last executing test programs: 4.474660444s ago: executing program 4 (id=12985): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x4, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000080, 0x0, 0x0) 4.184800862s ago: executing program 4 (id=12987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f88a8", 0x12}, {&(0x7f0000000200)="93205192", 0x4}], 0x2) 3.450729222s ago: executing program 4 (id=12996): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x1d, &(0x7f0000000080)=ANY=[], 0x4) 3.113535084s ago: executing program 4 (id=13001): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000d80), &(0x7f0000000dc0)=r0}, 0x20) 2.908955287s ago: executing program 2 (id=13004): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003800)={0x0, 0xac}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x171, &(0x7f00000003c0), 0x171}}], 0x400000000000172, 0x4001c00) 2.830521499s ago: executing program 4 (id=13006): socket$kcm(0x2, 0xa, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000980)={0x11, 0x4, 0x1, 0x1, 0x0, 0x6, @remote}, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000b40)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x5, 0x50, 0x0, &(0x7f0000000c00)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2.516853734s ago: executing program 3 (id=13010): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 2.412469395s ago: executing program 4 (id=13012): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001800dd4530bd7000fcdbdf2502141000fd0000060022002008000f00fe0700"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000580)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) 2.366897383s ago: executing program 2 (id=13013): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0xffffffffffffff20, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.315387944s ago: executing program 3 (id=13015): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1.486357162s ago: executing program 1 (id=13019): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a70700", 0x7}], 0x1, 0x803, 0x0) 1.459516347s ago: executing program 2 (id=13020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.317296267s ago: executing program 3 (id=13021): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) unshare(0x60600) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x4210) 1.248183387s ago: executing program 1 (id=13022): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg(r0, &(0x7f0000001f80)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x3, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}}, 0x80, 0x0}}], 0x1, 0x800) 1.134956863s ago: executing program 0 (id=13023): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="00214717a70700000000030600710a5e31163ceb950471200400f32a6036b8000500000000000000ffff03425d4d50e7182ce0", 0x33}], 0x1, 0x1, 0x0) 1.017331741s ago: executing program 1 (id=13024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e6ffde", 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x3}]}}}}}}}}, 0x0) 881.787565ms ago: executing program 1 (id=13025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x2, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xb, &(0x7f0000000800)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 758.717893ms ago: executing program 1 (id=13026): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x10001}, &(0x7f0000000040)=0xc) 729.14377ms ago: executing program 3 (id=13027): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) shutdown(r1, 0x1) 701.989907ms ago: executing program 0 (id=13028): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r1, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{r2, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001200)={r3, &(0x7f0000001240)}, 0x20) 663.906704ms ago: executing program 2 (id=13029): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xf4}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[], 0x0) 537.578429ms ago: executing program 1 (id=13030): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/191, &(0x7f0000000080)=0xbf) 507.611305ms ago: executing program 3 (id=13031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x366, 0x10, &(0x7f0000000880), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000940)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000980)=r2, 0x4) 429.179329ms ago: executing program 0 (id=13032): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 426.685661ms ago: executing program 2 (id=13033): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340), 0x4) 315.3361ms ago: executing program 0 (id=13034): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) bind$unix(r0, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbff, {0x1, 0x10, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x10002, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 231.177109ms ago: executing program 0 (id=13035): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000001400)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000001480)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 110.073497ms ago: executing program 0 (id=13036): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000740)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 107.18133ms ago: executing program 3 (id=13037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 0s ago: executing program 2 (id=13038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000002540)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x1}, @ipv4=@gre={{0x7, 0x4, 0x1, 0x1, 0xfc0, 0x68, 0x0, 0xbb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100, {[@lsrr={0x83, 0x7, 0x5d, [@broadcast]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x9, 0x1, 0x1, 0x2, 0x0, 0x9}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3}, 0x2, {0x6, 0x5, 0x2, 0x18, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "7d82c4eb05fb32955628db32b433fbf62a83a2cebdde45aed219204498ac814214887b88dfaa80f388ac306f0634de617279"}}}}, 0xfce) kernel console output (not intermixed with test programs): ess `syz.2.5477'. [ 402.300121][T17340] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5477'. [ 402.696055][T17357] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.804673][T17360] bond_slave_0: entered promiscuous mode [ 402.804700][T17360] bond_slave_0: entered allmulticast mode [ 402.823401][T17360] bond0: (slave bond_slave_0): Releasing backup interface [ 402.841340][T17360] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 402.932182][T17365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5489'. [ 403.533260][T17388] hsr0: entered promiscuous mode [ 403.628703][T17389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 403.633841][T17391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5502'. [ 403.752253][T17395] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 404.444455][T17420] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 405.130989][T17420] bond4 (unregistering): Released all slaves [ 405.573092][T17442] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:0 [ 405.870106][T17449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.066694][T17457] sctp: [Deprecated]: syz.3.5534 (pid 17457) Use of int in maxseg socket option. [ 406.066694][T17457] Use struct sctp_assoc_value instead [ 406.195882][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5538'. [ 406.337615][T17466] netlink: 'syz.3.5539': attribute type 21 has an invalid length. [ 406.815628][T17487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5550'. [ 406.878959][T17492] netlink: zone id is out of range [ 406.878985][T17492] netlink: zone id is out of range [ 406.878995][T17492] netlink: zone id is out of range [ 406.879005][T17492] netlink: zone id is out of range [ 406.879014][T17492] netlink: zone id is out of range [ 406.879024][T17492] netlink: zone id is out of range [ 406.879033][T17492] netlink: zone id is out of range [ 406.879042][T17492] netlink: zone id is out of range [ 406.879051][T17492] netlink: zone id is out of range [ 406.879061][T17492] netlink: zone id is out of range [ 407.969507][T17521] ip6t_rt: too many addresses specified [ 408.615184][T17542] netlink: 'syz.0.5576': attribute type 3 has an invalid length. [ 408.633693][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5577'. [ 408.881791][T17551] netlink: 'syz.2.5581': attribute type 23 has an invalid length. [ 408.881822][T17551] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.882148][T17551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.882161][T17551] IPv6: NLM_F_CREATE should be set when creating new route [ 409.373336][T17564] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.5587'. [ 409.373366][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5587'. [ 409.373388][T17564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5587'. [ 410.020644][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5600'. [ 410.311770][T17599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5605'. [ 410.874282][T17618] netlink: 'syz.2.5614': attribute type 1 has an invalid length. [ 410.874311][T17618] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5614'. [ 411.377978][T17638] x_tables: duplicate entry at hook 1 [ 412.391186][T17674] netlink: 276 bytes leftover after parsing attributes in process `syz.1.5642'. [ 412.460004][T17672] bond4: option arp_interval: invalid value (18446744073709551615) [ 412.460032][T17672] bond4: option arp_interval: allowed values 0 - 2147483647 [ 412.463000][T17672] bond4 (unregistering): Released all slaves [ 413.161060][T17699] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5653'. [ 413.573741][T17709] bond2: option xmit_hash_policy: invalid value (10) [ 413.615176][T17717] netlink: 'syz.0.5663': attribute type 4 has an invalid length. [ 413.652134][T17709] bond2 (unregistering): Released all slaves [ 413.937558][T17723] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.5665'. [ 413.946523][T17726] netlink: 'syz.4.5666': attribute type 1 has an invalid length. [ 413.946565][T17726] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5666'. [ 414.194308][T17732] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5669'. [ 414.651416][T17744] bond4: option fail_over_mac: invalid value (127) [ 414.718600][T17744] bond4 (unregistering): Released all slaves [ 415.281073][T17766] xt_hashlimit: max too large, truncated to 1048576 [ 415.281927][T17766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.401486][T17768] net_ratelimit: 1089 callbacks suppressed [ 415.401519][T17768] openvswitch: netlink: IPv4 tunnel dst address is zero [ 415.644100][T17776] tc_dump_action: action bad kind [ 415.957020][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5696'. [ 416.031915][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5697'. [ 416.528924][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5706'. [ 417.075747][T17833] Cannot find del_set index 3 as target [ 417.654152][T17851] netlink: 83 bytes leftover after parsing attributes in process `syz.0.5727'. [ 417.870547][T17861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5732'. [ 418.525335][T17884] netlink: 'syz.2.5743': attribute type 1 has an invalid length. [ 418.600487][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5747'. [ 418.600527][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5747'. [ 418.869991][T17899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.236681][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5750'. [ 419.388082][T17907] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 419.884147][T17928] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5762'. [ 419.884178][T17928] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5762'. [ 420.130201][T17937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.194589][T17939] netlink: 504 bytes leftover after parsing attributes in process `syz.1.5765'. [ 420.465419][T17954] netlink: 'syz.2.5773': attribute type 1 has an invalid length. [ 420.872392][T17975] netlink: 'syz.4.5785': attribute type 21 has an invalid length. [ 420.872422][T17975] netlink: 'syz.4.5785': attribute type 20 has an invalid length. [ 420.960281][T17969] xt_CT: No such helper "netbios-ns" [ 421.588525][T18002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.834657][T18007] geneve1: entered promiscuous mode [ 421.937692][T18010] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5802'. [ 421.937850][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5802'. [ 421.995570][T18011] netlink: 'syz.2.5803': attribute type 21 has an invalid length. [ 423.275910][T18050] netlink: 'syz.4.5823': attribute type 3 has an invalid length. [ 423.583284][T18057] xt_hashlimit: max too large, truncated to 1048576 [ 423.583514][T18057] xt_hashlimit: overflow, try lower: 137438953472/8 [ 423.686119][T18056] geneve2: entered promiscuous mode [ 423.900798][T18068] netlink: 'syz.4.5830': attribute type 16 has an invalid length. [ 423.900827][T18068] __nla_validate_parse: 1 callbacks suppressed [ 423.900843][T18068] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5830'. [ 424.048431][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5836'. [ 424.056811][T18074] netlink: 'syz.2.5834': attribute type 7 has an invalid length. [ 424.380071][T18087] openvswitch: netlink: IP tunnel TTL not specified. [ 424.380116][T18087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.530040][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 425.025157][T18106] openvswitch: netlink: IP tunnel dst address not specified [ 425.444001][T18121] netlink: 'syz.3.5855': attribute type 3 has an invalid length. [ 425.444774][T18121] netlink: 'syz.3.5855': attribute type 3 has an invalid length. [ 425.477534][T18124] netlink: 'syz.0.5857': attribute type 9 has an invalid length. [ 425.856257][T18142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5865'. [ 425.914682][T18145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.230517][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5874'. [ 426.266845][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5875'. [ 426.266878][T18161] netlink: 'syz.4.5875': attribute type 1 has an invalid length. [ 426.493955][T18164] netlink: 'syz.2.5878': attribute type 1 has an invalid length. [ 426.493985][T18164] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5878'. [ 426.494027][T18164] NCSI netlink: No device for ifindex 0 [ 426.944077][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5885'. [ 426.944112][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5885'. [ 426.944131][T18179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5885'. [ 428.473531][T18221] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 428.889063][T18237] xt_l2tp: v2 doesn't support IP mode [ 429.313958][T18259] netlink: 'syz.1.5922': attribute type 4 has an invalid length. [ 429.414217][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5925'. [ 429.414254][T18265] netlink: 580 bytes leftover after parsing attributes in process `syz.4.5925'. [ 431.990773][T18375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.009043][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 432.249536][T18385] xt_socket: unknown flags 0x4c [ 432.254773][T18383] netlink: 'syz.4.5982': attribute type 3 has an invalid length. [ 432.773187][T18407] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 433.751498][T18448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6015'. [ 433.751600][T18448] batadv0: entered promiscuous mode [ 433.751618][T18448] batadv0: entered allmulticast mode [ 433.752440][T18448] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6015'. [ 433.756516][T18448] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 434.309507][T18475] netlink: 380 bytes leftover after parsing attributes in process `syz.2.6028'. [ 434.309536][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6028'. [ 434.309551][T18475] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6028'. [ 434.695697][T18489] xt_TCPMSS: Only works on TCP SYN packets [ 434.903890][T18494] ip6t_ah: unknown flags 4 [ 435.215168][T18504] netlink: 'syz.2.6040': attribute type 5 has an invalid length. [ 435.419770][T18508] Unsupported ieee802154 address type: 0 [ 436.030617][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 436.030720][T18527] bridge_slave_0: left allmulticast mode [ 436.031138][T18527] bridge_slave_0: left promiscuous mode [ 436.033611][T18527] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.238720][T18533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6051'. [ 436.238754][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6051'. [ 436.238771][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6051'. [ 436.414276][T18535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6048'. [ 437.207655][T18567] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 437.364426][T18573] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.705880][T18571] bond4: option arp_all_targets: invalid value (3) [ 437.724037][T18571] bond4 (unregistering): Released all slaves [ 437.899287][T18583] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 437.905310][T18583] bond3 (unregistering): Released all slaves [ 438.025122][T18586] IPVS: Error joining to the multicast group [ 438.353686][T18594] netlink: 'syz.3.6078': attribute type 21 has an invalid length. [ 438.353719][T18594] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6078'. [ 438.353790][T18594] netlink: 'syz.3.6078': attribute type 4 has an invalid length. [ 438.353808][T18594] netlink: 'syz.3.6078': attribute type 5 has an invalid length. [ 438.353824][T18594] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6078'. [ 439.225778][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6096'. [ 439.225815][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6096'. [ 439.225837][T18630] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6096'. [ 439.331425][T18634] netlink: 'syz.0.6099': attribute type 11 has an invalid length. [ 439.404763][T18632] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 440.002524][T18661] SET target dimension over the limit! [ 440.171866][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.569355][T18684] Timeout policy `syz1' can only be used by L3 protocol number 24583 [ 440.718743][T18689] x_tables: eb_tables: redirect target: used from hooks OUTPUT, but only usable from PREROUTING/BROUTING [ 441.585077][T18719] netlink: 'syz.2.6137': attribute type 28 has an invalid length. [ 441.585137][T18719] netlink: 'syz.2.6137': attribute type 3 has an invalid length. [ 441.585153][T18719] __nla_validate_parse: 3 callbacks suppressed [ 441.585165][T18719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6137'. [ 441.932019][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6142'. [ 442.874100][T18757] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 442.875704][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6155'. [ 443.004889][T18763] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 443.684286][T18784] TCP: TCP_TX_DELAY enabled [ 443.826453][T18793] openvswitch: netlink: Key type 10246 is out of range max 32 [ 444.614116][T18830] vlan1: entered promiscuous mode [ 444.614329][T18830] vlan1: entered allmulticast mode [ 444.614346][T18830] veth0_vlan: entered allmulticast mode [ 444.948679][T18844] netlink: 'syz.0.6197': attribute type 2 has an invalid length. [ 445.251766][T18859] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6205'. [ 445.270795][T18859] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6205'. [ 445.365829][T18863] netlink: zone id is out of range [ 445.365851][T18863] netlink: zone id is out of range [ 445.365861][T18863] netlink: zone id is out of range [ 445.365871][T18863] netlink: zone id is out of range [ 445.365881][T18863] netlink: zone id is out of range [ 445.365890][T18863] netlink: zone id is out of range [ 445.365902][T18863] netlink: zone id is out of range [ 445.365912][T18863] netlink: zone id is out of range [ 445.365921][T18863] netlink: zone id is out of range [ 445.365931][T18863] netlink: zone id is out of range [ 445.615256][T18871] netlink: 'syz.0.6209': attribute type 6 has an invalid length. [ 445.615297][T18871] netlink: 'syz.0.6209': attribute type 6 has an invalid length. [ 445.688856][T18875] netlink: 'syz.3.6211': attribute type 21 has an invalid length. [ 445.807482][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6218'. [ 445.931484][T18885] netlink: 19 bytes leftover after parsing attributes in process `syz.1.6220'. [ 446.785675][T18910] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6229'. [ 446.909986][T18916] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.6236'. [ 447.631544][T18948] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.6249'. [ 448.532455][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6268'. [ 448.532572][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6268'. [ 448.532591][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6268'. [ 448.532676][T18987] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6268'. [ 448.532692][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6268'. [ 448.660165][T18990] ebt_among: dst integrity fail: 301 [ 449.462226][T19013] netlink: 'syz.3.6281': attribute type 1 has an invalid length. [ 450.958644][T19075] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6312'. [ 451.055282][T19084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6317'. [ 451.055695][T19084] unsupported nlmsg_type 40 [ 451.635709][T19102] netlink: 'syz.1.6325': attribute type 10 has an invalid length. [ 451.650403][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 451.674165][T19102] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 451.675068][T19102] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 451.693003][T19102] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 451.881694][T19106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6327'. [ 452.027881][T19110] netlink: 'syz.3.6329': attribute type 1 has an invalid length. [ 452.027910][T19110] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6329'. [ 452.143951][T19114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6331'. [ 452.601103][T19128] ipt_ah: unknown flags FF [ 452.757228][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6342'. [ 452.757258][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 452.841224][T19140] netlink: 'syz.3.6345': attribute type 29 has an invalid length. [ 452.910128][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6346'. [ 453.398050][T19155] netlink: 844 bytes leftover after parsing attributes in process `syz.0.6351'. [ 453.398086][T19155] netlink: 844 bytes leftover after parsing attributes in process `syz.0.6351'. [ 453.452364][T19156] netlink: 'syz.3.6352': attribute type 1 has an invalid length. [ 453.452400][T19156] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6352'. [ 453.560301][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6354'. [ 453.754922][T19168] smc: removing ib device rxe0 [ 453.860002][T19168] smbdirect: ib_dev[rxe0] removed [ 454.082665][T19179] netlink: 'syz.2.6362': attribute type 1 has an invalid length. [ 454.199095][T19184] net_ratelimit: 3 callbacks suppressed [ 454.199119][T19184] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 454.522740][T19189] wg2 speed is unknown, defaulting to 1000 [ 454.522829][T19189] wg2 speed is unknown, defaulting to 1000 [ 454.544705][T19189] wg2 speed is unknown, defaulting to 1000 [ 454.565749][T19189] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 454.565805][T19189] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 454.565856][T19189] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 454.776670][T19189] wg2 speed is unknown, defaulting to 1000 [ 454.815477][T19189] wg2 speed is unknown, defaulting to 1000 [ 454.888260][T19189] wg2 speed is unknown, defaulting to 1000 [ 454.989451][T19189] wg2 speed is unknown, defaulting to 1000 [ 455.014143][T19189] wg2 speed is unknown, defaulting to 1000 [ 455.466221][T19206] veth5: entered promiscuous mode [ 456.699227][T19245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.783057][ T5820] lo speed is unknown, defaulting to 1000 [ 456.783105][ T5820] !!0: Port: 1 Link DOWN [ 457.852996][T19279] xt_hashlimit: size too large, truncated to 1048576 [ 457.853147][T19279] xt_hashlimit: overflow, rate too high: 0 [ 458.142640][T19288] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 458.303458][T19294] __nla_validate_parse: 3 callbacks suppressed [ 458.303484][T19294] netlink: 3568 bytes leftover after parsing attributes in process `syz.0.6418'. [ 458.621368][T19306] netlink: 'syz.2.6424': attribute type 11 has an invalid length. [ 459.477705][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6439'. [ 459.477745][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6439'. [ 461.356239][T19402] netlink: 'syz.1.6472': attribute type 4 has an invalid length. [ 461.356268][T19402] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6472'. [ 461.494452][T19402] .`: renamed from bond0 [ 461.631779][T19403] bond4: entered promiscuous mode [ 461.643678][T19403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.743313][T19418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.780139][T19420] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6479'. [ 462.031629][T19432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6487'. [ 462.086380][T19432] veth7: entered allmulticast mode [ 462.248589][T19442] openvswitch: netlink: IP tunnel dst address not specified [ 462.435409][T19450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.435432][T19450] IPv6: NLM_F_CREATE should be set when creating new route [ 462.436121][T19450] IPv6: NLM_F_CREATE should be set when creating new route [ 462.465362][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6494'. [ 462.465389][T19451] netlink: 'syz.4.6494': attribute type 1 has an invalid length. [ 462.465404][T19451] netlink: 'syz.4.6494': attribute type 1 has an invalid length. [ 462.465418][T19451] netlink: 'syz.4.6494': attribute type 1 has an invalid length. [ 462.892914][T19464] ip6t_rt: unknown flags 1F [ 463.003031][T19469] netlink: 'syz.3.6506': attribute type 1 has an invalid length. [ 463.003064][T19469] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6506'. [ 463.083726][T19472] siw: device registration error -23 [ 463.362088][T19481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6511'. [ 463.389307][T19484] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 463.607534][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6514'. [ 463.648826][T19493] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6517'. [ 463.648881][T19493] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6517'. [ 464.528642][T19516] --map-set only usable from mangle table [ 465.911155][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6555'. [ 466.845526][T19602] bond5: Unable to set up delay as MII monitoring is disabled [ 466.917624][T19602] bond5 (unregistering): Released all slaves [ 466.989122][T19609] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 467.334402][T19618] netlink: 'syz.3.6574': attribute type 1 has an invalid length. [ 467.334431][T19618] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6574'. [ 467.559294][T19624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6576'. [ 467.559332][T19624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6576'. [ 467.829999][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6578'. [ 467.901852][T19624] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 467.925758][T19624] bond4 (unregistering): Released all slaves [ 468.091836][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6580'. [ 468.142794][T19635] xt_MASQUERADE: bad rangesize 20224 [ 468.446346][T19640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6583'. [ 468.728673][T19653] netlink: 'syz.4.6589': attribute type 10 has an invalid length. [ 468.729761][T19653] dummy0: left promiscuous mode [ 469.091983][T19653] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 469.129037][T19663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6593'. [ 469.399877][T19667] netlink: 'syz.2.6596': attribute type 13 has an invalid length. [ 469.629220][T19675] ipt_ECN: cannot use operation on non-tcp rule [ 470.252003][T19691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6608'. [ 470.252038][T19691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6608'. [ 470.725875][T19712] Cannot find del_set index 17 as target [ 470.812190][T19714] netlink: 'syz.0.6619': attribute type 3 has an invalid length. [ 471.273929][T19730] netlink: 'syz.1.6626': attribute type 3 has an invalid length. [ 472.022567][T19742] bond4: option miimon: invalid value (18446744073709551614) [ 472.022599][T19742] bond4: option miimon: allowed values 0 - 2147483647 [ 472.145201][T19742] bond4 (unregistering): Released all slaves [ 472.310038][T19751] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 472.331237][T19751] bond6 (unregistering): Released all slaves [ 472.657334][T19765] openvswitch: netlink: Duplicate or invalid key (type 0). [ 472.745615][T19770] netlink: 'syz.1.6646': attribute type 11 has an invalid length. [ 472.745651][T19770] netlink: 'syz.1.6646': attribute type 11 has an invalid length. [ 472.745668][T19770] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6646'. [ 472.974368][T19777] Cannot find add_set index 34 as target [ 473.439593][T19794] sock: sock_timestamping_bind_phc: sock not bind to device [ 473.602512][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6661'. [ 474.253043][T19819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6669'. [ 474.613832][T19825] IPv6: Can't replace route, no match found [ 474.943620][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6681'. [ 475.245057][T19852] netlink: 'syz.2.6686': attribute type 137 has an invalid length. [ 477.672162][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6722'. [ 477.672207][T19928] vlan0: entered promiscuous mode [ 477.702320][T19929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6723'. [ 477.774057][T19931] openvswitch: netlink: IPv6 tunnel dst address is zero [ 477.841202][T19933] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6726'. [ 477.841231][T19933] tc_dump_action: action bad kind [ 479.880845][T20001] netlink: 'syz.3.6754': attribute type 1 has an invalid length. [ 479.880876][T20001] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6754'. [ 479.919845][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6753'. [ 479.936518][T19999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.967707][T19999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6753'. [ 480.158526][T20009] netlink: 'syz.2.6759': attribute type 10 has an invalid length. [ 480.285470][T20009] team0: Port device dummy0 removed [ 480.361098][T20009] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 480.874774][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6768'. [ 480.956525][T20027] bridge3: entered promiscuous mode [ 481.103869][ T31] audit: type=1800 audit(1792626949.869:3): pid=20031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6770" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6684 res=0 errno=0 [ 481.385773][T20039] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6774'. [ 481.522889][T20046] netlink: 'syz.1.6776': attribute type 10 has an invalid length. [ 481.630149][T20046] dummy0: entered promiscuous mode [ 481.635151][T20046] dummy0: entered allmulticast mode [ 481.647199][T20046] .`: (slave dummy0): Enslaving as an active interface with an up link [ 482.159597][T20057] netlink: 'syz.3.6781': attribute type 9 has an invalid length. [ 483.379930][T20087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.898605][T20105] ip6t_frag: unknown flags 4 [ 483.944337][T20108] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6804'. [ 484.154653][T20114] xt_NETMAP: bad rangesize 37. [ 484.394458][T20121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6810'. [ 484.852748][T20134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.005642][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 485.005872][T20139] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6818'. [ 485.398471][ T5820] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 485.448694][ T3393] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 485.687211][ T5820] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 486.040671][T20173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.064951][T20179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6837'. [ 486.065022][T20179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6837'. [ 486.247307][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 486.478436][T20192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6843'. [ 486.498716][ T3340] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 486.498985][ T3340] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.025017][T20212] xt_l2tp: invalid flags combination: 0 [ 487.290565][ T5820] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.654357][T20237] netlink: 'syz.2.6865': attribute type 3 has an invalid length. [ 488.072532][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6873'. [ 488.326980][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6881'. [ 488.327535][T20265] ip6tnl0: entered promiscuous mode [ 489.197336][T20303] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 489.197364][T20303] netlink: 1368 bytes leftover after parsing attributes in process `syz.0.6895'. [ 489.615584][T20321] netlink: 'syz.4.6904': attribute type 2 has an invalid length. [ 489.615760][T20321] netlink: 'syz.4.6904': attribute type 2 has an invalid length. [ 490.399631][T20347] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6916'. [ 490.486976][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 490.490881][T20349] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6920'. [ 490.623642][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6919'. [ 490.624038][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6919'. [ 491.173534][T14764] lo speed is unknown, defaulting to 1000 [ 492.030991][T20396] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6940'. [ 492.031024][T20396] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6940'. [ 493.757054][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6969'. [ 494.368414][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6980'. [ 494.610368][T20488] Bluetooth: MGMT ver 1.23 [ 495.180377][T20509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6993'. [ 496.567606][T20548] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7012'. [ 496.647009][ T4940] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 496.727172][ T4940] Bluetooth: hci0: command 0x0406 tx timeout [ 496.766252][T20552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7013'. [ 496.780360][T20554] netlink: 'syz.4.7016': attribute type 4 has an invalid length. [ 497.461470][T20583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 497.593341][T20592] Bluetooth: hci0: unsupported parameter 5135 [ 497.593402][T20592] Bluetooth: hci0: invalid len left 9, exp >= 19 [ 498.422232][T20625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7050'. [ 498.904965][T20640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7058'. [ 499.047067][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 499.882952][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7067'. [ 499.883276][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7067'. [ 500.383801][T20680] xt_connbytes: Forcing CT accounting to be enabled [ 500.628592][T20692] Zero length message leads to an empty skb [ 500.703746][T20697] ip_tables: iptables: counters copy to user failed while replacing table [ 500.934101][T20709] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7089'. [ 500.945160][T20709] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7089'. [ 501.273189][T20723] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7096'. [ 501.599723][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7104'. [ 501.599755][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7104'. [ 501.599787][T20736] netlink: 'syz.4.7104': attribute type 13 has an invalid length. [ 501.608595][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.225743][T20753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7114'. [ 502.225788][T20753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7114'. [ 502.594860][T20772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.916554][T20783] netlink: NAT attribute has 4 unknown bytes [ 502.916596][T20783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.573905][T20811] sock: sock_timestamping_bind_phc: sock not bind to device [ 503.595764][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7140'. [ 505.292756][T20866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7163'. [ 505.734810][T20882] vlan2: entered promiscuous mode [ 505.734841][T20882] bond0: entered promiscuous mode [ 505.734860][T20882] dummy0: entered promiscuous mode [ 506.084789][T20894] Bluetooth: MGMT ver 1.23 [ 506.407309][T20906] pimreg: renamed from bridge0 (while UP) [ 506.468445][T20908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7184'. [ 507.249308][T20942] netlink: 4704 bytes leftover after parsing attributes in process `syz.4.7197'. [ 507.249509][T20942] netlink: 'syz.4.7197': attribute type 1 has an invalid length. [ 508.166896][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 508.272967][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7219'. [ 509.408622][T21031] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 509.410188][ T3374] IPVS: starting estimator thread 0... [ 509.497227][T21033] IPVS: using max 25 ests per chain, 60000 per kthread [ 509.949016][T21051] lo: MTU not usable for tipc bearer [ 509.949062][T21051] tipc: Enabling of bearer rejected, failed to enable media [ 510.855452][T21086] netlink: zone id is out of range [ 511.063096][T21089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7271'. [ 511.182996][ T31] audit: type=1800 audit(1792626979.949:4): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7272" name="memory.events" dev="tmpfs" ino=7270 res=0 errno=0 [ 511.224726][ T31] audit: type=1804 audit(1792626979.989:5): pid=21092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7272" name="/newroot/1449/memory.events" dev="tmpfs" ino=7270 res=1 errno=0 [ 511.325955][T21100] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 513.308646][T21156] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7302'. [ 513.629346][T21168] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 513.698060][T21170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7309'. [ 513.995964][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7314'. [ 514.894757][T21208] wg0 speed is unknown, defaulting to 1000 [ 514.919767][T21208] wg0 speed is unknown, defaulting to 1000 [ 514.921052][T21208] wg0 speed is unknown, defaulting to 1000 [ 515.231895][T21216] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 515.511127][T21208] infiniband syz1: set active [ 515.512359][T21208] infiniband syz1: added wg0 [ 515.513504][ T5820] wg0 speed is unknown, defaulting to 1000 [ 515.612669][T21208] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 515.612747][T21208] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 515.612794][T21208] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 515.686957][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 515.855781][T21208] RDS/IB: syz1: added [ 515.855850][T21208] smc: adding ib device syz1 with port count 1 [ 515.855903][T21208] smc: ib device syz1 port 1 has no pnetid [ 515.856006][ T5820] wg0 speed is unknown, defaulting to 1000 [ 515.884706][T21208] wg0 speed is unknown, defaulting to 1000 [ 515.982725][T21236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7342'. [ 516.951417][T21208] wg0 speed is unknown, defaulting to 1000 [ 516.966972][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 517.382689][T21264] netlink: 'syz.0.7354': attribute type 153 has an invalid length. [ 517.685613][T21272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7358'. [ 518.071437][T21208] wg0 speed is unknown, defaulting to 1000 [ 518.198400][T21282] openvswitch: netlink: Missing key (keys=40, expected=100) [ 518.568453][T21292] netlink: 'syz.1.7368': attribute type 10 has an invalid length. [ 518.914298][T21208] wg0 speed is unknown, defaulting to 1000 [ 519.909237][T21208] wg0 speed is unknown, defaulting to 1000 [ 520.610710][T21347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7392'. [ 521.127509][T21362] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 521.624225][T21370] netlink: Failed to add wlan0 helper -22 [ 521.624317][T21370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.748160][T21383] Bluetooth: hci0: unsupported parameter 5134 [ 521.748190][T21383] Bluetooth: hci0: unsupported parameter 8192 [ 521.748308][T21383] Bluetooth: hci0: unsupported parameter 5134 [ 521.748323][T21383] Bluetooth: hci0: unsupported parameter 8192 [ 522.678618][T21407] macsec1: entered promiscuous mode [ 524.081583][T21450] ip6tnl3: entered promiscuous mode [ 525.258767][T21489] veth1_to_team: entered promiscuous mode [ 525.287340][T21489] veth1_to_team: left promiscuous mode [ 531.755091][T21679] tipc: Started in network mode [ 531.755166][T21679] tipc: Node identity fc020000000000000000000000000001, cluster identity 4711 [ 531.755225][T21679] tipc: Enabling of bearer rejected, failed to enable media [ 532.641923][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7539'. [ 532.972079][T21711] netlink: 'syz.2.7544': attribute type 2 has an invalid length. [ 533.268692][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7547'. [ 533.702124][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7553'. [ 534.781403][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7566'. [ 534.982907][T21773] vlan3: entered promiscuous mode [ 534.982937][T21773] syz_tun: entered promiscuous mode [ 536.639950][T21830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7591'. [ 537.232899][T21850] netlink: 'syz.0.7601': attribute type 4 has an invalid length. [ 538.608579][T21874] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 538.779333][T21883] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 539.023581][T21893] netlink: NAT attribute has 4 unknown bytes [ 539.023628][T21893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.307415][T21901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7626'. [ 539.444276][T21903] Bluetooth: MGMT ver 1.23 [ 539.542372][T21909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7630'. [ 539.978960][T21922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7636'. [ 541.446911][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 541.447061][T21315] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 541.509164][T21965] ip_tables: iptables: counters copy to user failed while replacing table [ 541.789816][T21972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7660'. [ 543.104687][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7677'. [ 543.443185][T22013] sctp: [Deprecated]: syz.1.7680 (pid 22013) Use of int in max_burst socket option. [ 543.443185][T22013] Use struct sctp_assoc_value instead [ 545.468224][T22061] tipc: Enabled bearer , priority 13 [ 545.786510][T22068] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.7704'. [ 546.081249][T22077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.478213][T22085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 546.597079][T14764] tipc: Node number set to 4227989505 [ 546.665255][T22090] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 547.493229][T22111] netlink: 'syz.1.7725': attribute type 1 has an invalid length. [ 547.493260][T22111] netlink: 4288 bytes leftover after parsing attributes in process `syz.1.7725'. [ 547.493280][T22111] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7725'. [ 548.327098][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 548.975026][T22148] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 549.262913][T22156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7747'. [ 550.456614][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7758'. [ 550.972211][T22192] pim6reg: entered allmulticast mode [ 551.252206][T22205] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 551.514350][T22209] netlink: 'syz.2.7773': attribute type 8 has an invalid length. [ 552.749024][T22234] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 553.914968][T22257] ip_tables: iptables: counters copy to user failed while replacing table [ 554.374260][T22269] netlink: 'syz.0.7802': attribute type 5 has an invalid length. [ 555.265579][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7807'. [ 556.038952][T22309] netlink: 'syz.1.7821': attribute type 10 has an invalid length. [ 556.057109][T22309] .`: (slave dummy0): Releasing backup interface [ 556.074205][T22309] dummy0: left promiscuous mode [ 556.074462][T22309] dummy0: left allmulticast mode [ 556.093760][T22312] netlink: 'syz.1.7821': attribute type 10 has an invalid length. [ 556.109372][T22309] dummy0: entered allmulticast mode [ 556.112046][T22309] team0: Port device dummy0 added [ 556.132616][T22312] dummy0 (unregistering): left allmulticast mode [ 556.152149][T22312] team0: Port device dummy0 removed [ 556.220358][T22311] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 556.787977][T22329] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7829'. [ 557.324370][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7841'. [ 557.848574][T22365] tipc: Enabling of bearer rejected, failed to enable media [ 558.622205][T22381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7855'. [ 558.661633][T22384] ip_tables: iptables: counters copy to user failed while replacing table [ 558.783255][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7858'. [ 558.978067][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7860'. [ 559.328491][T22403] netlink: 'syz.2.7866': attribute type 1 has an invalid length. [ 559.593946][T22409] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 559.942516][T22419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7872'. [ 560.190661][T22431] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 560.591093][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7885'. [ 561.095207][T22463] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7894'. [ 561.095246][T22463] tc_dump_action: action bad kind [ 561.516316][T22478] tipc: MTU too low for tipc bearer [ 561.631907][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7903'. [ 562.596028][T22509] netlink: 'syz.4.7916': attribute type 10 has an invalid length. [ 562.648633][T22510] netlink: 'syz.4.7916': attribute type 10 has an invalid length. [ 562.943474][T22509] bond0: (slave dummy0): Releasing backup interface [ 563.023937][T22509] team0: Port device dummy0 added [ 563.024003][T22509] dummy0: left promiscuous mode [ 563.184958][T22510] team0: Port device dummy0 removed [ 563.758652][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7926'. [ 563.806866][T22532] macsec1: entered promiscuous mode [ 563.806896][T22532] batadv0: entered promiscuous mode [ 563.807665][T22532] macsec1: entered allmulticast mode [ 563.807683][T22532] batadv0: entered allmulticast mode [ 563.811666][T22532] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 563.900541][T22532] batadv0: left allmulticast mode [ 563.900574][T22532] batadv0: left promiscuous mode [ 565.323328][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7939'. [ 566.220639][T22603] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7959'. [ 566.220808][T22603] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7959'. [ 568.023341][T22653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7980'. [ 568.069896][ T3315] IPVS: starting estimator thread 0... [ 568.168636][T22658] IPVS: using max 25 ests per chain, 60000 per kthread [ 568.430907][T22671] netlink: 'syz.1.7987': attribute type 1 has an invalid length. [ 568.862200][T22687] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7996'. [ 570.933328][T22744] netlink: 'syz.0.8021': attribute type 1 has an invalid length. [ 571.180127][T22755] nftables ruleset with unbound set [ 572.016805][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8041'. [ 572.016846][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8041'. [ 572.016862][T22782] netlink: 13 bytes leftover after parsing attributes in process `syz.4.8041'. [ 572.016877][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8041'. [ 572.016891][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8041'. [ 572.587113][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8051'. [ 573.163653][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8061'. [ 573.266402][T22831] ip_tables: iptables: counters copy to user failed while replacing table [ 575.812087][T22917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8104'. [ 576.683104][T22936] bond6: option lacp_rate: invalid value (128) [ 576.760112][T22936] bond6 (unregistering): Released all slaves [ 577.271480][T22951] netlink: 'syz.1.8119': attribute type 13 has an invalid length. [ 577.746083][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8127'. [ 578.217884][T22989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8136'. [ 579.410023][T23029] netlink: 'syz.1.8156': attribute type 6 has an invalid length. [ 581.308575][T23086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8182'. [ 581.736945][T23096] tipc: Enabled bearer , priority 10 [ 581.881760][T23102] tipc: Started in network mode [ 581.881799][T23102] tipc: Node identity ac1414aa, cluster identity 4711 [ 581.921955][T23102] tipc: Enabling of bearer rejected, failed to enable media [ 582.311968][T23120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8199'. [ 582.425212][T23126] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 583.284874][T23158] netlink: 'syz.2.8217': attribute type 1 has an invalid length. [ 583.672162][T23174] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 584.136642][T23190] netlink: 'syz.2.8232': attribute type 3 has an invalid length. [ 584.772801][T23215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8245'. [ 585.475972][T23239] tipc: Started in network mode [ 585.476009][T23239] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 585.476188][T23239] tipc: Enabled bearer , priority 10 [ 585.709688][T23247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8258'. [ 586.050333][T23253] ovs-dp0: entered promiscuous mode [ 586.156876][ T3393] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.156933][ T3393] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.156972][ T3393] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.157008][ T3393] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.586947][ T5820] tipc: Node number set to 10136234 [ 587.016344][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8277'. [ 587.287473][T23291] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8279'. [ 589.194815][T23355] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 589.300941][T23363] netlink: 'syz.0.8314': attribute type 2 has an invalid length. [ 589.373410][T23363] : entered promiscuous mode [ 589.793894][T23376] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8321'. [ 589.793963][T23376] netlink: 'syz.1.8321': attribute type 9 has an invalid length. [ 589.793980][T23376] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8321'. [ 589.793997][T23376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8321'. [ 589.918894][T23379] netlink: 'syz.3.8324': attribute type 27 has an invalid length. [ 590.116060][T23386] macsec2: entered promiscuous mode [ 590.715231][T23406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8336'. [ 590.715289][T23406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8336'. [ 590.715306][T23406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8336'. [ 593.143958][T23466] netlink: 'syz.0.8364': attribute type 10 has an invalid length. [ 593.143989][T23466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8364'. [ 593.144231][T23466] dummy0: entered promiscuous mode [ 593.145344][T23466] bridge0: port 3(dummy0) entered blocking state [ 593.145962][T23466] bridge0: port 3(dummy0) entered disabled state [ 593.146464][T23466] dummy0: entered allmulticast mode [ 593.312191][T23469] block nbd0: not configured, cannot reconfigure [ 595.398124][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8399'. [ 595.398172][T23544] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8399'. [ 595.875616][T23562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8406'. [ 596.093547][T23571] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.230842][T23578] IPVS: Scheduler module ip_vs_sip not found [ 596.465543][T23588] netlink: 'syz.2.8418': attribute type 10 has an invalid length. [ 596.465572][T23588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8418'. [ 596.474758][T23588] dummy0: entered promiscuous mode [ 596.496879][T23588] bond0: (slave dummy0): Releasing backup interface [ 596.684002][T23588] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 597.607085][T21315] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 597.607437][T21315] Bluetooth: hci0: command 0x0406 tx timeout [ 598.014120][T23646] sctp: [Deprecated]: syz.0.8446 (pid 23646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.014120][T23646] Use struct sctp_sack_info instead [ 599.821993][T23703] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8472'. [ 600.725956][T23738] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 601.098081][T23751] Bluetooth: hci0: unsupported parameter 5135 [ 601.098107][T23751] Bluetooth: hci0: unsupported parameter 8192 [ 601.098123][T23751] Bluetooth: hci0: unsupported parameter 5135 [ 601.098137][T23751] Bluetooth: hci0: unsupported parameter 8192 [ 601.459453][T23764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8502'. [ 606.471081][T23946] tipc: Enabled bearer , priority 10 [ 607.123395][T23969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8596'. [ 607.206966][T21315] Bluetooth: hci0: command 0x0406 tx timeout [ 607.207243][ T52] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 608.749312][T24014] sctp: [Deprecated]: syz.1.8617 (pid 24014) Use of int in maxseg socket option. [ 608.749312][T24014] Use struct sctp_assoc_value instead [ 608.988252][T24018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.274950][T24029] netlink: 'syz.3.8624': attribute type 22 has an invalid length. [ 609.975156][T24047] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8633'. [ 609.975197][T24047] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8633'. [ 610.173034][T24049] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8634'. [ 610.263963][T24050] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 610.382441][T24054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8635'. [ 611.086124][T14764] wg0 speed is unknown, defaulting to 1000 [ 611.524514][T24087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8651'. [ 611.595633][T24090] sctp: [Deprecated]: syz.4.8653 (pid 24090) Use of int in max_burst socket option. [ 611.595633][T24090] Use struct sctp_assoc_value instead [ 611.711940][T24094] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 611.911637][T24102] tipc: Bearer : already 2 bearers with priority 10 [ 611.911666][T24102] tipc: Bearer : trying with adjusted priority [ 611.911764][T24102] tipc: Enabling of bearer rejected, failed to enable media [ 611.961678][T24104] s: renamed from veth0 [ 612.114495][T24111] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8662'. [ 612.129561][T24112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8663'. [ 612.262103][T24112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8663'. [ 612.370796][T24112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.499036][T24124] Bluetooth: hci0: unsupported parameter 5135 [ 612.499066][T24124] Bluetooth: hci0: unsupported parameter 8192 [ 612.499081][T24124] Bluetooth: hci0: unsupported parameter 5135 [ 612.499095][T24124] Bluetooth: hci0: unsupported parameter 8192 [ 613.255862][T24149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.013048][T24171] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8692'. [ 614.014243][T24171] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8692'. [ 614.014267][T24171] netlink: 'syz.4.8692': attribute type 5 has an invalid length. [ 614.014282][T24171] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8692'. [ 614.246867][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 615.099795][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8703'. [ 615.269510][T24198] netlink: 91 bytes leftover after parsing attributes in process `syz.2.8704'. [ 616.158590][T24234] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8722'. [ 616.158619][T24234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 616.262755][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8724'. [ 616.262819][T24239] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 616.364687][T24243] openvswitch: netlink: Missing key (keys=40, expected=100) [ 616.524272][T24249] vcan1: entered promiscuous mode [ 616.524298][T24249] vcan1: entered allmulticast mode [ 616.858368][T24263] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8732'. [ 617.288933][T24279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8740'. [ 617.394180][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8743'. [ 617.501807][T24286] IPv6: sit1: Disabled Multicast RS [ 617.714822][T24295] Bluetooth: hci0: unsupported parameter 5135 [ 617.714853][T24295] Bluetooth: hci0: unsupported parameter 8192 [ 617.714868][T24295] Bluetooth: hci0: unsupported parameter 5135 [ 617.714882][T24295] Bluetooth: hci0: unsupported parameter 8192 [ 619.183141][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8770'. [ 620.297068][T24389] netlink: 15 bytes leftover after parsing attributes in process `syz.2.8793'. [ 620.513622][T24397] bridge_slave_1: entered promiscuous mode [ 620.595220][T24401] batadv0: entered promiscuous mode [ 620.605708][T24401] macvlan2: entered promiscuous mode [ 620.606024][T24401] macvlan2: entered allmulticast mode [ 620.606042][T24401] batadv0: entered allmulticast mode [ 620.629823][T24401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 620.631003][T24401] batadv0: left allmulticast mode [ 620.631383][T24401] batadv0: left promiscuous mode [ 621.361625][T24431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8812'. [ 621.519799][T24437] xt_hashlimit: size too large, truncated to 1048576 [ 621.997572][T24451] xt_hashlimit: size too large, truncated to 1048576 [ 625.090426][T24534] netlink: 186032 bytes leftover after parsing attributes in process `syz.0.8861'. [ 625.090459][T24534] openvswitch: netlink: ufid size 26372 bytes exceeds the range (1, 16) [ 625.090478][T24534] openvswitch: netlink: Message has 512 unknown bytes. [ 625.091477][T24535] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8862'. [ 625.233454][T24540] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8864'. [ 626.529663][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8890'. [ 626.529759][T24591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8890'. [ 627.005944][T24604] tipc: Resetting bearer [ 627.067444][T24604] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 627.101737][T24612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8899'. [ 627.614252][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8909'. [ 629.064016][T24675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8929'. [ 629.603415][T24692] tipc: Bearer : already 2 bearers with priority 10 [ 629.603442][T24692] tipc: Bearer : trying with adjusted priority [ 629.628632][T24692] tipc: Enabled bearer , priority 9 [ 630.257403][T24720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.336183][T24722] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8952'. [ 630.692645][T24732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8953'. [ 631.667656][T24774] Bluetooth: hci0: unsupported parameter 5135 [ 631.667689][T24774] Bluetooth: hci0: unsupported parameter 8192 [ 631.667704][T24774] Bluetooth: hci0: unsupported parameter 5135 [ 631.667718][T24774] Bluetooth: hci0: unsupported parameter 8192 [ 632.180330][T24792] netlink: Unknown nat attribute (0) [ 632.180371][T24792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.945094][T24824] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8999'. [ 632.945129][T24824] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8999'. [ 632.945148][T24824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8999'. [ 634.401890][T24865] netlink: 'syz.3.9018': attribute type 30 has an invalid length. [ 635.699140][T24896] netlink: 'syz.2.9033': attribute type 2 has an invalid length. [ 636.510901][T24922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9044'. [ 638.269880][T24974] netlink: 296 bytes leftover after parsing attributes in process `syz.2.9066'. [ 638.420429][T24981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9068'. [ 639.927071][T25018] Bluetooth: hci0: unsupported parameter 5135 [ 639.927103][T25018] Bluetooth: hci0: unsupported parameter 8192 [ 639.927119][T25018] Bluetooth: hci0: unsupported parameter 5135 [ 639.927134][T25018] Bluetooth: hci0: unsupported parameter 8192 [ 640.000326][T25020] netlink: 'syz.4.9087': attribute type 1 has an invalid length. [ 640.000373][T25020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.476542][T25065] netlink: 271 bytes leftover after parsing attributes in process `syz.1.9109'. [ 641.544362][T25066] nbd: socks must be embedded in a SOCK_ITEM attr [ 641.847540][T25083] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9117'. [ 643.686228][T25127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9139'. [ 643.686282][T25127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9139'. [ 643.854166][T25133] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 645.176403][T25169] netlink: 'syz.1.9156': attribute type 3 has an invalid length. [ 645.474282][T25174] ip6tnl5: entered allmulticast mode [ 645.528870][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 647.539680][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9194'. [ 647.761096][T25256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9197'. [ 647.817645][T25259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9196'. [ 647.817678][T25259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9196'. [ 647.991033][T25266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9203'. [ 648.407758][T21315] Bluetooth: hci0: Opcode 0x0c6d failed: -110 [ 648.408085][T21315] Bluetooth: hci0: command 0x0406 tx timeout [ 649.674660][T25303] netlink: 452 bytes leftover after parsing attributes in process `syz.0.9222'. [ 651.547845][ T31] audit: type=1800 audit(1792627120.319:6): pid=25352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9244" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9564 res=0 errno=0 [ 651.729220][T25358] macvtap1: entered promiscuous mode [ 651.729246][T25358] batadv0: entered promiscuous mode [ 651.734149][T25358] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 651.766103][T25358] batadv0: left promiscuous mode [ 652.005210][T25370] netlink: NAT attribute has 4 unknown bytes [ 652.005248][T25370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.165951][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9256'. [ 652.248623][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9256'. [ 652.816879][T25400] netlink: 204 bytes leftover after parsing attributes in process `syz.0.9267'. [ 653.159663][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9275'. [ 654.394623][T25464] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 654.474211][T25466] vlan2: entered promiscuous mode [ 654.474235][T25466] bridge0: entered promiscuous mode [ 655.565660][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9321'. [ 655.565711][T25513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9321'. [ 655.565728][T25513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9321'. [ 656.674205][T25553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.751678][T25555] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9342'. [ 656.784232][T25555] vlan2: entered promiscuous mode [ 657.354681][T25577] tipc: Enabled bearer , priority 24 [ 657.459555][T25583] netlink: 'syz.0.9356': attribute type 5 has an invalid length. [ 659.328989][T25638] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9383'. [ 662.423898][T25753] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9438'. [ 664.125967][T25795] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9457'. [ 664.319974][T25804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9461'. [ 664.320006][T25804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9461'. [ 667.118643][T25894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9504'. [ 667.714463][T25902] batadv_slave_1: entered promiscuous mode [ 668.211054][T25912] netlink: 79 bytes leftover after parsing attributes in process `syz.4.9513'. [ 669.065471][T25940] netlink: 47 bytes leftover after parsing attributes in process `syz.0.9526'. [ 670.596950][T25979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9543'. [ 671.261807][T25999] Bluetooth: hci0: unsupported parameter 5135 [ 671.261842][T25999] Bluetooth: hci0: unsupported parameter 65 [ 671.261859][T25999] Bluetooth: hci0: unsupported parameter 5135 [ 671.261873][T25999] Bluetooth: hci0: unsupported parameter 65 [ 671.634096][T26007] nbd: couldn't find a device at index 0 [ 672.042932][T26022] tipc: Started in network mode [ 672.042970][T26022] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 672.043247][T26022] tipc: Enabled bearer , priority 7 [ 672.666795][T26041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9572'. [ 673.062712][T26048] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9575'. [ 673.156902][T14764] tipc: Node number set to 9480874 [ 674.015659][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9591'. [ 674.082007][T26084] netlink: 'syz.4.9593': attribute type 3 has an invalid length. [ 674.956048][T26114] netlink: Failed to add %pK helper -22 [ 674.956114][T26114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.709710][T26130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9613'. [ 675.873389][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9617'. [ 677.206168][T26188] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.9642'. [ 677.206246][T26188] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.9642'. [ 677.583342][ T31] audit: type=1800 audit(1792627146.349:7): pid=26202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9501 res=0 errno=0 [ 677.708431][T26206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9650'. [ 678.230372][ T31] audit: type=1804 audit(1792627146.989:8): pid=26230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9661" name="/newroot/1905/cgroup.controllers" dev="tmpfs" ino=9557 res=1 errno=0 [ 678.270864][ T31] audit: type=1800 audit(1792627147.039:9): pid=26230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9661" name="cgroup.controllers" dev="tmpfs" ino=9557 res=0 errno=0 [ 678.695903][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9669'. [ 680.970361][T26334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9709'. [ 681.180770][T26340] batadv_slave_1: entered promiscuous mode [ 681.193982][T26342] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9713'. [ 681.843175][T26360] vlan3: entered promiscuous mode [ 681.911513][T26365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9724'. [ 682.173826][T26374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 682.267640][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9731'. [ 682.338530][T26379] ip6gre3: entered promiscuous mode [ 682.338559][T26379] ip6gre3: entered allmulticast mode [ 682.476200][T26381] netlink: 'syz.4.9732': attribute type 18 has an invalid length. [ 683.126403][T26406] netlink: 'syz.4.9742': attribute type 1 has an invalid length. [ 683.126436][T26406] netlink: 212380 bytes leftover after parsing attributes in process `syz.4.9742'. [ 683.305914][T26399] udevd[26399]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 683.562675][T26420] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 683.832787][T26431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9753'. [ 683.846798][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 684.576120][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9765'. [ 684.792502][T26462] batman_adv: batadv0: Adding interface: gretap1 [ 684.792526][T26462] batman_adv: batadv0: The MTU of interface gretap1 is too small (1244) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.792594][T26462] batman_adv: batadv0: Interface activated: gretap1 [ 685.543821][T26493] tipc: Enabling of bearer rejected, failed to enable media [ 685.820039][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9787'. [ 687.763273][T26545] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 688.179817][T26560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9815'. [ 689.135408][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 689.169534][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 689.171790][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 689.207173][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 689.211264][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 689.212011][T26594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9830'. [ 689.509212][T26606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9836'. [ 691.180280][ T31] audit: type=1800 audit(1792627159.949:10): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9858" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9773 res=0 errno=0 [ 692.939905][T26705] Bluetooth: hci0: unsupported parameter 5135 [ 692.939943][T26705] Bluetooth: hci0: unsupported parameter 8192 [ 692.939959][T26705] Bluetooth: hci0: unsupported parameter 5135 [ 692.939974][T26705] Bluetooth: hci0: unsupported parameter 8192 [ 693.313565][T26713] ipvlan2: entered promiscuous mode [ 693.314696][T26713] bridge0: port 1(ipvlan2) entered blocking state [ 693.321062][T26713] bridge0: port 1(ipvlan2) entered disabled state [ 693.321703][T26713] ipvlan2: entered allmulticast mode [ 693.321749][T26713] bridge0: entered allmulticast mode [ 693.469008][T26713] ipvlan2: left allmulticast mode [ 693.469035][T26713] bridge0: left allmulticast mode [ 693.820110][T26727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9892'. [ 694.693308][T26747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.696511][T26751] tipc: Enabling of bearer rejected, media not registered [ 695.351489][T26780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 696.078581][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.081298][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.081576][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.081790][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.081969][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.082149][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.186880][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 696.187157][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9931'. [ 698.033487][T26860] netlink: 'syz.3.9951': attribute type 70 has an invalid length. [ 699.278162][T26897] __nla_validate_parse: 50 callbacks suppressed [ 699.278232][T26897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9965'. [ 699.278311][T26897] netlink: 'syz.1.9965': attribute type 1 has an invalid length. [ 699.278327][T26897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9965'. [ 700.726251][T26944] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 700.737719][T26940] batadv0: entered promiscuous mode [ 700.742727][T26940] macsec1: entered promiscuous mode [ 700.751978][T26940] macsec1: entered allmulticast mode [ 700.752005][T26940] batadv0: entered allmulticast mode [ 700.782560][T26940] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 702.571345][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10006'. [ 704.818453][T21315] block nbd2: Receive control failed (result -32) [ 704.818571][ T52] block nbd2: Receive control failed (result -32) [ 704.893443][T27063] C: renamed from veth1_to_team (while UP) [ 704.911951][T27063] netlink: 'syz.2.10032': attribute type 1 has an invalid length. [ 704.911980][T27063] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10032'. [ 704.912003][T27063] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 705.342716][T27075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10037'. [ 706.339458][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.801319][ T31] audit: type=1804 audit(1792627176.569:11): pid=27127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10058" name="/newroot/1988/cgroup.controllers" dev="tmpfs" ino=9981 res=1 errno=0 [ 707.802732][ T31] audit: type=1800 audit(1792627176.569:12): pid=27127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10058" name="cgroup.controllers" dev="tmpfs" ino=9981 res=0 errno=0 [ 708.701116][T27145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10064'. [ 708.723478][T27145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10064'. [ 708.723510][T27145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10064'. [ 709.084469][ T52] block nbd3: Receive control failed (result -32) [ 709.520220][T27161] netlink: 165 bytes leftover after parsing attributes in process `syz.1.10071'. [ 709.950559][T27173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 709.950582][T27173] IPv6: NLM_F_CREATE should be set when creating new route [ 709.952662][T27173] IPv6: NLM_F_CREATE should be set when creating new route [ 709.952693][T27173] IPv6: NLM_F_CREATE should be set when creating new route [ 710.386792][T27185] IPv6: addrconf: prefix option has invalid lifetime [ 711.705367][T27216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10095'. [ 711.705400][T27216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10095'. [ 711.705419][T27216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10095'. [ 711.705690][T27216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10095'. [ 711.889062][T27220] erspan0: entered promiscuous mode [ 712.690277][T27235] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10102'. [ 712.727964][T21315] Bluetooth: hci4: command 0x0406 tx timeout [ 713.654342][T27256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10112'. [ 713.899179][T27263] netlink: 'syz.0.10115': attribute type 10 has an invalid length. [ 713.930136][T27263] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 714.072301][T27273] netlink: 'syz.1.10121': attribute type 3 has an invalid length. [ 715.795546][T27325] openvswitch: netlink: IPv4 tunnel dst address is zero [ 715.795586][T27325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.109954][T27340] bridge0: entered allmulticast mode [ 716.174540][T27340] dummy0: left allmulticast mode [ 716.193898][T27340] bridge0: port 3(dummy0) entered disabled state [ 716.259374][T27340] bridge_slave_1: left allmulticast mode [ 716.259407][T27340] bridge_slave_1: left promiscuous mode [ 716.259801][T27340] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.323885][T27340] bridge_slave_0: left allmulticast mode [ 716.323918][T27340] bridge_slave_0: left promiscuous mode [ 716.324164][T27340] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.452935][T27340] bond0: (slave bridge0): Releasing backup interface [ 718.713915][T27401] netlink: 'syz.2.10175': attribute type 1 has an invalid length. [ 718.713944][T27401] nbd: error processing sock list [ 718.714483][T27401] block nbd4: shutting down sockets [ 719.127118][T27413] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 719.205952][T27413] bond0 (unregistering): Released all slaves [ 719.872854][T27445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.767515][T27482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10208'. [ 722.274619][T27539] batman_adv: batadv0: adding TT local entry ba:bb:cc:dd:ee:ff to non-existent VLAN 3893 [ 723.307141][T27564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10247'. [ 723.563979][T27571] erspan0: entered promiscuous mode [ 723.869375][T27583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10256'. [ 723.923895][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10257'. [ 723.923960][T27585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10257'. [ 724.855048][T27602] openvswitch: netlink: VLAN attribute unexpected. [ 726.194787][T27643] bond6: invalid ARP target 0.0.0.0 specified for addition [ 726.194822][T27643] bond6: option arp_ip_target: invalid value (0) [ 726.216398][T27643] bond6 (unregistering): Released all slaves [ 727.236813][ T3374] IPVS: starting estimator thread 0... [ 727.327552][T27680] IPVS: using max 27 ests per chain, 64800 per kthread [ 727.416966][T27687] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10300'. [ 727.443755][T27687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10300'. [ 727.634878][T21315] block nbd4: Receive control failed (result -32) [ 727.635241][ T52] block nbd4: Receive control failed (result -32) [ 730.656344][T27773] netlink: 'syz.1.10335': attribute type 6 has an invalid length. [ 730.720986][T27775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10337'. [ 732.175702][T27818] netlink: 'syz.4.10355': attribute type 4 has an invalid length. [ 732.175731][T27818] netlink: 'syz.4.10355': attribute type 1 has an invalid length. [ 732.175747][T27818] netlink: 'syz.4.10355': attribute type 1 has an invalid length. [ 732.175762][T27818] netlink: 200 bytes leftover after parsing attributes in process `syz.4.10355'. [ 732.175921][T27818] NCSI netlink: No device for ifindex 0 [ 732.583743][T27828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 732.863960][T27836] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10361'. [ 733.359749][T27849] bond0 (unregistering): Released all slaves [ 733.844930][T27874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10378'. [ 734.562020][T27889] bond4: invalid ARP target 0.0.0.0 specified for addition [ 734.562056][T27889] bond4: option arp_ip_target: invalid value (0) [ 734.582776][T27889] bond4 (unregistering): Released all slaves [ 735.023010][T27905] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 735.362796][T27911] veth0: entered promiscuous mode [ 735.364222][T27909] veth0: left promiscuous mode [ 736.025850][T27923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10397'. [ 737.053635][T27942] vxcan2: entered allmulticast mode [ 737.126826][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 737.624916][T27964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10414'. [ 740.311793][T28027] tun0: tun_chr_ioctl cmd 1074025680 [ 740.903629][T28034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10445'. [ 740.903754][T28034] tipc: Resetting bearer [ 741.089888][T28034] tipc: Disabling bearer [ 742.246881][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 742.953762][T28093] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 744.029721][T28121] netpci0: tun_chr_ioctl cmd 1074025678 [ 744.029752][T28121] netpci0: group set to 0 [ 744.533742][T28138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10491'. [ 747.053799][T28203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10518'. [ 747.098039][T28203] macvlan2: entered allmulticast mode [ 747.098066][T28203] gretap0: entered allmulticast mode [ 747.924287][T28231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10530'. [ 749.146040][T28259] cfg80211: Invalid regulatory domain detected: BB [ 750.214246][T28298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10558'. [ 750.214280][T28298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10558'. [ 750.506844][T28306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 751.049856][T28324] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10570'. [ 752.084758][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10584'. [ 752.084801][T28354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10584'. [ 752.084843][T28354] netlink: 'syz.3.10584': attribute type 18 has an invalid length. [ 752.135747][T28359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10584'. [ 752.135789][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10584'. [ 752.135831][T28359] netlink: 'syz.3.10584': attribute type 18 has an invalid length. [ 752.328410][ T3374] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.328707][ T3374] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.334120][ T3374] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.334174][ T3374] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 4352 - 0 [ 752.856540][T28376] dvmrp0: entered allmulticast mode [ 752.919712][T28378] dvmrp0: left allmulticast mode [ 753.011845][T28384] xt_hashlimit: size too large, truncated to 1048576 [ 754.795660][T28438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10617'. [ 756.302141][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10637'. [ 756.552664][T28493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10643'. [ 757.251318][T28502] ip6gretap0: entered promiscuous mode [ 757.268913][T28502] batadv0: entered promiscuous mode [ 757.283377][T28502] tipc: Resetting bearer [ 757.331631][T28502] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 757.331662][T28502] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 757.934129][T28534] syz_tun: entered allmulticast mode [ 757.944656][T28533] syz_tun: left allmulticast mode [ 759.205170][T28563] tun0: tun_chr_ioctl cmd 1074812117 [ 759.855184][T28590] ip_tables: iptables: counters copy to user failed while replacing table [ 759.989611][T28598] netlink: 'syz.3.10690': attribute type 32 has an invalid length. [ 759.989640][T28598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'. [ 760.363055][T28598] bond6: option coupled_control: invalid value (10) [ 760.365792][T28612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 760.490541][T28598] bond6 (unregistering): Released all slaves [ 761.007805][T28632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10703'. [ 763.653721][T28719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10733'. [ 763.690566][T28721] netlink: 'syz.0.10734': attribute type 3 has an invalid length. [ 763.690633][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10734'. [ 764.258294][T28727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10736'. [ 764.258491][T28727] macvlan0: entered promiscuous mode [ 764.259841][T28727] netlink: 'syz.3.10736': attribute type 1 has an invalid length. [ 764.259863][T28727] netlink: 'syz.3.10736': attribute type 2 has an invalid length. [ 765.054281][T28756] tun0: tun_chr_ioctl cmd 1074025675 [ 765.054311][T28756] tun0: persist disabled [ 765.864101][T28784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10760'. [ 767.783710][T28820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10777'. [ 767.783767][T28820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10777'. [ 767.847813][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.352613][T28885] netlink: 'syz.1.10803': attribute type 1 has an invalid length. [ 771.155367][T28903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10811'. [ 771.851605][T28922] netlink: 'syz.1.10817': attribute type 219 has an invalid length. [ 772.026196][T28924] sctp: [Deprecated]: syz.4.10819 (pid 28924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.026196][T28924] Use struct sctp_sack_info instead [ 772.669668][T28944] IPv6: NLM_F_CREATE should be specified when creating new route [ 772.669967][T28944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.669980][T28944] IPv6: NLM_F_CREATE should be set when creating new route [ 772.670029][T28944] IPv6: NLM_F_CREATE should be set when creating new route [ 772.670058][T28944] IPv6: NLM_F_CREATE should be set when creating new route [ 772.674422][T28944] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10829'. [ 773.291381][T28963] sctp: [Deprecated]: syz.4.10837 (pid 28963) Use of int in max_burst socket option. [ 773.291381][T28963] Use struct sctp_assoc_value instead [ 773.362057][T28967] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10840'. [ 774.463325][T29008] netlink: 'syz.0.10860': attribute type 16 has an invalid length. [ 774.463354][T29008] netlink: 'syz.0.10860': attribute type 17 has an invalid length. [ 774.581889][T29008] gretap0: entered promiscuous mode [ 774.831039][T29008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.863547][T29008] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.883618][T29008] dummy0: left promiscuous mode [ 775.236063][T29008] bond_slave_0: left promiscuous mode [ 775.236297][T29008] bond_slave_0: left allmulticast mode [ 775.272262][T29008] team_slave_0: left allmulticast mode [ 775.301001][T29008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.301036][T29008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.330112][T29008] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 775.959040][T29048] netlink: 'syz.2.10877': attribute type 2 has an invalid length. [ 776.140339][T29048] ´: entered promiscuous mode [ 779.680880][T29162] ip_tables: iptables: counters copy to user failed while replacing table [ 780.311166][T29178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10935'. [ 780.311207][T29178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10935'. [ 780.311226][T29178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10935'. [ 781.344610][T21315] block nbd5: Receive control failed (result -32) [ 781.464537][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10954'. [ 781.481780][T29220] veth1_macvtap: left promiscuous mode [ 781.731708][T29228] netlink: 'syz.3.10957': attribute type 1 has an invalid length. [ 781.731756][T29228] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.10957'. [ 781.732411][T29228] netlink: 'syz.3.10957': attribute type 1 has an invalid length. [ 781.870775][T29232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10959'. [ 782.739300][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10973'. [ 782.801182][T29262] vlan2: entered allmulticast mode [ 782.804668][T29262] batman_adv: batadv0: Adding interface: vlan2 [ 782.804690][T29262] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 783.881169][T29295] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10987'. [ 784.098733][T29299] sctp: [Deprecated]: syz.0.10990 (pid 29299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 784.098733][T29299] Use struct sctp_sack_info instead [ 784.306912][T29308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10992'. [ 784.306959][T29308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10992'. [ 786.134440][T29354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11013'. [ 786.660867][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11020'. [ 786.660896][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11020'. [ 786.922068][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11023'. [ 786.967105][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11023'. [ 786.967750][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11023'. [ 786.971837][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11023'. [ 786.974252][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11023'. [ 787.350819][T29382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11026'. [ 787.925779][T29398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.021269][T29426] netlink: 964 bytes leftover after parsing attributes in process `syz.4.11046'. [ 789.180409][T29435] netlink: 'syz.0.11050': attribute type 30 has an invalid length. [ 790.486613][T29481] netlink: 'syz.2.11071': attribute type 22 has an invalid length. [ 791.189208][T29499] netlink: 'syz.1.11080': attribute type 9 has an invalid length. [ 791.232843][T29502] ip_tables: iptables: counters copy to user failed while replacing table [ 791.306978][T29502] ip_tables: iptables: counters copy to user failed while replacing table [ 791.816177][T29520] __nla_validate_parse: 4 callbacks suppressed [ 791.816207][T29520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11088'. [ 793.146844][T29566] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11099'. [ 793.209903][T29567] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 793.209934][T29567] syzkaller1: ignored: set checksum enabled [ 795.076361][T29619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 795.750059][T29631] vxcan2: entered allmulticast mode [ 797.471121][T29685] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11151'. [ 797.471174][T29685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11151'. [ 799.253832][T29735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11170'. [ 800.642705][T29782] sctp: [Deprecated]: syz.3.11190 (pid 29782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.642705][T29782] Use struct sctp_sack_info instead [ 800.943662][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11195'. [ 801.056280][T29792] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 801.097665][T29792] bond4 (unregistering): Released all slaves [ 801.598924][ T3340] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.598981][ T3340] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.599023][ T3340] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.599063][ T3340] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.720933][T29832] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11212'. [ 803.372618][T29844] bridge_slave_1: default FDB implementation only supports local addresses [ 804.717904][T29887] netlink: 'syz.3.11237': attribute type 9 has an invalid length. [ 804.834565][T29894] netlink: 'syz.2.11240': attribute type 4 has an invalid length. [ 804.834599][T29894] netlink: 'syz.2.11240': attribute type 8 has an invalid length. [ 804.834616][T29894] netlink: 212 bytes leftover after parsing attributes in process `syz.2.11240'. [ 806.857431][T29969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 807.224989][T29980] netlink: 332 bytes leftover after parsing attributes in process `syz.3.11278'. [ 807.225062][T29980] netlink: 'syz.3.11278': attribute type 9 has an invalid length. [ 807.225080][T29980] netlink: 'syz.3.11278': attribute type 1 has an invalid length. [ 809.714549][T30040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11307'. [ 810.760163][T30078] netlink: 'syz.2.11325': attribute type 361 has an invalid length. [ 812.001254][T30124] netlink: 'syz.4.11347': attribute type 2 has an invalid length. [ 812.001289][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11347'. [ 813.242083][T30173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11367'. [ 813.927099][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 814.133603][T30195] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 814.268324][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11380'. [ 814.268368][T30202] netlink: 'syz.0.11380': attribute type 10 has an invalid length. [ 814.268385][T30202] netlink: 'syz.0.11380': attribute type 5 has an invalid length. [ 814.268399][T30202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11380'. [ 814.320949][T30202] geneve3: entered promiscuous mode [ 814.320977][T30202] geneve3: entered allmulticast mode [ 814.356940][T28673] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 42812 - 0 [ 814.357750][T28673] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 42812 - 0 [ 814.370451][T28673] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 42812 - 0 [ 814.370744][T28673] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 42812 - 0 [ 814.504417][T30203] pim6reg: entered allmulticast mode [ 814.507468][T30203] pim6reg: left allmulticast mode [ 815.299913][T30229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11391'. [ 815.299948][T30229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11391'. [ 817.073594][T30272] netlink: 'syz.1.11410': attribute type 1 has an invalid length. [ 817.342415][T30277] pimreg0: tun_chr_ioctl cmd 1074025677 [ 817.342573][T30277] pimreg0: linktype set to 768 [ 818.418129][T30312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11425'. [ 819.035397][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11437'. [ 820.178554][T30358] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11449'. [ 820.906471][T30386] tipc: Cannot configure node identity twice [ 821.282420][T30401] batadv_slave_1: entered promiscuous mode [ 821.285236][T30401] batadv_slave_1: left promiscuous mode [ 821.463882][T30408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 821.509145][T30408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 821.907729][T30414] bond4: Removing last ns target with arp_interval on [ 821.986455][T30422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11476'. [ 821.986495][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11476'. [ 822.134018][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11476'. [ 822.584815][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11483'. [ 822.661746][T30431] udevd[30431]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 822.711881][T30430] udevd[30430]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 822.812740][T30454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11489'. [ 822.953393][T30459] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 822.953508][T30459] syzkaller0: linktype set to 7 [ 824.310797][T30500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11508'. [ 824.432871][T30502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11510'. [ 824.432908][T30502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11510'. [ 824.461085][T30502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11510'. [ 824.461121][T30502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11510'. [ 825.413443][T30528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 825.429243][T30528] ip_tables: iptables: counters copy to user failed while replacing table [ 826.447463][T30535] bond6 (unregistering): Released all slaves [ 826.872590][T30556] tipc: Started in network mode [ 826.872621][T30556] tipc: Node identity 1001001, cluster identity 4711 [ 826.872637][T30556] tipc: Node number set to 16781313 [ 827.314090][T30575] netlink: 'syz.4.11540': attribute type 10 has an invalid length. [ 829.267987][ T32] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.268922][ T32] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.268966][ T32] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.269004][ T32] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.515493][T30653] tipc: Enabling of bearer rejected, already enabled [ 830.679977][T30693] __nla_validate_parse: 2 callbacks suppressed [ 830.680003][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11596'. [ 832.208845][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11620'. [ 832.208881][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11620'. [ 832.208972][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11620'. [ 833.495833][T30796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11640'. [ 833.686811][T30800] RDS: rds_bind could not find a transport for 0:0:5d00::, load rds_tcp or rds_rdma? [ 833.905469][T30803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11646'. [ 833.931958][T30803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11646'. [ 834.069395][T30793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 834.306665][T28677] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.306708][T28677] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.505753][T30819] pimreg0: tun_chr_ioctl cmd 1074025677 [ 834.505904][T30819] pimreg0: linktype set to 1 [ 834.770723][T30829] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 836.002256][T30867] tap0: tun_chr_ioctl cmd 35108 [ 836.194758][T30870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11675'. [ 836.506227][T30879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11679'. [ 836.519069][T30879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11679'. [ 837.213311][T30907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11690'. [ 837.245109][T30908] erspan0: entered promiscuous mode [ 837.682249][T30923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11697'. [ 838.232923][T30938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11704'. [ 838.324791][T30940] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11705'. [ 838.324829][T30940] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11705'. [ 838.390364][T30942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11706'. [ 838.425167][T30942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11706'. [ 839.051848][T30958] vlan2: entered allmulticast mode [ 839.051878][T30958] bridge_slave_0: entered allmulticast mode [ 840.273079][T30984] sctp: [Deprecated]: syz.0.11721 (pid 30984) Use of int in maxseg socket option. [ 840.273079][T30984] Use struct sctp_assoc_value instead [ 841.630379][T31034] ip_tables: iptables: counters copy to user failed while replacing table [ 841.942811][T31046] __nla_validate_parse: 5 callbacks suppressed [ 841.942836][T31046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11750'. [ 842.093490][T31050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11752'. [ 843.401889][T31092] netlink: 'syz.1.11771': attribute type 14 has an invalid length. [ 844.047045][T31103] netlink: 'syz.2.11777': attribute type 3 has an invalid length. [ 844.047081][T31103] netlink: 'syz.2.11777': attribute type 1 has an invalid length. [ 844.047097][T31103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11777'. [ 844.175378][T31109] ip_tables: iptables: counters copy to user failed while replacing table [ 844.211476][T31109] ip_tables: iptables: counters copy to user failed while replacing table [ 844.371840][T31111] netlink: 'syz.3.11780': attribute type 14 has an invalid length. [ 847.973896][T31233] sch_tbf: burst 0 is lower than device lo mtu (1296) ! [ 849.752143][T31290] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.804754][T31292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 850.054689][T31299] netlink: 'syz.3.11864': attribute type 1 has an invalid length. [ 850.343561][T31308] netlink: 27 bytes leftover after parsing attributes in process `syz.3.11868'. [ 850.893779][T31331] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11879'. [ 850.893819][T31331] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11879'. [ 850.998840][T31334] netlink: 67 bytes leftover after parsing attributes in process `syz.0.11880'. [ 851.966779][T31344] dvmrp0: entered allmulticast mode [ 852.382314][T31361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11892'. [ 852.801183][T21315] block nbd6: Receive control failed (result -32) [ 853.104260][T31378] IPVS: persistence engine module ip_vs_pe_À not found [ 853.201578][T31389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11904'. [ 853.838754][T31418] sctp: [Deprecated]: syz.0.11917 (pid 31418) Use of int in max_burst socket option. [ 853.838754][T31418] Use struct sctp_assoc_value instead [ 855.703248][T31483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11943'. [ 856.280124][T31508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11953'. [ 856.325803][T31508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11953'. [ 856.700793][T31525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 858.137390][T31566] ip_tables: iptables: counters copy to user failed while replacing table [ 858.399947][T31575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11981'. [ 859.154818][T31597] netlink: 'syz.2.11991': attribute type 6 has an invalid length. [ 861.256421][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12026'. [ 861.316250][T31675] ipvlan2: entered allmulticast mode [ 861.316280][T31675] virt_wifi0: entered allmulticast mode [ 861.329995][T31675] batman_adv: batadv0: Adding interface: ipvlan2 [ 861.330022][T31675] batman_adv: batadv0: Interface activated: ipvlan2 [ 862.652054][T31711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 862.936893][T31723] xt_hashlimit: size too large, truncated to 1048576 [ 862.990618][T31726] xt_hashlimit: size too large, truncated to 1048576 [ 863.096406][T31726] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 864.663974][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12069'. [ 865.670275][T31806] nbd7: detected capacity change from 0 to 63 [ 865.674251][T21315] block nbd7: Receive control failed (result -32) [ 865.703943][ T1659] block nbd7: Dead connection, failed to find a fallback [ 865.703975][ T1659] block nbd7: shutting down sockets [ 865.704077][ T1659] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 865.704196][ T1659] Buffer I/O error on dev nbd7, logical block 0, async page read [ 865.704377][ T1659] Buffer I/O error on dev nbd7, logical block 1, async page read [ 865.704399][ T1659] Buffer I/O error on dev nbd7, logical block 2, async page read [ 865.704419][ T1659] Buffer I/O error on dev nbd7, logical block 3, async page read [ 865.708492][ T1659] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.708641][ T1659] Buffer I/O error on dev nbd7, logical block 0, async page read [ 865.712717][ T1659] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.729105][ T1659] Buffer I/O error on dev nbd7, logical block 1, async page read [ 865.740398][ T1659] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.740511][ T1659] Buffer I/O error on dev nbd7, logical block 2, async page read [ 865.740923][ T1659] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.741009][ T1659] Buffer I/O error on dev nbd7, logical block 3, async page read [ 865.743310][ T1659] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.743401][ T1659] Buffer I/O error on dev nbd7, logical block 0, async page read [ 865.745935][ T1659] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.746035][ T1659] Buffer I/O error on dev nbd7, logical block 1, async page read [ 865.756083][ T1659] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.827381][ T1659] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.830090][ T1659] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 865.909342][T31777] ldm_validate_partition_table(): Disk read failed. [ 865.928320][T31777] Dev nbd7: unable to read RDB block 0 [ 865.937785][T31777] nbd7: unable to read partition table [ 866.009230][T31777] ldm_validate_partition_table(): Disk read failed. [ 866.011673][T31777] Dev nbd7: unable to read RDB block 0 [ 866.026389][T31777] nbd7: unable to read partition table [ 867.631081][T31872] netlink: 63 bytes leftover after parsing attributes in process `syz.4.12114'. [ 867.950782][T31887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12119'. [ 867.950827][T31887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12119'. [ 869.126755][T21315] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 869.127078][T21315] Bluetooth: hci0: command 0x0406 tx timeout [ 870.460898][T31934] syzkaller1: entered promiscuous mode [ 870.461120][T31934] syzkaller1: entered allmulticast mode [ 870.938706][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12146'. [ 871.869251][T31992] netlink: 'syz.3.12157': attribute type 16 has an invalid length. [ 871.869359][T31992] netlink: 'syz.3.12157': attribute type 17 has an invalid length. [ 872.159210][T31992] batadv0: left promiscuous mode [ 872.159239][T31992] batadv0: left allmulticast mode [ 872.525991][T31992] vlan0: left promiscuous mode [ 872.549412][T31992] macvlan0: left promiscuous mode [ 872.605490][T31992] netdevsim netdevsim3 €Â: left allmulticast mode [ 872.830712][T31992] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 872.830920][T31992] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 872.831133][T31992] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 873.704142][T32034] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 875.284582][T32080] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 876.335428][T32110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12209'. [ 876.595080][T32116] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 877.077816][T32126] netlink: 'syz.1.12218': attribute type 1 has an invalid length. [ 877.077850][T32126] netlink: 'syz.1.12218': attribute type 2 has an invalid length. [ 877.243900][T32130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12220'. [ 879.514094][T32200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12247'. [ 879.515069][T32200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12247'. [ 880.525356][T32236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12260'. [ 883.091772][T32295] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 884.169026][T32320] sit1: entered allmulticast mode [ 885.412625][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12314'. [ 885.412670][T32354] netlink: 'syz.4.12314': attribute type 20 has an invalid length. [ 885.412687][T32354] netlink: 'syz.4.12314': attribute type 21 has an invalid length. [ 886.659889][T32386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12328'. [ 886.659928][T32386] netlink: 'syz.4.12328': attribute type 10 has an invalid length. [ 886.659946][T32386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12328'. [ 886.664679][T32389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12330'. [ 886.664718][T32389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12330'. [ 886.721524][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12330'. [ 886.721570][T32391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12330'. [ 886.766068][T32386] geneve3: entered promiscuous mode [ 886.766097][T32386] geneve3: entered allmulticast mode [ 886.870908][T28677] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 886.871846][T28677] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 886.978334][ T32] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 887.775598][T32412] bond6 (unregistering): Released all slaves [ 887.913548][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12346'. [ 887.913583][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12346'. [ 888.957220][T32458] bond7: option tlb_dynamic_lb: invalid value (255) [ 889.035314][T32458] bond7 (unregistering): Released all slaves [ 889.115892][T32463] batman_adv: batadv0: Adding interface: syz_tun [ 889.116097][T32463] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.153390][T32463] batman_adv: batadv0: Interface activated: syz_tun [ 889.567217][T32480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12365'. [ 891.398718][T32525] __nla_validate_parse: 2 callbacks suppressed [ 891.398743][T32525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12384'. [ 891.978305][T32547] team0: entered promiscuous mode [ 891.983313][T32547] team_slave_0: entered promiscuous mode [ 891.983599][T32547] team_slave_1: entered promiscuous mode [ 892.010586][T32547] team0: left promiscuous mode [ 892.010614][T32547] team_slave_0: left promiscuous mode [ 892.011826][T32547] team_slave_1: left promiscuous mode [ 892.167101][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12399'. [ 892.167134][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12399'. [ 892.167385][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12399'. [ 892.167406][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12399'. [ 892.371712][T32561] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 895.955958][T32671] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.348841][T32688] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 896.965719][T32714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 897.425214][T32723] syzkaller1: entered promiscuous mode [ 897.425248][T32723] syzkaller1: entered allmulticast mode [ 899.289436][T21315] Bluetooth: hci4: command 0x0406 tx timeout [ 899.712868][ T327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12500'. [ 901.703654][ T372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12517'. [ 901.703685][ T372] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12517'. [ 901.703711][ T372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12517'. [ 901.703729][ T372] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12517'. [ 901.703749][ T372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12517'. [ 901.886180][ T374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 903.500705][ T425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12541'. [ 905.474079][ T466] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 905.639214][ T491] syzkaller1: entered promiscuous mode [ 905.639245][ T491] syzkaller1: entered allmulticast mode [ 906.022266][ T509] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.12576'. [ 906.557817][ T534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12589'. [ 906.557862][ T534] netlink: 'syz.0.12589': attribute type 30 has an invalid length. [ 906.590163][ T534] vxlan1: entered promiscuous mode [ 906.590191][ T534] vxlan1: entered allmulticast mode [ 906.627917][ T536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12589'. [ 906.627958][ T536] netlink: 'syz.0.12589': attribute type 30 has an invalid length. [ 906.743841][ T536] vxlan1: entered promiscuous mode [ 906.743868][ T536] vxlan1: entered allmulticast mode [ 908.377940][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12607'. [ 908.385222][ T586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12607'. [ 908.385268][ T586] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 910.039142][ T619] syzkaller1: entered promiscuous mode [ 910.039169][ T619] syzkaller1: entered allmulticast mode [ 910.445300][ T635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12626'. [ 910.800224][ T635] bond0: Invalid ad_actor_system MAC address. [ 910.800251][ T635] bond0: option ad_actor_system: invalid value (7) [ 910.883763][ T635] bond0 (unregistering): Released all slaves [ 911.010490][ T642] tipc: New replicast peer: 127.0.0.1 [ 911.033821][ T642] tipc: Enabled bearer , priority 5 [ 911.317386][ T649] syzkaller1: entered promiscuous mode [ 911.317608][ T649] syzkaller1: entered allmulticast mode [ 912.653622][ T692] ip_tables: iptables: counters copy to user failed while replacing table [ 912.917789][T26721] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 912.954214][T26714] wg2 speed is unknown, defaulting to 1000 [ 913.202729][ T31] audit: type=1800 audit(1792627381.969:13): pid=688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12645" name="memory.events" dev="tmpfs" ino=12709 res=0 errno=0 [ 913.508674][T26714] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 913.708347][ T708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12655'. [ 914.005621][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12657'. [ 914.333536][ T717] syz.0.12658 (717) used greatest stack depth: 18024 bytes left [ 917.074535][ T809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12699'. [ 917.722657][ T831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12709'. [ 917.722691][ T831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12709'. [ 918.907992][ T862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12722'. [ 919.062021][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12724'. [ 919.062070][ T867] netlink: 'syz.3.12724': attribute type 10 has an invalid length. [ 919.062090][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12724'. [ 919.108687][ T867] geneve4: entered promiscuous mode [ 919.108716][ T867] geneve4: entered allmulticast mode [ 922.785598][ T1000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12766'. [ 922.984727][ T1004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12769'. [ 923.117090][ T1014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12770'. [ 923.548973][ T1033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12779'. [ 923.549023][ T1033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12779'. [ 923.761678][ T1042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12780'. [ 923.787212][ T1042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12780'. [ 925.251201][ T1085] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12794'. [ 925.957045][ T1107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12802'. [ 926.102325][ T1114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12807'. [ 926.563326][ T1134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.983587][ T1141] bridge0: port 4(veth0) entered blocking state [ 926.996170][ T1141] bridge0: port 4(veth0) entered disabled state [ 927.006405][ T1141] veth0: entered allmulticast mode [ 927.020597][ T1141] veth0: entered promiscuous mode [ 927.318115][ T1148] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.12821'. [ 927.318150][ T1148] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.12821'. [ 930.258102][ T1221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12855'. [ 930.310286][ T1221] veth1_to_team: entered promiscuous mode [ 930.314897][ T1221] veth1_to_team: left promiscuous mode [ 930.744458][ T1236] bridge_slave_0: entered promiscuous mode [ 931.637944][ T1263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12873'. [ 932.661211][ T1307] tipc: Resetting bearer [ 932.722264][ T1307] tipc: Resetting bearer [ 932.756386][ T1307] tipc: Resetting bearer [ 932.765419][ T1307] tipc: Resetting bearer [ 933.044044][ T1329] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12888'. [ 933.377178][T14758] lo speed is unknown, defaulting to 1000 [ 933.522695][ T1332] netlink: 'syz.4.12889': attribute type 16 has an invalid length. [ 933.522737][ T1332] netlink: 'syz.4.12889': attribute type 17 has an invalid length. [ 933.522776][ T1332] lo: left promiscuous mode [ 933.981463][ T1332] hsr0: left promiscuous mode [ 934.039382][ T1332] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 935.673861][ T1400] xt_hashlimit: size too large, truncated to 1048576 [ 935.884140][ T1404] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12919'. [ 936.069441][ T1409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12921'. [ 937.232557][ T1443] nbd: socks must be embedded in a SOCK_ITEM attr [ 937.458211][ T1443] block nbd8: shutting down sockets [ 937.923049][ T1430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12933'. [ 937.923103][ T1430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12933'. [ 937.963292][ T1430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.110369][ T1499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12958'. [ 939.110412][ T1499] netlink: 'syz.1.12958': attribute type 21 has an invalid length. [ 939.521170][ T1510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12963'. [ 939.521200][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12963'. [ 939.582873][ T1512] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12963'. [ 939.582903][ T1512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12963'. [ 939.612706][T14757] dummy0: entered promiscuous mode [ 939.636876][ T1510] macvtap0: entered allmulticast mode [ 939.636911][ T1510] dummy0: entered allmulticast mode [ 939.737358][ T1512] macvtap1: entered allmulticast mode [ 940.045287][ T1524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12967'. [ 941.432604][ T1568] netlink: 'syz.3.12988': attribute type 11 has an invalid length. [ 942.700564][ T1604] __nla_validate_parse: 2 callbacks suppressed [ 942.700591][ T1604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13005'. [ 942.705204][ T1604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13005'. [ 943.039922][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13008'. [ 943.284181][ T1627] hsr0: entered allmulticast mode [ 943.284212][ T1627] hsr_slave_0: entered allmulticast mode [ 943.284234][ T1627] hsr_slave_1: entered allmulticast mode [ 943.306207][ T1627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13015'. [ 943.466816][ T1627] hsr_slave_0: left promiscuous mode [ 943.468121][ T1627] hsr_slave_1: left promiscuous mode [ 943.891554][ T1627] hsr0 (unregistering): left allmulticast mode [ 944.047135][ T1619] lo speed is unknown, defaulting to 1000 [ 944.052836][ T1619] wg2 speed is unknown, defaulting to 1000 [ 944.060218][ T1619] wg0 speed is unknown, defaulting to 1000 [ 945.063816][ T1660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 945.280417][ T1669] sctp: [Deprecated]: syz.2.13033 (pid 1669) Use of int in maxseg socket option. [ 945.280417][ T1669] Use struct sctp_assoc_value instead [ 945.506241][ T1619] [ 945.508679][ T1619] ====================================================== [ 945.515762][ T1619] WARNING: possible circular locking dependency detected [ 945.522939][ T1619] syzkaller #0 Not tainted [ 945.527394][ T1619] ------------------------------------------------------ [ 945.534505][ T1619] syz.4.13012/1619 is trying to acquire lock: [ 945.540649][ T1619] ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 945.551122][ T1619] [ 945.551122][ T1619] but task is already holding lock: [ 945.558528][ T1619] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 945.569571][ T1619] [ 945.569571][ T1619] which lock already depends on the new lock. [ 945.569571][ T1619] [ 945.580054][ T1619] [ 945.580054][ T1619] the existing dependency chain (in reverse order) is: [ 945.589116][ T1619] [ 945.589116][ T1619] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 945.597963][ T1619] down_read+0x4a/0x330 [ 945.602840][ T1619] kernfs_remove_by_name_ns+0x3f/0x140 [ 945.608881][ T1619] internal_create_group+0x58e/0x1180 [ 945.614859][ T1619] sysfs_update_groups+0x60/0x130 [ 945.620490][ T1619] pmu_dev_alloc+0x29b/0x300 [ 945.625704][ T1619] perf_event_sysfs_init+0x76/0x100 [ 945.631602][ T1619] do_one_initcall+0x250/0x870 [ 945.636970][ T1619] do_initcall_level+0x10a/0x1a0 [ 945.642570][ T1619] do_initcalls+0x59/0xa0 [ 945.647463][ T1619] kernel_init_freeable+0x29d/0x3e0 [ 945.653228][ T1619] kernel_init+0x22/0x1d0 [ 945.658135][ T1619] ret_from_fork+0x514/0xb70 [ 945.663328][ T1619] ret_from_fork_asm+0x1a/0x30 [ 945.668650][ T1619] [ 945.668650][ T1619] -> #10 (pmus_lock){+.+.}-{4:4}: [ 945.675923][ T1619] __mutex_lock+0x19d/0x1550 [ 945.681070][ T1619] perf_event_init_cpu+0x1d1/0x7a0 [ 945.686786][ T1619] cpuhp_invoke_callback+0x434/0x810 [ 945.692687][ T1619] cpuhp_thread_fun+0x362/0x780 [ 945.698259][ T1619] smpboot_thread_fn+0x565/0xa70 [ 945.703767][ T1619] kthread+0x38b/0x480 [ 945.708390][ T1619] ret_from_fork+0x514/0xb70 [ 945.713548][ T1619] ret_from_fork_asm+0x1a/0x30 [ 945.718883][ T1619] [ 945.718883][ T1619] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 945.726512][ T1619] cpuhp_thread_fun+0x127/0x780 [ 945.731930][ T1619] smpboot_thread_fn+0x565/0xa70 [ 945.737431][ T1619] kthread+0x38b/0x480 [ 945.742140][ T1619] ret_from_fork+0x514/0xb70 [ 945.747285][ T1619] ret_from_fork_asm+0x1a/0x30 [ 945.752626][ T1619] [ 945.752626][ T1619] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 945.760439][ T1619] cpus_read_lock+0x42/0x160 [ 945.765639][ T1619] static_key_slow_inc+0x12/0x30 [ 945.771140][ T1619] ipv6_flowlabel_opt+0x1cb1/0x2b10 [ 945.777287][ T1619] do_ipv6_setsockopt+0x9cb/0x2960 [ 945.782996][ T1619] ipv6_setsockopt+0x59/0x170 [ 945.788221][ T1619] rawv6_setsockopt+0x276/0x5e0 [ 945.793621][ T1619] do_sock_setsockopt+0x17c/0x1b0 [ 945.799384][ T1619] __x64_sys_setsockopt+0x13d/0x1b0 [ 945.805141][ T1619] do_syscall_64+0x166/0x520 [ 945.810430][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.816963][ T1619] [ 945.816963][ T1619] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 945.824764][ T1619] lock_sock_nested+0x41/0x100 [ 945.830137][ T1619] inet_shutdown+0x6a/0x390 [ 945.835248][ T1619] nbd_mark_nsock_dead+0x2cb/0x550 [ 945.840982][ T1619] sock_shutdown+0x15e/0x260 [ 945.846433][ T1619] nbd_clear_sock+0x24/0x170 [ 945.851662][ T1619] nbd_config_put+0x477/0x7e0 [ 945.856895][ T1619] nbd_genl_connect+0x19b8/0x1cd0 [ 945.862466][ T1619] genl_family_rcv_msg_doit+0x233/0x340 [ 945.868638][ T1619] genl_rcv_msg+0x614/0x7a0 [ 945.873727][ T1619] netlink_rcv_skb+0x226/0x4a0 [ 945.879102][ T1619] genl_rcv+0x28/0x40 [ 945.883650][ T1619] netlink_unicast+0x8ef/0xa80 [ 945.888960][ T1619] netlink_sendmsg+0x813/0xb40 [ 945.894277][ T1619] sock_sendmsg_nosec+0x14e/0x190 [ 945.899857][ T1619] ____sys_sendmsg+0x54e/0x850 [ 945.905176][ T1619] ___sys_sendmsg+0x2a5/0x360 [ 945.910598][ T1619] __x64_sys_sendmsg+0x1b1/0x290 [ 945.916106][ T1619] do_syscall_64+0x166/0x520 [ 945.921251][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.927691][ T1619] [ 945.927691][ T1619] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 945.935368][ T1619] __mutex_lock+0x19d/0x1550 [ 945.940521][ T1619] nbd_queue_rq+0x373/0xff0 [ 945.945574][ T1619] blk_mq_dispatch_rq_list+0x499/0x1990 [ 945.951801][ T1619] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 945.958740][ T1619] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 945.965275][ T1619] blk_mq_run_work_fn+0x16c/0x300 [ 945.970852][ T1619] process_scheduled_works+0xc3d/0x1630 [ 945.976946][ T1619] worker_thread+0xa47/0xfb0 [ 945.982085][ T1619] kthread+0x38b/0x480 [ 945.986697][ T1619] ret_from_fork+0x514/0xb70 [ 945.991853][ T1619] ret_from_fork_asm+0x1a/0x30 [ 945.997172][ T1619] [ 945.997172][ T1619] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 946.004441][ T1619] __mutex_lock+0x19d/0x1550 [ 946.010419][ T1619] nbd_queue_rq+0xc1/0xff0 [ 946.015403][ T1619] blk_mq_dispatch_rq_list+0x499/0x1990 [ 946.021605][ T1619] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 946.028497][ T1619] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 946.035060][ T1619] blk_mq_run_work_fn+0x16c/0x300 [ 946.040626][ T1619] process_scheduled_works+0xc3d/0x1630 [ 946.046735][ T1619] worker_thread+0xa47/0xfb0 [ 946.051898][ T1619] kthread+0x38b/0x480 [ 946.056507][ T1619] ret_from_fork+0x514/0xb70 [ 946.061662][ T1619] ret_from_fork_asm+0x1a/0x30 [ 946.066984][ T1619] [ 946.066984][ T1619] -> #4 (set->srcu){.+.+}-{0:0}: [ 946.074153][ T1619] __synchronize_srcu+0xc9/0x2f0 [ 946.079683][ T1619] elevator_switch+0x1e8/0x7b0 [ 946.085082][ T1619] elevator_change+0x2fa/0x480 [ 946.090403][ T1619] elevator_set_default+0x375/0x440 [ 946.096158][ T1619] blk_register_queue+0x3f3/0x4e0 [ 946.101795][ T1619] __add_disk+0x6b8/0xdb0 [ 946.106667][ T1619] add_disk_fwnode+0x100/0x3a0 [ 946.112084][ T1619] nbd_dev_add+0x733/0xb60 [ 946.117073][ T1619] nbd_init+0x168/0x1f0 [ 946.121877][ T1619] do_one_initcall+0x250/0x870 [ 946.127296][ T1619] do_initcall_level+0x10a/0x1a0 [ 946.132813][ T1619] do_initcalls+0x59/0xa0 [ 946.137702][ T1619] kernel_init_freeable+0x29d/0x3e0 [ 946.143461][ T1619] kernel_init+0x22/0x1d0 [ 946.148341][ T1619] ret_from_fork+0x514/0xb70 [ 946.153497][ T1619] ret_from_fork_asm+0x1a/0x30 [ 946.158832][ T1619] [ 946.158832][ T1619] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 946.166699][ T1619] __mutex_lock+0x19d/0x1550 [ 946.171856][ T1619] elevator_change+0x1af/0x480 [ 946.177179][ T1619] elevator_set_none+0xb5/0x140 [ 946.182589][ T1619] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 946.188959][ T1619] nbd_start_device+0x189/0xb30 [ 946.194364][ T1619] nbd_genl_connect+0x167d/0x1cd0 [ 946.200065][ T1619] genl_family_rcv_msg_doit+0x233/0x340 [ 946.206182][ T1619] genl_rcv_msg+0x614/0x7a0 [ 946.211234][ T1619] netlink_rcv_skb+0x226/0x4a0 [ 946.216555][ T1619] genl_rcv+0x28/0x40 [ 946.221126][ T1619] netlink_unicast+0x8ef/0xa80 [ 946.226437][ T1619] netlink_sendmsg+0x813/0xb40 [ 946.231754][ T1619] sock_sendmsg_nosec+0x14e/0x190 [ 946.237345][ T1619] ____sys_sendmsg+0x54e/0x850 [ 946.242746][ T1619] ___sys_sendmsg+0x2a5/0x360 [ 946.248121][ T1619] __x64_sys_sendmsg+0x1b1/0x290 [ 946.254875][ T1619] do_syscall_64+0x166/0x520 [ 946.260028][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.266470][ T1619] [ 946.266470][ T1619] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 946.275198][ T1619] blk_alloc_queue+0x544/0x690 [ 946.280520][ T1619] __blk_mq_alloc_disk+0x194/0x390 [ 946.286304][ T1619] nbd_dev_add+0x494/0xb60 [ 946.291276][ T1619] nbd_init+0x168/0x1f0 [ 946.295984][ T1619] do_one_initcall+0x250/0x870 [ 946.301562][ T1619] do_initcall_level+0x10a/0x1a0 [ 946.307230][ T1619] do_initcalls+0x59/0xa0 [ 946.312104][ T1619] kernel_init_freeable+0x29d/0x3e0 [ 946.317844][ T1619] kernel_init+0x22/0x1d0 [ 946.322898][ T1619] ret_from_fork+0x514/0xb70 [ 946.328051][ T1619] ret_from_fork_asm+0x1a/0x30 [ 946.333556][ T1619] [ 946.333556][ T1619] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 946.340802][ T1619] fs_reclaim_acquire+0x71/0x100 [ 946.346328][ T1619] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 946.352601][ T1619] alloc_inode+0xb8/0x1b0 [ 946.357503][ T1619] iget_locked+0x131/0x6a0 [ 946.362460][ T1619] kernfs_get_inode+0x4f/0x770 [ 946.367765][ T1619] kernfs_get_tree+0x5cd/0x980 [ 946.373076][ T1619] vfs_get_tree+0x92/0x2a0 [ 946.378047][ T1619] do_new_mount+0x325/0xb00 [ 946.383145][ T1619] __se_sys_mount+0x31d/0x420 [ 946.388383][ T1619] do_syscall_64+0x166/0x520 [ 946.393527][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.399968][ T1619] [ 946.399968][ T1619] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 946.407999][ T1619] __lock_acquire+0x164c/0x2de0 [ 946.413443][ T1619] lock_acquire+0x115/0x350 [ 946.418536][ T1619] down_write+0x96/0x200 [ 946.423335][ T1619] kernfs_remove_by_name_ns+0x4e/0x140 [ 946.429341][ T1619] class_remove_file_ns+0x121/0x160 [ 946.435198][ T1619] ops_undo_list+0x17d/0x8d0 [ 946.440389][ T1619] setup_net+0x2f6/0x350 [ 946.445192][ T1619] copy_net_ns+0x53b/0x780 [ 946.450266][ T1619] create_new_namespaces+0x3f0/0x6b0 [ 946.456106][ T1619] unshare_nsproxy_namespaces+0x149/0x190 [ 946.462381][ T1619] ksys_unshare+0x5d8/0x970 [ 946.467436][ T1619] __x64_sys_unshare+0x38/0x50 [ 946.472746][ T1619] do_syscall_64+0x166/0x520 [ 946.477902][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.484438][ T1619] [ 946.484438][ T1619] other info that might help us debug this: [ 946.484438][ T1619] [ 946.494693][ T1619] Chain exists of: [ 946.494693][ T1619] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 946.494693][ T1619] [ 946.508666][ T1619] Possible unsafe locking scenario: [ 946.508666][ T1619] [ 946.516174][ T1619] CPU0 CPU1 [ 946.521555][ T1619] ---- ---- [ 946.526964][ T1619] rlock(&root->kernfs_supers_rwsem); [ 946.532445][ T1619] lock(pmus_lock); [ 946.538883][ T1619] lock(&root->kernfs_supers_rwsem); [ 946.546845][ T1619] lock(&root->kernfs_rwsem); [ 946.551649][ T1619] [ 946.551649][ T1619] *** DEADLOCK *** [ 946.551649][ T1619] [ 946.559928][ T1619] locks held by syz.4.13012/1619: 2, last CPU#1: [ 946.566347][ T1619] #0: ffffffff9124d788 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 946.575836][ T1619] #1: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 946.587180][ T1619] [ 946.587180][ T1619] stack backtrace: [ 946.593105][ T1619] CPU: 1 UID: 0 PID: 1619 Comm: syz.4.13012 Not tainted syzkaller #0 PREEMPT(full) [ 946.602509][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 946.612611][ T1619] Call Trace: [ 946.616020][ T1619] [ 946.619114][ T1619] dump_stack_lvl+0xe8/0x150 [ 946.623819][ T1619] print_circular_bug+0x2e2/0x300 [ 946.628885][ T1619] check_noncircular+0x12f/0x150 [ 946.633859][ T1619] __lock_acquire+0x164c/0x2de0 [ 946.638758][ T1619] ? __lock_acquire+0x1511/0x2de0 [ 946.643870][ T1619] ? irqentry_exit+0x218/0x920 [ 946.648674][ T1619] lock_acquire+0x115/0x350 [ 946.653238][ T1619] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 946.658911][ T1619] down_write+0x96/0x200 [ 946.663191][ T1619] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 946.668865][ T1619] ? __pfx_down_write+0x10/0x10 [ 946.673751][ T1619] ? down_read+0x2be/0x330 [ 946.678197][ T1619] kernfs_remove_by_name_ns+0x4e/0x140 [ 946.683793][ T1619] class_remove_file_ns+0x121/0x160 [ 946.689030][ T1619] ops_undo_list+0x17d/0x8d0 [ 946.693662][ T1619] ? __pfx_ops_undo_list+0x10/0x10 [ 946.698814][ T1619] ? ops_init+0x46a/0x5d0 [ 946.703265][ T1619] setup_net+0x2f6/0x350 [ 946.707539][ T1619] ? __pfx_setup_net+0x10/0x10 [ 946.712343][ T1619] ? down_read_killable+0x1bb/0x3b0 [ 946.717583][ T1619] ? __ns_common_init+0x2fc/0x4a0 [ 946.722634][ T1619] copy_net_ns+0x53b/0x780 [ 946.727074][ T1619] create_new_namespaces+0x3f0/0x6b0 [ 946.732400][ T1619] ? security_capable+0x7e/0x2c0 [ 946.737511][ T1619] unshare_nsproxy_namespaces+0x149/0x190 [ 946.743265][ T1619] ksys_unshare+0x5d8/0x970 [ 946.747805][ T1619] ? __pfx_ksys_unshare+0x10/0x10 [ 946.752861][ T1619] ? __pfx_kcov_ioctl+0x10/0x10 [ 946.757780][ T1619] __x64_sys_unshare+0x38/0x50 [ 946.762592][ T1619] do_syscall_64+0x166/0x520 [ 946.767221][ T1619] ? trace_irq_disable+0x3b/0x140 [ 946.772304][ T1619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.778394][ T1619] ? clear_bhb_loop+0x70/0xc0 [ 946.783101][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.789294][ T1619] RIP: 0033:0x7fda4a39f559 [ 946.793755][ T1619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.813392][ T1619] RSP: 002b:00007fda4b347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 946.821985][ T1619] RAX: ffffffffffffffda RBX: 00007fda4a625fa0 RCX: 00007fda4a39f559 [ 946.829991][ T1619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 946.838004][ T1619] RBP: 00007fda4a436b20 R08: 0000000000000000 R09: 0000000000000000 [ 946.846006][ T1619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.854009][ T1619] R13: 00007fda4a626038 R14: 00007fda4a625fa0 R15: 00007ffe919f84c8 [ 946.862022][ T1619] [ 946.869966][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration