.11478': attribute type 9 has an invalid length. [ 529.150901][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 529.152709][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.061757][T30146] xt_hashlimit: size too large, truncated to 1048576 [ 530.325379][T30156] __nla_validate_parse: 4 callbacks suppressed [ 530.325400][T30156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11509'. [ 530.603494][T30177] netlink: 'syz.1.11518': attribute type 1 has an invalid length. [ 530.630659][T30177] netlink: 'syz.1.11518': attribute type 2 has an invalid length. [ 530.645848][T30177] netlink: 'syz.1.11518': attribute type 1 has an invalid length. [ 530.667326][T30177] netlink: 'syz.1.11518': attribute type 2 has an invalid length. [ 531.071252][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.275868][T30206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11532'. [ 531.285519][T30204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11531'. [ 531.426728][T30213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11536'. [ 531.699114][T30222] syz_tun: entered promiscuous mode [ 531.748901][T30222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.770392][T30222] `: left promiscuous mode [ 531.790911][T30222] team_slave_0: left promiscuous mode [ 531.797898][T30222] team_slave_1: left promiscuous mode [ 531.812527][T30222] 8021q: adding VLAN 0 to HW filter on device ` [ 531.859247][T30222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.913127][T20485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.942374][T30238] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11546'. [ 532.065630][T30245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11549'. [ 532.091029][T20485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.452338][ T138] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.538307][T30279] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.11566'. [ 533.131972][T30307] netlink: 616 bytes leftover after parsing attributes in process `syz.0.11578'. [ 533.473968][ T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.490971][ T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 533.561475][T30333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11592'. [ 533.868901][T30352] netlink: 'syz.1.11599': attribute type 6 has an invalid length. [ 534.040879][T20485] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.331361][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11613'. [ 534.912044][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.255722][T30436] netlink: 'syz.1.11637': attribute type 20 has an invalid length. [ 535.414991][T30445] block nbd3: Unsupported socket: should be TCP or UNIX. [ 536.644496][T30495] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 536.662697][T30495] syzkaller1: linktype set to 825 [ 536.831965][ T138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.246729][T30528] __nla_validate_parse: 3 callbacks suppressed [ 537.246754][T30528] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.11677'. [ 537.472404][T30535] syz.1.11680 (30535) used obsolete PPPIOCDETACH ioctl [ 537.788195][T30550] netlink: 'syz.2.11689': attribute type 83 has an invalid length. [ 537.796569][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.417035][T30585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11704'. [ 538.559573][T30591] netlink: 7 bytes leftover after parsing attributes in process `syz.2.11707'. [ 538.785732][ T5834] block nbd3: Receive control failed (result -32) [ 539.016698][T30619] netlink: 'syz.3.11719': attribute type 25 has an invalid length. [ 539.024894][T30619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11719'. [ 539.036342][T30619] netlink: 'syz.3.11719': attribute type 25 has an invalid length. [ 539.061033][T30619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11719'. [ 539.484659][T30642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11728'. [ 539.537151][T30642] macvlan4: entered allmulticast mode [ 539.617044][T30649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11732'. [ 539.744215][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11737'. [ 539.759698][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11737'. [ 540.137670][T30686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11749'. [ 540.671799][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.751528][T30743] netlink: 'syz.3.11775': attribute type 2 has an invalid length. [ 542.592977][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.280256][T30836] __nla_validate_parse: 4 callbacks suppressed [ 543.280278][T30836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11816'. [ 543.420233][T30844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11819'. [ 543.647585][T30858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11827'. [ 543.668316][T30858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11827'. [ 543.678401][T30858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11827'. [ 543.802961][T30862] netlink: 'syz.1.11831': attribute type 11 has an invalid length. [ 543.820703][T30862] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.11831'. [ 544.297006][T30895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 544.375457][T30901] netlink: 'syz.1.11846': attribute type 2 has an invalid length. [ 545.425061][T30962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11875'. [ 545.614598][T30972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11881'. [ 545.695866][T30976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11882'. [ 546.114461][T30994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11890'. [ 546.431259][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.108033][T31016] netlink: 'syz.4.11901': attribute type 15 has an invalid length. [ 548.362314][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.481471][T31050] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 548.490815][T31050] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 549.068410][T31123] __nla_validate_parse: 1 callbacks suppressed [ 549.068430][T31123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11952'. [ 549.166565][T31127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11954'. [ 549.293461][T31135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11958'. [ 549.616478][T31154] netlink: 'syz.2.11967': attribute type 10 has an invalid length. [ 549.625103][T31154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11967'. [ 549.819215][T31167] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 550.231309][T31191] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11983'. [ 550.272916][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.419368][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11988'. [ 550.537680][T31206] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 550.549480][T31208] netlink: 'syz.4.11991': attribute type 83 has an invalid length. [ 550.557562][T31206] syzkaller1: linktype set to 1 [ 550.647934][T31212] tap0: tun_chr_ioctl cmd 1074025681 [ 551.262063][T31241] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 552.779859][T31284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12021'. [ 552.789743][T31287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12022'. [ 552.816630][T31289] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12023'. [ 553.142446][T31307] pimreg: tun_chr_ioctl cmd 1074025677 [ 553.149124][T31307] pimreg: linktype set to 774 [ 553.369037][T31317] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12037'. [ 553.453756][T31324] netlink: 'syz.2.12040': attribute type 2 has an invalid length. [ 554.121362][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.142459][T31365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12061'. [ 554.774242][T31388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12071'. [ 555.093670][ T29] audit: type=1804 audit(1775913424.635:10): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12074" name="/newroot/2422/cgroup.controllers" dev="tmpfs" ino=12165 res=1 errno=0 [ 555.145260][ T29] audit: type=1800 audit(1775913424.635:11): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12074" name="cgroup.controllers" dev="tmpfs" ino=12165 res=0 errno=0 [ 555.210887][ T29] audit: type=1800 audit(1775913424.665:12): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12074" name="cgroup.controllers" dev="tmpfs" ino=12165 res=0 errno=0 [ 555.314685][T31408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12081'. [ 555.331207][T31403] block nbd4: server does not support multiple connections per device. [ 555.351650][T31403] block nbd4: shutting down sockets [ 555.752373][T31434] IPv6: Can't replace route, no match found [ 556.031251][ T1351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.011267][T31486] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.12117'. [ 557.166829][T31498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12123'. [ 557.196318][T31498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12123'. [ 557.644278][T31524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12136'. [ 557.674298][T31524] netem: change failed [ 557.809348][T31537] netlink: 300 bytes leftover after parsing attributes in process `syz.3.12141'. [ 557.977753][T31547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12146'. [ 558.309171][T31572] openvswitch: netlink: Duplicate or invalid key (type 0). [ 558.317884][T31572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.553538][T31588] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.12164'. [ 558.950148][T31615] batadv_slave_0: entered promiscuous mode [ 558.980191][T31614] batadv_slave_0: left promiscuous mode [ 559.157624][T31628] erspan0: entered promiscuous mode [ 559.172139][T31628] erspan0: left promiscuous mode [ 559.379939][T31638] __nla_validate_parse: 4 callbacks suppressed [ 559.379964][T31638] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12189'. [ 559.410306][T31641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12187'. [ 559.871477][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.032200][T31679] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12206'. [ 560.794218][T31721] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 560.995812][T31734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12234'. [ 561.022981][T31735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12233'. [ 561.100323][T31739] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.12236'. [ 561.111122][T31739] openvswitch: netlink: Message has 16 unknown bytes. [ 561.431441][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12246'. [ 561.627909][T31771] sctp: [Deprecated]: syz.1.12251 (pid 31771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.627909][T31771] Use struct sctp_sack_info instead [ 561.792821][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.298644][T31808] netlink: 'syz.4.12269': attribute type 2 has an invalid length. [ 562.315022][T31808] : entered promiscuous mode [ 562.328867][T31808] netlink: 'syz.4.12269': attribute type 2 has an invalid length. [ 562.337404][T31808] : left promiscuous mode [ 562.442233][T31810] netlink: 'syz.2.12270': attribute type 14 has an invalid length. [ 563.033697][T31851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12286'. [ 563.398656][T31873] netem: change failed [ 563.714843][T31895] vxcan2: entered allmulticast mode [ 563.957489][T31912] pim6reg: left allmulticast mode [ 563.981615][T31915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12316'. [ 563.991576][T31915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12316'. [ 564.351295][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.388549][T31939] xfrm1: entered allmulticast mode [ 565.141235][T31977] __nla_validate_parse: 6 callbacks suppressed [ 565.141256][T31977] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12341'. [ 565.157138][T31977] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12341'. [ 565.415122][T31995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12349'. [ 565.644822][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.166185][T32033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12365'. [ 566.175639][T32033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12365'. [ 566.185277][T32033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12365'. [ 566.195793][T32033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12365'. [ 566.207413][T32033] netlink: 'syz.1.12365': attribute type 6 has an invalid length. [ 566.591754][T32054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12374'. [ 566.654310][T32058] [ 566.656726][T32058] ====================================================== [ 566.663782][T32058] WARNING: possible circular locking dependency detected [ 566.670858][T32058] syzkaller #0 Not tainted [ 566.675312][T32058] ------------------------------------------------------ [ 566.682370][T32058] syz.3.12376/32058 is trying to acquire lock: [ 566.688561][T32058] ffffffff8e883760 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 566.697790][T32058] [ 566.697790][T32058] but task is already holding lock: [ 566.705202][T32058] ffff888075804080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 566.714791][T32058] [ 566.714791][T32058] which lock already depends on the new lock. [ 566.714791][T32058] [ 566.725240][T32058] [ 566.725240][T32058] the existing dependency chain (in reverse order) is: [ 566.734301][T32058] [ 566.734301][T32058] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 566.741902][T32058] __might_fault+0xcb/0x130 [ 566.746955][T32058] _copy_from_user+0x28/0xb0 [ 566.752107][T32058] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 566.758664][T32058] ip_generic_getfrag+0x149/0x2d0 [ 566.764251][T32058] __ip6_append_data+0x39e4/0x3f70 [ 566.769930][T32058] ip6_append_data+0x10f/0x280 [ 566.775250][T32058] rawv6_sendmsg+0x12d3/0x18e0 [ 566.780570][T32058] ____sys_sendmsg+0x80a/0x9f0 [ 566.785901][T32058] ___sys_sendmsg+0x2a5/0x360 [ 566.791136][T32058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 566.797099][T32058] do_syscall_64+0x14d/0xf80 [ 566.802245][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.808681][T32058] [ 566.808681][T32058] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 566.816453][T32058] lock_sock_nested+0x41/0x100 [ 566.821810][T32058] inet_shutdown+0x6a/0x390 [ 566.826879][T32058] nbd_mark_nsock_dead+0x2e9/0x560 [ 566.832547][T32058] sock_shutdown+0x15e/0x260 [ 566.837691][T32058] nbd_clear_sock+0x24/0x170 [ 566.842857][T32058] nbd_config_put+0x2dd/0x580 [ 566.848084][T32058] nbd_genl_connect+0x19d5/0x1cf0 [ 566.853658][T32058] genl_family_rcv_msg_doit+0x22a/0x330 [ 566.859769][T32058] genl_rcv_msg+0x61c/0x7a0 [ 566.864827][T32058] netlink_rcv_skb+0x232/0x4b0 [ 566.870159][T32058] genl_rcv+0x28/0x40 [ 566.874692][T32058] netlink_unicast+0x80f/0x9b0 [ 566.880008][T32058] netlink_sendmsg+0x813/0xb40 [ 566.885325][T32058] ____sys_sendmsg+0x972/0x9f0 [ 566.890650][T32058] ___sys_sendmsg+0x2a5/0x360 [ 566.895879][T32058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 566.901375][T32058] do_syscall_64+0x14d/0xf80 [ 566.906601][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.913045][T32058] [ 566.913045][T32058] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 566.920720][T32058] __mutex_lock+0x19f/0x1300 [ 566.925863][T32058] nbd_queue_rq+0x37b/0x1100 [ 566.931018][T32058] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 566.937126][T32058] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 566.944014][T32058] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.950548][T32058] blk_mq_run_hw_queue+0x348/0x4f0 [ 566.956313][T32058] blk_mq_dispatch_list+0xd16/0xe10 [ 566.962069][T32058] blk_mq_flush_plug_list+0x48d/0x570 [ 566.967998][T32058] __blk_flush_plug+0x3ed/0x4d0 [ 566.973399][T32058] __submit_bio+0x28d/0x580 [ 566.978462][T32058] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 566.984649][T32058] block_read_full_folio+0x599/0x830 [ 566.990485][T32058] filemap_read_folio+0x137/0x3b0 [ 566.996062][T32058] do_read_cache_folio+0x358/0x590 [ 567.001728][T32058] read_part_sector+0xb6/0x2b0 [ 567.007041][T32058] adfspart_check_ICS+0xa5/0xa40 [ 567.012529][T32058] bdev_disk_changed+0x7ba/0x1550 [ 567.018095][T32058] blkdev_get_whole+0x380/0x510 [ 567.023498][T32058] bdev_open+0x31e/0xd30 [ 567.028304][T32058] blkdev_open+0x470/0x610 [ 567.033268][T32058] do_dentry_open+0x785/0x14e0 [ 567.038582][T32058] vfs_open+0x3b/0x340 [ 567.043223][T32058] path_openat+0x2e08/0x3860 [ 567.048363][T32058] do_file_open+0x23e/0x4a0 [ 567.053417][T32058] do_sys_openat2+0x113/0x200 [ 567.058650][T32058] __x64_sys_openat+0x138/0x170 [ 567.064052][T32058] do_syscall_64+0x14d/0xf80 [ 567.069193][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.075629][T32058] [ 567.075629][T32058] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 567.082871][T32058] __mutex_lock+0x19f/0x1300 [ 567.088077][T32058] nbd_queue_rq+0xc6/0x1100 [ 567.093130][T32058] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 567.099319][T32058] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 567.106220][T32058] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 567.112775][T32058] blk_mq_run_hw_queue+0x348/0x4f0 [ 567.118442][T32058] blk_mq_dispatch_list+0xd16/0xe10 [ 567.124194][T32058] blk_mq_flush_plug_list+0x48d/0x570 [ 567.130209][T32058] __blk_flush_plug+0x3ed/0x4d0 [ 567.135619][T32058] __submit_bio+0x28d/0x580 [ 567.140677][T32058] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 567.146869][T32058] block_read_full_folio+0x599/0x830 [ 567.152708][T32058] filemap_read_folio+0x137/0x3b0 [ 567.158291][T32058] do_read_cache_folio+0x358/0x590 [ 567.163958][T32058] read_part_sector+0xb6/0x2b0 [ 567.169273][T32058] adfspart_check_ICS+0xa5/0xa40 [ 567.174764][T32058] bdev_disk_changed+0x7ba/0x1550 [ 567.180342][T32058] blkdev_get_whole+0x380/0x510 [ 567.185741][T32058] bdev_open+0x31e/0xd30 [ 567.190534][T32058] blkdev_open+0x470/0x610 [ 567.195508][T32058] do_dentry_open+0x785/0x14e0 [ 567.200829][T32058] vfs_open+0x3b/0x340 [ 567.205461][T32058] path_openat+0x2e08/0x3860 [ 567.210595][T32058] do_file_open+0x23e/0x4a0 [ 567.215649][T32058] do_sys_openat2+0x113/0x200 [ 567.220893][T32058] __x64_sys_openat+0x138/0x170 [ 567.226297][T32058] do_syscall_64+0x14d/0xf80 [ 567.231440][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.237891][T32058] [ 567.237891][T32058] -> #3 (set->srcu){.+.+}-{0:0}: [ 567.245053][T32058] __synchronize_srcu+0xca/0x300 [ 567.250545][T32058] elevator_switch+0x1e8/0x7a0 [ 567.255871][T32058] elevator_change+0x2cc/0x450 [ 567.261193][T32058] elevator_set_default+0x36c/0x430 [ 567.266949][T32058] blk_register_queue+0x366/0x430 [ 567.272535][T32058] __add_disk+0x677/0xd50 [ 567.277427][T32058] add_disk_fwnode+0xfb/0x480 [ 567.282660][T32058] nbd_dev_add+0x72c/0xb50 [ 567.287630][T32058] nbd_init+0x168/0x1f0 [ 567.292327][T32058] do_one_initcall+0x250/0x8d0 [ 567.297646][T32058] do_initcall_level+0x104/0x190 [ 567.303137][T32058] do_initcalls+0x59/0xa0 [ 567.308022][T32058] kernel_init_freeable+0x2a6/0x3e0 [ 567.313788][T32058] kernel_init+0x1d/0x1d0 [ 567.318684][T32058] ret_from_fork+0x51e/0xb90 [ 567.323821][T32058] ret_from_fork_asm+0x1a/0x30 [ 567.329144][T32058] [ 567.329144][T32058] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 567.337021][T32058] __mutex_lock+0x19f/0x1300 [ 567.342169][T32058] elevator_change+0x1b3/0x450 [ 567.347484][T32058] elevator_set_none+0xb5/0x140 [ 567.352882][T32058] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 567.359250][T32058] nbd_start_device+0x17f/0xb10 [ 567.364765][T32058] nbd_genl_connect+0x165b/0x1cf0 [ 567.370337][T32058] genl_family_rcv_msg_doit+0x22a/0x330 [ 567.376468][T32058] genl_rcv_msg+0x61c/0x7a0 [ 567.381517][T32058] netlink_rcv_skb+0x232/0x4b0 [ 567.386835][T32058] genl_rcv+0x28/0x40 [ 567.391360][T32058] netlink_unicast+0x80f/0x9b0 [ 567.396669][T32058] netlink_sendmsg+0x813/0xb40 [ 567.401999][T32058] ____sys_sendmsg+0x972/0x9f0 [ 567.407314][T32058] ___sys_sendmsg+0x2a5/0x360 [ 567.412543][T32058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 567.418034][T32058] do_syscall_64+0x14d/0xf80 [ 567.423173][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.429610][T32058] [ 567.429610][T32058] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 567.438247][T32058] blk_alloc_queue+0x546/0x680 [ 567.443554][T32058] __blk_mq_alloc_disk+0x197/0x390 [ 567.449257][T32058] nbd_dev_add+0x499/0xb50 [ 567.454230][T32058] nbd_init+0x168/0x1f0 [ 567.458927][T32058] do_one_initcall+0x250/0x8d0 [ 567.464334][T32058] do_initcall_level+0x104/0x190 [ 567.469834][T32058] do_initcalls+0x59/0xa0 [ 567.474725][T32058] kernel_init_freeable+0x2a6/0x3e0 [ 567.480488][T32058] kernel_init+0x1d/0x1d0 [ 567.485370][T32058] ret_from_fork+0x51e/0xb90 [ 567.490509][T32058] ret_from_fork_asm+0x1a/0x30 [ 567.495871][T32058] [ 567.495871][T32058] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 567.503113][T32058] __lock_acquire+0x15a5/0x2cf0 [ 567.508519][T32058] lock_acquire+0xf0/0x2e0 [ 567.513483][T32058] fs_reclaim_acquire+0x71/0x100 [ 567.518967][T32058] prepare_alloc_pages+0x152/0x650 [ 567.524627][T32058] __alloc_frozen_pages_noprof+0x12f/0x380 [ 567.530981][T32058] alloc_pages_mpol+0x232/0x4a0 [ 567.536392][T32058] folio_alloc_mpol_noprof+0x39/0x70 [ 567.542225][T32058] shmem_alloc_and_add_folio+0x445/0xf80 [ 567.548421][T32058] shmem_get_folio_gfp+0x5a9/0x1670 [ 567.554203][T32058] shmem_fault+0x179/0x390 [ 567.559178][T32058] __do_fault+0x138/0x390 [ 567.564054][T32058] do_pte_missing+0x228f/0x3490 [ 567.569458][T32058] handle_mm_fault+0x1bec/0x3310 [ 567.574937][T32058] do_user_addr_fault+0x75b/0x1340 [ 567.580605][T32058] exc_page_fault+0x6a/0xc0 [ 567.585654][T32058] asm_exc_page_fault+0x26/0x30 [ 567.591049][T32058] fault_in_readable+0x8e/0x130 [ 567.596465][T32058] fault_in_iov_iter_readable+0x124/0x2f0 [ 567.602728][T32058] generic_perform_write+0x7af/0x8f0 [ 567.608579][T32058] shmem_file_write_iter+0xf8/0x120 [ 567.614343][T32058] do_iter_readv_writev+0x619/0x8c0 [ 567.620104][T32058] vfs_writev+0x33c/0x990 [ 567.624987][T32058] __x64_sys_pwritev+0x19f/0x2a0 [ 567.630476][T32058] do_syscall_64+0x14d/0xf80 [ 567.635616][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.642055][T32058] [ 567.642055][T32058] other info that might help us debug this: [ 567.642055][T32058] [ 567.652298][T32058] Chain exists of: [ 567.652298][T32058] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 567.652298][T32058] [ 567.664941][T32058] Possible unsafe locking scenario: [ 567.664941][T32058] [ 567.672409][T32058] CPU0 CPU1 [ 567.677786][T32058] ---- ---- [ 567.683168][T32058] rlock(&mm->mmap_lock); [ 567.687612][T32058] lock(sk_lock-AF_INET6); [ 567.694653][T32058] lock(&mm->mmap_lock); [ 567.701538][T32058] lock(fs_reclaim); [ 567.705540][T32058] [ 567.705540][T32058] *** DEADLOCK *** [ 567.705540][T32058] [ 567.713703][T32058] 3 locks held by syz.3.12376/32058: [ 567.719006][T32058] #0: ffff888029bac420 (sb_writers#5){.+.+}-{0:0}, at: vfs_writev+0x2aa/0x990 [ 567.728024][T32058] #1: ffff8880526ac378 (&sb->s_type->i_mutex_key#16){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 567.739200][T32058] #2: ffff888075804080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 567.749158][T32058] [ 567.749158][T32058] stack backtrace: [ 567.755173][T32058] CPU: 0 UID: 0 PID: 32058 Comm: syz.3.12376 Not tainted syzkaller #0 PREEMPT(full) [ 567.755195][T32058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 567.755214][T32058] Call Trace: [ 567.755222][T32058] [ 567.755231][T32058] dump_stack_lvl+0xe8/0x150 [ 567.755260][T32058] print_circular_bug+0x2e1/0x300 [ 567.755292][T32058] check_noncircular+0x12e/0x150 [ 567.755323][T32058] __lock_acquire+0x15a5/0x2cf0 [ 567.755352][T32058] ? unwind_next_frame+0xa5/0x23c0 [ 567.755385][T32058] lock_acquire+0xf0/0x2e0 [ 567.755407][T32058] ? prepare_alloc_pages+0x152/0x650 [ 567.755432][T32058] ? is_bpf_text_address+0x26/0x2b0 [ 567.755454][T32058] fs_reclaim_acquire+0x71/0x100 [ 567.755475][T32058] ? prepare_alloc_pages+0x152/0x650 [ 567.755497][T32058] prepare_alloc_pages+0x152/0x650 [ 567.755523][T32058] __alloc_frozen_pages_noprof+0x12f/0x380 [ 567.755549][T32058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.755575][T32058] ? __pfx_policy_nodemask+0x10/0x10 [ 567.755615][T32058] alloc_pages_mpol+0x232/0x4a0 [ 567.755641][T32058] folio_alloc_mpol_noprof+0x39/0x70 [ 567.755665][T32058] shmem_alloc_and_add_folio+0x445/0xf80 [ 567.755686][T32058] ? filemap_get_entry+0xca/0x320 [ 567.755705][T32058] ? filemap_get_entry+0xca/0x320 [ 567.755723][T32058] ? filemap_get_entry+0x2ac/0x320 [ 567.755741][T32058] ? __pfx_filemap_get_entry+0x10/0x10 [ 567.755760][T32058] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 567.755781][T32058] ? shmem_allowable_huge_orders+0x2fc/0x690 [ 567.755812][T32058] shmem_get_folio_gfp+0x5a9/0x1670 [ 567.755853][T32058] shmem_fault+0x179/0x390 [ 567.755876][T32058] __do_fault+0x138/0x390 [ 567.755898][T32058] do_pte_missing+0x228f/0x3490 [ 567.755917][T32058] ? do_pte_missing+0x130a/0x3490 [ 567.755942][T32058] ? handle_mm_fault+0xee/0x3310 [ 567.755960][T32058] handle_mm_fault+0x1bec/0x3310 [ 567.755999][T32058] ? handle_mm_fault+0xee/0x3310 [ 567.756019][T32058] ? __pfx_handle_mm_fault+0x10/0x10 [ 567.756044][T32058] ? lock_mm_and_find_vma+0xa7/0x340 [ 567.756066][T32058] do_user_addr_fault+0x75b/0x1340 [ 567.756099][T32058] exc_page_fault+0x6a/0xc0 [ 567.756117][T32058] asm_exc_page_fault+0x26/0x30 [ 567.756139][T32058] RIP: 0010:fault_in_readable+0x8e/0x130 [ 567.756168][T32058] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 d0 13 b3 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00 [ 567.756185][T32058] RSP: 0018:ffffc9001b8cf928 EFLAGS: 00050202 [ 567.756201][T32058] RAX: ffffffff82129e01 RBX: 0000000000000200 RCX: ffff8880287fbd00 [ 567.756214][T32058] RDX: 0000000000000002 RSI: 0000200000002000 RDI: 0000200000002200 [ 567.756227][T32058] RBP: dffffc0000000001 R08: ffff8880287fbd00 R09: 0000000000000002 [ 567.756240][T32058] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000 [ 567.756252][T32058] R13: 0000200000002000 R14: 0000200000002000 R15: 0000200000002200 [ 567.756269][T32058] ? fault_in_readable+0x1/0x130 [ 567.756299][T32058] ? fault_in_readable+0x80/0x130 [ 567.756327][T32058] fault_in_iov_iter_readable+0x124/0x2f0 [ 567.756349][T32058] generic_perform_write+0x7af/0x8f0 [ 567.756380][T32058] ? __pfx_generic_perform_write+0x10/0x10 [ 567.756404][T32058] ? __mark_inode_dirty+0x4cf/0x1470 [ 567.756427][T32058] ? mnt_put_write_access_file+0xc0/0x100 [ 567.756450][T32058] ? file_update_time_flags+0x400/0x4a0 [ 567.756473][T32058] shmem_file_write_iter+0xf8/0x120 [ 567.756493][T32058] do_iter_readv_writev+0x619/0x8c0 [ 567.756518][T32058] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 567.756547][T32058] vfs_writev+0x33c/0x990 [ 567.756577][T32058] ? __pfx_vfs_writev+0x10/0x10 [ 567.756610][T32058] ? __fget_files+0x2a/0x420 [ 567.756627][T32058] ? __fget_files+0x3a0/0x420 [ 567.756642][T32058] ? __fget_files+0x2a/0x420 [ 567.756661][T32058] __x64_sys_pwritev+0x19f/0x2a0 [ 567.756686][T32058] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 567.756715][T32058] do_syscall_64+0x14d/0xf80 [ 567.756732][T32058] ? trace_irq_disable+0x3b/0x150 [ 567.756747][T32058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.756765][T32058] ? clear_bhb_loop+0x40/0x90 [ 567.756786][T32058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.756804][T32058] RIP: 0033:0x7f425dd9c819 [ 567.756825][T32058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.756845][T32058] RSP: 002b:00007f425ec64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 567.756862][T32058] RAX: ffffffffffffffda RBX: 00007f425e015fa0 RCX: 00007f425dd9c819 [ 567.756875][T32058] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000004 [ 567.756887][T32058] RBP: 00007f425de32c91 R08: 0000000000000000 R09: 0000000000000000 [ 567.756898][T32058] R10: 0000000008040000 R11: 0000000000000246 R12: 0000000000000000 [ 567.756909][T32058] R13: 00007f425e016038 R14: 00007f425e015fa0 R15: 00007ffd4d6edd18 [ 567.756930][T32058] [ 568.242339][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.391561][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.311038][ T166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration