last executing test programs: 3.237949091s ago: executing program 2 (id=13141): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) 2.299901765s ago: executing program 2 (id=13161): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x6}, 0x8) 2.176951062s ago: executing program 2 (id=13164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) 2.023756331s ago: executing program 2 (id=13167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 1.237442935s ago: executing program 4 (id=13186): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.216740625s ago: executing program 1 (id=13187): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 1.117629837s ago: executing program 0 (id=13188): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000180)=0x4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)='C', 0x1}], 0x1}, 0x800c0) 1.061456228s ago: executing program 1 (id=13189): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) 1.031156239s ago: executing program 4 (id=13190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0xcc, 0xc, 0x1000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 909.43453ms ago: executing program 0 (id=13192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xffffffffffffffd7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 902.299188ms ago: executing program 1 (id=13193): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0xe, 0x0, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0xe681, 0x4) 835.690567ms ago: executing program 4 (id=13194): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) getpeername$inet(r0, 0x0, 0x0) 800.250991ms ago: executing program 2 (id=13195): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) 776.386073ms ago: executing program 3 (id=13196): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) 720.10044ms ago: executing program 0 (id=13197): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 696.427358ms ago: executing program 2 (id=13198): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x4000, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 654.927224ms ago: executing program 4 (id=13199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 598.272334ms ago: executing program 3 (id=13200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}], 0x1, 0x0, 0x0) 597.517901ms ago: executing program 0 (id=13201): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x1e4, 0x2, 0x1b, 0xb, 0x1b, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) 443.560926ms ago: executing program 3 (id=13202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 442.907823ms ago: executing program 4 (id=13203): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r2, r0, 0x4, r0}, 0x7) 428.067164ms ago: executing program 0 (id=13204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x150, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xac, 0x1, [@m_bpf={0xa8, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x90, 0x1, [@m_nat={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x60, 0xd, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x20000000}}]}, {0xd, 0x6, "f1f200000000000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 375.312407ms ago: executing program 1 (id=13205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x0) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 321.432068ms ago: executing program 3 (id=13206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 293.897259ms ago: executing program 0 (id=13207): r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000380)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r0, &(0x7f0000000300), 0x14) 246.193432ms ago: executing program 4 (id=13208): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000400)=@can={{0x9b50, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "339aece7b5f08070"}, 0x10}, 0x2}, 0x1004885d) 245.441415ms ago: executing program 1 (id=13209): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'veth0_to_bond\x00'}) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) 125.762694ms ago: executing program 3 (id=13210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 105.003766ms ago: executing program 1 (id=13211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x28, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, r0, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000001c0)={0x1, 0x5}, 0x8) 0s ago: executing program 3 (id=13212): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): ch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 354.011240][T16709] bond6 (unregistering): Released all slaves [ 354.266166][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5258'. [ 354.368139][T16738] team0: entered promiscuous mode [ 354.387644][T16738] team_slave_0: entered promiscuous mode [ 354.412390][T16738] team_slave_1: entered promiscuous mode [ 354.432551][T16738] veth1: entered promiscuous mode [ 354.528979][T16745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.690357][T16752] batadv1: entered promiscuous mode [ 354.707389][T16752] batadv1: entered allmulticast mode [ 354.844268][T16758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.057374][T16765] netlink: 'syz.0.5274': attribute type 2 has an invalid length. [ 355.076331][T16765] netlink: 'syz.0.5274': attribute type 1 has an invalid length. [ 355.092391][T16765] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5274'. [ 355.116653][T16771] xt_l2tp: v2 doesn't support IP mode [ 355.327241][T16777] netlink: set zone limit has 8 unknown bytes [ 355.420640][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 355.825567][T16806] openvswitch: netlink: IPv4 tunnel dst address is zero [ 356.222756][T16828] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 356.640552][T16843] delete_channel: no stack [ 357.030499][T16863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.762057][T16899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5328'. [ 358.590539][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 358.625008][T16934] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 358.929867][T16954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5351'. [ 359.112329][T16963] openvswitch: netlink: Actions may not be safe on all matching packets [ 359.241636][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5358'. [ 359.570870][T16990] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 359.633177][T16985] bond7: Unable to set up delay as MII monitoring is disabled [ 359.678204][T16985] bond7 (unregistering): Released all slaves [ 359.934557][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5376'. [ 359.972298][T17006] netlink: 'syz.0.5376': attribute type 1 has an invalid length. [ 360.326760][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5385'. [ 360.526602][T17035] delete_channel: no stack [ 361.275105][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5406'. [ 361.296595][ T5827] IPVS: starting estimator thread 0... [ 361.408993][T17071] IPVS: using max 25 ests per chain, 60000 per kthread [ 361.503678][T17078] netlink: 'syz.4.5411': attribute type 4 has an invalid length. [ 361.926385][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 361.949021][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5421'. [ 363.023215][T17151] gre1: entered promiscuous mode [ 363.182552][T17159] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 363.754192][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5468'. [ 363.908592][T17197] gre0: entered promiscuous mode [ 363.929534][T17197] gre0: entered allmulticast mode [ 364.427939][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5485'. [ 364.460766][T17223] bond1: entered promiscuous mode [ 364.486894][T17223] bond1: entered allmulticast mode [ 364.515615][T17223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.527685][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5490'. [ 364.566718][T17236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5488'. [ 364.627255][T17240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5491'. [ 364.672356][T17240] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5491'. [ 364.702168][T17240] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5491'. [ 364.711656][T17240] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5491'. [ 364.932679][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'. [ 365.212249][T17268] netlink: 'syz.1.5505': attribute type 12 has an invalid length. [ 365.319501][T17274] netlink: 'syz.3.5508': attribute type 2 has an invalid length. [ 365.341018][T17276] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5509'. [ 366.295211][T17328] netlink: 'syz.2.5535': attribute type 21 has an invalid length. [ 366.329026][T17328] netlink: 'syz.2.5535': attribute type 20 has an invalid length. [ 367.142800][T17372] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 367.486063][T17390] unsupported nlmsg_type 40 [ 367.685556][T17398] netlink: 'syz.1.5570': attribute type 1 has an invalid length. [ 367.792138][T17406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.145031][T17420] bond2: option resend_igmp: invalid value (2878) [ 368.152176][T17420] bond2: option resend_igmp: allowed values 0 - 255 [ 368.167104][T17420] bond2 (unregistering): Released all slaves [ 368.320923][T17425] netlink: 'syz.1.5581': attribute type 8 has an invalid length. [ 368.623446][T17437] xt_CT: No such helper "netbios-ns" [ 369.104234][T17468] netlink: 'syz.0.5601': attribute type 9 has an invalid length. [ 370.106345][T17512] netlink: 'syz.3.5619': attribute type 9 has an invalid length. [ 370.274152][T17517] __nla_validate_parse: 6 callbacks suppressed [ 370.274171][T17517] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5621'. [ 370.746669][T17537] netlink: 'syz.1.5632': attribute type 1 has an invalid length. [ 370.762412][T17538] delete_channel: no stack [ 370.902160][T17545] netlink: 'syz.3.5635': attribute type 2 has an invalid length. [ 371.493319][T17576] netlink: 'syz.4.5650': attribute type 15 has an invalid length. [ 371.506276][T17576] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5650'. [ 371.685187][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5657'. [ 371.952054][T17604] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5664'. [ 372.171745][T17616] netlink: 'syz.3.5669': attribute type 5 has an invalid length. [ 372.998499][T17656] xt_limit: Overflow, try lower: 268435456/134217728 [ 373.274861][T17670] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 373.426845][T17677] Zero length message leads to an empty skb [ 374.577518][T17733] netlink: 'syz.3.5725': attribute type 1 has an invalid length. [ 374.653430][T17737] netlink: 'syz.1.5729': attribute type 1 has an invalid length. [ 374.695436][T17737] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5729'. [ 374.775190][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5732'. [ 374.940799][T17749] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5734'. [ 374.950287][T17749] netlink: 'syz.3.5734': attribute type 1 has an invalid length. [ 375.270978][T17766] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5741'. [ 375.301447][T17766] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 375.957157][T17805] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5762'. [ 375.986154][T17805] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5762'. [ 376.308909][T17819] openvswitch: netlink: Multiple metadata blocks provided [ 376.694460][T17837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5776'. [ 376.715794][T17838] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 376.877581][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5781'. [ 377.116015][T17851] xfrm2: entered allmulticast mode [ 377.228978][T17859] netlink: 'syz.3.5787': attribute type 1 has an invalid length. [ 377.280105][T17859] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5787'. [ 377.673646][T17883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5798'. [ 378.780078][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5818'. [ 378.806617][T17925] ip6tnl1: entered allmulticast mode [ 379.134584][T17944] netlink: 'syz.4.5825': attribute type 8 has an invalid length. [ 379.447373][T17957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.552482][T17963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.567874][T17965] netlink: 'syz.0.5833': attribute type 1 has an invalid length. [ 380.376606][T18002] ipt_rpfilter: unknown options [ 380.469980][T18007] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 380.787175][T18023] openvswitch: netlink: IP tunnel dst address not specified [ 380.959219][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5864'. [ 380.978687][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5864'. [ 382.684128][T18111] veth5: entered promiscuous mode [ 382.987978][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5911'. [ 383.158926][T18133] netlink: 'syz.1.5915': attribute type 10 has an invalid length. [ 383.251676][T18133] team0 (unregistering): Port device team_slave_0 removed [ 383.290615][T18139] netlink: 'syz.4.5918': attribute type 3 has an invalid length. [ 383.360640][T18133] team0 (unregistering): Port device team_slave_1 removed [ 383.961270][T18175] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5936'. [ 383.988991][T18175] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5936'. [ 384.018885][T18175] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5936'. [ 384.234014][T18188] netlink: 'syz.1.5942': attribute type 10 has an invalid length. [ 384.253292][T18188] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 384.283232][T18188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.296467][T18193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5944'. [ 384.321082][T18188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 384.332039][T18193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5944'. [ 384.761421][T18215] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 384.827200][T18218] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5955'. [ 385.281790][T18246] netlink: zone id is out of range [ 385.305084][T18246] netlink: get zone limit has 4 unknown bytes [ 385.405042][T18251] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5971'. [ 386.024903][T18285] __nla_validate_parse: 1 callbacks suppressed [ 386.024925][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5984'. [ 386.219092][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5988'. [ 386.657256][T18319] netlink: zone id is out of range [ 386.669757][T18319] netlink: zone id is out of range [ 386.681290][T18319] netlink: zone id is out of range [ 386.696764][T18319] netlink: zone id is out of range [ 386.706911][T18319] netlink: zone id is out of range [ 386.720911][T18319] netlink: zone id is out of range [ 386.745408][T18319] netlink: zone id is out of range [ 387.418005][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6017'. [ 387.833480][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6029'. [ 389.048090][T18446] ip6t_srh: unknown srh match flags 4000 [ 390.486954][T18527] sctp: [Deprecated]: syz.0.6099 (pid 18527) Use of int in maxseg socket option. [ 390.486954][T18527] Use struct sctp_assoc_value instead [ 390.686186][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6102'. [ 390.781763][T18539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6104'. [ 390.825507][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6105'. [ 391.321625][T18568] xt_TCPMSS: Only works on TCP SYN packets [ 391.719930][T18588] xt_l2tp: v2 doesn't support IP mode [ 391.925064][T18599] netlink: 'syz.1.6130': attribute type 1 has an invalid length. [ 391.970162][T18601] netlink: 'syz.0.6131': attribute type 5 has an invalid length. [ 392.060054][T18605] 0: renamed from batadv_slave_1 [ 392.475083][T18625] net_ratelimit: 18 callbacks suppressed [ 392.475104][T18625] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 392.525260][T18631] netlink: 'syz.4.6144': attribute type 1 has an invalid length. [ 392.818107][T18647] netlink: 'syz.3.6148': attribute type 1 has an invalid length. [ 392.851178][T18647] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6148'. [ 393.001789][T18657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.090625][T18662] netlink: 'syz.3.6156': attribute type 3 has an invalid length. [ 393.114419][T18662] netlink: 'syz.3.6156': attribute type 1 has an invalid length. [ 393.244393][T18668] Cannot find del_set index 3 as target [ 393.880036][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'. [ 394.012884][T18704] bond4: option broadcast_neighbor: invalid value (30) [ 394.041959][T18704] bond4 (unregistering): Released all slaves [ 394.850163][T18750] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 394.897671][T18753] xt_CONNSECMARK: invalid mode: 254 [ 395.326693][T18772] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 395.371121][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6211'. [ 395.482732][T18782] netlink: 'syz.0.6212': attribute type 39 has an invalid length. [ 395.665954][T18792] netlink: 'syz.1.6218': attribute type 3 has an invalid length. [ 395.797305][T18800] netlink: 'syz.2.6222': attribute type 62 has an invalid length. [ 396.467625][T18826] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 396.531716][T18826] bond2 (unregistering): Released all slaves [ 396.837206][T18858] netlink: 'syz.2.6250': attribute type 10 has an invalid length. [ 396.851585][T18858] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6250'. [ 396.866432][T18859] ipt_ECN: cannot use operation on non-tcp rule [ 396.948022][T18864] xt_TCPMSS: Only works on TCP SYN packets [ 397.628705][T18892] netlink: 'syz.1.6263': attribute type 21 has an invalid length. [ 397.656731][T18892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6263'. [ 397.692171][T18892] netlink: 'syz.1.6263': attribute type 1 has an invalid length. [ 397.817185][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6268'. [ 397.925646][T18910] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6271'. [ 398.120845][T18920] netlink: 'syz.1.6275': attribute type 10 has an invalid length. [ 398.155398][T18920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6275'. [ 398.652407][T18942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.679153][T18997] netlink: 'syz.2.6307': attribute type 1 has an invalid length. [ 399.687296][T18997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.742040][T19002] netlink: 'syz.4.6309': attribute type 1 has an invalid length. [ 399.784623][T19002] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6309'. [ 399.819501][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 400.098574][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6315'. [ 400.614114][T19047] netlink: 'syz.4.6327': attribute type 5 has an invalid length. [ 400.633762][T19047] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6327'. [ 400.833342][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6332'. [ 400.863732][T19057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6332'. [ 401.107274][T19071] netlink: 'syz.4.6336': attribute type 2 has an invalid length. [ 401.188999][T19076] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6338'. [ 401.345094][T19084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6342'. [ 402.269840][T19131] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 402.297665][T19131] bond7 (unregistering): Released all slaves [ 402.917616][T19166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 403.479872][T19194] netlink: 'syz.2.6384': attribute type 9 has an invalid length. [ 404.146073][T19233] netlink: 'syz.2.6401': attribute type 21 has an invalid length. [ 404.179157][T19233] __nla_validate_parse: 2 callbacks suppressed [ 404.179176][T19233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6401'. [ 404.605377][T19257] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6412'. [ 404.657364][T19259] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6415'. [ 405.080689][T19285] netlink: 'syz.4.6426': attribute type 6 has an invalid length. [ 405.105994][T19285] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.586742][T19309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6438'. [ 405.840399][T19328] netlink: 'syz.4.6446': attribute type 11 has an invalid length. [ 406.312716][T19357] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.506103][T19367] batadv_slave_0: entered promiscuous mode [ 406.536291][T19367] batadv_slave_0: entered allmulticast mode [ 406.794542][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6473'. [ 406.828138][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6473'. [ 407.005117][T19391] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 407.474970][T19418] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6486'. [ 407.508770][T19423] netlink: 'syz.0.6489': attribute type 1 has an invalid length. [ 407.527247][T19423] netlink: 'syz.0.6489': attribute type 2 has an invalid length. [ 407.711860][T19432] netlink: 'syz.3.6493': attribute type 4 has an invalid length. [ 408.189466][T19456] netlink: 'syz.0.6505': attribute type 13 has an invalid length. [ 408.209351][T19456] gretap0: refused to change device tx_queue_len [ 408.216289][T19456] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 408.460474][T19471] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6512'. [ 409.006242][T19502] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.6527'. [ 409.248057][T19518] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.496917][T19530] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 409.518380][T19530] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 409.719835][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6550'. [ 410.013310][T19561] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 410.288562][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6564'. [ 410.619334][T19597] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 410.941532][T19614] sctp: [Deprecated]: syz.3.6582 (pid 19614) Use of int in maxseg socket option. [ 410.941532][T19614] Use struct sctp_assoc_value instead [ 411.003824][T19617] netlink: 'syz.4.6583': attribute type 5 has an invalid length. [ 411.145559][T19624] openvswitch: netlink: Duplicate key (type 21). [ 411.532906][T19600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.540885][T19643] veth0_macvtap: left promiscuous mode [ 411.560831][T19600] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 411.660353][T19600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.691183][T19600] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 411.767071][T19600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.791634][T19600] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 411.891926][T19600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.908220][T19600] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 411.922897][T19663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6600'. [ 412.082761][T19668] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 412.140877][T19668] netlink: 'syz.0.6603': attribute type 1 has an invalid length. [ 412.167288][T19668] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.6603'. [ 412.331283][T19679] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.6607'. [ 412.410180][T19683] geneve3: entered promiscuous mode [ 412.422824][T19683] geneve3: entered allmulticast mode [ 412.441195][ T710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.493897][ T710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.531118][ T710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.556827][ T710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 412.702214][T19697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6614'. [ 412.731903][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 413.421561][T19741] IPv6: sit2: Disabled Multicast RS [ 413.669527][T19749] netlink: zone id is out of range [ 414.107995][T19773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6642'. [ 414.246638][T19781] sock: sock_timestamping_bind_phc: sock not bind to device [ 414.379647][T19790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6649'. [ 414.400945][T19790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6649'. [ 414.405428][T19792] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 414.577322][T19795] pimreg: entered allmulticast mode [ 414.807518][T19809] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6657'. [ 415.635713][T19850] bridge7: entered promiscuous mode [ 415.964316][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6682'. [ 416.221471][T19882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6687'. [ 416.515660][T19901] netlink: 'syz.3.6695': attribute type 6 has an invalid length. [ 416.615719][T19899] bond4: option packets_per_slave: invalid value (1048582) [ 416.655587][T19899] bond4: option packets_per_slave: allowed values 0 - 65535 [ 416.707145][T19899] bond4 (unregistering): Released all slaves [ 417.237641][T19936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6709'. [ 417.411634][T19944] netlink: 34 bytes leftover after parsing attributes in process `syz.4.6713'. [ 417.564062][T19954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6717'. [ 418.142812][T19986] netlink: 'syz.0.6730': attribute type 1 has an invalid length. [ 418.183499][T19986] netlink: 'syz.0.6730': attribute type 1 has an invalid length. [ 418.654173][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.670988][T20013] bridge0: entered allmulticast mode [ 419.406618][T20055] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 419.431948][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6758'. [ 419.591244][T20066] netlink: 'syz.1.6763': attribute type 3 has an invalid length. [ 419.807416][T20079] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 420.009080][T20086] netlink: 'syz.2.6771': attribute type 1 has an invalid length. [ 420.041976][T20086] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6771'. [ 420.107070][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6776'. [ 420.481221][T20116] bridge3: entered promiscuous mode [ 420.708697][T20127] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6788'. [ 420.970551][T20142] tipc: Can't bind to reserved service type 0 [ 421.117966][ T9] IPVS: starting estimator thread 0... [ 421.137961][T20151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6798'. [ 421.150371][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6797'. [ 421.251465][T20152] IPVS: using max 26 ests per chain, 62400 per kthread [ 421.426574][T20167] netlink: 'syz.1.6804': attribute type 1 has an invalid length. [ 421.442583][T20167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6804'. [ 422.123328][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6819'. [ 422.162391][T20207] ip6tnl5: entered allmulticast mode [ 422.387133][T20218] xt_TCPMSS: Only works on TCP SYN packets [ 422.808356][T20239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6832'. [ 423.080113][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6835'. [ 423.114190][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6838'. [ 423.351098][T20262] xt_TCPMSS: Only works on TCP SYN packets [ 424.403048][T20325] geneve1: entered promiscuous mode [ 424.536046][T20333] nft_compat: unsupported protocol 0 [ 424.746477][T20345] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 424.890285][T20353] netlink: 'syz.1.6885': attribute type 21 has an invalid length. [ 425.314558][T20375] __nla_validate_parse: 6 callbacks suppressed [ 425.314577][T20375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6897'. [ 425.361353][T20375] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6897'. [ 425.381863][T20379] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6899'. [ 425.439799][T20375] netlink: 'syz.2.6897': attribute type 5 has an invalid length. [ 425.497399][T20375] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6897'. [ 425.704566][T20391] gre1: entered allmulticast mode [ 425.885220][T20404] set match dimension is over the limit! [ 426.070466][T20415] gre0: entered promiscuous mode [ 426.094209][T20415] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 426.350699][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6923'. [ 426.386834][T20433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.802072][T20455] netlink: 'syz.1.6937': attribute type 3 has an invalid length. [ 426.846167][T20455] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6937'. [ 427.187461][T20480] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6949'. [ 427.233579][T20480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.310734][T20480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.336844][T20480] bond0 (unregistering): Released all slaves [ 428.065909][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6972'. [ 428.496315][T20545] openvswitch: netlink: IP tunnel dst address not specified [ 428.505146][T20543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6980'. [ 428.529391][T20543] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 428.548978][T20543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6980'. [ 429.632987][T20602] gre1: entered allmulticast mode [ 430.338213][T20643] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7029'. [ 430.356239][T20644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7030'. [ 430.693594][T20661] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 430.943216][T20673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.950636][T20673] IPv6: NLM_F_CREATE should be set when creating new route [ 430.957953][T20673] IPv6: NLM_F_CREATE should be set when creating new route [ 431.251878][T20690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.337712][T20696] netlink: 'syz.2.7056': attribute type 3 has an invalid length. [ 431.366997][T20696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7056'. [ 431.454594][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7058'. [ 431.477859][T20701] netlink: 'syz.0.7060': attribute type 1 has an invalid length. [ 432.957004][T20780] netlink: 'syz.0.7097': attribute type 4 has an invalid length. [ 433.087610][T20786] openvswitch: netlink: IP tunnel dst address not specified [ 433.525451][T20805] netlink: 'syz.2.7109': attribute type 21 has an invalid length. [ 433.535158][T20805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.542493][T20805] IPv6: NLM_F_CREATE should be set when creating new route [ 433.549870][T20805] IPv6: NLM_F_CREATE should be set when creating new route [ 433.557158][T20805] IPv6: NLM_F_CREATE should be set when creating new route [ 433.756842][T20816] veth1_to_bridge: entered allmulticast mode [ 435.279085][T20894] netlink: 'syz.4.7146': attribute type 11 has an invalid length. [ 435.449618][T20902] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 435.462870][T20905] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.7152'. [ 435.924858][T20923] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 435.995456][T20923] bond4 (unregistering): Released all slaves [ 436.053049][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7165'. [ 436.601190][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7177'. [ 436.855145][T20972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7183'. [ 437.126939][T20987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7191'. [ 437.461008][T21006] openvswitch: netlink: IP tunnel dst address not specified [ 437.797869][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7210'. [ 437.848107][T21030] erspan1: entered promiscuous mode [ 437.858088][T21030] erspan1: entered allmulticast mode [ 437.932554][T21034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7212'. [ 438.240748][T21049] netlink: 'syz.3.7218': attribute type 32 has an invalid length. [ 438.330973][T21055] netlink: 'syz.1.7221': attribute type 2 has an invalid length. [ 438.359051][T21055] netlink: 'syz.1.7221': attribute type 1 has an invalid length. [ 438.879786][T21079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7230'. [ 438.946037][T21081] x_tables: unsorted entry at hook 2 [ 439.312630][T21100] netlink: 'syz.2.7243': attribute type 29 has an invalid length. [ 439.332698][T21104] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7242'. [ 439.890963][T21135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.074247][T21145] netlink: 'syz.2.7263': attribute type 1 has an invalid length. [ 440.501836][T21165] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 440.514543][T21165] bond0 (unregistering): Released all slaves [ 440.551233][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.560186][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.830429][T21182] netlink: 'syz.2.7280': attribute type 3 has an invalid length. [ 441.309020][T21204] netlink: 'syz.1.7291': attribute type 1 has an invalid length. [ 441.343940][T21204] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7291'. [ 441.366340][T21204] NCSI netlink: No device for ifindex 0 [ 441.402432][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7294'. [ 441.444843][T21211] ip6gre1: entered promiscuous mode [ 441.808483][T21229] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 441.930533][T21235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7306'. [ 441.986710][T21235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7306'. [ 442.174744][T21249] batadv0: entered promiscuous mode [ 442.191775][T21249] batadv0: entered allmulticast mode [ 442.217454][T21249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.856178][T21290] netlink: 'syz.3.7331': attribute type 1 has an invalid length. [ 443.371230][T21317] netlink: 'syz.4.7345': attribute type 3 has an invalid length. [ 443.664478][T21335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7353'. [ 443.754031][T21337] bond7: option fail_over_mac: invalid value (127) [ 443.763546][T21337] bond7 (unregistering): Released all slaves [ 444.025729][T21354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7362'. [ 444.057881][T21356] ip6gretap1: entered promiscuous mode [ 444.076049][T21356] ip6gretap1: entered allmulticast mode [ 444.466907][T21378] netlink: 'syz.4.7372': attribute type 3 has an invalid length. [ 444.482328][T21378] netlink: 'syz.4.7372': attribute type 2 has an invalid length. [ 444.491038][T21378] netlink: 'syz.4.7372': attribute type 2 has an invalid length. [ 444.666960][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7379'. [ 444.874704][T21404] openvswitch: netlink: Message has 8 unknown bytes. [ 445.012657][T21408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.029689][T21410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.037016][T21410] IPv6: NLM_F_CREATE should be set when creating new route [ 445.044402][T21410] IPv6: NLM_F_CREATE should be set when creating new route [ 445.518614][T21440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7400'. [ 445.636499][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7405'. [ 445.685622][T21447] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.862696][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7410'. [ 446.132508][T21472] geneve2: entered promiscuous mode [ 446.317907][T21480] bridge_slave_0: left allmulticast mode [ 446.352607][T21480] bridge_slave_0: left promiscuous mode [ 446.382445][T21480] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.433870][T21480] bridge_slave_1: left allmulticast mode [ 446.440068][T21480] bridge_slave_1: left promiscuous mode [ 446.452014][T21480] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.470841][T21480] bond0: (slave bond_slave_0): Releasing backup interface [ 446.493973][T21480] team_slave_0: left allmulticast mode [ 446.498970][T21494] netlink: 'syz.0.7430': attribute type 1 has an invalid length. [ 446.507562][T21494] netlink: 'syz.0.7430': attribute type 3 has an invalid length. [ 446.515945][T21494] __nla_validate_parse: 2 callbacks suppressed [ 446.515963][T21494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7430'. [ 446.537698][T21480] team0: Port device team_slave_0 removed [ 446.554937][T21480] team_slave_1: left allmulticast mode [ 446.572466][T21480] team0: Port device team_slave_1 removed [ 446.586338][T21480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.619154][T21480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.641187][T21480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.437767][T21542] netlink: 'syz.0.7455': attribute type 1 has an invalid length. [ 447.942501][T21571] netlink: 'syz.4.7468': attribute type 9 has an invalid length. [ 448.046410][T21575] netlink: 'syz.3.7470': attribute type 29 has an invalid length. [ 448.321979][T21589] netlink: 'syz.4.7477': attribute type 1 has an invalid length. [ 448.338014][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7477'. [ 448.560788][T21604] netlink: 'syz.0.7484': attribute type 1 has an invalid length. [ 448.582095][T21604] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 449.478451][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7505'. [ 449.492073][T21648] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7505'. [ 449.505780][T21650] ip6t_REJECT: ECHOREPLY is not supported [ 449.521067][T21652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.716919][T21660] openvswitch: netlink: IP tunnel dst address not specified [ 449.820469][T21664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7513'. [ 450.311802][T21693] xt_HMARK: spi-set and port-set can't be combined [ 451.168009][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7546'. [ 451.325685][T21738] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7549'. [ 451.532041][T21751] netlink: 'syz.1.7555': attribute type 1 has an invalid length. [ 451.552195][T21751] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7555'. [ 451.881418][T21769] xt_socket: unknown flags 0x4 [ 452.047973][T21778] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)% ].>n6# [ 452.082936][T21784] netlink: 'syz.3.7570': attribute type 1 has an invalid length. [ 452.088552][T21783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7573'. [ 452.095668][T21784] netlink: 276 bytes leftover after parsing attributes in process `syz.3.7570'. [ 452.540189][T21803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7581'. [ 452.564658][T21803] openvswitch: netlink: Unknown nsh attribute 0 [ 452.595578][T21801] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7580'. [ 452.969281][T21825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7589'. [ 453.015372][T21825] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7589'. [ 453.362070][T21842] ip6erspan0: entered promiscuous mode [ 453.371682][T21842] ip6erspan0: entered allmulticast mode [ 453.713834][T21865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7604'. [ 454.041954][T21878] netlink: 'syz.2.7612': attribute type 10 has an invalid length. [ 454.074330][T21881] netlink: 'syz.0.7613': attribute type 21 has an invalid length. [ 454.099628][T21881] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7613'. [ 454.109916][T21878] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7612'. [ 454.120694][T21881] netlink: 'syz.0.7613': attribute type 4 has an invalid length. [ 454.130280][T21881] netlink: 'syz.0.7613': attribute type 5 has an invalid length. [ 454.333188][T21893] No such timeout policy "syz0" [ 454.954025][T21923] netlink: 'syz.4.7635': attribute type 49 has an invalid length. [ 455.443951][T21952] netlink: 'syz.4.7647': attribute type 2 has an invalid length. [ 455.478501][T21952] netlink: 'syz.4.7647': attribute type 11 has an invalid length. [ 455.615135][T21963] Cannot find del_set index 49151 as target [ 456.222716][T21983] wg1 speed is unknown, defaulting to 1000 [ 457.004648][T21983] lo speed is unknown, defaulting to 1000 [ 457.288561][T22036] bridge_slave_1: left allmulticast mode [ 457.298976][T22036] bridge_slave_1: left promiscuous mode [ 457.313717][T22036] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.347211][T22036] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 457.514812][T22043] __nla_validate_parse: 3 callbacks suppressed [ 457.514836][T22043] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7694'. [ 457.747573][T22057] netlink: 'syz.3.7701': attribute type 1 has an invalid length. [ 457.791033][T22057] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7701'. [ 458.716292][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7718'. [ 459.182398][T22110] x_tables: duplicate underflow at hook 3 [ 459.450649][T22124] netlink: 'syz.3.7733': attribute type 1 has an invalid length. [ 459.552738][T22128] netlink: 'syz.4.7735': attribute type 61 has an invalid length. [ 459.584527][T22128] netlink: 'syz.4.7735': attribute type 62 has an invalid length. [ 459.600511][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7737'. [ 460.216612][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.244918][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.267735][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.691977][T22186] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 460.722951][T22186] bond4 (unregistering): Released all slaves [ 460.887442][T22203] Bluetooth: MGMT ver 1.23 [ 463.023104][T22306] syz.0.7820 uses old SIOCAX25GETINFO [ 463.193137][T22317] Bluetooth: MGMT ver 1.23 [ 463.873397][T22355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7845'. [ 464.034628][T22356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.043713][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7847'. [ 464.059146][T22356] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 464.078667][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7847'. [ 464.103497][T22362] netlink: 580 bytes leftover after parsing attributes in process `syz.4.7847'. [ 465.472164][T22437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7884'. [ 465.564644][T22442] sctp: [Deprecated]: syz.0.7887 (pid 22442) Use of int in max_burst socket option. [ 465.564644][T22442] Use struct sctp_assoc_value instead [ 465.638225][T22446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7888'. [ 465.656978][T22446] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7888'. [ 465.686476][T22446] netlink: 'syz.2.7888': attribute type 5 has an invalid length. [ 465.704340][T22446] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7888'. [ 466.071708][T22469] netlink: 'syz.0.7898': attribute type 1 has an invalid length. [ 466.286228][T22434] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 467.613696][T22539] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7932'. [ 468.288329][T22563] netlink: 47 bytes leftover after parsing attributes in process `syz.3.7944'. [ 468.384346][T22567] block nbd0: not configured, cannot reconfigure [ 468.685481][T22581] netlink: 'syz.0.7953': attribute type 12 has an invalid length. [ 468.717234][T22581] netlink: 'syz.0.7953': attribute type 11 has an invalid length. [ 469.607559][T22633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.942127][T22653] __nla_validate_parse: 2 callbacks suppressed [ 469.942146][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7988'. [ 470.390686][T22672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7995'. [ 470.449699][T22675] netlink: 'syz.1.7997': attribute type 10 has an invalid length. [ 470.467991][T22675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7997'. [ 470.494211][T22675] dummy0: entered promiscuous mode [ 470.504688][T22675] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 471.164301][T22705] xt_hashlimit: size too large, truncated to 1048576 [ 471.227270][T22710] pim6reg99999991: entered allmulticast mode [ 471.389636][T22715] tipc: Enabling of bearer rejected, failed to enable media [ 472.192481][T22749] xt_CT: No such helper "syz1" [ 472.973777][T22798] sctp: [Deprecated]: syz.1.8056 (pid 22798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.973777][T22798] Use struct sctp_sack_info instead [ 472.997378][T22798] sctp: [Deprecated]: syz.1.8056 (pid 22798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.997378][T22798] Use struct sctp_sack_info instead [ 473.909395][T22828] ipvlan2: entered promiscuous mode [ 473.921380][T22828] bridge0: port 2(ipvlan2) entered blocking state [ 473.928258][T22828] bridge0: port 2(ipvlan2) entered disabled state [ 473.937156][T22828] ipvlan2: entered allmulticast mode [ 473.953246][T22828] ipvlan2: left allmulticast mode [ 474.154568][T22843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8077'. [ 474.505578][T22859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8084'. [ 474.536366][T22859] nbd: illegal input index -1113835520 [ 476.084168][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8126'. [ 476.462642][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8138'. [ 476.488930][T22973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8138'. [ 476.522068][T22973] netlink: 'syz.1.8138': attribute type 14 has an invalid length. [ 477.575201][T23027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8164'. [ 477.586386][T23027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8164'. [ 478.333735][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8183'. [ 478.540399][T23080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8189'. [ 478.565559][T23080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8189'. [ 478.659660][T23088] netlink: 11 bytes leftover after parsing attributes in process `syz.4.8193'. [ 478.796497][T23092] xt_l2tp: v2 tid > 0xffff: 37482740 [ 478.935928][T23098] netlink: 'syz.3.8198': attribute type 1 has an invalid length. [ 478.953671][T23098] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8198'. [ 478.982307][T23098] netlink: 'syz.3.8198': attribute type 1 has an invalid length. [ 479.297209][T23118] tipc: Started in network mode [ 479.312212][T23118] tipc: Node identity ac14140f, cluster identity 4711 [ 479.327000][T23118] tipc: New replicast peer: 255.255.255.255 [ 479.336949][T23118] tipc: Enabled bearer , priority 5 [ 480.330873][ T5978] tipc: Node number set to 2886997007 [ 480.576764][T23172] netlink: 'syz.0.8232': attribute type 7 has an invalid length. [ 480.597444][T23172] netlink: 'syz.0.8232': attribute type 8 has an invalid length. [ 481.225228][T23214] __nla_validate_parse: 5 callbacks suppressed [ 481.225250][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8248'. [ 481.266521][T23207] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 481.296785][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8248'. [ 481.345846][T23207] bond2 (unregistering): Released all slaves [ 481.430751][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8253'. [ 481.733111][T23233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8259'. [ 481.771148][T23233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8259'. [ 481.956003][T23247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8264'. [ 482.688905][T23276] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8280'. [ 483.016648][T23288] IPVS: Error connecting to the multicast addr [ 483.317737][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8293'. [ 484.047523][T23330] netlink: 'syz.2.8306': attribute type 322 has an invalid length. [ 484.216561][T23337] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 485.515716][T23390] gretap0: entered promiscuous mode [ 485.533353][T23390] vlan3: entered promiscuous mode [ 485.563605][T23394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8335'. [ 485.573164][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8335'. [ 485.582692][T23394] netlink: 'syz.2.8335': attribute type 14 has an invalid length. [ 485.591546][T23394] netlink: 'syz.2.8335': attribute type 11 has an invalid length. [ 486.944812][T23438] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 487.131913][T23448] netlink: 'syz.3.8358': attribute type 5 has an invalid length. [ 487.196295][T23450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8360'. [ 487.398352][T23461] sock: sock_set_timeout: `syz.2.8364' (pid 23461) tries to set negative timeout [ 487.947941][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8375'. [ 488.699221][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8388'. [ 488.816305][T23532] netem: change failed [ 489.301061][T23557] veth0_virt_wifi: entered allmulticast mode [ 489.556765][T23568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8404'. [ 490.104193][T23599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8419'. [ 490.224088][T23599] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 490.377748][T23599] bond2 (unregistering): Released all slaves [ 490.726537][T23629] netlink: 'syz.2.8431': attribute type 11 has an invalid length. [ 490.748087][T23629] netlink: 'syz.2.8431': attribute type 11 has an invalid length. [ 490.759094][T23629] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8431'. [ 491.075439][T23648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.128204][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8443'. [ 491.263821][T23657] netlink: 'syz.1.8446': attribute type 8 has an invalid length. [ 491.285148][T23660] nftables ruleset with unbound set [ 491.292650][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8446'. [ 491.511788][T23670] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 491.645410][T23676] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8457'. [ 493.012071][T23744] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8487'. [ 493.135458][T23751] netlink: 'syz.3.8491': attribute type 1 has an invalid length. [ 493.678998][T23782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8506'. [ 493.944533][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8512'. [ 494.554536][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8524'. [ 494.701805][T23829] netlink: 'syz.1.8527': attribute type 2 has an invalid length. [ 495.028438][T23842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8534'. [ 495.565058][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8548'. [ 495.586724][T23872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8549'. [ 495.740453][T23878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8552'. [ 495.774057][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8554'. [ 495.848033][T23878] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 495.914925][T23878] bond4 (unregistering): Released all slaves [ 496.035498][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8558'. [ 497.026270][T23945] pim6reg: entered allmulticast mode [ 497.043792][T23945] pim6reg: left allmulticast mode [ 497.136816][T23951] netlink: 'syz.3.8587': attribute type 32 has an invalid length. [ 497.275555][T23951] bond0: option coupled_control: invalid value (12) [ 497.284611][T23951] bond0 (unregistering): Released all slaves [ 497.489289][T23956] veth1_to_hsr: entered promiscuous mode [ 497.523394][T23956] macvtap1: entered promiscuous mode [ 497.535240][T23956] macvtap1: entered allmulticast mode [ 497.548747][T23956] veth1_to_hsr: entered allmulticast mode [ 498.124528][T23984] __nla_validate_parse: 4 callbacks suppressed [ 498.124549][T23984] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8602'. [ 498.679978][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8616'. [ 499.327028][T24045] tipc: Enabling of bearer rejected, media not registered [ 499.569760][T24055] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8633'. [ 499.820687][T24067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8638'. [ 500.091158][T24082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8643'. [ 500.432016][T24099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8647'. [ 500.470987][T24100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8649'. [ 503.815225][T24146] block nbd0: not configured, cannot reconfigure [ 504.284813][T24173] netlink: 268 bytes leftover after parsing attributes in process `syz.3.8679'. [ 504.306917][T24173] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8679'. [ 504.317134][T24173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8679'. [ 504.330625][T24174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8680'. [ 504.349583][ T5827] IPVS: starting estimator thread 0... [ 504.464548][T24178] IPVS: using max 26 ests per chain, 62400 per kthread [ 504.581501][T24190] pim6reg: entered allmulticast mode [ 504.599759][T24190] pim6reg: left allmulticast mode [ 504.760997][T24199] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8690'. [ 505.325745][T24217] tipc: Enabling of bearer rejected, failed to enable media [ 505.904625][T24244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8711'. [ 505.921257][T24243] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8710'. [ 506.371854][T24270] netlink: 364 bytes leftover after parsing attributes in process `syz.2.8723'. [ 506.981070][T24302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8739'. [ 507.907179][T24349] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8761'. [ 508.175572][T24361] macvlan2: entered promiscuous mode [ 508.198242][T24361] gretap0: entered promiscuous mode [ 508.229278][T24361] gretap0: left promiscuous mode [ 508.635821][T24381] sctp: [Deprecated]: syz.3.8772 (pid 24381) Use of int in max_burst socket option deprecated. [ 508.635821][T24381] Use struct sctp_assoc_value instead [ 509.628111][T24440] __nla_validate_parse: 2 callbacks suppressed [ 509.628133][T24440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8803'. [ 509.697183][T24440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8803'. [ 509.710952][T24443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8806'. [ 509.740692][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8803'. [ 510.922881][T24506] Bluetooth: MGMT ver 1.23 [ 510.993727][T24509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8838'. [ 511.060173][ T1088] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.075267][ T1088] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.094457][ T1088] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.120577][ T1088] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.427721][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8852'. [ 511.626050][T24545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8855'. [ 511.775828][T24552] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8859'. [ 511.839679][T24557] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8862'. [ 511.862223][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8862'. [ 512.612053][T24595] netlink: 'syz.0.8880': attribute type 15 has an invalid length. [ 512.759767][T24603] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 514.481475][T24691] netlink: 'syz.4.8925': attribute type 66 has an invalid length. [ 514.775411][T24710] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 514.849516][T24714] __nla_validate_parse: 9 callbacks suppressed [ 514.849537][T24714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8936'. [ 514.926285][T24714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8936'. [ 516.190311][T24776] tipc: Enabling of bearer rejected, failed to enable media [ 517.172437][T24827] macsec1: entered promiscuous mode [ 517.195105][T24829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8991'. [ 517.418087][T24829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.425992][T24834] veth1_macvtap: left promiscuous mode [ 517.463567][T24834] macsec0: entered promiscuous mode [ 517.595004][T24837] veth1_macvtap: entered promiscuous mode [ 517.619252][T24837] macsec0: left promiscuous mode [ 518.063030][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9005'. [ 518.576193][T24891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9018'. [ 518.637442][T24891] vlan3: entered promiscuous mode [ 518.647528][T24896] netlink: 'syz.4.9022': attribute type 1 has an invalid length. [ 518.657105][T24891] bridge0: entered promiscuous mode [ 519.134629][T24916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9031'. [ 519.464718][T24937] netlink: 'syz.3.9041': attribute type 5 has an invalid length. [ 519.710091][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9048'. [ 519.862578][T24954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9049'. [ 520.460281][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9062'. [ 520.552608][T24983] Bluetooth: MGMT ver 1.23 [ 520.663750][T24989] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9067'. [ 521.767943][T25041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9093'. [ 521.805522][T25043] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9094'. [ 523.198620][T25108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.237062][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9128'. [ 523.947024][T25149] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9145'. [ 524.504689][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9158'. [ 524.659281][T25183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9162'. [ 524.904760][T25197] netlink: 'syz.4.9170': attribute type 1 has an invalid length. [ 524.941756][T25197] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9170'. [ 524.970465][T25197] netlink: 658 bytes leftover after parsing attributes in process `syz.4.9170'. [ 525.018799][T25197] netlink: 'syz.4.9170': attribute type 1 has an invalid length. [ 525.407982][T25220] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.9180'. [ 525.514055][T25230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9184'. [ 525.583113][T25232] vlan2: entered promiscuous mode [ 525.594106][T25232] bridge0: entered promiscuous mode [ 526.322165][T25273] netlink: 67 bytes leftover after parsing attributes in process `syz.2.9206'. [ 526.590274][T25284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9212'. [ 527.063119][T25304] netlink: 'syz.1.9222': attribute type 28 has an invalid length. [ 527.212128][T25312] gre0: left promiscuous mode [ 527.430347][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9231'. [ 527.462394][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9231'. [ 527.492831][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9231'. [ 527.530270][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9231'. [ 528.707321][T25365] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 529.682299][T25418] smc: net device wlan0 applied user defined pnetid SYZ0 [ 530.252203][T25445] netlink: 'syz.4.9289': attribute type 1 has an invalid length. [ 530.269469][T25446] __nla_validate_parse: 3 callbacks suppressed [ 530.269488][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9286'. [ 530.299138][T25445] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9289'. [ 530.330420][T25445] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9289'. [ 530.350002][T25445] netlink: 'syz.4.9289': attribute type 1 has an invalid length. [ 530.545599][T25458] netlink: 'syz.0.9293': attribute type 58 has an invalid length. [ 530.576882][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9293'. [ 530.586304][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 530.606914][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 530.631201][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 530.652473][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 530.670089][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 530.697543][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 530.737992][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 530.761448][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 530.795493][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 530.827432][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'. [ 530.853512][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9301'. [ 530.864611][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 530.895341][T25462] netlink: 'syz.4.9294': attribute type 29 has an invalid length. [ 531.583560][T25507] vlan2: entered promiscuous mode [ 531.590115][T25507] geneve1: entered promiscuous mode [ 531.600044][T25507] vlan2: entered allmulticast mode [ 531.612687][T25507] geneve1: entered allmulticast mode [ 532.031470][T25531] ip6tnl6: entered promiscuous mode [ 532.039731][T25531] ip6tnl6: entered allmulticast mode [ 535.294492][T25693] __nla_validate_parse: 27 callbacks suppressed [ 535.294530][T25693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9407'. [ 535.876846][T25731] validate_nla: 25 callbacks suppressed [ 535.876868][T25731] netlink: 'syz.1.9423': attribute type 3 has an invalid length. [ 536.007367][T25737] IPVS: Error connecting to the multicast addr [ 536.100011][T25742] netlink: 64134 bytes leftover after parsing attributes in process `syz.1.9426'. [ 536.253806][T25750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.498638][T25812] veth5: entered promiscuous mode [ 537.537668][T25815] netlink: 'syz.2.9462': attribute type 2 has an invalid length. [ 537.625277][T25820] tipc: Enabling of bearer rejected, failed to enable media [ 538.419432][T25862] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9485'. [ 538.449707][T25862] netlink: 196 bytes leftover after parsing attributes in process `syz.3.9485'. [ 539.594656][T25909] netlink: 'syz.4.9508': attribute type 6 has an invalid length. [ 539.619063][T25909] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.9508'. [ 539.718439][T25913] xt_policy: too many policy elements [ 540.069015][T25927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9517'. [ 540.843985][T25963] sctp: [Deprecated]: syz.3.9535 (pid 25963) Use of int in maxseg socket option. [ 540.843985][T25963] Use struct sctp_assoc_value instead [ 540.866593][T25962] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9534'. [ 542.174266][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9562'. [ 542.299741][T26024] netlink: 'syz.3.9565': attribute type 12 has an invalid length. [ 542.347743][T26024] netlink: 'syz.3.9565': attribute type 29 has an invalid length. [ 542.371129][T26024] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9565'. [ 542.380827][T26024] netlink: 59 bytes leftover after parsing attributes in process `syz.3.9565'. [ 544.096309][T26087] nbd: socks must be embedded in a SOCK_ITEM attr [ 544.546309][T26110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9606'. [ 545.261910][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9624'. [ 545.279618][T26142] bond0: (slave bond_slave_1): Device is not bonding slave [ 545.287408][T26142] bond0: option active_slave: invalid value (bond_slave_1) [ 545.307558][T26142] bond0 (unregistering): Released all slaves [ 545.946666][T26173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9637'. [ 545.977491][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9639'. [ 546.000911][T26177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9639'. [ 546.169977][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9642'. [ 546.185103][T26188] netlink: 'syz.0.9644': attribute type 2 has an invalid length. [ 546.195808][T26188] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.9644'. [ 546.261541][T26191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9643'. [ 546.275339][T26191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9643'. [ 546.742969][T26219] netlink: 'syz.3.9658': attribute type 3 has an invalid length. [ 546.770003][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9658'. [ 547.056291][T26232] smc: net device hsr0 applied user defined pnetid SYZ2 [ 547.413746][T26253] netlink: 'syz.1.9674': attribute type 8 has an invalid length. [ 547.439009][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9674'. [ 547.471673][T26252] wg1 speed is unknown, defaulting to 1000 [ 547.500033][T26254] netlink: 'syz.2.9675': attribute type 12 has an invalid length. [ 547.637746][T26262] netlink: 'syz.1.9678': attribute type 1 has an invalid length. [ 547.648207][T26263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9679'. [ 548.297799][T26252] lo speed is unknown, defaulting to 1000 [ 551.060784][T26411] xt_hashlimit: size too large, truncated to 1048576 [ 551.604990][T26441] team0: left allmulticast mode [ 551.622041][T26441] __nla_validate_parse: 2 callbacks suppressed [ 551.622059][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9763'. [ 551.666590][T26441] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.963627][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9774'. [ 552.251989][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9781'. [ 552.285950][T26479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9783'. [ 553.155366][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9789'. [ 553.660971][T26515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9799'. [ 553.978462][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9807'. [ 554.152083][T26539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9810'. [ 554.520092][T26561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9821'. [ 554.907236][T26582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9827'. [ 557.030514][T26686] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 557.865382][T26731] netlink: 'syz.2.9902': attribute type 1 has an invalid length. [ 557.910649][T26731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 557.963255][T26739] __nla_validate_parse: 2 callbacks suppressed [ 557.963279][T26739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9903'. [ 557.985724][T26740] wg1: Master is either lo or non-ether device [ 558.283982][T26753] vlan3: entered promiscuous mode [ 558.306322][T26753] bond0: entered promiscuous mode [ 558.346724][T26753] bond_slave_0: entered promiscuous mode [ 558.369234][T26753] bond_slave_1: entered promiscuous mode [ 558.384270][T26753] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 558.394997][T26761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9914'. [ 558.535222][T26766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9918'. [ 558.545187][T26767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9919'. [ 558.563381][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 558.594840][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9918'. [ 558.971175][T26787] tipc: Enabled bearer , priority 10 [ 559.353261][T26808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9940'. [ 559.423954][T26811] netlink: 'syz.2.9941': attribute type 10 has an invalid length. [ 559.479374][T26812] netlink: 'syz.2.9941': attribute type 10 has an invalid length. [ 559.507205][T26812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9941'. [ 559.592618][T26794] ipvlan2: entered promiscuous mode [ 559.627865][T26811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.688610][T26811] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 559.725853][T26812] batadv0: entered promiscuous mode [ 559.745661][T26819] netlink: 'syz.1.9945': attribute type 1 has an invalid length. [ 559.760134][T26819] netlink: 'syz.1.9945': attribute type 2 has an invalid length. [ 559.763719][T26812] batadv0: entered allmulticast mode [ 559.772146][T26819] netlink: 'syz.1.9945': attribute type 1 has an invalid length. [ 559.813133][T26812] bond0: (slave batadv0): Releasing backup interface [ 559.818156][T26819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9945'. [ 559.856441][T26812] bridge0: port 2(batadv0) entered blocking state [ 559.885824][T26812] bridge0: port 2(batadv0) entered disabled state [ 560.320244][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 560.330316][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 560.434965][T26851] ip6gretap0: entered promiscuous mode [ 560.822702][T26867] nbd: must specify at least one socket [ 560.859847][T26869] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9968'. [ 560.902388][T26871] netlink: 'syz.4.9970': attribute type 4 has an invalid length. [ 561.332109][T26889] vxcan5: entered promiscuous mode [ 561.714843][T26910] netlink: 'syz.3.9987': attribute type 4 has an invalid length. [ 562.045848][T26920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.375039][T26933] IPVS: Error connecting to the multicast addr [ 562.543707][T26939] netlink: 'syz.4.10002': attribute type 1 has an invalid length. [ 563.282517][T26973] netlink: 'syz.4.10018': attribute type 3 has an invalid length. [ 563.324817][T26973] netlink: 'syz.4.10018': attribute type 1 has an invalid length. [ 563.368813][T26973] __nla_validate_parse: 6 callbacks suppressed [ 563.368833][T26973] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10018'. [ 563.767609][T26994] : renamed from team_slave_1 (while UP) [ 564.208325][T27016] tipc: Started in network mode [ 564.213892][T27016] tipc: Node identity ac14140f, cluster identity 4711 [ 564.223476][T27016] tipc: Enabled bearer , priority 26 [ 564.474045][T27028] netlink: 39 bytes leftover after parsing attributes in process `syz.2.10044'. [ 564.607229][T27035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10047'. [ 564.897953][T27052] sctp: [Deprecated]: syz.2.10056 (pid 27052) Use of int in max_burst socket option. [ 564.897953][T27052] Use struct sctp_assoc_value instead [ 564.935553][T27053] macsec0: entered promiscuous mode [ 564.974304][T27053] macsec0: entered allmulticast mode [ 565.234031][T27069] rdma_op ffff888052bad1f0 conn xmit_rdma 0000000000000000 [ 565.241718][T27068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10063'. [ 565.339925][ T795] tipc: Node number set to 2886997007 [ 565.413646][T27073] netlink: 288 bytes leftover after parsing attributes in process `syz.4.10065'. [ 565.519239][T27078] tipc: Started in network mode [ 565.533771][T27078] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 565.557895][T27078] tipc: Enabling of bearer rejected, failed to enable media [ 566.312139][T27116] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 566.724470][T27138] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.10098'. [ 566.734592][T27138] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.10098'. [ 567.346243][T27169] netlink: 'syz.3.10113': attribute type 4 has an invalid length. [ 567.370564][T27169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10113'. [ 567.692661][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10120'. [ 568.096787][T27210] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.10132'. [ 569.629866][T27266] __nla_validate_parse: 1 callbacks suppressed [ 569.629888][T27266] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10159'. [ 569.670956][T27269] netlink: 'syz.0.10160': attribute type 1 has an invalid length. [ 569.702629][T27269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10160'. [ 569.742765][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10161'. [ 570.127434][T27289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10170'. [ 570.331246][T27300] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10176'. [ 570.352325][T27300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.832132][T27333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10190'. [ 570.887181][T27338] netlink: 'syz.4.10194': attribute type 1 has an invalid length. [ 570.901065][T27338] netlink: 'syz.4.10194': attribute type 1 has an invalid length. [ 571.702109][T27387] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10217'. [ 571.951712][T27403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10222'. [ 572.037618][T27408] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.10224'. [ 572.642097][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10242'. [ 572.661016][T27445] netlink: 'syz.3.10242': attribute type 13 has an invalid length. [ 573.717061][T27505] gretap0: entered promiscuous mode [ 573.735057][T27505] vlan3: entered promiscuous mode [ 573.783631][T27512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.352118][T27534] netlink: 'syz.3.10284': attribute type 1 has an invalid length. [ 574.389337][T27534] nbd: error processing sock list [ 575.084815][T27568] __nla_validate_parse: 2 callbacks suppressed [ 575.084837][T27568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10300'. [ 575.314009][T27582] sch_tbf: burst 240 is lower than device lo mtu (1550) ! [ 575.420609][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10309'. [ 575.437421][T27590] netlink: 277 bytes leftover after parsing attributes in process `syz.0.10311'. [ 575.795069][T27603] batman_adv: batadv0: Adding interface: veth7 [ 575.809391][T27603] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 575.857659][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10319'. [ 575.863707][T27603] batman_adv: batadv0: Interface activated: veth7 [ 575.880197][T27608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10319'. [ 576.774237][T27636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10332'. [ 577.152711][T27659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10344'. [ 577.806451][T27698] ip6gretap2: entered allmulticast mode [ 578.056678][T27717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10370'. [ 578.420545][T27739] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10381'. [ 578.736843][T27756] netlink: 'syz.4.10390': attribute type 33 has an invalid length. [ 579.409886][T27788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10406'. [ 579.445400][T27788] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 579.595800][T27800] netlink: 'syz.0.10411': attribute type 15 has an invalid length. [ 579.840498][T27814] netlink: 'syz.4.10418': attribute type 1 has an invalid length. [ 579.866720][T27814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.991012][T27816] wg1 speed is unknown, defaulting to 1000 [ 580.518962][T27845] __nla_validate_parse: 2 callbacks suppressed [ 580.518984][T27845] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10433'. [ 580.548335][T27847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10434'. [ 580.696923][T27853] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10437'. [ 580.819612][T27816] lo speed is unknown, defaulting to 1000 [ 580.883568][T27863] netlink: 87 bytes leftover after parsing attributes in process `syz.2.10442'. [ 581.049478][T27871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10446'. [ 581.143100][T27873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10447'. [ 581.154621][T27875] netlink: 'syz.4.10448': attribute type 31 has an invalid length. [ 581.895444][T27910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10464'. [ 582.813183][T27950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10484'. [ 583.119771][T27972] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10494'. [ 583.241688][T27976] netlink: 'syz.1.10496': attribute type 11 has an invalid length. [ 583.382285][T27984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10500'. [ 583.409284][T27984] netlink: 'syz.2.10500': attribute type 1 has an invalid length. [ 584.280106][T28026] macsec2: entered promiscuous mode [ 584.285575][T28026] virt_wifi0: entered promiscuous mode [ 585.242488][T28078] xt_hashlimit: size too large, truncated to 1048576 [ 585.420336][T28092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.072865][T28124] __nla_validate_parse: 3 callbacks suppressed [ 586.072886][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10567'. [ 586.259306][T28135] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10574'. [ 586.269153][T28135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10574'. [ 586.472143][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10580'. [ 586.483551][T28149] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10580'. [ 586.551706][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10581'. [ 586.662826][T28159] netlink: 'syz.1.10583': attribute type 5 has an invalid length. [ 587.592688][T28204] tipc: Enabled bearer , priority 14 [ 588.066266][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10616'. [ 588.089519][T28226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10616'. [ 588.166053][ T29] audit: type=1804 audit(1776940807.600:3): pid=28232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10620" name="/newroot/2082/cgroup.controllers" dev="tmpfs" ino=10444 res=1 errno=0 [ 588.199682][ T29] audit: type=1800 audit(1776940807.610:4): pid=28232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10620" name="cgroup.controllers" dev="tmpfs" ino=10444 res=0 errno=0 [ 588.454008][T28247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10626'. [ 588.510555][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10627'. [ 588.763164][T28260] netlink: 'syz.1.10632': attribute type 18 has an invalid length. [ 590.902561][T28374] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 591.284166][T28393] wg1 speed is unknown, defaulting to 1000 [ 591.586275][T28414] __nla_validate_parse: 5 callbacks suppressed [ 591.586295][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10705'. [ 591.949661][T28423] syz.4.10710 (28423) used greatest stack depth: 17560 bytes left [ 591.996151][T28393] lo speed is unknown, defaulting to 1000 [ 592.282862][T28439] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10718'. [ 592.319308][T28439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.889631][T28461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10728'. [ 593.383200][T28486] tipc: Enabling of bearer rejected, media not registered [ 594.247133][T28518] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 594.274296][T28520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10756'. [ 594.336915][T28522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10757'. [ 594.977607][T28559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10775'. [ 595.826372][ T29] audit: type=1800 audit(1776940815.260:5): pid=28608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10798" name="memory.events" dev="tmpfs" ino=11033 res=0 errno=0 [ 595.901949][ T29] audit: type=1804 audit(1776940815.300:6): pid=28608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.10798" name="/newroot/2200/memory.events" dev="tmpfs" ino=11033 res=1 errno=0 [ 596.113630][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10807'. [ 596.243091][ T9] IPVS: starting estimator thread 0... [ 596.369229][T28630] IPVS: using max 26 ests per chain, 62400 per kthread [ 597.592160][T28691] netlink: 'syz.2.10837': attribute type 1 has an invalid length. [ 598.686372][T28741] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 599.025824][T28753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.075329][T28755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10868'. [ 599.105104][T28760] veth0_virt_wifi: left allmulticast mode [ 599.465496][T28774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10877'. [ 600.607259][T28832] netlink: 'syz.4.10904': attribute type 1 has an invalid length. [ 601.077229][ T5826] udevd[5826]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 601.924021][T28903] macsec0: entered allmulticast mode [ 601.930773][T28903] veth1_macvtap: entered allmulticast mode [ 601.936692][T28903] macsec0: left allmulticast mode [ 601.944838][T28903] veth1_macvtap: left allmulticast mode [ 601.951464][T28902] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10937'. [ 601.984971][T28902] netlink: 'syz.0.10937': attribute type 9 has an invalid length. [ 601.999275][T28902] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10937'. [ 602.023580][T28902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10937'. [ 602.813131][T28944] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) ! [ 602.956359][T28952] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 603.032044][T28954] vlan1: entered promiscuous mode [ 603.049299][T28954] bridge0: entered promiscuous mode [ 603.136536][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10967'. [ 603.435909][T28972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 604.270595][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10991'. [ 604.466365][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.486257][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.507277][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.530022][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.953784][T29050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.017802][T29054] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11012'. [ 605.039251][T29054] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11012'. [ 605.283470][T29069] netlink: 'syz.4.11019': attribute type 1 has an invalid length. [ 605.310844][T29069] netlink: 'syz.4.11019': attribute type 2 has an invalid length. [ 605.515479][T29082] netlink: 'syz.4.11025': attribute type 1 has an invalid length. [ 605.801108][T29098] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 605.859722][T29102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11032'. [ 606.225590][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11039'. [ 606.329643][T29125] netlink: 'syz.3.11042': attribute type 28 has an invalid length. [ 606.744722][T29147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11053'. [ 607.010801][T29163] netlink: 'syz.4.11060': attribute type 29 has an invalid length. [ 607.103519][T29170] netlink: 'syz.2.11064': attribute type 13 has an invalid length. [ 607.127749][T29170] netlink: 'syz.2.11064': attribute type 17 has an invalid length. [ 607.168500][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11064'. [ 607.332662][T29170] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.340001][T29170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.351750][T29170] bridge0: left allmulticast mode [ 607.386343][T29170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.629318][T29193] netlink: 'syz.2.11073': attribute type 3 has an invalid length. [ 607.952551][T29208] tipc: Started in network mode [ 607.968040][T29208] tipc: Node identity , cluster identity 4711 [ 607.992456][T29208] tipc: Failed to obtain node identity [ 608.010974][T29208] tipc: Enabling of bearer rejected, failed to enable media [ 608.377369][T29216] macvtap0: entered promiscuous mode [ 608.507829][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11086'. [ 608.936266][T29248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11100'. [ 610.646621][T29339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11143'. [ 610.936946][T29360] netlink: 'syz.1.11154': attribute type 1 has an invalid length. [ 610.950632][T29360] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11154'. [ 610.965404][T29360] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11154'. [ 611.023536][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11153'. [ 611.187881][T29372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11160'. [ 611.347005][T29382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11163'. [ 611.621819][T29391] Cannot find set identified by id 0 to match [ 612.238125][T29424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11183'. [ 612.830531][T29455] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11199'. [ 613.520826][ T979] IPVS: starting estimator thread 0... [ 613.624119][T29496] IPVS: using max 26 ests per chain, 62400 per kthread [ 613.656557][T29504] netlink: 216 bytes leftover after parsing attributes in process `syz.2.11222'. [ 613.667670][T29504] netlink: 'syz.2.11222': attribute type 2 has an invalid length. [ 613.676168][T29504] netlink: 'syz.2.11222': attribute type 1 has an invalid length. [ 613.883099][T29515] bridge0: port 3(veth0_to_bridge) entered blocking state [ 613.920755][T29515] bridge0: port 3(veth0_to_bridge) entered disabled state [ 613.968474][T29515] veth0_to_bridge: entered allmulticast mode [ 613.988356][T29515] veth0_to_bridge: entered promiscuous mode [ 614.036592][T29520] vlan3: entered promiscuous mode [ 614.053020][T29520] bridge0: entered promiscuous mode [ 614.287814][T29532] netlink: 'syz.1.11236': attribute type 21 has an invalid length. [ 614.322081][T29532] IPv6: NLM_F_CREATE should be specified when creating new route [ 614.335104][T29536] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11238'. [ 614.344519][T29532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.344588][T29532] IPv6: NLM_F_CREATE should be set when creating new route [ 614.344638][T29532] IPv6: NLM_F_CREATE should be set when creating new route [ 614.344663][T29532] IPv6: NLM_F_CREATE should be set when creating new route [ 614.375242][T29532] netlink: 'syz.1.11236': attribute type 21 has an invalid length. [ 614.375351][T29532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.949451][ T13] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 614.976633][ T9] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 614.985764][ T13] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 615.349411][ T9] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 615.889045][ T9] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 616.040701][T29628] __nla_validate_parse: 4 callbacks suppressed [ 616.040723][T29628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11284'. [ 616.521881][T29660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11297'. [ 616.718473][T29668] netlink: 'syz.1.11301': attribute type 58 has an invalid length. [ 616.737668][T29668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11301'. [ 616.959346][T29680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11307'. [ 617.071519][T29685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11309'. [ 617.100500][T29688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11311'. [ 617.110515][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11311'. [ 617.120136][T29688] netlink: 'syz.4.11311': attribute type 14 has an invalid length. [ 617.128283][T29688] netlink: 'syz.4.11311': attribute type 13 has an invalid length. [ 617.774990][T29714] bond0: Removing last ns target with arp_interval on [ 617.952233][T29724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11327'. [ 617.968778][T29724] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 618.096938][T29727] netlink: 'syz.3.11328': attribute type 9 has an invalid length. [ 618.125623][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11328'. [ 618.147183][T29727] macvlan0: entered promiscuous mode [ 618.153744][T29727] gretap0: entered promiscuous mode [ 618.159566][T29727] macvlan0: entered allmulticast mode [ 618.165073][T29727] gretap0: entered allmulticast mode [ 618.778062][T29763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11344'. [ 618.928906][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 619.877459][T29818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.760697][T29860] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 620.766925][T29860] syzkaller1: linktype set to 270 [ 621.177708][T29884] __nla_validate_parse: 3 callbacks suppressed [ 621.177729][T29884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11400'. [ 621.905418][T29911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11412'. [ 621.924248][T29911] hsr0: entered promiscuous mode [ 621.931591][T29911] macvlan2: entered allmulticast mode [ 621.937068][T29911] hsr0: entered allmulticast mode [ 621.943258][T29911] hsr_slave_0: entered allmulticast mode [ 621.949788][T29911] hsr_slave_1: entered allmulticast mode [ 621.988934][T29913] netlink: 'syz.0.11413': attribute type 1 has an invalid length. [ 622.013795][T29913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11413'. [ 622.626622][T29938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11425'. [ 623.167347][T29958] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 623.200923][T29958] bond6 (unregistering): Released all slaves [ 623.401204][T29967] netlink: 'syz.3.11438': attribute type 14 has an invalid length. [ 624.996398][T30048] netlink: 'syz.0.11475': attribute type 64 has an invalid length. [ 625.069659][T30052] netlink: 'syz.0.11477': attribute type 13 has an invalid length. [ 625.077893][T30052] netlink: 'syz.0.11477': attribute type 17 has an invalid length. [ 625.126051][T30053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11477'. [ 625.213301][T30052] bridge0: port 3(dummy0) entered blocking state [ 625.219894][T30052] bridge0: port 3(dummy0) entered forwarding state [ 625.236866][T30052] team0: left promiscuous mode [ 625.242075][T30052] team_slave_0: left promiscuous mode [ 625.247884][T30052] team_slave_1: left promiscuous mode [ 625.256746][T30052] veth1: left promiscuous mode [ 625.263343][T30052] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.281656][T30052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.950392][T30064] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11481'. [ 626.407733][T30083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11489'. [ 626.528830][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 628.403862][T30124] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 629.579437][T30050] Set syz1 is full, maxelem 65536 reached [ 629.608246][T30173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11530'. [ 629.643097][T30173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11530'. [ 629.660542][T30175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11531'. [ 629.684525][T30175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11531'. [ 629.714402][T30178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11531'. [ 629.730780][T30178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11531'. [ 630.089790][T30200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11541'. [ 630.178408][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11544'. [ 630.195356][T30206] hsr_slave_0: left promiscuous mode [ 630.230502][T30206] hsr_slave_1: left promiscuous mode [ 630.261779][T30208] sctp: [Deprecated]: syz.1.11545 (pid 30208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.261779][T30208] Use struct sctp_sack_info instead [ 630.794078][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11559'. [ 630.827229][T30238] gretap0: entered promiscuous mode [ 630.923021][T30241] bond8 (unregistering): Released all slaves [ 631.035277][T30247] tap0: tun_chr_ioctl cmd 1074025692 [ 631.857105][T30268] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 632.036205][T30277] netlink: 'syz.0.11577': attribute type 6 has an invalid length. [ 632.045565][T30277] netlink: 232 bytes leftover after parsing attributes in process `syz.0.11577'. [ 632.077707][T30277] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.11577'. [ 632.541051][T30295] bond5: entered promiscuous mode [ 632.570823][T30295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 632.612896][T30295] bridge0: port 1(bond5) entered blocking state [ 632.642754][T30295] bridge0: port 1(bond5) entered disabled state [ 632.659069][T30295] bond5: entered allmulticast mode [ 632.853679][T30314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11594'. [ 632.880838][T30319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11596'. [ 633.088526][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11602'. [ 633.134814][T30334] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 633.394442][T30348] netlink: 'syz.2.11610': attribute type 2 has an invalid length. [ 633.405078][T30348] netlink: 'syz.2.11610': attribute type 5 has an invalid length. [ 634.142528][T30381] sctp: [Deprecated]: syz.3.11626 (pid 30381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.142528][T30381] Use struct sctp_sack_info instead [ 634.315171][T30393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11632'. [ 634.495493][T30401] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11637'. [ 634.519391][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11635'. [ 634.790271][T30413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11642'. [ 634.847959][T30413] ipvlan0: entered allmulticast mode [ 634.874432][T30413] syz_tun: entered allmulticast mode [ 634.982322][T30418] erspan0: entered promiscuous mode [ 635.373279][T30444] netlink: 'syz.0.11656': attribute type 4 has an invalid length. [ 635.381880][T30444] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11656'. [ 636.111722][T30478] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 636.120837][T30478] syzkaller1: linktype set to 768 [ 636.234275][T30487] netlink: 'syz.0.11676': attribute type 11 has an invalid length. [ 637.557462][T30560] __nla_validate_parse: 6 callbacks suppressed [ 637.557480][T30560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11711'. [ 637.618112][T30562] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.11712'. [ 637.627953][T30562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11712'. [ 637.639783][T30562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11712'. [ 639.143831][T30641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11750'. [ 639.894418][T30685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11771'. [ 639.904712][T30685] netem: unknown loss type 11 [ 639.913180][T30685] netem: change failed [ 641.248840][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 641.472538][T30758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11804'. [ 642.462364][T30802] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 642.707999][T30816] netlink: 'syz.4.11831': attribute type 10 has an invalid length. [ 642.719533][T30816] batadv0: left promiscuous mode [ 642.724738][T30816] batadv0: left allmulticast mode [ 642.734620][T30816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.744314][T30816] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 642.758389][T30816] netlink: 'syz.4.11831': attribute type 10 has an invalid length. [ 642.769938][T30816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11831'. [ 642.779853][T30816] batadv0: entered promiscuous mode [ 642.785258][T30816] batadv0: entered allmulticast mode [ 642.805345][T30816] bond0: (slave batadv0): Releasing backup interface [ 642.833277][T30816] bridge0: port 2(batadv0) entered blocking state [ 642.851048][T30816] bridge0: port 2(batadv0) entered disabled state [ 643.199319][ T710] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 643.209269][ T710] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 643.299653][T30842] netlink: 'syz.0.11842': attribute type 4 has an invalid length. [ 643.562575][T30853] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.576838][T30853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.584293][T30853] IPv6: NLM_F_CREATE should be set when creating new route [ 643.591627][T30853] IPv6: NLM_F_CREATE should be set when creating new route [ 643.598953][T30853] IPv6: NLM_F_CREATE should be set when creating new route [ 643.614028][T30853] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11847'. [ 643.633814][T30850] bond8: option ad_user_port_key: invalid value (65535) [ 643.657745][T30850] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 643.686568][T30850] bond8 (unregistering): Released all slaves [ 644.024329][T30869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11855'. [ 644.037220][T30869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11855'. [ 644.755539][T30906] netlink: 'syz.0.11872': attribute type 1 has an invalid length. [ 644.784726][T30906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.521567][T30938] tipc: Enabling of bearer rejected, failed to enable media [ 645.957976][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11897'. [ 645.969837][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11897'. [ 646.294039][T30978] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11902'. [ 646.319907][T30979] vxcan2: entered allmulticast mode [ 647.061056][T31011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11917'. [ 647.087350][T31011] ipvlan1: entered promiscuous mode [ 647.094675][T31011] ipvlan1: left promiscuous mode [ 647.105736][T31015] netlink: 'syz.3.11919': attribute type 1 has an invalid length. [ 647.113939][T31015] netlink: 'syz.3.11919': attribute type 2 has an invalid length. [ 647.325123][ T5838] block nbd3: Receive control failed (result -32) [ 648.432877][T31084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11951'. [ 649.258293][T31123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.743247][T31145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11980'. [ 650.346030][T31172] netlink: 'syz.0.11992': attribute type 2 has an invalid length. [ 650.457005][T31175] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.11995'. [ 650.550681][T31182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11993'. [ 650.686756][T31184] bond6 (unregistering): Released all slaves [ 650.784640][T31196] netlink: 'syz.1.12001': attribute type 16 has an invalid length. [ 651.256476][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12009'. [ 651.472364][T31218] geneve3: entered promiscuous mode [ 651.635109][T31224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12015'. [ 651.670297][T31224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12015'. [ 651.709940][T31230] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12018'. [ 651.829540][T31233] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 652.332232][T31265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12035'. [ 653.520380][T31328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12065'. [ 653.559901][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12065'. [ 654.097834][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'. [ 654.112880][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'. [ 654.124419][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'. [ 654.134871][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'. [ 654.144398][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'. [ 654.154051][T31359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12079'. [ 654.645086][T31383] erspan0: entered promiscuous mode [ 654.657011][T31385] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 655.363872][T31413] wg1 speed is unknown, defaulting to 1000 [ 655.378290][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12105'. [ 656.076431][T31413] lo speed is unknown, defaulting to 1000 [ 656.297647][T31455] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12115'. [ 656.625254][T31469] syzkaller1: tun_chr_ioctl cmd 35108 [ 657.921283][T31512] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 658.723925][T31550] __nla_validate_parse: 1 callbacks suppressed [ 658.723943][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12161'. [ 658.897742][T31554] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12165'. [ 658.915403][T31554] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 659.427749][T31585] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12178'. [ 660.585035][T31635] netlink: 'syz.1.12202': attribute type 2 has an invalid length. [ 660.637925][T31635] !: entered promiscuous mode [ 660.651290][T31636] netlink: 'syz.1.12202': attribute type 2 has an invalid length. [ 661.245917][T31662] netlink: 'syz.0.12216': attribute type 22 has an invalid length. [ 661.273359][T31662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12216'. [ 661.300730][T31662] netlink: 'syz.0.12216': attribute type 22 has an invalid length. [ 661.320044][T31662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12216'. [ 661.646452][T31685] xt_hashlimit: size too large, truncated to 1048576 [ 662.454120][T31714] tipc: New replicast peer: 255.255.255.255 [ 662.472018][T31714] tipc: Enabled bearer , priority 26 [ 662.485998][T31714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12236'. [ 663.155502][T31733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12243'. [ 663.194023][T31733] netem: change failed [ 663.579059][T30109] tipc: Node number set to 4278255617 [ 664.110715][T31768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12261'. [ 664.200279][T31768] bond6: entered promiscuous mode [ 664.205993][T31768] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.224640][T31768] bond6 (unregistering): Released all slaves [ 664.667786][T31794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.934010][T31805] xt_hashlimit: size too large, truncated to 1048576 [ 667.046189][T31918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12320'. [ 667.173964][T31922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12323'. [ 667.186644][T31922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12323'. [ 667.218392][T31918] virt_wifi0 (unregistering): left promiscuous mode [ 667.932161][T31947] netlink: 'syz.3.12335': attribute type 83 has an invalid length. [ 668.228419][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 668.238277][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 668.250794][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 668.261439][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 668.271227][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 668.294070][T31968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12346'. [ 668.735529][T31991] netlink: 'syz.1.12356': attribute type 3 has an invalid length. [ 668.744052][T31991] netlink: 'syz.1.12356': attribute type 3 has an invalid length. [ 669.474617][T32031] __nla_validate_parse: 4 callbacks suppressed [ 669.474640][T32031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12374'. [ 669.493699][T32031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12374'. [ 669.503187][T32031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12374'. [ 669.825028][T32048] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12381'. [ 670.048873][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 670.448105][T32072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12394'. [ 671.066872][T32108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12410'. [ 671.469709][T32122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12416'. [ 671.678498][T32128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.685850][T32128] IPv6: NLM_F_CREATE should be set when creating new route [ 671.693203][T32128] IPv6: NLM_F_CREATE should be set when creating new route [ 671.700502][T32128] IPv6: NLM_F_CREATE should be set when creating new route [ 671.874070][T32134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12422'. [ 672.039584][T32145] bridge0: port 3(syz_tun) entered blocking state [ 672.073361][T32145] bridge0: port 3(syz_tun) entered disabled state [ 672.106872][T32145] syz_tun: entered allmulticast mode [ 672.126847][T32145] syz_tun: entered promiscuous mode [ 672.144063][T32145] bridge0: port 3(syz_tun) entered blocking state [ 672.150766][T32145] bridge0: port 3(syz_tun) entered forwarding state [ 672.790889][T32175] batman_adv: batadv0: Adding interface: vlan3 [ 672.818802][T32175] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.874727][T32175] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 673.071691][T32191] netlink: 'syz.2.12447': attribute type 3 has an invalid length. [ 673.116526][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12447'. [ 673.407347][T32206] IPv6: Can't replace route, no match found [ 673.912851][T32232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12466'. [ 673.932328][T32232] ip6gre2: entered promiscuous mode [ 673.938256][T32232] ip6gre2: entered allmulticast mode [ 673.946130][ T57] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 673.974302][T30109] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 673.983568][ T57] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.059116][T30109] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.112569][T32237] vxcan3: entered promiscuous mode [ 674.358882][T32248] xt_hashlimit: size too large, truncated to 1048576 [ 674.451285][T30109] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.747976][T32270] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 674.756951][T32270] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 676.131684][T32319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12506'. [ 676.639684][T32341] netlink: 726 bytes leftover after parsing attributes in process `syz.4.12517'. [ 676.690566][T32341] netlink: 'syz.4.12517': attribute type 1 has an invalid length. [ 676.802156][T32346] netlink: 7 bytes leftover after parsing attributes in process `syz.1.12519'. [ 676.813506][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12520'. [ 677.179758][T32366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12528'. [ 677.725048][T32389] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 677.808929][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.237860][T32410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12548'. [ 678.700543][T32427] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 678.711344][T32427] dvmrp1: linktype set to 804 [ 679.013820][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12560'. [ 679.743212][T32480] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12581'. [ 679.777709][T32482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12580'. [ 680.290809][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12593'. [ 680.875324][T32515] xt_hashlimit: size too large, truncated to 1048576 [ 680.924011][T32522] : renamed from vxcan1 [ 682.186495][T32561] sctp: [Deprecated]: syz.3.12618 (pid 32561) Use of int in maxseg socket option. [ 682.186495][T32561] Use struct sctp_assoc_value instead [ 682.706285][T32588] netlink: 'syz.4.12632': attribute type 1 has an invalid length. [ 682.715216][T32588] netlink: 'syz.4.12632': attribute type 2 has an invalid length. [ 682.723596][T32588] netlink: 'syz.4.12632': attribute type 1 has an invalid length. [ 682.936157][T32598] sctp: [Deprecated]: syz.4.12636 (pid 32598) Use of int in max_burst socket option deprecated. [ 682.936157][T32598] Use struct sctp_assoc_value instead [ 684.464928][ T5838] block nbd4: Receive control failed (result -32) [ 684.911899][T32698] bond0: option miimon: invalid value (18446744073709551615) [ 684.931873][T32698] bond0: option miimon: allowed values 0 - 2147483647 [ 685.408808][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 685.516575][ T5838] block nbd5: Receive control failed (result -32) [ 687.942378][ T352] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 688.295332][ T365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12742'. [ 688.490036][ T374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 688.658587][ T381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12750'. [ 688.690333][ T381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12750'. [ 688.718871][ T381] netlink: 'syz.1.12750': attribute type 1 has an invalid length. [ 688.737045][ T381] netlink: 524 bytes leftover after parsing attributes in process `syz.1.12750'. [ 688.957633][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12755'. [ 689.144141][ T401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12758'. [ 690.417911][ T463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12787'. [ 690.663469][ T472] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.12791'. [ 690.852264][ T476] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 690.947933][ T476] bond4 (unregistering): Released all slaves [ 691.341036][ T499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12802'. [ 691.355553][ T499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12802'. [ 693.011696][ T588] nbd: couldn't find a device at index 65546 [ 693.183226][ T598] x_tables: duplicate underflow at hook 1 [ 693.512589][ T618] __nla_validate_parse: 9 callbacks suppressed [ 693.512610][ T618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12856'. [ 693.531868][ T618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12856'. [ 693.546530][ T619] block nbd3: must specify backend [ 693.694531][ T625] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12859'. [ 694.019953][ T644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12869'. [ 694.083469][ T647] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12870'. [ 694.111677][ T647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12870'. [ 694.525402][ T668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12878'. [ 695.201923][ T5838] block nbd6: Receive control failed (result -32) [ 695.201923][ T5831] block nbd6: Receive control failed (result -32) [ 695.780517][ T730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12905'. [ 695.792510][ T728] tap0: tun_chr_ioctl cmd 1074025677 [ 695.803433][ T728] tap0: linktype set to 6 [ 695.890422][ T737] netlink: 292 bytes leftover after parsing attributes in process `syz.2.12910'. [ 695.903462][ T737] netlink: 292 bytes leftover after parsing attributes in process `syz.2.12910'. [ 696.796855][ T787] netlink: 'syz.4.12933': attribute type 20 has an invalid length. [ 697.155635][ T797] nbd7: detected capacity change from 0 to 127 [ 697.191423][ T5831] block nbd7: Receive control failed (result -32) [ 697.207552][ T5826] block nbd7: Dead connection, failed to find a fallback [ 697.262586][ T5826] block nbd7: shutting down sockets [ 697.320724][ T5826] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.359661][ T5826] Buffer I/O error on dev nbd7, logical block 0, async page read [ 697.380629][ T5826] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.393036][ T810] netlink: 'syz.0.12943': attribute type 2 has an invalid length. [ 697.407563][ T5826] Buffer I/O error on dev nbd7, logical block 1, async page read [ 697.429432][ T5826] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.454907][ T5826] Buffer I/O error on dev nbd7, logical block 2, async page read [ 697.472396][ T5826] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.494724][ T5826] Buffer I/O error on dev nbd7, logical block 3, async page read [ 697.535619][ T5826] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.558235][ T5826] Buffer I/O error on dev nbd7, logical block 0, async page read [ 697.567658][ T5826] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.595478][ T5826] Buffer I/O error on dev nbd7, logical block 1, async page read [ 697.614183][ T5826] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.637223][ T5826] Buffer I/O error on dev nbd7, logical block 2, async page read [ 697.658284][ T5826] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.683432][ T5826] Buffer I/O error on dev nbd7, logical block 3, async page read [ 697.705774][ T5826] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.725455][ T5826] Buffer I/O error on dev nbd7, logical block 0, async page read [ 697.743740][ T5826] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.762278][ T5826] Buffer I/O error on dev nbd7, logical block 1, async page read [ 697.781617][ T821] bond0: entered promiscuous mode [ 697.786892][ T821] bond_slave_0: entered promiscuous mode [ 697.796266][ T821] bond_slave_1: entered promiscuous mode [ 697.816398][ T5826] ldm_validate_partition_table(): Disk read failed. [ 697.861820][ T5826] Dev nbd7: unable to read RDB block 0 [ 697.883845][ T5826] nbd7: unable to read partition table [ 697.953461][ T5826] ldm_validate_partition_table(): Disk read failed. [ 697.978505][ T5826] Dev nbd7: unable to read RDB block 0 [ 697.987542][ T5826] nbd7: unable to read partition table [ 698.021715][ T826] block nbd8: Unsupported socket: should be TCP or UNIX. [ 698.091087][ T832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 698.098478][ T832] IPv6: NLM_F_CREATE should be set when creating new route [ 698.105876][ T832] IPv6: NLM_F_CREATE should be set when creating new route [ 698.113206][ T832] IPv6: NLM_F_CREATE should be set when creating new route [ 698.156392][ T832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.032982][ T881] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 699.046719][ T881] team0: Device ipvlan3 is already an upper device of the team interface [ 699.075018][ T883] xt_hashlimit: size too large, truncated to 1048576 [ 699.277892][ T889] tap0: tun_chr_ioctl cmd 1074025680 [ 699.869420][ T5831] block nbd8: Receive control failed (result -32) [ 699.871773][ T5838] block nbd8: Receive control failed (result -32) [ 699.970585][ T917] syzkaller1: tun_chr_ioctl cmd 35111 [ 699.978037][ T920] __nla_validate_parse: 4 callbacks suppressed [ 699.978057][ T920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12994'. [ 700.273115][ T950] netlink: 11 bytes leftover after parsing attributes in process `syz.1.13004'. [ 700.283231][ T950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13004'. [ 700.296577][ T951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.721979][ T5831] block nbd9: Receive control failed (result -32) [ 700.768845][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 700.778375][ T975] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13015'. [ 700.790155][ T5846] block nbd9: NBD_DISCONNECT [ 700.820583][ T5846] block nbd9: Send disconnect failed -32 [ 700.841283][ T5846] block nbd9: shutting down sockets [ 701.077052][ T5826] udevd[5826]: inotify_add_watch(7, /dev/nbd9, 10) failed: No such file or directory [ 701.608197][ T1009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13027'. [ 701.667741][ T1010] nbd: socks must be embedded in a SOCK_ITEM attr [ 701.683639][ T1010] block nbd10: shutting down sockets [ 702.195002][ T1028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13036'. [ 702.232603][ T1028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13036'. [ 703.544128][ T1093] netlink: 'syz.2.13060': attribute type 9 has an invalid length. [ 703.552665][ T1093] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13060'. [ 703.683845][ T1095] sctp: [Deprecated]: syz.2.13061 (pid 1095) Use of int in maxseg socket option. [ 703.683845][ T1095] Use struct sctp_assoc_value instead [ 704.010697][ T1103] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13064'. [ 704.302429][ T1119] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.13072'. [ 704.380165][ T1125] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 704.712702][ T1137] bond2: ARP target 9.0.0.0 is already present [ 704.730108][ T1137] bond2: option arp_ip_target: invalid value (9) [ 704.746086][ T1137] bond2 (unregistering): Released all slaves [ 705.424657][ T29] audit: type=1804 audit(1776940924.860:7): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13101" name="/newroot/2609/cgroup.controllers" dev="tmpfs" ino=13098 res=1 errno=0 [ 705.505877][ T29] audit: type=1800 audit(1776940924.860:8): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13101" name="cgroup.controllers" dev="tmpfs" ino=13098 res=0 errno=0 [ 705.945813][ T1213] netlink: 'syz.2.13113': attribute type 1 has an invalid length. [ 705.966092][ T1213] netlink: 'syz.2.13113': attribute type 2 has an invalid length. [ 705.977985][ T1213] netlink: 'syz.2.13113': attribute type 1 has an invalid length. [ 705.993165][ T1213] netlink: 'syz.2.13113': attribute type 3 has an invalid length. [ 706.016135][ T1213] __nla_validate_parse: 1 callbacks suppressed [ 706.016167][ T1213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13113'. [ 706.398474][ T1237] erspan0: entered promiscuous mode [ 707.200905][ T1278] netlink: 'syz.0.13146': attribute type 8 has an invalid length. [ 707.721999][ T1309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13158'. [ 708.169872][ T1320] block nbd10: server does not support multiple connections per device. [ 708.206183][ T1320] block nbd10: shutting down sockets [ 708.365298][ T1337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13171'. [ 708.388539][ T1337] netlink: 'syz.4.13171': attribute type 30 has an invalid length. [ 708.401114][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13171'. [ 709.302080][ T1384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13192'. [ 709.336175][ T1384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13192'. [ 710.184890][ T1431] [ 710.187307][ T1431] ====================================================== [ 710.194350][ T1431] WARNING: possible circular locking dependency detected [ 710.201458][ T1431] syzkaller #0 Not tainted [ 710.205899][ T1431] ------------------------------------------------------ [ 710.212935][ T1431] syz.1.13211/1431 is trying to acquire lock: [ 710.219021][ T1431] ffffffff8ea84780 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 710.228232][ T1431] [ 710.228232][ T1431] but task is already holding lock: [ 710.235608][ T1431] ffff88802571e538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 710.245135][ T1431] [ 710.245135][ T1431] which lock already depends on the new lock. [ 710.245135][ T1431] [ 710.255555][ T1431] [ 710.255555][ T1431] the existing dependency chain (in reverse order) is: [ 710.264588][ T1431] [ 710.264588][ T1431] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 710.272177][ T1431] __might_fault+0xcb/0x130 [ 710.277252][ T1431] _copy_from_user+0x28/0xb0 [ 710.282382][ T1431] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 710.288919][ T1431] ip_generic_getfrag+0x149/0x2d0 [ 710.294494][ T1431] __ip6_append_data+0x39e4/0x3f70 [ 710.300158][ T1431] ip6_append_data+0x10f/0x280 [ 710.305495][ T1431] rawv6_sendmsg+0x12d3/0x18e0 [ 710.310815][ T1431] ____sys_sendmsg+0x80a/0x9f0 [ 710.316125][ T1431] ___sys_sendmsg+0x2a5/0x360 [ 710.321347][ T1431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 710.326831][ T1431] do_syscall_64+0x15f/0xf80 [ 710.331966][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.338406][ T1431] [ 710.338406][ T1431] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 710.346166][ T1431] lock_sock_nested+0x41/0x100 [ 710.351476][ T1431] inet_shutdown+0x6a/0x390 [ 710.356519][ T1431] nbd_mark_nsock_dead+0x2e9/0x560 [ 710.362180][ T1431] sock_shutdown+0x15e/0x260 [ 710.367326][ T1431] nbd_clear_sock+0x24/0x170 [ 710.372457][ T1431] nbd_config_put+0x2dd/0x580 [ 710.377676][ T1431] nbd_genl_connect+0x19d5/0x1cf0 [ 710.383241][ T1431] genl_family_rcv_msg_doit+0x22a/0x330 [ 710.389340][ T1431] genl_rcv_msg+0x61c/0x7a0 [ 710.394390][ T1431] netlink_rcv_skb+0x232/0x4b0 [ 710.399703][ T1431] genl_rcv+0x28/0x40 [ 710.404228][ T1431] netlink_unicast+0x75c/0x8e0 [ 710.409553][ T1431] netlink_sendmsg+0x813/0xb40 [ 710.414876][ T1431] ____sys_sendmsg+0x972/0x9f0 [ 710.420190][ T1431] ___sys_sendmsg+0x2a5/0x360 [ 710.425417][ T1431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 710.430909][ T1431] do_syscall_64+0x15f/0xf80 [ 710.436047][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.442480][ T1431] [ 710.442480][ T1431] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 710.450151][ T1431] __mutex_lock+0x1a3/0x1550 [ 710.455289][ T1431] nbd_queue_rq+0x37b/0x1100 [ 710.460419][ T1431] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 710.466511][ T1431] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 710.473377][ T1431] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 710.479899][ T1431] blk_mq_run_hw_queue+0x348/0x4f0 [ 710.485560][ T1431] blk_mq_dispatch_list+0xd16/0xe10 [ 710.491294][ T1431] blk_mq_flush_plug_list+0x48d/0x570 [ 710.497211][ T1431] __blk_flush_plug+0x3ed/0x4d0 [ 710.502610][ T1431] __submit_bio+0x28d/0x580 [ 710.507662][ T1431] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 710.513832][ T1431] block_read_full_folio+0x599/0x830 [ 710.519660][ T1431] filemap_read_folio+0x137/0x3b0 [ 710.525229][ T1431] do_read_cache_folio+0x358/0x590 [ 710.530887][ T1431] read_part_sector+0xb6/0x2b0 [ 710.536195][ T1431] adfspart_check_ICS+0xb1/0x960 [ 710.541669][ T1431] bdev_disk_changed+0x817/0x1770 [ 710.547227][ T1431] blkdev_get_whole+0x380/0x510 [ 710.552614][ T1431] bdev_open+0x31e/0xd30 [ 710.557403][ T1431] blkdev_open+0x470/0x610 [ 710.562364][ T1431] do_dentry_open+0x785/0x14e0 [ 710.567664][ T1431] vfs_open+0x3b/0x340 [ 710.572273][ T1431] path_openat+0x2e08/0x3860 [ 710.577412][ T1431] do_file_open+0x23e/0x4a0 [ 710.582508][ T1431] do_sys_openat2+0x113/0x200 [ 710.587727][ T1431] __x64_sys_openat+0x138/0x170 [ 710.593121][ T1431] do_syscall_64+0x15f/0xf80 [ 710.598266][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.604696][ T1431] [ 710.604696][ T1431] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 710.611930][ T1431] __mutex_lock+0x1a3/0x1550 [ 710.617063][ T1431] nbd_queue_rq+0xc6/0x1100 [ 710.622104][ T1431] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 710.628187][ T1431] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 710.635058][ T1431] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 710.641575][ T1431] blk_mq_run_hw_queue+0x348/0x4f0 [ 710.647230][ T1431] blk_mq_dispatch_list+0xd16/0xe10 [ 710.652961][ T1431] blk_mq_flush_plug_list+0x48d/0x570 [ 710.658899][ T1431] __blk_flush_plug+0x3ed/0x4d0 [ 710.664294][ T1431] __submit_bio+0x28d/0x580 [ 710.669333][ T1431] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 710.675532][ T1431] block_read_full_folio+0x599/0x830 [ 710.681366][ T1431] filemap_read_folio+0x137/0x3b0 [ 710.686929][ T1431] do_read_cache_folio+0x358/0x590 [ 710.692579][ T1431] read_part_sector+0xb6/0x2b0 [ 710.697881][ T1431] adfspart_check_ICS+0xb1/0x960 [ 710.703356][ T1431] bdev_disk_changed+0x817/0x1770 [ 710.708934][ T1431] blkdev_get_whole+0x380/0x510 [ 710.714379][ T1431] bdev_open+0x31e/0xd30 [ 710.719176][ T1431] blkdev_open+0x470/0x610 [ 710.724145][ T1431] do_dentry_open+0x785/0x14e0 [ 710.729471][ T1431] vfs_open+0x3b/0x340 [ 710.734112][ T1431] path_openat+0x2e08/0x3860 [ 710.739255][ T1431] do_file_open+0x23e/0x4a0 [ 710.744320][ T1431] do_sys_openat2+0x113/0x200 [ 710.749538][ T1431] __x64_sys_openat+0x138/0x170 [ 710.754939][ T1431] do_syscall_64+0x15f/0xf80 [ 710.760119][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.766559][ T1431] [ 710.766559][ T1431] -> #3 (set->srcu){.+.+}-{0:0}: [ 710.773714][ T1431] __synchronize_srcu+0xca/0x300 [ 710.779198][ T1431] elevator_switch+0x1e8/0x7a0 [ 710.784505][ T1431] elevator_change+0x2cc/0x450 [ 710.789815][ T1431] elevator_set_default+0x36c/0x430 [ 710.795556][ T1431] blk_register_queue+0x3e9/0x4e0 [ 710.801122][ T1431] __add_disk+0x677/0xd50 [ 710.806004][ T1431] add_disk_fwnode+0xfb/0x480 [ 710.811230][ T1431] nbd_dev_add+0x72c/0xb50 [ 710.816193][ T1431] nbd_init+0x168/0x1f0 [ 710.820898][ T1431] do_one_initcall+0x250/0x870 [ 710.826234][ T1431] do_initcall_level+0x104/0x190 [ 710.831710][ T1431] do_initcalls+0x59/0xa0 [ 710.836607][ T1431] kernel_init_freeable+0x2a6/0x3e0 [ 710.842402][ T1431] kernel_init+0x1d/0x1d0 [ 710.847288][ T1431] ret_from_fork+0x514/0xb70 [ 710.852429][ T1431] ret_from_fork_asm+0x1a/0x30 [ 710.857777][ T1431] [ 710.857777][ T1431] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 710.865715][ T1431] __mutex_lock+0x1a3/0x1550 [ 710.870866][ T1431] elevator_change+0x1b3/0x450 [ 710.876166][ T1431] elevator_set_none+0xb5/0x140 [ 710.881563][ T1431] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 710.887914][ T1431] nbd_start_device+0x17f/0xb10 [ 710.893313][ T1431] nbd_genl_connect+0x165b/0x1cf0 [ 710.898880][ T1431] genl_family_rcv_msg_doit+0x22a/0x330 [ 710.904968][ T1431] genl_rcv_msg+0x61c/0x7a0 [ 710.910015][ T1431] netlink_rcv_skb+0x232/0x4b0 [ 710.915328][ T1431] genl_rcv+0x28/0x40 [ 710.919861][ T1431] netlink_unicast+0x75c/0x8e0 [ 710.925210][ T1431] netlink_sendmsg+0x813/0xb40 [ 710.930526][ T1431] ____sys_sendmsg+0x972/0x9f0 [ 710.935842][ T1431] ___sys_sendmsg+0x2a5/0x360 [ 710.941245][ T1431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 710.946734][ T1431] do_syscall_64+0x15f/0xf80 [ 710.951885][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.958325][ T1431] [ 710.958325][ T1431] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 710.966987][ T1431] blk_alloc_queue+0x546/0x680 [ 710.972335][ T1431] __blk_mq_alloc_disk+0x197/0x390 [ 710.978012][ T1431] nbd_dev_add+0x499/0xb50 [ 710.982986][ T1431] nbd_init+0x168/0x1f0 [ 710.987699][ T1431] do_one_initcall+0x250/0x870 [ 710.993013][ T1431] do_initcall_level+0x104/0x190 [ 710.998509][ T1431] do_initcalls+0x59/0xa0 [ 711.003401][ T1431] kernel_init_freeable+0x2a6/0x3e0 [ 711.009148][ T1431] kernel_init+0x1d/0x1d0 [ 711.014082][ T1431] ret_from_fork+0x514/0xb70 [ 711.019225][ T1431] ret_from_fork_asm+0x1a/0x30 [ 711.024541][ T1431] [ 711.024541][ T1431] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 711.031819][ T1431] __lock_acquire+0x15a5/0x2cf0 [ 711.037311][ T1431] lock_acquire+0x106/0x350 [ 711.042357][ T1431] fs_reclaim_acquire+0x71/0x100 [ 711.047833][ T1431] prepare_alloc_pages+0x152/0x650 [ 711.053501][ T1431] __alloc_frozen_pages_noprof+0x12f/0x380 [ 711.059850][ T1431] alloc_pages_mpol+0x232/0x4a0 [ 711.065253][ T1431] alloc_pages_noprof+0xa8/0x1a0 [ 711.070731][ T1431] __pud_alloc+0x3a/0x460 [ 711.075613][ T1431] handle_mm_fault+0x2040/0x3310 [ 711.081097][ T1431] do_user_addr_fault+0x75b/0x1340 [ 711.086777][ T1431] exc_page_fault+0x6a/0xc0 [ 711.091830][ T1431] asm_exc_page_fault+0x26/0x30 [ 711.097219][ T1431] rep_movs_alternative+0xf/0x90 [ 711.102704][ T1431] _copy_from_user+0x7a/0xb0 [ 711.107842][ T1431] vsock_connectible_setsockopt+0x467/0x7e0 [ 711.114298][ T1431] do_sock_setsockopt+0x17c/0x1b0 [ 711.119875][ T1431] __x64_sys_setsockopt+0x13d/0x1b0 [ 711.125671][ T1431] do_syscall_64+0x15f/0xf80 [ 711.130808][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.137243][ T1431] [ 711.137243][ T1431] other info that might help us debug this: [ 711.137243][ T1431] [ 711.147483][ T1431] Chain exists of: [ 711.147483][ T1431] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 711.147483][ T1431] [ 711.160110][ T1431] Possible unsafe locking scenario: [ 711.160110][ T1431] [ 711.167583][ T1431] CPU0 CPU1 [ 711.172963][ T1431] ---- ---- [ 711.178347][ T1431] rlock(&mm->mmap_lock); [ 711.182786][ T1431] lock(sk_lock-AF_INET6); [ 711.189831][ T1431] lock(&mm->mmap_lock); [ 711.196699][ T1431] lock(fs_reclaim); [ 711.200700][ T1431] [ 711.200700][ T1431] *** DEADLOCK *** [ 711.200700][ T1431] [ 711.208862][ T1431] 2 locks held by syz.1.13211/1431: [ 711.214078][ T1431] #0: ffff888058e78260 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_setsockopt+0x110/0x7e0 [ 711.224986][ T1431] #1: ffff88802571e538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 711.234967][ T1431] [ 711.234967][ T1431] stack backtrace: [ 711.240886][ T1431] CPU: 1 UID: 0 PID: 1431 Comm: syz.1.13211 Not tainted syzkaller #0 PREEMPT(full) [ 711.240909][ T1431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.240928][ T1431] Call Trace: [ 711.240937][ T1431] [ 711.240946][ T1431] dump_stack_lvl+0xe8/0x150 [ 711.240975][ T1431] print_circular_bug+0x2e1/0x300 [ 711.241008][ T1431] check_noncircular+0x12e/0x150 [ 711.241040][ T1431] __lock_acquire+0x15a5/0x2cf0 [ 711.241068][ T1431] ? do_raw_spin_lock+0x12b/0x2f0 [ 711.241093][ T1431] ? prepare_alloc_pages+0x152/0x650 [ 711.241110][ T1431] lock_acquire+0x106/0x350 [ 711.241132][ T1431] ? prepare_alloc_pages+0x152/0x650 [ 711.241163][ T1431] ? timerqueue_linked_add+0x287/0x2e0 [ 711.241193][ T1431] fs_reclaim_acquire+0x71/0x100 [ 711.241207][ T1431] ? prepare_alloc_pages+0x152/0x650 [ 711.241223][ T1431] prepare_alloc_pages+0x152/0x650 [ 711.241242][ T1431] __alloc_frozen_pages_noprof+0x12f/0x380 [ 711.241263][ T1431] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 711.241283][ T1431] ? __pfx_policy_nodemask+0x10/0x10 [ 711.241301][ T1431] ? __lock_acquire+0x6b5/0x2cf0 [ 711.241326][ T1431] alloc_pages_mpol+0x232/0x4a0 [ 711.241346][ T1431] alloc_pages_noprof+0xa8/0x1a0 [ 711.241365][ T1431] __pud_alloc+0x3a/0x460 [ 711.241389][ T1431] handle_mm_fault+0x2040/0x3310 [ 711.241414][ T1431] ? mt_find+0x186/0x630 [ 711.241435][ T1431] ? __pfx_mt_find+0x10/0x10 [ 711.241457][ T1431] ? handle_mm_fault+0xee/0x3310 [ 711.241482][ T1431] ? __pfx_handle_mm_fault+0x10/0x10 [ 711.241510][ T1431] ? __lock_acquire+0x6b5/0x2cf0 [ 711.241535][ T1431] ? lock_mm_and_find_vma+0xa7/0x340 [ 711.241562][ T1431] do_user_addr_fault+0x75b/0x1340 [ 711.241594][ T1431] exc_page_fault+0x6a/0xc0 [ 711.241615][ T1431] asm_exc_page_fault+0x26/0x30 [ 711.241635][ T1431] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 711.241664][ T1431] Code: c4 10 e9 d4 53 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 711.241679][ T1431] RSP: 0018:ffffc90005607d18 EFLAGS: 00050202 [ 711.241695][ T1431] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 711.241707][ T1431] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffc90005607dc0 [ 711.241720][ T1431] RBP: ffffc90005607e48 R08: 0000000000000003 R09: 0000000000000004 [ 711.241731][ T1431] R10: dffffc0000000000 R11: fffff52000ac0fb8 R12: dffffc0000000000 [ 711.241744][ T1431] R13: 1ffff92000ac0fb0 R14: ffffc90005607dc0 R15: 00002000000001c0 [ 711.241771][ T1431] _copy_from_user+0x7a/0xb0 [ 711.241789][ T1431] vsock_connectible_setsockopt+0x467/0x7e0 [ 711.241810][ T1431] ? __fget_files+0x2a/0x420 [ 711.241834][ T1431] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 711.241855][ T1431] ? __fget_files+0x2a/0x420 [ 711.241875][ T1431] ? aa_sock_opt_perm+0xff/0x1a0 [ 711.241900][ T1431] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 711.241927][ T1431] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 711.241948][ T1431] do_sock_setsockopt+0x17c/0x1b0 [ 711.241977][ T1431] __x64_sys_setsockopt+0x13d/0x1b0 [ 711.242003][ T1431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.242023][ T1431] do_syscall_64+0x15f/0xf80 [ 711.242043][ T1431] ? trace_irq_disable+0x3b/0x140 [ 711.242062][ T1431] ? clear_bhb_loop+0x40/0x90 [ 711.242082][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.242099][ T1431] RIP: 0033:0x7ff99139c819 [ 711.242119][ T1431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.242134][ T1431] RSP: 002b:00007ff9921e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 711.242151][ T1431] RAX: ffffffffffffffda RBX: 00007ff991615fa0 RCX: 00007ff99139c819 [ 711.242163][ T1431] RDX: 000000000000003c RSI: 0000000000000001 RDI: 0000000000000004 [ 711.242174][ T1431] RBP: 00007ff991432c91 R08: 0000000000000008 R09: 0000000000000000 [ 711.242185][ T1431] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 711.242196][ T1431] R13: 00007ff991616038 R14: 00007ff991615fa0 R15: 00007ffc3cbfaf08 [ 711.242216][ T1431]