last executing test programs: 5.30629893s ago: executing program 0 (id=13774): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x5, 0xd50, 0x560b0000, &(0x7f0000000740)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.059666734s ago: executing program 0 (id=13790): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) 3.850485891s ago: executing program 3 (id=13793): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20) close(0x3) 3.784807573s ago: executing program 2 (id=13794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 3.670743033s ago: executing program 0 (id=13795): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000dc0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xa8, 0x2, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x77}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfffffffffffffe36, 0x3, 0xbb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x9a, 0x3, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa0}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 3.664008533s ago: executing program 1 (id=13796): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f0000000400)={0x1c, 0x40002, 0x0, 0x0, 0x8, 0x5, 0x6a9}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) 3.657649148s ago: executing program 3 (id=13797): unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) close(r0) recvfrom(r1, 0x0, 0x0, 0x10100, 0x0, 0x0) 3.527403797s ago: executing program 2 (id=13798): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff09, 0x0) 3.445298152s ago: executing program 0 (id=13799): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xdd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) 3.413054758s ago: executing program 3 (id=13800): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x54, r2, 0x1, 0xffffffff, 0xfffffffe, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x2f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x54}}, 0x4000014) 3.314838707s ago: executing program 2 (id=13801): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.176130774s ago: executing program 3 (id=13802): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) 3.171247589s ago: executing program 0 (id=13803): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) shutdown(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) 3.029255274s ago: executing program 2 (id=13805): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg(r1, &(0x7f0000004900)={0x0, 0x0, 0x0}, 0x40012103) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 2.967827687s ago: executing program 0 (id=13807): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x7, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000001840)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001900)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.885192635s ago: executing program 3 (id=13808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 2.638995228s ago: executing program 1 (id=13810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2.273063813s ago: executing program 1 (id=13812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg2\x00'}) 2.039530851s ago: executing program 1 (id=13814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000006401010100000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000000000000000000010000000100000000000000000f0000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000008000000000fffffffffffffffffeffffff00"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast2, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x0, 0x20, 0x5c}, {0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x10000, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x9, 0x200000000000000, 0x4}, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x2c000014) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x4e24, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 1.792969278s ago: executing program 2 (id=13815): socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.791284023s ago: executing program 1 (id=13816): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xc, 0x0, &(0x7f0000000300)) 1.594439798s ago: executing program 2 (id=13817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x5c, 0x6}}]}, 0x34}}, 0x0) 1.589479262s ago: executing program 3 (id=13818): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000780)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000007c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1.528351857s ago: executing program 1 (id=13819): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000c80)=0x9, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000cc0)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d00)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000d40)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000d80)={0x11, 0x0, r1}, 0x14) 926.846754ms ago: executing program 4 (id=13821): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) 752.244273ms ago: executing program 4 (id=13822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x81010040) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001640)={r0, r2}) 568.928251ms ago: executing program 4 (id=13823): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) 373.843682ms ago: executing program 4 (id=13824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xc}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xa, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x38}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002400)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x16, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) 180.204264ms ago: executing program 4 (id=13825): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x4}}], 0x30, 0x8000}, 0x4000000) 0s ago: executing program 4 (id=13826): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="b4f9", 0x2}], 0x1}}], 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): tlink: 72 bytes leftover after parsing attributes in process `syz.4.6091'. [ 435.056921][T18527] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6093'. [ 435.749913][T18544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6100'. [ 435.750022][T18544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6100'. [ 436.534852][T18568] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.033994][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6124'. [ 437.826944][T18629] netlink: 'syz.0.6140': attribute type 4 has an invalid length. [ 438.500071][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'. [ 438.500488][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'. [ 438.504749][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'. [ 438.505035][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'. [ 438.619909][T18662] veth1_vlan: left promiscuous mode [ 438.667230][T18662] veth1_vlan: entered promiscuous mode [ 438.693764][T18662] veth1_macvtap: left promiscuous mode [ 438.697225][T18662] veth0_macvtap: left promiscuous mode [ 438.705695][T18662] veth0_macvtap: entered promiscuous mode [ 438.711055][T18662] veth1_macvtap: entered promiscuous mode [ 438.757688][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.766739][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.771078][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.776767][T18662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.848827][T18662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.143760][T18664] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.146886][ T102] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 439.161621][ T102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.161666][ T102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.161696][ T102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.161726][ T102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.218938][T18679] xt_bpf: check failed: parse error [ 439.505567][T18689] x_tables: duplicate underflow at hook 2 [ 439.744948][T18700] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 439.744976][T18700] netlink: 'syz.3.6175': attribute type 8 has an invalid length. [ 439.971090][T18705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.174851][T18706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.494453][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.142963][T18742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.098746][T18771] __nla_validate_parse: 88 callbacks suppressed [ 442.098767][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6209'. [ 442.126263][T18772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6210'. [ 442.881517][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 444.031913][T18838] xt_hashlimit: size too large, truncated to 1048576 [ 444.031937][T18838] xt_hashlimit: max too large, truncated to 1048576 [ 444.146146][T18847] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 445.397534][T18887] netlink: 'syz.0.6265': attribute type 1 has an invalid length. [ 445.397560][T18887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6265'. [ 445.519424][T18893] netlink: 'syz.3.6268': attribute type 3 has an invalid length. [ 445.519451][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6268'. [ 445.519471][T18893] netlink: 'syz.3.6268': attribute type 3 has an invalid length. [ 445.519484][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6268'. [ 445.705072][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6268'. [ 445.833045][T18903] bridge_slave_0: left allmulticast mode [ 445.834418][T18903] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.943091][T18911] netlink: 'syz.2.6278': attribute type 21 has an invalid length. [ 445.943115][T18911] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6278'. [ 446.131062][T18911] netlink: 'syz.2.6278': attribute type 4 has an invalid length. [ 446.131087][T18911] netlink: 'syz.2.6278': attribute type 5 has an invalid length. [ 446.131100][T18911] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6278'. [ 446.749130][T18927] xt_MASQUERADE: bad MAP_IPS. [ 447.324282][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6297'. [ 447.517224][T18960] netlink: 'syz.0.6301': attribute type 61 has an invalid length. [ 448.236072][T18987] netlink: 'syz.4.6315': attribute type 2 has an invalid length. [ 448.569739][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.571098][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.588147][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.589179][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.592395][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.593743][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.596809][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.611625][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.616940][T19004] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6322'. [ 448.743676][T19009] netlink: 'syz.4.6325': attribute type 13 has an invalid length. [ 450.222096][T19064] x_tables: duplicate entry at hook 4 [ 450.413312][T19071] openvswitch: netlink: Actions may not be safe on all matching packets [ 450.717208][T19079] dummy0: mtu less than device minimum [ 450.721656][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 451.219854][T19090] xt_limit: Overflow, try lower: 268435456/134217728 [ 452.634258][T19126] SET target dimension over the limit! [ 452.867630][T19132] netlink: 'syz.2.6387': attribute type 3 has an invalid length. [ 453.581724][T19160] netlink: 'syz.3.6400': attribute type 6 has an invalid length. [ 453.690712][T19167] __nla_validate_parse: 5 callbacks suppressed [ 453.690737][T19167] netlink: 440 bytes leftover after parsing attributes in process `syz.1.6405'. [ 454.055636][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6412'. [ 454.121197][T19186] netlink: 'syz.2.6415': attribute type 8 has an invalid length. [ 454.230748][T19188] netlink: 3568 bytes leftover after parsing attributes in process `syz.0.6414'. [ 454.471522][T19197] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 454.732010][T19210] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 455.028416][T19227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6433'. [ 455.195001][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6437'. [ 455.195032][T19234] netlink: 'syz.3.6437': attribute type 1 has an invalid length. [ 455.324129][T19238] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6440'. [ 455.636228][T19246] netlink: zone id is out of range [ 455.909705][T19253] netlink: 'syz.3.6447': attribute type 2 has an invalid length. [ 455.909730][T19253] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6447'. [ 456.032805][T19260] netlink: 'syz.0.6452': attribute type 62 has an invalid length. [ 456.096805][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6454'. [ 456.354306][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6458'. [ 456.778092][T19287] netlink: 'syz.4.6464': attribute type 3 has an invalid length. [ 456.778162][T19287] netlink: 'syz.4.6464': attribute type 3 has an invalid length. [ 456.778207][T19287] netlink: 'syz.4.6464': attribute type 3 has an invalid length. [ 456.778250][T19287] netlink: 'syz.4.6464': attribute type 3 has an invalid length. [ 457.326840][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6473'. [ 457.689995][T19309] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 457.714536][T19309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.742950][T19309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.776356][T19309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.797777][ T5750] s`z1: Port: 1 Link ACTIVE [ 457.824241][T19323] xt_TCPMSS: Only works on TCP SYN packets [ 458.069032][T19329] validate_nla: 32 callbacks suppressed [ 458.069059][T19329] netlink: 'syz.0.6484': attribute type 4 has an invalid length. [ 458.695917][T19357] netlink: 'syz.0.6499': attribute type 33 has an invalid length. [ 458.695943][T19357] __nla_validate_parse: 114 callbacks suppressed [ 458.695955][T19357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6499'. [ 460.149298][T19403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6522'. [ 460.154290][T19403] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 460.807739][T19425] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6532'. [ 460.819385][T19426] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 461.134746][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6537'. [ 461.734982][T19428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.735009][T19428] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 461.987833][T19428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.987861][T19428] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 462.083189][T19428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 462.083218][T19428] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 462.135316][T19428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 462.135342][T19428] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 462.599866][T19467] vti0: entered promiscuous mode [ 462.696076][T19479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6551'. [ 462.696112][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6551'. [ 463.027615][T19484] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6554'. [ 463.108485][T19489] netlink: 'syz.0.6557': attribute type 3 has an invalid length. [ 463.276145][T19493] netlink: 'syz.2.6558': attribute type 1 has an invalid length. [ 463.506296][T19501] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6561'. [ 464.220639][T19522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6570'. [ 464.584082][T19538] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 464.698777][T19541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.698798][T19541] IPv6: NLM_F_CREATE should be set when creating new route [ 465.023692][T19557] ¬0Ù: renamed from bond_slave_1 (while UP) [ 465.163056][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6586'. [ 465.447976][T19572] sit0: entered promiscuous mode [ 465.666786][T19572] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6591'. [ 466.081927][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 466.803593][T19629] netlink: 'syz.0.6612': attribute type 11 has an invalid length. [ 467.393264][T19653] IPv6: Can't replace route, no match found [ 467.860385][T19667] netlink: 'syz.2.6628': attribute type 1 has an invalid length. [ 469.720345][T19728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6650'. [ 469.828173][T19723] vti0: entered promiscuous mode [ 469.828200][T19723] vti0: entered allmulticast mode [ 471.289411][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6667'. [ 471.513543][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6673'. [ 471.687594][T19795] xt_SECMARK: invalid mode: 9 [ 472.567454][T19824] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 472.567708][T19824] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 472.685110][T19833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6690'. [ 473.270088][T19858] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6701'. [ 473.448511][T19862] bond7: entered promiscuous mode [ 473.448961][T19862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.728026][T19876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6708'. [ 474.174073][T19890] netlink: 'syz.4.6715': attribute type 10 has an invalid length. [ 474.890353][T19906] dummy0: entered allmulticast mode [ 474.891009][T19904] dummy0: left allmulticast mode [ 475.009417][T19915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.797143][T19947] xt_bpf: check failed: parse error [ 476.489565][T19971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6755'. [ 476.489599][T19971] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 478.325170][T20043] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6790'. [ 478.325201][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6790'. [ 478.471528][T20047] netlink: 'syz.4.6792': attribute type 1 has an invalid length. [ 478.758931][T20053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.447723][T20078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6807'. [ 479.447752][T20078] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6807'. [ 479.447767][T20078] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6807'. [ 479.675551][T20083] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6810'. [ 479.675592][T20083] netlink: 336 bytes leftover after parsing attributes in process `syz.2.6810'. [ 479.675607][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6810'. [ 479.719724][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6811'. [ 479.761207][T20085] bond7: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 479.883756][T20085] bond7 (unregistering): Released all slaves [ 481.631275][T20151] __nla_validate_parse: 2 callbacks suppressed [ 481.631299][T20151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6843'. [ 481.866796][T20161] gre1: entered allmulticast mode [ 481.953239][T20166] wg2 speed is unknown, defaulting to 1000 [ 481.953423][T20166] wg2 speed is unknown, defaulting to 1000 [ 481.954231][T20166] wg2 speed is unknown, defaulting to 1000 [ 481.959246][T20166] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 481.959285][T20166] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 481.959324][T20166] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 482.067378][T20170] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6852'. [ 482.123816][T20166] wg2 speed is unknown, defaulting to 1000 [ 482.139334][T20166] wg2 speed is unknown, defaulting to 1000 [ 482.149231][T20166] wg2 speed is unknown, defaulting to 1000 [ 482.178595][T20166] wg2 speed is unknown, defaulting to 1000 [ 482.196489][T20166] wg2 speed is unknown, defaulting to 1000 [ 482.309560][T20175] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6854'. [ 482.646875][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6862'. [ 482.664835][T20191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6861'. [ 483.457672][T20219] netlink: 642 bytes leftover after parsing attributes in process `syz.2.6876'. [ 483.697813][T20227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6880'. [ 483.698127][T20227] unsupported nlmsg_type 40 [ 484.602852][T20263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6897'. [ 484.602987][T20263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6897'. [ 485.022538][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6904'. [ 485.046897][T20279] Cannot find add_set index 2 as target [ 485.169395][T20282] netlink: 'syz.1.6906': attribute type 3 has an invalid length. [ 485.433602][T20291] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 485.717282][T20303] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 486.012124][T20313] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 486.913409][T20343] __nla_validate_parse: 3 callbacks suppressed [ 486.913433][T20343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6936'. [ 487.514053][T20364] ip6gre2: entered promiscuous mode [ 487.514078][T20364] ip6gre2: entered allmulticast mode [ 488.107042][T20383] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 488.414811][T20373] ip6tnl0: left promiscuous mode [ 488.916527][T20395] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6962'. [ 489.100672][T20373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.116762][T20373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.137558][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6964'. [ 489.163167][T20373] vlan0: left promiscuous mode [ 489.177926][T20373] veth3: left promiscuous mode [ 489.201161][T20373] veth4: left allmulticast mode [ 489.213992][T20373] bond5: left promiscuous mode [ 489.214017][T20373] bond5: left allmulticast mode [ 489.216341][T20373] gre1: left promiscuous mode [ 489.216360][T20373] gre1: left allmulticast mode [ 489.234294][T20373] geneve4: left promiscuous mode [ 489.234316][T20373] geneve4: left allmulticast mode [ 489.237655][T20373] ip6erspan0: left allmulticast mode [ 489.240055][T20373] geneve5: left promiscuous mode [ 489.240624][T20373] gtp1: left promiscuous mode [ 489.240640][T20373] gtp1: left allmulticast mode [ 489.249121][T20373] vti0: left promiscuous mode [ 489.256553][T20379] netlink: 279 bytes leftover after parsing attributes in process `syz.1.6954'. [ 489.271792][ T38] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 256 - 0 [ 489.271824][ T38] netdevsim netdevsim4 €Â: unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.271864][ T38] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 489.271887][ T38] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.271922][ T38] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 489.271944][ T38] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.271976][ T38] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 489.271998][ T38] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 489.582763][T20406] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6967'. [ 489.669918][T20411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6969'. [ 489.894307][T20416] netlink: 'syz.2.6972': attribute type 1 has an invalid length. [ 489.894331][T20416] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6972'. [ 490.806801][T20442] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 490.806907][T20442] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 490.807069][T20442] veth1_virt_wifi: entered allmulticast mode [ 490.815289][T20442] veth1_virt_wifi: left allmulticast mode [ 490.959219][T20444] SET target dimension over the limit! [ 491.096850][T20447] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 491.306525][ T30] audit: type=1107 audit(1793501936.705:4): pid=20450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 491.578271][T20460] netlink: 'syz.0.6992': attribute type 1 has an invalid length. [ 491.578298][T20460] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6992'. [ 492.666754][T20495] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 493.043450][T20506] sctp: [Deprecated]: syz.0.7013 (pid 20506) Use of int in max_burst socket option deprecated. [ 493.043450][T20506] Use struct sctp_assoc_value instead [ 493.566772][T20527] netlink: 424 bytes leftover after parsing attributes in process `syz.2.7024'. [ 493.566809][T20527] netlink: 424 bytes leftover after parsing attributes in process `syz.2.7024'. [ 493.613598][T20531] sock: sock_timestamping_bind_phc: sock not bind to device [ 493.626580][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7027'. [ 493.846937][T20538] x_tables: duplicate underflow at hook 3 [ 494.304074][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7037'. [ 494.304110][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7037'. [ 494.304125][T20553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7037'. [ 494.767346][T20568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7045'. [ 494.767404][T20568] netlink: 'syz.2.7045': attribute type 5 has an invalid length. [ 495.217615][T20587] netlink: 'syz.3.7053': attribute type 11 has an invalid length. [ 495.240549][T20589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7055'. [ 495.616040][T20602] xt_socket: unknown flags 0x8 [ 495.619798][T20604] Cannot find set identified by id 65534 to match [ 495.641840][T20605] ip6t_hbh: unknown flags AD [ 495.723728][T20608] netlink: 'syz.0.7064': attribute type 21 has an invalid length. [ 495.723795][T20608] netlink: 'syz.0.7064': attribute type 6 has an invalid length. [ 495.723810][T20608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7064'. [ 495.999648][T20618] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7069'. [ 496.027880][T20619] openvswitch: netlink: Multiple metadata blocks provided [ 496.117685][T20622] netlink: 'syz.4.7071': attribute type 7 has an invalid length. [ 496.802215][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 498.088643][T20690] netlink: 'syz.3.7105': attribute type 70 has an invalid length. [ 498.507178][T20702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.911122][T20721] netlink: 'syz.4.7121': attribute type 4 has an invalid length. [ 498.911148][T20721] __nla_validate_parse: 4 callbacks suppressed [ 498.911160][T20721] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7121'. [ 498.927792][T20721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 499.491844][T20743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7132'. [ 499.850034][T20757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7139'. [ 501.926457][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.113835][T20847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7183'. [ 502.204745][T20855] netlink: 'syz.0.7185': attribute type 1 has an invalid length. [ 502.204771][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7185'. [ 502.371989][T20857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7187'. [ 502.372038][T20857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7187'. [ 502.415344][T20861] netlink: 'syz.3.7189': attribute type 1 has an invalid length. [ 502.415367][T20861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7189'. [ 502.674472][T20872] netlink: 'syz.3.7193': attribute type 1 has an invalid length. [ 502.674497][T20872] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7193'. [ 503.192611][T20891] netlink: 'syz.0.7203': attribute type 4 has an invalid length. [ 503.192637][T20891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7203'. [ 503.228160][T20893] netlink: 'syz.2.7204': attribute type 3 has an invalid length. [ 503.506236][T20905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.733479][T20914] netlink: 'syz.2.7214': attribute type 30 has an invalid length. [ 503.954123][T20920] __nla_validate_parse: 4 callbacks suppressed [ 503.954148][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7217'. [ 503.954165][T20920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7217'. [ 503.954178][T20920] tc_dump_action: action bad kind [ 504.012348][T20922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7218'. [ 504.375623][T20939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7227'. [ 504.508001][T20942] openvswitch: netlink: Multiple metadata blocks provided [ 505.174632][T20970] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7242'. [ 505.203694][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7245'. [ 505.608306][T20990] sit0: entered promiscuous mode [ 505.626191][T20990] netlink: 'syz.0.7252': attribute type 1 has an invalid length. [ 505.626216][T20990] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7252'. [ 506.545073][T21030] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 [ 507.038956][T21050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7282'. [ 507.145644][T21054] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.7284'. [ 507.145830][T21054] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 507.178184][T21054] 0ªX¹¦Dö»: entered allmulticast mode [ 507.264315][T21058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 507.412901][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7288'. [ 507.648414][T21066] x_tables: ip_tables: osf match: only valid for protocol 6 [ 507.822638][T21077] Bluetooth: MGMT ver 1.23 [ 507.822775][T21077] Bluetooth: hci0: unsupported parameter 5134 [ 507.822793][T21077] Bluetooth: hci0: unsupported parameter 8192 [ 507.822824][T21077] Bluetooth: hci0: unsupported parameter 5134 [ 507.822837][T21077] Bluetooth: hci0: unsupported parameter 8192 [ 508.986047][T21117] netlink: 'syz.2.7315': attribute type 1 has an invalid length. [ 508.986072][T21117] __nla_validate_parse: 5 callbacks suppressed [ 508.986085][T21117] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7315'. [ 508.986150][T21117] netlink: 'syz.2.7315': attribute type 1 has an invalid length. [ 508.986165][T21117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7315'. [ 510.752627][T21188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7349'. [ 510.975756][T21196] Unsupported ieee802154 address type: 0 [ 510.988800][T21196] Unsupported ieee802154 address type: 0 [ 512.743110][T21248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7378'. [ 513.035785][T21258] sctp: [Deprecated]: syz.1.7383 (pid 21258) Use of int in max_burst socket option. [ 513.035785][T21258] Use struct sctp_assoc_value instead [ 513.207287][T21263] netlink: 'syz.0.7385': attribute type 4 has an invalid length. [ 513.464854][T21271] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7388'. [ 513.465367][T21271] netlink: get zone limit has 4 unknown bytes [ 513.603002][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7391'. [ 513.603039][T21274] block nbd0: not configured, cannot reconfigure [ 514.942979][T21316] netlink: 268 bytes leftover after parsing attributes in process `syz.3.7407'. [ 514.943045][T21316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7407'. [ 516.331162][T21362] ip_tables: iptables: counters copy to user failed while replacing table [ 516.585161][T21373] Zero length message leads to an empty skb [ 516.619481][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7435'. [ 516.619798][T21375] vlan2: entered promiscuous mode [ 516.619817][T21375] bridge0: entered promiscuous mode [ 516.828468][T21386] Bluetooth: hci0: unsupported parameter 5161 [ 516.828492][T21386] Bluetooth: hci0: unsupported parameter 8192 [ 516.829899][T21386] Bluetooth: hci0: unsupported parameter 5161 [ 516.829918][T21386] Bluetooth: hci0: unsupported parameter 8192 [ 517.060533][T21392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7445'. [ 517.659734][T21409] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7455'. [ 518.712588][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7467'. [ 518.712629][T21438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7467'. [ 518.712645][T21438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7467'. [ 520.345974][T21477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7484'. [ 520.689920][T21492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7491'. [ 522.080855][T21534] tipc: Started in network mode [ 522.080891][T21534] tipc: Node identity 01000001, cluster identity 5 [ 522.994889][T21567] netlink: 'syz.3.7525': attribute type 6 has an invalid length. [ 522.994914][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7525'. [ 524.010248][T21590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7535'. [ 525.091067][T21619] ip_tables: iptables: counters copy to user failed while replacing table [ 525.405384][T21628] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7554'. [ 525.405415][T21628] netlink: 'syz.1.7554': attribute type 1 has an invalid length. [ 525.612386][T21630] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7553'. [ 525.996178][T21636] macsec1: entered promiscuous mode [ 526.323476][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7563'. [ 526.887289][T21675] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 527.312776][T21692] Bluetooth: MGMT ver 1.23 [ 528.449360][T21712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7594'. [ 528.562054][T21716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7596'. [ 528.785707][T21724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7599'. [ 528.892546][T21733] Bluetooth: hci0: unsupported parameter 5135 [ 528.892573][T21733] Bluetooth: hci0: invalid len left 9, exp >= 19 [ 530.604280][T21777] netlink: 'syz.2.7625': attribute type 3 has an invalid length. [ 531.160337][T21802] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7638'. [ 531.182259][T21802] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7638'. [ 531.219764][T21805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7640'. [ 531.433236][T21812] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7643'. [ 532.687384][T21845] ip6tnl2: entered promiscuous mode [ 532.876913][T21847] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7660'. [ 533.426412][T21872] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7672'. [ 533.459896][T21876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7673'. [ 535.189224][T21943] Bluetooth: MGMT ver 1.23 [ 535.822471][T21972] Bluetooth: hci0: unsupported parameter 5134 [ 535.822495][T21972] Bluetooth: hci0: unsupported parameter 8192 [ 535.822508][T21972] Bluetooth: hci0: unsupported parameter 5134 [ 535.822521][T21972] Bluetooth: hci0: unsupported parameter 8192 [ 537.588767][T22004] udevd[22004]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 537.655353][T22014] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 538.095954][T22030] tipc: Started in network mode [ 538.095989][T22030] tipc: Node identity ac141441, cluster identity 4711 [ 538.119122][T22030] tipc: Enabled bearer , priority 10 [ 538.257924][T22035] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 539.118234][T22067] netlink: 'syz.4.7762': attribute type 8 has an invalid length. [ 539.223046][T10636] tipc: Node number set to 2886997057 [ 539.455193][T22081] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.974266][T22095] Unsupported ieee802154 address type: 0 [ 540.366622][T22106] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7781'. [ 541.429673][T22154] ip_tables: iptables: counters copy to user failed while replacing table [ 541.844691][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7813'. [ 542.094038][T22182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7818'. [ 542.094076][T22182] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7818'. [ 542.094092][T22182] netlink: 'syz.1.7818': attribute type 5 has an invalid length. [ 542.094106][T22182] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7818'. [ 542.856105][T22210] macsec1: entered promiscuous mode [ 542.856134][T22210] team0: entered promiscuous mode [ 542.856148][T22210] team_slave_0: entered promiscuous mode [ 542.856397][T22210] team_slave_1: entered promiscuous mode [ 542.856604][T22210] dummy0: entered promiscuous mode [ 542.857407][T22210] macsec1: entered allmulticast mode [ 542.857423][T22210] team0: entered allmulticast mode [ 542.857447][T22210] team_slave_0: entered allmulticast mode [ 542.857463][T22210] team_slave_1: entered allmulticast mode [ 542.857478][T22210] dummy0: entered allmulticast mode [ 542.929773][T22210] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 542.930473][T22210] team0: Device macsec1 is already an upper device of the team interface [ 542.957042][T22210] team0: left allmulticast mode [ 542.957069][T22210] team_slave_0: left allmulticast mode [ 542.957087][T22210] team_slave_1: left allmulticast mode [ 542.957105][T22210] dummy0: left allmulticast mode [ 542.957237][T22210] team0: left promiscuous mode [ 543.045160][T10636] team_slave_0: left promiscuous mode [ 543.045189][T10636] team_slave_1: left promiscuous mode [ 543.045338][T10636] dummy0: left promiscuous mode [ 547.730933][T22354] macvtap1: entered promiscuous mode [ 548.186003][T22369] IPVS: Error connecting to the multicast addr [ 548.536166][T22378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7911'. [ 548.738553][T22387] netlink: 'syz.4.7915': attribute type 3 has an invalid length. [ 548.939169][T22395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7918'. [ 549.200868][T22409] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 549.505299][T22422] netlink: 'syz.0.7931': attribute type 10 has an invalid length. [ 549.590285][T22422] team0: Port device dummy0 added [ 550.097616][T22450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7944'. [ 550.939509][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7957'. [ 551.341304][T22484] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7960'. [ 551.484116][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7964'. [ 551.484149][T22490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7964'. [ 552.258270][T22519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7976'. [ 553.677460][T22562] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7995'. [ 553.677487][T22562] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7995'. [ 555.287027][T22611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8019'. [ 555.314586][T22611] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 555.808337][T22633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8029'. [ 555.840365][T22634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8030'. [ 556.494585][T22655] netlink: 4380 bytes leftover after parsing attributes in process `syz.0.8040'. [ 556.494619][T22655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8040'. [ 556.572204][T22659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8041'. [ 556.608444][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8043'. [ 556.608885][T22661] xt_cgroup: path and classid specified [ 557.273492][T22681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8053'. [ 558.242405][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 559.612953][T22740] ip_tables: iptables: counters copy to user failed while replacing table [ 559.845945][T22745] __nla_validate_parse: 3 callbacks suppressed [ 559.845968][T22745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8084'. [ 559.846080][T22745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8084'. [ 560.254976][T22753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8088'. [ 560.537457][T22759] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 561.124370][T22772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.280516][T22775] smc: net device lo applied user defined pnetid SYZ0 [ 562.773177][T22816] ip_tables: iptables: counters copy to user failed while replacing table [ 563.366385][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.973401][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.322933][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.132117][T22945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8177'. [ 567.514865][T22949] sctp: [Deprecated]: syz.3.8178 (pid 22949) Use of int in max_burst socket option. [ 567.514865][T22949] Use struct sctp_assoc_value instead [ 568.348015][T22965] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8186'. [ 569.893249][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8200'. [ 571.959741][T23041] netlink: 'syz.2.8223': attribute type 1 has an invalid length. [ 572.595392][T23064] netlink: 'syz.3.8234': attribute type 4 has an invalid length. [ 572.948409][T23079] netlink: 'syz.0.8242': attribute type 4 has an invalid length. [ 573.111597][T23086] netlink: 'syz.0.8246': attribute type 1 has an invalid length. [ 573.174875][T23088] tipc: Enabling of bearer rejected, failed to enable media [ 574.230058][T23117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8260'. [ 575.079378][T23142] netlink: 332 bytes leftover after parsing attributes in process `syz.3.8272'. [ 575.079443][T23142] netlink: 'syz.3.8272': attribute type 9 has an invalid length. [ 575.079459][T23142] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8272'. [ 575.079474][T23142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8272'. [ 575.087927][T23146] netlink: 'syz.2.8274': attribute type 18 has an invalid length. [ 575.153458][ T62] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.153512][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.153548][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.153583][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.443572][T23190] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 577.452907][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8318'. [ 578.557998][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8333'. [ 578.558024][T23273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8333'. [ 578.558051][T23273] netlink: 'syz.1.8333': attribute type 13 has an invalid length. [ 578.677021][T23264] udevd[23264]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 579.210080][T23288] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 582.502729][T23399] sch_fq: defrate 65536 ignored. [ 583.729518][T23438] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8412'. [ 584.036885][T23454] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8420'. [ 584.423796][T23469] veth0_to_bond: entered allmulticast mode [ 585.004955][T23487] IPVS: Scheduler module ip_vs_mh not found [ 585.005357][T23489] IPVS: length: 4096 != 24 [ 585.266955][T23500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.864129][T23514] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 585.864160][T23514] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 586.171468][T23525] netlink: 'syz.2.8452': attribute type 11 has an invalid length. [ 587.241153][T23545] sctp: [Deprecated]: syz.1.8462 (pid 23545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.241153][T23545] Use struct sctp_sack_info instead [ 587.282880][T23545] sctp: [Deprecated]: syz.1.8462 (pid 23545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.282880][T23545] Use struct sctp_sack_info instead [ 587.378691][ T62] IPVS: starting estimator thread 0... [ 587.463492][T23555] IPVS: using max 23 ests per chain, 55200 per kthread [ 587.740875][T23567] Bluetooth: MGMT ver 1.23 [ 587.807243][T23571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8474'. [ 588.165712][T23584] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 588.222599][T23587] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 588.259702][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8485'. [ 588.295865][T23591] macsec1: entered promiscuous mode [ 588.603802][ T62] IPVS: starting estimator thread 0... [ 588.694674][T23606] IPVS: using max 31 ests per chain, 74400 per kthread [ 588.921319][T23615] ip_tables: iptables: counters copy to user failed while replacing table [ 589.054445][T23620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8498'. [ 589.299603][T23630] netlink: 43 bytes leftover after parsing attributes in process `syz.0.8503'. [ 589.299634][T23630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8503'. [ 589.299653][T23630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8503'. [ 589.408789][T23639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8507'. [ 589.424644][T23636] netlink: 'syz.4.8506': attribute type 10 has an invalid length. [ 589.505502][T23636] netlink: 'syz.4.8506': attribute type 10 has an invalid length. [ 590.361798][T23665] ip_tables: iptables: counters copy to user failed while replacing table [ 590.560530][T23672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8523'. [ 592.420131][T23722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8546'. [ 592.693439][T23729] sctp: [Deprecated]: syz.4.8550 (pid 23729) Use of int in max_burst socket option. [ 592.693439][T23729] Use struct sctp_assoc_value instead [ 592.999398][T23738] netlink: 'syz.1.8553': attribute type 10 has an invalid length. [ 593.052513][T23741] netlink: 'syz.1.8553': attribute type 10 has an invalid length. [ 593.158368][T23741] team0: Port device dummy0 removed [ 594.081465][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.309383][T23784] netlink: 'syz.3.8575': attribute type 5 has an invalid length. [ 595.059288][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8588'. [ 595.087806][T23821] vlan2: entered promiscuous mode [ 595.087832][T23821] bridge0: entered promiscuous mode [ 595.269418][T23828] netlink: 'syz.3.8591': attribute type 10 has an invalid length. [ 595.322627][T23832] netlink: 'syz.3.8591': attribute type 10 has an invalid length. [ 595.500408][T23828] team0: Port device dummy0 added [ 595.570993][T23832] team0: Port device dummy0 removed [ 595.886781][T23841] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 595.969797][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8600'. [ 595.994107][T23846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8600'. [ 596.945754][T23871] netlink: 'syz.2.8610': attribute type 10 has an invalid length. [ 596.983890][T23871] team0: Port device dummy0 added [ 596.999470][T23871] netlink: 'syz.2.8610': attribute type 10 has an invalid length. [ 597.089267][T23871] team0: Port device dummy0 removed [ 600.219123][T23954] ipvlan2: entered promiscuous mode [ 600.234961][T23954] bridge0: port 1(ipvlan2) entered blocking state [ 600.235178][T23954] bridge0: port 1(ipvlan2) entered disabled state [ 600.235406][T23954] ipvlan2: entered allmulticast mode [ 600.235424][T23954] bridge0: entered allmulticast mode [ 600.271977][T23954] ipvlan2: left allmulticast mode [ 600.272001][T23954] bridge0: left allmulticast mode [ 600.395655][T23962] xt_hashlimit: overflow, try lower: 0/0 [ 601.200648][T23987] atomic_op ffff8880137de1e0 conn xmit_atomic 0000000000000000 [ 601.504094][T23995] netlink: 'syz.0.8669': attribute type 10 has an invalid length. [ 601.555616][T23995] netlink: 'syz.0.8669': attribute type 10 has an invalid length. [ 601.696427][T23995] team0: Port device dummy0 removed [ 601.849909][T24007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8674'. [ 602.156942][T24017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8678'. [ 602.619291][T24034] netlink: 'syz.1.8688': attribute type 1 has an invalid length. [ 603.128055][T24055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8696'. [ 603.128171][T24055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8696'. [ 603.128185][T24055] tipc: Invalid UDP bearer configuration [ 603.128230][T24055] tipc: Enabling of bearer rejected, failed to enable media [ 603.460038][T24060] ip6gretap3: entered allmulticast mode [ 603.511737][T24060] batman_adv: batadv0: Adding interface: ip6gretap3 [ 603.511765][T24060] batman_adv: batadv0: Interface activated: ip6gretap3 [ 604.276420][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8712'. [ 604.782407][T24099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8720'. [ 605.114267][T24110] netlink: 'syz.2.8726': attribute type 5 has an invalid length. [ 605.369399][T24118] netlink: 'syz.4.8729': attribute type 1 has an invalid length. [ 605.369424][T24118] netlink: 'syz.4.8729': attribute type 2 has an invalid length. [ 605.369437][T24118] netlink: 'syz.4.8729': attribute type 3 has an invalid length. [ 605.369449][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8729'. [ 605.957621][T24135] ±ÿ†ˆ¬hËdtÍ: renamed from lo [ 605.980278][T24128] IPVS: Scheduler module ip_vs_mh not found [ 607.375354][T24184] team0: entered promiscuous mode [ 607.375381][T24184] team_slave_0: entered promiscuous mode [ 607.375638][T24184] team_slave_1: entered promiscuous mode [ 607.375969][T24184] team0: entered allmulticast mode [ 607.375984][T24184] team_slave_0: entered allmulticast mode [ 607.376000][T24184] team_slave_1: entered allmulticast mode [ 607.376910][T24184] team0: Cannot enslave team device to itself [ 608.029236][T24208] ipvlan2: entered promiscuous mode [ 608.038068][T24208] bridge0: port 1(ipvlan2) entered blocking state [ 608.040560][T24208] bridge0: port 1(ipvlan2) entered disabled state [ 608.040712][T24208] ipvlan2: entered allmulticast mode [ 608.040729][T24208] bridge0: entered allmulticast mode [ 608.063825][T24208] ipvlan2: left allmulticast mode [ 608.063848][T24208] bridge0: left allmulticast mode [ 608.485949][T24223] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8777'. [ 609.201796][T24250] tipc: Enabling not permitted [ 609.201885][T24250] tipc: Enabling of bearer rejected, failed to enable media [ 610.017987][T24272] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 610.109185][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8802'. [ 610.290555][T24281] tipc: Enabling of bearer rejected, failed to enable media [ 610.631718][T24291] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 610.633683][T24291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.633885][T24293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8810'. [ 610.879799][T24296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8812'. [ 611.131170][T24303] pim6reg: entered allmulticast mode [ 611.615475][T24325] macvlan2: entered allmulticast mode [ 611.615502][T24325] bridge0: entered allmulticast mode [ 612.496318][T24356] ip_tables: iptables: counters copy to user failed while replacing table [ 613.041844][T24378] ipvlan3: entered promiscuous mode [ 613.056072][T24378] bridge0: port 1(ipvlan3) entered blocking state [ 613.056258][T24378] bridge0: port 1(ipvlan3) entered disabled state [ 613.056412][T24378] ipvlan3: entered allmulticast mode [ 613.056429][T24378] bridge0: entered allmulticast mode [ 613.068899][T24378] ipvlan3: left allmulticast mode [ 613.068921][T24378] bridge0: left allmulticast mode [ 613.615099][T24393] netlink: 'syz.0.8856': attribute type 1 has an invalid length. [ 614.314984][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8870'. [ 614.958121][T24433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8876'. [ 614.958153][T24433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8876'. [ 615.652140][T24457] ip_tables: iptables: counters copy to user failed while replacing table [ 615.787172][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8891'. [ 617.406218][T24519] Dead loop on virtual device ip6_vti0 (net 37), fix it urgently! [ 617.597627][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8921'. [ 618.197943][T24543] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8931'. [ 618.366152][T24548] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8933'. [ 618.386041][T24549] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8934'. [ 618.819524][T24561] veth1_to_team: entered promiscuous mode [ 618.834925][T24561] veth1_to_team: left promiscuous mode [ 619.188578][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8947'. [ 621.007122][T24616] sctp: [Deprecated]: syz.2.8965 (pid 24616) Use of int in max_burst socket option. [ 621.007122][T24616] Use struct sctp_assoc_value instead [ 621.628555][T24640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8979'. [ 622.711559][T24680] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8991'. [ 622.711592][T24680] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8991'. [ 622.711609][T24680] netlink: 'syz.3.8991': attribute type 6 has an invalid length. [ 622.711623][T24680] netlink: 'syz.3.8991': attribute type 5 has an invalid length. [ 622.711635][T24680] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8991'. [ 623.679445][T24710] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9004'. [ 623.963644][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9010'. [ 624.807195][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.898376][T24750] tipc: Started in network mode [ 624.898412][T24750] tipc: Node identity e0000002, cluster identity 4711 [ 624.898468][T24750] tipc: Enabling of bearer rejected, failed to enable media [ 625.338064][T24771] smc: net device lo erased user defined pnetid SYZ0 [ 626.120051][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9038'. [ 626.279867][T24803] Bluetooth: hci0: unsupported parameter 5135 [ 626.279892][T24803] Bluetooth: hci0: unsupported parameter 8192 [ 626.279905][T24803] Bluetooth: hci0: unsupported parameter 5135 [ 626.279917][T24803] Bluetooth: hci0: unsupported parameter 8192 [ 626.522060][T24810] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 627.372323][T24849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9064'. [ 627.372349][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9064'. [ 627.372423][T24849] netlink: 'syz.3.9064': attribute type 12 has an invalid length. [ 627.372438][T24849] netlink: 'syz.3.9064': attribute type 11 has an invalid length. [ 627.408762][T24848] raw_sendmsg: syz.2.9063 forgot to set AF_INET. Fix it! [ 627.702035][T24858] sctp: [Deprecated]: syz.1.9066 (pid 24858) Use of int in max_burst socket option deprecated. [ 627.702035][T24858] Use struct sctp_assoc_value instead [ 627.749883][T24862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9070'. [ 627.993852][T24869] vlan3: entered promiscuous mode [ 627.993877][T24869] bond0: entered promiscuous mode [ 627.993891][T24869] bond_slave_0: entered promiscuous mode [ 628.794645][T24888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9081'. [ 629.679666][T24916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9094'. [ 633.149111][T25037] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536 [ 633.410043][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9158'. [ 633.680919][T25058] netlink: 264 bytes leftover after parsing attributes in process `syz.1.9162'. [ 635.061888][T25116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9190'. [ 636.729801][T25161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9210'. [ 637.819503][T25204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9231'. [ 638.546637][T25234] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9245'. [ 639.334817][T25252] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 639.979825][T25277] netlink: 280 bytes leftover after parsing attributes in process `syz.3.9265'. [ 640.443597][T25297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9273'. [ 640.443632][T25297] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 640.935651][T25312] tipc: MTU too low for tipc bearer [ 641.084118][T25319] Bluetooth: hci0: unsupported parameter 1280 [ 641.084145][T25319] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 641.936432][T25336] tipc: Started in network mode [ 641.936467][T25336] tipc: Node identity 00000000000000000300000000000001, cluster identity 4711 [ 641.936525][T25336] tipc: Enabling of bearer rejected, failed to enable media [ 642.351940][T25353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9300'. [ 643.252679][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9313'. [ 643.262287][T25384] netlink: 15 bytes leftover after parsing attributes in process `syz.1.9315'. [ 643.936436][T25403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9324'. [ 644.227017][T25410] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9327'. [ 644.227046][T25410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9327'. [ 644.227060][T25410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9327'. [ 644.429709][T25415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9330'. [ 644.954599][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9338'. [ 645.018336][T25432] bond7: option broadcast_neighbor: invalid value (4) [ 645.033435][T25432] bond7 (unregistering): Released all slaves [ 645.286636][T25433] erspan0: entered promiscuous mode [ 645.287350][T25433] macsec2: entered promiscuous mode [ 645.338532][T25433] erspan0: left promiscuous mode [ 646.452733][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9356'. [ 646.452787][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9356'. [ 648.346383][T25541] tipc: Invalid UDP bearer configuration [ 648.346435][T25541] tipc: Enabling of bearer rejected, failed to enable media [ 649.524632][T25577] sit2: entered promiscuous mode [ 650.528337][T25579] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.922523][T25579] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.111519][T25611] sock: sock_timestamping_bind_phc: sock not bind to device [ 651.174912][T25579] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 651.179966][T25579] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.881921][ T1172] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.881982][ T1172] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.882019][ T1172] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.891298][ T102] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.804428][T25693] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9460'. [ 654.469493][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9471'. [ 654.523482][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9471'. [ 654.615325][T25727] Bluetooth: hci0: unsupported parameter 5135 [ 654.615352][T25727] Bluetooth: hci0: unsupported parameter 8192 [ 654.615366][T25727] Bluetooth: hci0: unsupported parameter 5135 [ 654.615378][T25727] Bluetooth: hci0: unsupported parameter 8192 [ 654.641711][T25725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9474'. [ 654.694365][T25728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9472'. [ 655.324443][T25752] netlink: 'syz.1.9487': attribute type 1 has an invalid length. [ 656.440519][T25782] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9500'. [ 657.421120][T25817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9519'. [ 659.306848][T25881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9550'. [ 660.890052][T25924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9570'. [ 662.127120][T25968] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 662.279749][T25970] batadv_slave_1: entered promiscuous mode [ 662.648035][T25980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9597'. [ 666.921787][T26078] Bluetooth: hci0: unsupported parameter 5134 [ 666.921814][T26078] Bluetooth: hci0: unsupported parameter 8192 [ 666.921827][T26078] Bluetooth: hci0: unsupported parameter 5134 [ 666.921839][T26078] Bluetooth: hci0: unsupported parameter 8192 [ 667.300522][T26088] lo speed is unknown, defaulting to 1000 [ 667.300614][T26088] lo speed is unknown, defaulting to 1000 [ 667.376464][T26088] lo speed is unknown, defaulting to 1000 [ 667.377672][T26088] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 667.377708][T26088] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 667.392347][T26088] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 667.559360][T26088] lo speed is unknown, defaulting to 1000 [ 667.603789][T26088] lo speed is unknown, defaulting to 1000 [ 667.619740][T26088] lo speed is unknown, defaulting to 1000 [ 667.644283][T26088] lo speed is unknown, defaulting to 1000 [ 667.682551][T26088] lo speed is unknown, defaulting to 1000 [ 667.938079][T26103] Bluetooth: hci0: unsupported parameter 5161 [ 667.938103][T26103] Bluetooth: hci0: unsupported parameter 8192 [ 667.938116][T26103] Bluetooth: hci0: unsupported parameter 5161 [ 667.938129][T26103] Bluetooth: hci0: unsupported parameter 8192 [ 668.284715][T26115] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 669.356724][T26145] netlink: 'syz.0.9673': attribute type 66 has an invalid length. [ 669.666433][T26162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9679'. [ 669.679377][T26161] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 670.517820][ T1172] IPVS: starting estimator thread 0... [ 670.608743][T26195] IPVS: using max 25 ests per chain, 60000 per kthread [ 672.578036][T26242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9718'. [ 673.967312][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9742'. [ 673.967339][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9742'. [ 673.967365][T26294] netlink: 'syz.2.9742': attribute type 11 has an invalid length. [ 674.205522][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9747'. [ 674.340927][T26297] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9743'. [ 674.340955][T26297] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9743'. [ 675.054389][T26324] ip6tnl4: entered allmulticast mode [ 675.065164][ T102] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 675.065405][ T102] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 675.092545][T10636] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 675.290752][T26331] netlink: 'syz.0.9760': attribute type 10 has an invalid length. [ 675.349144][T26334] netlink: 'syz.0.9760': attribute type 10 has an invalid length. [ 675.390212][T26331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.417089][T26331] team0: Port device netdevsim1 added [ 675.422305][T10636] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 675.462048][T26334] team0: Port device netdevsim1 removed [ 675.923046][T10636] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 676.549847][T26374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9781'. [ 677.574951][T26406] netlink: 'syz.0.9796': attribute type 1 has an invalid length. [ 677.672395][T26408] macsec0: entered allmulticast mode [ 677.672423][T26408] vlan1: entered allmulticast mode [ 677.672438][T26408] veth0_vlan: entered allmulticast mode [ 677.893292][T26414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9800'. [ 677.975516][T26419] netlink: 'syz.1.9801': attribute type 2 has an invalid length. [ 678.629298][T26437] netlink: 332 bytes leftover after parsing attributes in process `syz.4.9810'. [ 678.629369][T26437] netlink: 'syz.4.9810': attribute type 9 has an invalid length. [ 678.629383][T26437] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9810'. [ 678.629398][T26437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9810'. [ 679.201745][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 680.264713][ T102] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.265146][ T62] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.265183][ T62] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.265218][ T62] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 681.350134][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9852'. [ 681.813407][T26548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9861'. [ 681.932866][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9864'. [ 682.943182][T26576] tipc: Started in network mode [ 682.943218][T26576] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 682.943276][T26576] tipc: Enabling of bearer rejected, failed to enable media [ 684.649555][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9903'. [ 685.527839][T26660] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9914'. [ 685.866180][T26672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 686.106561][T26681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9925'. [ 686.241458][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 686.322146][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.688530][T26698] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 686.840290][T26701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9934'. [ 686.840328][T26701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9934'. [ 686.874745][T26702] netlink: 'syz.4.9932': attribute type 2 has an invalid length. [ 687.521486][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 688.259994][T26739] xt_connbytes: Forcing CT accounting to be enabled [ 689.075667][T26770] Bluetooth: hci0: Invalid link key type 10 for 66:55:44:33:22:11 [ 689.318060][T26782] netlink: 'syz.0.9965': attribute type 8 has an invalid length. [ 689.555941][T26788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9973'. [ 689.612414][T26790] ip_tables: iptables: counters copy to user failed while replacing table [ 689.673842][T26792] xt_hashlimit: size too large, truncated to 1048576 [ 690.064874][T26808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9980'. [ 690.536573][T26820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9986'. [ 690.702639][T26824] ip_tables: iptables: counters copy to user failed while replacing table [ 690.740918][T26829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9991'. [ 690.741111][T26829] netlink: 'syz.3.9991': attribute type 1 has an invalid length. [ 692.542667][T26882] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10013'. [ 693.195992][T26902] bond5: option lacp_rate: invalid value (128) [ 693.221851][T26902] bond5 (unregistering): Released all slaves [ 694.662018][T26963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10050'. [ 694.913987][T26974] netlink: 'syz.1.10055': attribute type 29 has an invalid length. [ 694.914014][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10055'. [ 694.914983][T26974] netlink: 'syz.1.10055': attribute type 29 has an invalid length. [ 694.915003][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10055'. [ 694.978862][T26976] tipc: Enabling of bearer rejected, failed to enable media [ 695.474663][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10065'. [ 695.499217][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10065'. [ 695.499598][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10065'. [ 695.500401][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10065'. [ 695.537072][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10065'. [ 695.537538][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10065'. [ 697.709256][T27054] __nla_validate_parse: 1 callbacks suppressed [ 697.709282][T27054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10094'. [ 698.749969][T27094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10113'. [ 698.898123][T27099] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 698.981935][T27104] syz_tun: entered promiscuous mode [ 698.982152][T27103] syz_tun: left promiscuous mode [ 699.656919][T27128] netlink: 'syz.3.10128': attribute type 4 has an invalid length. [ 699.656948][T27128] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10128'. [ 699.827029][T27133] netlink: 'syz.2.10131': attribute type 9 has an invalid length. [ 700.074963][T27143] Bluetooth: hci0: unsupported parameter 5134 [ 700.074990][T27143] Bluetooth: hci0: unsupported parameter 8192 [ 700.075003][T27143] Bluetooth: hci0: unsupported parameter 5134 [ 700.075015][T27143] Bluetooth: hci0: unsupported parameter 8192 [ 700.387463][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10139'. [ 700.728436][T27153] gretap0: entered promiscuous mode [ 700.728717][T27153] vlan5: entered promiscuous mode [ 701.617409][T27179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10154'. [ 702.993540][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10175'. [ 703.825757][T27241] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.10183'. [ 704.161427][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 704.403121][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.423833][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.426890][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.430784][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.449764][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.450711][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.455352][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10192'. [ 704.533065][T27266] netlink: 'syz.0.10196': attribute type 2 has an invalid length. [ 705.158147][T27286] vlan2: entered promiscuous mode [ 705.158175][T27286] macvlan0: entered promiscuous mode [ 707.116541][T27337] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10227'. [ 708.731422][T27389] tipc: Enabling of bearer rejected, failed to enable media [ 708.893618][T27395] netlink: 'syz.1.10251': attribute type 3 has an invalid length. [ 709.802840][T27411] __nla_validate_parse: 1 callbacks suppressed [ 709.802865][T27411] netlink: 798 bytes leftover after parsing attributes in process `syz.0.10260'. [ 709.900747][T27418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10263'. [ 709.994625][T27425] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10266'. [ 709.994687][T27425] netlink: 'syz.0.10266': attribute type 9 has an invalid length. [ 709.994702][T27425] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10266'. [ 709.994716][T27425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10266'. [ 711.582618][T27480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10294'. [ 711.755020][T27490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10299'. [ 711.755050][T27490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10299'. [ 712.007208][T27494] Bluetooth: hci0: unsupported parameter 5135 [ 712.007235][T27494] Bluetooth: hci0: unsupported parameter 8192 [ 712.007248][T27494] Bluetooth: hci0: unsupported parameter 5135 [ 712.007268][T27494] Bluetooth: hci0: unsupported parameter 8192 [ 713.227759][T27520] tipc: Enabling of bearer rejected, failed to enable media [ 713.568974][T27532] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 714.563076][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10333'. [ 714.974814][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10338'. [ 715.465747][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10347'. [ 716.142550][T27618] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 717.859606][ T38] tipc: Subscription rejected, illegal request [ 718.301352][T27668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10382'. [ 718.789190][T27676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10386'. [ 718.789217][T27676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10386'. [ 718.789232][T27676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10386'. [ 718.952152][T27678] Bluetooth: hci0: unsupported parameter 5135 [ 718.952189][T27678] Bluetooth: hci0: unsupported parameter 8192 [ 718.952204][T27678] Bluetooth: hci0: unsupported parameter 5135 [ 718.952217][T27678] Bluetooth: hci0: unsupported parameter 8192 [ 719.380735][T27700] tipc: New replicast peer: 172.20.20.187 [ 719.381701][T27700] tipc: Enabled bearer , priority 10 [ 720.491486][ T24] tipc: Node number set to 3758096386 [ 721.775061][T27766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10426'. [ 722.364084][T27791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10438'. [ 722.808951][T27799] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 723.587072][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10451'. [ 723.587099][T27821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10451'. [ 724.392167][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10463'. [ 724.876898][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10463'. [ 725.699695][T27878] nbd: socks must be embedded in a SOCK_ITEM attr [ 725.889084][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10481'. [ 725.889110][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10481'. [ 725.889134][T27885] netlink: 'syz.3.10481': attribute type 11 has an invalid length. [ 725.889148][T27885] netlink: 'syz.3.10481': attribute type 14 has an invalid length. [ 726.353507][T27881] udevd[27881]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 726.882104][T27918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10496'. [ 727.422959][T27939] netlink: zone id is out of range [ 727.423414][T27939] netlink: zone id is out of range [ 727.429251][T27939] netlink: zone id is out of range [ 727.429402][T27939] netlink: zone id is out of range [ 727.429533][T27939] netlink: zone id is out of range [ 727.429729][T27939] netlink: zone id is out of range [ 727.477336][T27939] netlink: zone id is out of range [ 727.477567][T27939] netlink: zone id is out of range [ 727.480255][T27939] netlink: zone id is out of range [ 727.481020][T27939] netlink: zone id is out of range [ 729.017149][T27988] tipc: New replicast peer: 172.20.20.187 [ 729.019814][T27988] tipc: Enabled bearer , priority 10 [ 730.171735][ T10] tipc: Node number set to 16777217 [ 731.268124][T28063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10567'. [ 731.268152][T28063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10567'. [ 733.446219][T28123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10594'. [ 734.771648][T28169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10616'. [ 735.580369][T28192] vlan2: entered promiscuous mode [ 736.566811][T28233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10648'. [ 737.196539][T28259] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10661'. [ 737.196583][T28259] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10661'. [ 737.443700][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 739.057642][T28305] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10682'. [ 739.073471][T28307] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 741.567306][T28362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10710'. [ 741.637789][T28366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10712'. [ 743.176162][T28415] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 744.019094][T28443] sctp: [Deprecated]: syz.1.10745 (pid 28443) Use of int in max_burst socket option. [ 744.019094][T28443] Use struct sctp_assoc_value instead [ 744.356629][T28456] netlink: 'syz.0.10753': attribute type 4 has an invalid length. [ 745.747014][T28500] netlink: 'syz.4.10774': attribute type 25 has an invalid length. [ 745.822262][T28503] netlink: 'syz.0.10773': attribute type 1 has an invalid length. [ 745.822289][T28503] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10773'. [ 745.822327][T28503] netlink: 'syz.0.10773': attribute type 1 has an invalid length. [ 745.822341][T28503] netlink: 'syz.0.10773': attribute type 2 has an invalid length. [ 747.142847][T28540] pimreg0: tun_chr_ioctl cmd 1074025677 [ 747.142961][T28540] pimreg0: linktype set to 776 [ 747.403422][T28554] Bluetooth: hci0: unsupported parameter 5135 [ 747.403447][T28554] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 747.684294][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.428614][T28622] netlink: 277 bytes leftover after parsing attributes in process `syz.0.10828'. [ 750.124213][T28638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10836'. [ 750.212196][T28641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10837'. [ 750.270166][T28647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10840'. [ 751.190624][T28677] netlink: 'syz.2.10853': attribute type 1 has an invalid length. [ 751.810915][T28692] netlink: 'syz.1.10860': attribute type 2 has an invalid length. [ 753.223580][ T102] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.223631][ T102] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.223666][ T102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.223700][ T102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.846184][T28765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10894'. [ 753.981037][T28768] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10896'. [ 754.477973][T28792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10906'. [ 754.615659][T28798] netlink: 276 bytes leftover after parsing attributes in process `syz.1.10909'. [ 756.537332][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10934'. [ 757.232009][T28864] sctp: [Deprecated]: syz.1.10939 (pid 28864) Use of int in max_burst socket option. [ 757.232009][T28864] Use struct sctp_assoc_value instead [ 757.581691][T28877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10945'. [ 757.581729][T28877] netlink: 'syz.4.10945': attribute type 30 has an invalid length. [ 757.605482][T28877] vxlan1: entered promiscuous mode [ 757.605695][T28877] vxlan1: entered allmulticast mode [ 757.645842][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10945'. [ 757.645881][T28880] netlink: 'syz.4.10945': attribute type 30 has an invalid length. [ 757.855022][T28880] vxlan1: entered promiscuous mode [ 757.855268][T28880] vxlan1: entered allmulticast mode [ 758.081525][T28892] tun0: tun_chr_ioctl cmd 1074025680 [ 758.764557][T28916] xt_hashlimit: size too large, truncated to 1048576 [ 758.834456][T28919] xt_hashlimit: size too large, truncated to 1048576 [ 758.890241][T28919] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.386795][T28932] net_ratelimit: 6 callbacks suppressed [ 759.386891][T28932] ip_tables: iptables: counters copy to user failed while replacing table [ 760.061827][T28945] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 760.086756][T28945] bond5 (unregistering): Released all slaves [ 760.312465][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10980'. [ 760.312505][T28961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10980'. [ 760.389044][T28964] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10981'. [ 760.474961][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.475013][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.475048][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.475083][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.683945][T28973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10985'. [ 760.683989][T28973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10985'. [ 761.387730][T29000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10997'. [ 761.697549][T29014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11003'. [ 763.776911][T29088] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11033'. [ 763.776943][T29088] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11033'. [ 764.092916][T29104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11039'. [ 766.764352][T29167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 766.784194][T29167] bond7: entered promiscuous mode [ 766.787805][T29167] bond0: (slave bond7): Enslaving as an active interface with an up link [ 767.602561][T29214] sctp: [Deprecated]: syz.3.11085 (pid 29214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 767.602561][T29214] Use struct sctp_sack_info instead [ 768.570696][T29238] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 769.348190][T29260] netlink: 'syz.2.11102': attribute type 11 has an invalid length. [ 770.205244][T29292] erspan0: entered promiscuous mode [ 770.618656][T29310] batadv_slave_1: entered promiscuous mode [ 770.622731][T29308] batadv_slave_1: left promiscuous mode [ 773.359067][T29399] __nla_validate_parse: 1 callbacks suppressed [ 773.359090][T29399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11164'. [ 774.480668][T29424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11176'. [ 774.899907][ T62] IPVS: starting estimator thread 0... [ 774.981507][T29447] IPVS: using max 26 ests per chain, 62400 per kthread [ 775.408534][T29465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11195'. [ 776.805363][T29518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 777.062264][T29518] xt_CT: No such helper "syz0" [ 777.672768][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11234'. [ 777.672809][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11234'. [ 778.024465][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11237'. [ 778.024534][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11237'. [ 778.050210][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11237'. [ 778.091156][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11237'. [ 779.106322][T29604] bond8: Unable to set down delay as MII monitoring is disabled [ 779.124244][T29604] bond8 (unregistering): Released all slaves [ 779.397505][T29621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 779.718719][T29633] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 779.865630][T29637] IPVS: stopping backup sync thread 28415 ... [ 781.280457][T29673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.612148][T29685] netlink: 'syz.2.11290': attribute type 2 has an invalid length. [ 784.090435][T29778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 784.500164][T29790] sctp: [Deprecated]: syz.1.11335 (pid 29790) Use of int in max_burst socket option. [ 784.500164][T29790] Use struct sctp_assoc_value instead [ 785.001988][T29806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11342'. [ 785.261947][T29818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11346'. [ 785.262514][T29818] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11346'. [ 785.743931][T29828] sctp: [Deprecated]: syz.1.11354 (pid 29828) Use of int in max_burst socket option. [ 785.743931][T29828] Use struct sctp_assoc_value instead [ 786.376447][T29849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11363'. [ 786.376476][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11363'. [ 786.456220][T29854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11366'. [ 786.815325][T29862] tap0: tun_chr_ioctl cmd 21731 [ 787.546850][T29892] netlink: 'syz.1.11380': attribute type 14 has an invalid length. [ 788.169222][T29917] cfg80211: Invalid regulatory domain detected: BB [ 789.753336][T29949] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 789.753368][T29949] syzkaller1: ignored: set checksum enabled [ 793.544321][T30063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11455'. [ 794.628364][T30096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11470'. [ 796.273513][T30150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11495'. [ 796.986435][T30165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11502'. [ 796.986462][T30165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11502'. [ 797.010627][T30167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11503'. [ 797.747191][T30183] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11511'. [ 798.259399][T30199] dvmrp0: entered allmulticast mode [ 798.289858][T30199] dvmrp0: left allmulticast mode [ 799.539720][T30228] sctp: [Deprecated]: syz.2.11532 (pid 30228) Use of int in max_burst socket option. [ 799.539720][T30228] Use struct sctp_assoc_value instead [ 799.950501][T30234] tap0: tun_chr_ioctl cmd 1074025677 [ 799.950614][T30234] tap0: linktype set to 805 [ 800.345442][T30242] pimreg0: tun_chr_ioctl cmd 1074025677 [ 800.345737][T30242] pimreg0: linktype set to 804 [ 800.608922][T30250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11543'. [ 803.134447][T30312] netlink: 'syz.2.11571': attribute type 83 has an invalid length. [ 803.567516][T30330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11579'. [ 803.641859][ T30] audit: type=1804 audit(1793502249.025:5): pid=30333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11580" name="/newroot/2365/cgroup.controllers" dev="tmpfs" ino=11863 res=1 errno=0 [ 803.655793][ T30] audit: type=1800 audit(1793502249.055:6): pid=30333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11580" name="cgroup.controllers" dev="tmpfs" ino=11863 res=0 errno=-22 [ 803.677066][ T30] audit: type=1804 audit(1793502249.055:7): pid=30333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.11580" name="/newroot/2365/cgroup.controllers" dev="tmpfs" ino=11863 res=1 errno=0 [ 803.731865][T30336] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11581'. [ 804.001866][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 804.284345][ T5652] block nbd3: Receive control failed (result -32) [ 804.286224][ T5643] block nbd3: Receive control failed (result -32) [ 804.784557][T30376] sctp: [Deprecated]: syz.3.11599 (pid 30376) Use of int in maxseg socket option. [ 804.784557][T30376] Use struct sctp_assoc_value instead [ 805.658921][T30400] netlink: 'syz.4.11608': attribute type 8 has an invalid length. [ 806.877194][T30448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11632'. [ 806.877229][T30448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11632'. [ 807.276430][T30457] sctp: [Deprecated]: syz.2.11636 (pid 30457) Use of int in max_burst socket option. [ 807.276430][T30457] Use struct sctp_assoc_value instead [ 808.458644][T30487] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 808.505461][T30489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11650'. [ 809.133024][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.051511][T30594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11693'. [ 812.308906][T30605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11696'. [ 812.448422][T30612] netlink: 'syz.1.11701': attribute type 1 has an invalid length. [ 813.863501][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11720'. [ 813.863575][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11720'. [ 813.899487][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11720'. [ 813.899518][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11720'. [ 813.899853][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11720'. [ 813.899872][T30654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11720'. [ 815.808437][ T50] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 815.955272][T30728] 0ªX¹¦Dö»: left allmulticast mode [ 815.986308][T30728] sit0: left promiscuous mode [ 816.241564][T30741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11756'. [ 816.369756][T30728] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 816.705259][T30753] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 816.807408][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.842326][T30753] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 817.116431][T30770] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 817.168046][T30773] netlink: 'syz.1.11770': attribute type 1 has an invalid length. [ 817.168073][T30773] netlink: 4264 bytes leftover after parsing attributes in process `syz.1.11770'. [ 817.168091][T30773] netlink: 'syz.1.11770': attribute type 1 has an invalid length. [ 819.841388][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 820.846987][T30862] netlink: 'syz.1.11812': attribute type 1 has an invalid length. [ 820.847012][T30862] netlink: 'syz.1.11812': attribute type 2 has an invalid length. [ 820.871248][T30862] netlink: 'syz.1.11812': attribute type 1 has an invalid length. [ 820.871274][T30862] netlink: 'syz.1.11812': attribute type 2 has an invalid length. [ 821.638619][T30891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11824'. [ 822.545552][T30918] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11836'. [ 822.606168][T30921] netlink: 'syz.2.11837': attribute type 39 has an invalid length. [ 824.218759][T30957] 8021q: adding VLAN 0 to HW filter on device bond8 [ 824.232599][T30957] bond0: (slave bond8): Enslaving as an active interface with an up link [ 824.311608][T30963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11855'. [ 824.318625][T30963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11855'. [ 824.933086][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11864'. [ 825.319297][T31000] batadv_slave_1: entered promiscuous mode [ 825.325691][T31000] batadv_slave_1: left promiscuous mode [ 826.054461][T31020] nbd4: detected capacity change from 0 to 63 [ 826.067869][ T5652] block nbd4: Receive control failed (result -104) [ 826.072669][ T2116] block nbd4: Dead connection, failed to find a fallback [ 826.072694][ T2116] block nbd4: shutting down sockets [ 826.072772][ T2116] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 826.072849][ T2116] Buffer I/O error on dev nbd4, logical block 1, async page read [ 826.073046][ T2116] Buffer I/O error on dev nbd4, logical block 2, async page read [ 826.073062][ T2116] Buffer I/O error on dev nbd4, logical block 3, async page read [ 826.458356][T31029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11884'. [ 826.523251][T31033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 828.071976][T31085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11909'. [ 828.321732][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 828.619569][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11919'. [ 828.970238][T31110] bridge0: entered allmulticast mode [ 829.858554][T31126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11929'. [ 830.559052][T31148] xt_hashlimit: size too large, truncated to 1048576 [ 830.620915][T31149] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.11938'. [ 830.621168][T31149] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 830.672783][T31149] 0ªX¹¦Dö»: entered allmulticast mode [ 830.874267][T31160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.877810][T31160] ip_tables: iptables: counters copy to user failed while replacing table [ 831.505621][T31179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11951'. [ 831.521988][T31179] veth1_macvtap: left promiscuous mode [ 832.599872][T31210] batman_adv: batadv0: Adding interface: macvlan0 [ 832.599903][T31210] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.600239][T31210] batman_adv: batadv0: Interface activated: macvlan0 [ 832.812423][ T2116] block nbd4: Connection timed out, retrying (0/1 alive) [ 832.813361][ T2116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 832.813396][ T2116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 832.818058][ T2116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.818093][ T2116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 832.818112][ T2116] Buffer I/O error on dev nbd4, logical block 1, async page read [ 832.818129][ T2116] Buffer I/O error on dev nbd4, logical block 2, async page read [ 832.818145][ T2116] Buffer I/O error on dev nbd4, logical block 3, async page read [ 832.819182][ T2116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.819211][ T2116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 832.819229][ T2116] Buffer I/O error on dev nbd4, logical block 1, async page read [ 832.819245][ T2116] Buffer I/O error on dev nbd4, logical block 2, async page read [ 832.819260][ T2116] Buffer I/O error on dev nbd4, logical block 3, async page read [ 832.819517][ T2116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.819543][ T2116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 832.851560][ T1945] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.851983][ T1945] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.852174][ T1945] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.853384][ T1945] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.853446][T30951] ldm_validate_partition_table(): Disk read failed. [ 832.853560][ T1945] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.853718][ T1945] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 832.854248][T30951] Dev nbd4: unable to read RDB block 0 [ 832.862924][T30951] nbd4: unable to read partition table [ 832.956802][T30951] ldm_validate_partition_table(): Disk read failed. [ 832.959540][T30951] Dev nbd4: unable to read RDB block 0 [ 832.968039][T30951] nbd4: unable to read partition table [ 833.154231][T31226] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11972'. [ 833.632197][T31243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 834.105630][T31261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11988'. [ 834.156190][T31264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11989'. [ 834.189302][T31264] macvlan0: entered promiscuous mode [ 834.189333][T31264] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 834.189776][T31264] netlink: 'syz.2.11989': attribute type 1 has an invalid length. [ 834.189793][T31264] netlink: 'syz.2.11989': attribute type 2 has an invalid length. [ 834.652024][T31280] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11997'. [ 836.221489][T31322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12014'. [ 836.287883][T31320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 836.637463][T31336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12022'. [ 837.272319][T31357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.778082][T31367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12036'. [ 839.820274][T31433] openvswitch: netlink: Flow key attr not present in new flow. [ 839.835578][T31433] sctp: [Deprecated]: syz.3.12066 (pid 31433) Use of int in maxseg socket option. [ 839.835578][T31433] Use struct sctp_assoc_value instead [ 840.116076][T31443] block nbd5: Unsupported socket: should be TCP or UNIX. [ 842.586762][T31509] netlink: 'syz.1.12097': attribute type 3 has an invalid length. [ 843.613753][T31538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12110'. [ 844.337486][T31548] netlink: 'syz.2.12112': attribute type 3 has an invalid length. [ 844.337512][T31548] netlink: 'syz.2.12112': attribute type 2 has an invalid length. [ 845.465083][T31593] ip_tables: iptables: counters copy to user failed while replacing table [ 845.484424][T31593] ip_tables: iptables: counters copy to user failed while replacing table [ 845.552218][T31595] netlink: 'syz.4.12134': attribute type 6 has an invalid length. [ 845.601325][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 845.850068][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12140'. [ 847.900002][T31651] netlink: 'syz.2.12159': attribute type 1 has an invalid length. [ 847.900031][T31651] netlink: 4276 bytes leftover after parsing attributes in process `syz.2.12159'. [ 847.900049][T31651] netlink: 'syz.2.12159': attribute type 2 has an invalid length. [ 847.938248][T31654] macvlan0: entered promiscuous mode [ 847.945766][T31654] netlink: 'syz.1.12161': attribute type 2 has an invalid length. [ 849.128924][T31694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12178'. [ 849.269977][T31697] netlink: 'syz.3.12179': attribute type 1 has an invalid length. [ 849.270003][T31697] netlink: 'syz.3.12179': attribute type 7 has an invalid length. [ 849.270017][T31697] netlink: 'syz.3.12179': attribute type 8 has an invalid length. [ 849.270030][T31697] netlink: 208 bytes leftover after parsing attributes in process `syz.3.12179'. [ 849.270046][T31697] NCSI netlink: No device for ifindex 1073545264 [ 849.378745][T31700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12181'. [ 849.904801][T31714] netlink: 7164 bytes leftover after parsing attributes in process `syz.4.12186'. [ 849.904836][T31714] netlink: 7164 bytes leftover after parsing attributes in process `syz.4.12186'. [ 851.820540][T31781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12219'. [ 852.467427][T31810] 8021q: VLANs not supported on gre0 [ 852.474179][T31809] netlink: 'syz.0.12232': attribute type 219 has an invalid length. [ 852.486437][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12231'. [ 852.829031][T31821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12237'. [ 853.435250][T31845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12249'. [ 854.085176][T31869] tipc: Enabling of bearer rejected, already enabled [ 856.698866][T31935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12291'. [ 856.749664][T31935] bond10: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 856.767197][T31935] bond10 (unregistering): Released all slaves [ 856.840354][T31944] tun0: tun_chr_ioctl cmd 2148553947 [ 858.540374][T31998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12318'. [ 858.703993][T32003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12320'. [ 859.980427][T32039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12335'. [ 860.344736][T32047] netlink: 'syz.4.12338': attribute type 10 has an invalid length. [ 860.529911][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12342'. [ 860.992735][T32073] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12351'. [ 860.992763][T32073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12351'. [ 861.457936][T32088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12356'. [ 862.267256][T32105] vlan0: entered allmulticast mode [ 862.267279][T32105] veth0_to_bond: entered allmulticast mode [ 862.616680][T32116] netlink: 'syz.0.12370': attribute type 1 has an invalid length. [ 862.616706][T32116] nbd: error processing sock list [ 862.617528][T32116] block nbd5: shutting down sockets [ 862.868302][T32123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12371'. [ 862.953812][T32128] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12374'. [ 863.120505][T32137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12381'. [ 865.572172][T32221] netlink: 280 bytes leftover after parsing attributes in process `syz.1.12418'. [ 865.572202][T32221] netlink: 'syz.1.12418': attribute type 3 has an invalid length. [ 865.991027][T32233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12424'. [ 866.039231][T32234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12420'. [ 866.066267][T32236] pim6reg: entered allmulticast mode [ 866.078340][T32236] pim6reg: left allmulticast mode [ 866.620027][T32249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12432'. [ 866.940802][T32263] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12439'. [ 866.955367][T32263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12439'. [ 867.556502][T32281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12445'. [ 868.198064][T32292] __nla_validate_parse: 2 callbacks suppressed [ 868.198091][T32292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12451'. [ 868.773042][T32309] blkio.reset_stats is deprecated [ 868.805847][T32311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12460'. [ 868.816228][T32311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12460'. [ 868.887746][T32313] netlink: 'syz.3.12461': attribute type 6 has an invalid length. [ 869.269981][T32327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12466'. [ 869.288946][T32327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12466'. [ 870.562846][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.732615][T32388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12493'. [ 871.732643][T32388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12493'. [ 871.732669][T32388] netlink: 'syz.4.12493': attribute type 19 has an invalid length. [ 871.732684][T32388] netlink: 'syz.4.12493': attribute type 20 has an invalid length. [ 871.799490][T32392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12493'. [ 871.799517][T32392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12493'. [ 871.799544][T32392] netlink: 'syz.4.12493': attribute type 19 has an invalid length. [ 871.799559][T32392] netlink: 'syz.4.12493': attribute type 20 has an invalid length. [ 874.017552][T32448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 876.356268][T32540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12557'. [ 876.359508][T32540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12557'. [ 876.624017][T32549] netlink: 165 bytes leftover after parsing attributes in process `syz.4.12562'. [ 876.946027][T32561] netlink: 'syz.3.12567': attribute type 1 has an invalid length. [ 876.946054][T32561] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12567'. [ 879.521443][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 880.225311][T32653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12610'. [ 880.225351][T32653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12610'. [ 880.468288][T32659] tap0: tun_chr_ioctl cmd 1074025681 [ 880.531941][T32661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12613'. [ 880.823054][T32669] tap0: tun_chr_ioctl cmd 2147767521 [ 881.614915][T32693] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.176231][T32702] ip6gretap0: entered promiscuous mode [ 882.189193][T32702] batadv0: entered promiscuous mode [ 882.855386][T32723] Bluetooth: MGMT ver 1.23 [ 885.013145][ T319] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12669'. [ 885.514485][ T314] xt_TPROXY: Can be used only with -p tcp or -p udp [ 886.579071][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12692'. [ 886.579102][ T369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12692'. [ 886.579119][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12692'. [ 886.579324][ T369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12692'. [ 886.579341][ T369] netlink: 'syz.4.12692': attribute type 6 has an invalid length. [ 888.012745][ T402] tipc: Enabling of bearer rejected, already enabled [ 888.388069][ T30] audit: type=1804 audit(1793502333.785:8): pid=412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12712" name="/newroot/2363/cgroup.controllers" dev="tmpfs" ino=11866 res=1 errno=0 [ 888.417105][ T30] audit: type=1800 audit(1793502333.785:9): pid=412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12712" name="cgroup.controllers" dev="tmpfs" ino=11866 res=0 errno=-22 [ 889.191546][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12723'. [ 889.191635][ T437] netlink: 'syz.4.12723': attribute type 10 has an invalid length. [ 889.191654][ T437] netlink: 'syz.4.12723': attribute type 5 has an invalid length. [ 889.191667][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12723'. [ 889.296445][ T437] geneve10: entered promiscuous mode [ 889.296472][ T437] geneve10: entered allmulticast mode [ 889.300194][ T102] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 57687 - 0 [ 889.300277][ T102] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 57687 - 0 [ 889.300336][ T102] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 57687 - 0 [ 889.480893][ T1172] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 57687 - 0 [ 890.251520][ T456] sctp: [Deprecated]: syz.1.12731 (pid 456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 890.251520][ T456] Use struct sctp_sack_info instead [ 890.890839][ T487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 890.946757][ T481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 893.165341][ T545] ip6erspan1: entered allmulticast mode [ 893.382731][ T552] tun0: tun_chr_ioctl cmd 1074025675 [ 893.382757][ T552] tun0: persist disabled [ 894.127522][ T577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12784'. [ 894.394584][ T585] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 894.508930][ T591] tipc: New replicast peer: 255.255.255.255 [ 894.509364][ T591] tipc: Enabled bearer , priority 10 [ 896.118125][ T632] wg2 speed is unknown, defaulting to 1000 [ 896.645367][ T644] IPVS: sh: TCP 127.0.0.1:5376 - no destination available [ 896.937439][ T650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12819'. [ 897.291773][ T663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12825'. [ 898.355687][ T687] tun0: tun_chr_ioctl cmd 1074812117 [ 899.256235][ T5652] block nbd5: Receive control failed (result -32) [ 899.857297][ T732] netlink: 964 bytes leftover after parsing attributes in process `syz.1.12854'. [ 899.857328][ T732] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 900.182274][ T744] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12861'. [ 901.623425][ T787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12878'. [ 902.315455][ T805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 902.532625][ T805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 902.803264][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12891'. [ 902.803294][ T815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12891'. [ 902.803320][ T815] netlink: 'syz.0.12891': attribute type 18 has an invalid length. [ 902.865879][ T818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12891'. [ 902.865904][ T818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12891'. [ 902.865929][ T818] netlink: 'syz.0.12891': attribute type 18 has an invalid length. [ 902.914061][ T38] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 902.914145][ T38] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 902.916574][ T38] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 902.916613][ T38] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 902.956160][ T821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12892'. [ 904.091668][ T860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12908'. [ 904.364475][ T867] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12911'. [ 904.899923][ T894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12923'. [ 905.231013][ T903] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12927'. [ 905.231391][ T903] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12927'. [ 907.145894][ T988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12958'. [ 907.546615][ T1005] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12967'. [ 907.548119][ T1003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12965'. [ 907.548570][ T1005] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12967'. [ 907.571674][ T1003] netlink: 'syz.2.12965': attribute type 22 has an invalid length. [ 907.571700][ T1003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12965'. [ 907.666207][ T1010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12969'. [ 907.993638][ T1025] netlink: 'syz.4.12975': attribute type 1 has an invalid length. [ 908.050849][ T1026] netlink: 'syz.4.12975': attribute type 1 has an invalid length. [ 909.746325][ T1106] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13001'. [ 910.655296][ T1142] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13017'. [ 911.480893][ T30] audit: type=1804 audit(1793502356.875:10): pid=1171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13030" name="/newroot/2608/cgroup.controllers" dev="tmpfs" ino=13089 res=1 errno=0 [ 911.480951][ T30] audit: type=1800 audit(1793502356.875:11): pid=1171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13030" name="cgroup.controllers" dev="tmpfs" ino=13089 res=0 errno=-22 [ 911.486868][ T30] audit: type=1800 audit(1793502356.885:12): pid=1171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13030" name="cgroup.controllers" dev="tmpfs" ino=13089 res=0 errno=-22 [ 911.971846][ T1184] bond3 (unregistering): Released all slaves [ 913.131999][ T1215] netlink: 'syz.4.13047': attribute type 3 has an invalid length. [ 913.132025][ T1215] netlink: 'syz.4.13047': attribute type 1 has an invalid length. [ 913.132039][ T1215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13047'. [ 913.519740][ T1226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 913.746217][ T1232] netlink: 'syz.1.13055': attribute type 3 has an invalid length. [ 914.173526][ T1244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13061'. [ 915.290348][ T1284] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967286. macoff=82 [ 916.690206][ T1332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13096'. [ 916.789755][ T1338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13099'. [ 916.825587][ T1338] ipvlan2: entered allmulticast mode [ 916.825612][ T1338] virt_wifi0: entered allmulticast mode [ 917.250444][ T1351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13105'. [ 917.573992][ T1359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.574021][ T1359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.576995][ T1359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.577019][ T1359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.646684][ T1433] netlink: 260 bytes leftover after parsing attributes in process `syz.2.13143'. [ 919.792144][ T1440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13145'. [ 920.416606][ T1468] batadv_slave_0: entered promiscuous mode [ 920.421004][ T1465] batadv_slave_0: left promiscuous mode [ 920.688925][ T1476] tap0: tun_chr_ioctl cmd 1074025681 [ 921.168344][ T1488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 921.415158][ T1500] netlink: 'syz.1.13174': attribute type 1 has an invalid length. [ 921.440369][ T1498] syzkaller1: entered promiscuous mode [ 921.440397][ T1498] syzkaller1: entered allmulticast mode [ 921.598550][ T1506] syzkaller1: entered promiscuous mode [ 921.598699][ T1506] syzkaller1: entered allmulticast mode [ 922.517228][ T1533] syzkaller1: entered promiscuous mode [ 922.517524][ T1533] syzkaller1: entered allmulticast mode [ 923.399255][ T1579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13204'. [ 923.399344][ T1579] openvswitch: netlink: Missing key (keys=40, expected=80) [ 923.778596][ T1591] netlink: 67 bytes leftover after parsing attributes in process `syz.3.13209'. [ 924.391928][ T1606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13216'. [ 924.541028][ T1614] syzkaller1: entered promiscuous mode [ 924.542113][ T1614] syzkaller1: entered allmulticast mode [ 926.082206][ T1646] trusted_key: syz.2.13233 sent an empty control message without MSG_MORE. [ 926.146482][ T1643] netlink: 59 bytes leftover after parsing attributes in process `syz.3.13231'. [ 926.440193][ T1654] vcan0: tx address claim with different name [ 926.881407][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 927.251885][ T1689] netlink: 'syz.0.13244': attribute type 11 has an invalid length. [ 927.251913][ T1689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13244'. [ 927.887559][ T1707] sctp: [Deprecated]: syz.3.13254 (pid 1707) Use of struct sctp_assoc_value in delayed_ack socket option. [ 927.887559][ T1707] Use struct sctp_sack_info instead [ 928.178731][ T1717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13259'. [ 928.322501][ T1717] bond6: Invalid ad_actor_system MAC address. [ 928.322525][ T1717] bond6: option ad_actor_system: invalid value (7) [ 928.370305][ T1717] bond6 (unregistering): Released all slaves [ 929.225298][ T1743] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 929.376119][ T1746] syzkaller1: entered promiscuous mode [ 929.376143][ T1746] syzkaller1: entered allmulticast mode [ 929.585380][ T1752] syzkaller1: entered promiscuous mode [ 929.585405][ T1752] syzkaller1: entered allmulticast mode [ 931.395393][ T1818] syzkaller1: entered promiscuous mode [ 931.395631][ T1818] syzkaller1: entered allmulticast mode [ 931.485357][ T1822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13304'. [ 932.001683][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 932.003492][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.280524][ T1846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.13314'. [ 932.280576][ T1846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.13314'. [ 932.742870][ T1865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13322'. [ 933.027452][ T1875] syzkaller1: entered promiscuous mode [ 933.027478][ T1875] syzkaller1: entered allmulticast mode [ 934.265635][ T1921] sctp: [Deprecated]: syz.4.13345 (pid 1921) Use of int in maxseg socket option. [ 934.265635][ T1921] Use struct sctp_assoc_value instead [ 934.558541][ T1935] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13348'. [ 935.344950][ T1960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 935.346235][T10613] lo speed is unknown, defaulting to 1000 [ 935.348539][ T1965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13353'. [ 935.830185][ T1982] veth0_to_team: entered promiscuous mode [ 937.070058][ T2016] erspan0: entered promiscuous mode [ 937.079776][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13376'. [ 938.783533][ T2060] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13393'. [ 939.554561][ T2083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13402'. [ 939.717850][ T2083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13402'. [ 939.855548][ T2091] batadv_slave_0: entered promiscuous mode [ 939.856659][ T2090] batadv_slave_0: left promiscuous mode [ 939.977555][ T2096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13410'. [ 940.000629][ T2097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13409'. [ 940.769781][ T2128] veth0: entered promiscuous mode [ 940.770917][ T2126] veth0: left promiscuous mode [ 941.977342][ T2152] syzkaller1: entered promiscuous mode [ 941.977370][ T2152] syzkaller1: entered allmulticast mode [ 942.417681][ T2173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13441'. [ 944.358639][ T2223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13453'. [ 944.370540][ T2223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13453'. [ 945.000515][ T2248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13458'. [ 946.681609][ T2296] IPVS: Scheduler module ip_vs_mh not found [ 947.105443][ T2310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13483'. [ 947.105474][ T2310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13483'. [ 947.361402][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 948.065483][ T2330] syzkaller1: entered promiscuous mode [ 948.065542][ T2330] syzkaller1: entered allmulticast mode [ 948.160710][ T2332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13492'. [ 949.620428][ T2371] ip_tables: iptables: counters copy to user failed while replacing table [ 950.623365][ T2403] pim6reg1: entered promiscuous mode [ 950.623603][ T2403] pim6reg1: entered allmulticast mode [ 950.871377][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13525'. [ 951.788591][ T2445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13535'. [ 951.967977][ T2453] syzkaller1: entered allmulticast mode [ 952.285982][ T2469] tipc: Cannot configure node identity twice [ 952.378093][ T2469] tipc: New replicast peer: 127.0.0.1 [ 952.394680][ T2469] tipc: Enabled bearer , priority 10 [ 953.491366][ T1679] tipc: Node number set to 11777 [ 953.497606][ T2519] netlink: 'syz.0.13559': attribute type 16 has an invalid length. [ 953.497630][ T2519] netlink: 'syz.0.13559': attribute type 17 has an invalid length. [ 953.821921][ T2519] veth0_to_team: left promiscuous mode [ 953.897608][ T2519] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 953.955587][ T2537] netlink: 'syz.2.13566': attribute type 12 has an invalid length. [ 953.989324][ T2537] netlink: 'syz.2.13566': attribute type 12 has an invalid length. [ 955.384625][ T2587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13585'. [ 955.384666][ T2587] netlink: 'syz.4.13585': attribute type 1 has an invalid length. [ 955.384680][ T2587] netlink: 'syz.4.13585': attribute type 2 has an invalid length. [ 956.024689][ T2609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13594'. [ 956.773659][ T2637] syz_tun: entered allmulticast mode [ 956.788904][ T2636] syz_tun: left allmulticast mode [ 956.930781][ T2640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.359480][ T2670] nbd: socks must be embedded in a SOCK_ITEM attr [ 957.550000][ T2670] block nbd6: shutting down sockets [ 959.252407][ T2748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13631'. [ 960.959309][ T2805] tap0: tun_chr_ioctl cmd 21731 [ 960.960492][ T2809] tap0: tun_chr_ioctl cmd 1074025672 [ 960.960512][ T2809] tap0: ignored: set checksum enabled [ 961.859853][ T30] audit: type=1800 audit(1793502407.255:13): pid=2818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13658" name="memory.events" dev="tmpfs" ino=13936 res=0 errno=-22 [ 962.636410][ T2880] xt_LOG: level 115 >= 8 [ 962.819012][ T2878] tipc: Enabled bearer , priority 10 [ 962.828668][ T2888] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.076280][ T2897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13683'. [ 963.589403][ T2912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13690'. [ 963.589430][ T2912] netlink: 11 bytes leftover after parsing attributes in process `syz.2.13690'. [ 963.589452][ T2912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13690'. [ 963.589466][ T2912] netlink: 11 bytes leftover after parsing attributes in process `syz.2.13690'. [ 963.589481][ T2912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13690'. [ 963.909015][ T2921] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13695'. [ 965.299218][ T2965] veth0: entered promiscuous mode [ 965.304297][ T2965] veth0: left promiscuous mode [ 966.484605][ T2998] sctp: [Deprecated]: syz.3.13728 (pid 2998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.484605][ T2998] Use struct sctp_sack_info instead [ 966.488447][ T2998] sctp: [Deprecated]: syz.3.13728 (pid 2998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.488447][ T2998] Use struct sctp_sack_info instead [ 966.581011][ T3000] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 967.362031][ T3030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13741'. [ 968.720010][ T3069] netlink: 'syz.0.13758': attribute type 1 has an invalid length. [ 968.741447][ T3069] netlink: 'syz.0.13758': attribute type 1 has an invalid length. [ 969.420704][ T3087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13767'. [ 969.420730][ T3087] vxlan: RTM_NEWNEIGH with invalid state 0x9 [ 970.384577][ T3117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13778'. [ 971.146719][ T3134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13787'. [ 973.286544][ T3194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13814'. [ 974.914180][ T3226] ip_tables: iptables: counters copy to user failed while replacing table [ 975.270190][ T3232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13826'. [ 975.283068][ T3232] netlink: 24 bytes leftover after parsing attributes in pr ** replaying previous printk message ** [ 975.283068][ T3232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13826'. [ 975.297711][ T3178] [ 975.313295][ T3178] ====================================================== [ 975.320366][ T3178] WARNING: possible circular locking dependency detected [ 975.327449][ T3178] syzkaller #0 Not tainted [ 975.331882][ T3178] ------------------------------------------------------ [ 975.338928][ T3178] syz.0.13807/3178 is trying to acquire lock: [ 975.345118][ T3178] ffffffff90094cc0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x710 [ 975.354105][ T3178] [ 975.354105][ T3178] but task is already holding lock: [ 975.361573][ T3178] ffff888054864080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 975.371112][ T3178] [ 975.371112][ T3178] which lock already depends on the new lock. [ 975.371112][ T3178] [ 975.381551][ T3178] [ 975.381551][ T3178] the existing dependency chain (in reverse order) is: [ 975.390592][ T3178] [ 975.390592][ T3178] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 975.398281][ T3178] __might_fault+0xcb/0x130 [ 975.403433][ T3178] _copy_from_user+0x28/0xb0 [ 975.408659][ T3178] csum_and_copy_from_iter_full+0x210/0x2000 [ 975.415253][ T3178] ip_generic_getfrag+0x149/0x2d0 [ 975.420874][ T3178] __ip6_append_data+0x3b26/0x40c0 [ 975.426574][ T3178] ip6_append_data+0x108/0x270 [ 975.431965][ T3178] rawv6_sendmsg+0x1298/0x18c0 [ 975.437321][ T3178] sock_sendmsg_nosec+0x10f/0x190 [ 975.442912][ T3178] ____sys_sendmsg+0x54e/0x850 [ 975.448207][ T3178] ___sys_sendmsg+0x2a5/0x360 [ 975.453422][ T3178] __x64_sys_sendmsg+0x1b1/0x290 [ 975.458896][ T3178] do_syscall_64+0x166/0x520 [ 975.464123][ T3178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.470586][ T3178] [ 975.470586][ T3178] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 975.478344][ T3178] lock_sock_nested+0x41/0x100 [ 975.483699][ T3178] inet_shutdown+0x6a/0x390 [ 975.488780][ T3178] nbd_mark_nsock_dead+0x2cb/0x550 [ 975.494467][ T3178] sock_shutdown+0x15e/0x260 [ 975.499591][ T3178] nbd_clear_sock+0x24/0x170 [ 975.504808][ T3178] nbd_config_put+0x477/0x7e0 [ 975.510041][ T3178] nbd_genl_connect+0x19b8/0x1cd0 [ 975.515690][ T3178] genl_family_rcv_msg_doit+0x233/0x340 [ 975.521840][ T3178] genl_rcv_msg+0x614/0x7a0 [ 975.526883][ T3178] netlink_rcv_skb+0x226/0x4a0 [ 975.532200][ T3178] genl_rcv+0x28/0x40 [ 975.536840][ T3178] netlink_unicast+0x8ef/0xa80 [ 975.542602][ T3178] netlink_sendmsg+0x7f0/0xb20 [ 975.547936][ T3178] sock_sendmsg_nosec+0x14e/0x190 [ 975.553517][ T3178] ____sys_sendmsg+0x54e/0x850 [ 975.558831][ T3178] ___sys_sendmsg+0x2a5/0x360 [ 975.564047][ T3178] __x64_sys_sendmsg+0x1b1/0x290 [ 975.569528][ T3178] do_syscall_64+0x166/0x520 [ 975.574657][ T3178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.581088][ T3178] [ 975.581088][ T3178] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 975.588755][ T3178] __mutex_lock+0x197/0x15a0 [ 975.593955][ T3178] nbd_queue_rq+0x373/0xff0 [ 975.599018][ T3178] blk_mq_dispatch_rq_list+0x499/0x1990 [ 975.605182][ T3178] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 975.612091][ T3178] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 975.618607][ T3178] blk_mq_run_work_fn+0x167/0x2f0 [ 975.624171][ T3178] process_scheduled_works+0xc3d/0x1630 [ 975.630302][ T3178] worker_thread+0xa47/0xfb0 [ 975.635437][ T3178] kthread+0x38b/0x480 [ 975.640051][ T3178] ret_from_fork+0x514/0xb70 [ 975.645211][ T3178] ret_from_fork_asm+0x1a/0x30 [ 975.650724][ T3178] [ 975.650724][ T3178] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 975.657960][ T3178] __mutex_lock+0x197/0x15a0 [ 975.663467][ T3178] nbd_queue_rq+0xc1/0xff0 [ 975.668440][ T3178] blk_mq_dispatch_rq_list+0x499/0x1990 [ 975.674564][ T3178] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 975.681443][ T3178] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 975.688070][ T3178] blk_mq_run_work_fn+0x167/0x2f0 [ 975.693638][ T3178] process_scheduled_works+0xc3d/0x1630 [ 975.699733][ T3178] worker_thread+0xa47/0xfb0 [ 975.704869][ T3178] kthread+0x38b/0x480 [ 975.709475][ T3178] ret_from_fork+0x514/0xb70 [ 975.714599][ T3178] ret_from_fork_asm+0x1a/0x30 [ 975.719899][ T3178] [ 975.719899][ T3178] -> #3 (set->srcu){.+.+}-{0:0}: [ 975.727045][ T3178] __synchronize_srcu+0xca/0x2f0 [ 975.732565][ T3178] elevator_switch+0x1e8/0x7b0 [ 975.737938][ T3178] elevator_change+0x2fa/0x480 [ 975.743240][ T3178] elevator_set_default+0x375/0x440 [ 975.748981][ T3178] blk_register_queue+0x404/0x4f0 [ 975.754580][ T3178] __add_disk+0x6b8/0xdb0 [ 975.759478][ T3178] add_disk_fwnode+0x100/0x3a0 [ 975.764773][ T3178] nbd_dev_add+0x733/0xb60 [ 975.769725][ T3178] nbd_init+0x168/0x1f0 [ 975.774498][ T3178] do_one_initcall+0x250/0x870 [ 975.779795][ T3178] do_initcall_level+0x10a/0x1a0 [ 975.785324][ T3178] do_initcalls+0x59/0xa0 [ 975.790190][ T3178] kernel_init_freeable+0x29d/0x3e0 [ 975.795923][ T3178] kernel_init+0x22/0x1d0 [ 975.800790][ T3178] ret_from_fork+0x514/0xb70 [ 975.805919][ T3178] ret_from_fork_asm+0x1a/0x30 [ 975.811221][ T3178] [ 975.811221][ T3178] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 975.819060][ T3178] __mutex_lock+0x197/0x15a0 [ 975.824187][ T3178] elevator_change+0x1af/0x480 [ 975.829489][ T3178] elevator_set_none+0xb5/0x140 [ 975.834877][ T3178] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 975.841216][ T3178] nbd_start_device+0x189/0xb30 [ 975.846604][ T3178] nbd_genl_connect+0x167d/0x1cd0 [ 975.852171][ T3178] genl_family_rcv_msg_doit+0x233/0x340 [ 975.858256][ T3178] genl_rcv_msg+0x614/0x7a0 [ 975.863292][ T3178] netlink_rcv_skb+0x226/0x4a0 [ 975.868593][ T3178] genl_rcv+0x28/0x40 [ 975.873108][ T3178] netlink_unicast+0x8ef/0xa80 [ 975.878425][ T3178] netlink_sendmsg+0x7f0/0xb20 [ 975.883734][ T3178] sock_sendmsg_nosec+0x14e/0x190 [ 975.889311][ T3178] ____sys_sendmsg+0x54e/0x850 [ 975.894613][ T3178] ___sys_sendmsg+0x2a5/0x360 [ 975.899823][ T3178] __x64_sys_sendmsg+0x1b1/0x290 [ 975.905335][ T3178] do_syscall_64+0x166/0x520 [ 975.910465][ T3178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.916895][ T3178] [ 975.916895][ T3178] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 975.925568][ T3178] blk_alloc_queue+0x544/0x690 [ 975.930874][ T3178] __blk_mq_alloc_disk+0x194/0x390 [ 975.936513][ T3178] nbd_dev_add+0x494/0xb60 [ 975.941462][ T3178] nbd_init+0x168/0x1f0 [ 975.946149][ T3178] do_one_initcall+0x250/0x870 [ 975.951443][ T3178] do_initcall_level+0x10a/0x1a0 [ 975.956908][ T3178] do_initcalls+0x59/0xa0 [ 975.961773][ T3178] kernel_init_freeable+0x29d/0x3e0 [ 975.967496][ T3178] kernel_init+0x22/0x1d0 [ 975.972355][ T3178] ret_from_fork+0x514/0xb70 [ 975.977481][ T3178] ret_from_fork_asm+0x1a/0x30 [ 975.982772][ T3178] [ 975.982772][ T3178] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 975.990000][ T3178] __lock_acquire+0x164c/0x2de0 [ 975.995407][ T3178] lock_acquire+0x115/0x350 [ 976.000438][ T3178] fs_reclaim_acquire+0x71/0x100 [ 976.005915][ T3178] __kmalloc_noprof+0xbc/0x710 [ 976.011214][ T3178] task_numa_fault+0x340d/0x4010 [ 976.016695][ T3178] handle_mm_fault+0x2a63/0x3750 [ 976.022173][ T3178] do_user_addr_fault+0x7f6/0x1480 [ 976.027834][ T3178] exc_page_fault+0x6a/0xc0 [ 976.032867][ T3178] asm_exc_page_fault+0x26/0x30 [ 976.038254][ T3178] __get_user_8+0x14/0x30 [ 976.043127][ T3178] exit_robust_list+0x58/0x2b0 [ 976.048548][ T3178] futex_exit_exec_release+0x14f/0x1f0 [ 976.054591][ T3178] mm_exit_exec_release+0x20/0x290 [ 976.060336][ T3178] exit_mm+0x50/0x240 [ 976.064879][ T3178] do_exit+0x6a8/0x2360 [ 976.069571][ T3178] do_group_exit+0x22d/0x2f0 [ 976.074700][ T3178] get_signal+0x1216/0x12c0 [ 976.079744][ T3178] arch_do_signal_or_restart+0xbb/0x860 [ 976.085833][ T3178] exit_to_user_mode_loop+0x10e/0x770 [ 976.091781][ T3178] do_syscall_64+0x328/0x520 [ 976.096916][ T3178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.103337][ T3178] [ 976.103337][ T3178] other info that might help us debug this: [ 976.103337][ T3178] [ 976.113567][ T3178] Chain exists of: [ 976.113567][ T3178] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 976.113567][ T3178] [ 976.126231][ T3178] Possible unsafe locking scenario: [ 976.126231][ T3178] [ 976.133694][ T3178] CPU0 CPU1 [ 976.139144][ T3178] ---- ---- [ 976.144517][ T3178] rlock(&mm->mmap_lock); [ 976.148950][ T3178] lock(sk_lock-AF_INET6); [ 976.155987][ T3178] lock(&mm->mmap_lock); [ 976.162864][ T3178] lock(fs_reclaim); [ 976.166937][ T3178] [ 976.166937][ T3178] *** DEADLOCK *** [ 976.166937][ T3178] [ 976.175080][ T3178] locks held by syz.0.13807/3178: 2, last CPU#0: [ 976.181502][ T3178] #0: ffff888077eb33f8 (&tsk->futex.exit_mutex){+.+.}-{4:4}, at: futex_exit_exec_release+0x38/0x1f0 [ 976.192414][ T3178] #1: ffff888054864080 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 976.202341][ T3178] [ 976.202341][ T3178] stack backtrace: [ 976.208241][ T3178] CPU: 0 UID: 0 PID: 3178 Comm: syz.0.13807 Not tainted syzkaller #0 PREEMPT(full) [ 976.217615][ T3178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 976.227675][ T3178] Call Trace: [ 976.231019][ T3178] [ 976.233975][ T3178] dump_stack_lvl+0xe8/0x150 [ 976.238633][ T3178] print_circular_bug+0x2e2/0x300 [ 976.243681][ T3178] check_noncircular+0x12f/0x150 [ 976.248637][ T3178] __lock_acquire+0x164c/0x2de0 [ 976.253516][ T3178] ? __lock_acquire+0x747/0x2de0 [ 976.258530][ T3178] lock_acquire+0x115/0x350 [ 976.263050][ T3178] ? __kmalloc_noprof+0xbc/0x710 [ 976.268006][ T3178] ? lock_acquire+0x115/0x350 [ 976.272692][ T3178] ? task_numa_fault+0x340d/0x4010 [ 976.277826][ T3178] fs_reclaim_acquire+0x71/0x100 [ 976.282774][ T3178] ? __kmalloc_noprof+0xbc/0x710 [ 976.287815][ T3178] __kmalloc_noprof+0xbc/0x710 [ 976.292596][ T3178] ? node_is_toptier+0x50/0x2b0 [ 976.297477][ T3178] ? task_numa_fault+0x340d/0x4010 [ 976.302606][ T3178] ? task_numa_fault+0x340d/0x4010 [ 976.307734][ T3178] task_numa_fault+0x340d/0x4010 [ 976.312691][ T3178] ? __lock_acquire+0x747/0x2de0 [ 976.317666][ T3178] ? __lock_acquire+0x747/0x2de0 [ 976.322638][ T3178] ? __pfx_task_numa_fault+0x10/0x10 [ 976.327952][ T3178] ? lock_acquire+0x115/0x350 [ 976.332656][ T3178] ? page_table_check_set+0x1a4/0x590 [ 976.338112][ T3178] ? page_table_check_set+0x1a4/0x590 [ 976.343509][ T3178] ? page_table_check_set+0x1a4/0x590 [ 976.348894][ T3178] ? page_table_check_set+0x52e/0x590 [ 976.354281][ T3178] ? page_table_check_set+0x1a4/0x590 [ 976.359767][ T3178] ? handle_mm_fault+0xf1/0x3750 [ 976.364728][ T3178] handle_mm_fault+0x2a63/0x3750 [ 976.369702][ T3178] ? handle_mm_fault+0xf1/0x3750 [ 976.374666][ T3178] ? __pfx_handle_mm_fault+0x10/0x10 [ 976.379994][ T3178] ? __lock_acquire+0x747/0x2de0 [ 976.384953][ T3178] ? lock_mm_and_find_vma+0xa7/0x340 [ 976.390258][ T3178] do_user_addr_fault+0x7f6/0x1480 [ 976.395403][ T3178] exc_page_fault+0x6a/0xc0 [ 976.400003][ T3178] asm_exc_page_fault+0x26/0x30 [ 976.404865][ T3178] RIP: 0010:__get_user_8+0x14/0x30 [ 976.410005][ T3178] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 976.429625][ T3178] RSP: 0018:ffffc90004fe79e8 EFLAGS: 00050287 [ 976.435724][ T3178] RAX: 00007f12d87f69a0 RBX: ffff888077eb3370 RCX: 0000000000000046 [ 976.443718][ T3178] RDX: 00007ffffffff000 RSI: ffffffff8e92d4a0 RDI: ffffffff8c8e8c80 [ 976.451801][ T3178] RBP: dffffc0000000000 R08: ffffffff822670ef R09: 0000000000000000 [ 976.459793][ T3178] R10: dffffc0000000000 R11: fffffbfff233ae38 R12: ffff888077eb1f40 [ 976.467772][ T3178] R13: ffff888077eb1f40 R14: ffff888077eb3370 R15: 00007f12d87f69a0 [ 976.475762][ T3178] ? __might_fault+0xaf/0x130 [ 976.480464][ T3178] exit_robust_list+0x58/0x2b0 [ 976.485424][ T3178] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.490732][ T3178] futex_exit_exec_release+0x14f/0x1f0 [ 976.496237][ T3178] mm_exit_exec_release+0x20/0x290 [ 976.501375][ T3178] exit_mm+0x50/0x240 [ 976.505388][ T3178] do_exit+0x6a8/0x2360 [ 976.509554][ T3178] ? __pfx_do_exit+0x10/0x10 [ 976.514194][ T3178] ? do_raw_spin_lock+0x12b/0x2f0 [ 976.519240][ T3178] do_group_exit+0x22d/0x2f0 [ 976.523848][ T3178] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.529066][ T3178] get_signal+0x1216/0x12c0 [ 976.533604][ T3178] arch_do_signal_or_restart+0xbb/0x860 [ 976.539246][ T3178] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 976.545446][ T3178] exit_to_user_mode_loop+0x10e/0x770 [ 976.550837][ T3178] ? rcu_is_watching+0x16/0xb0 [ 976.555636][ T3178] do_syscall_64+0x328/0x520 [ 976.560241][ T3178] ? trace_irq_disable+0x3b/0x140 [ 976.565315][ T3178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.571394][ T3178] ? clear_bhb_loop+0x70/0xc0 [ 976.576095][ T3178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.582005][ T3178] RIP: 0033:0x7f12da59f559 [ 976.586426][ T3178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.606049][ T3178] RSP: 002b:00007f12d87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 976.614484][ T3178] RAX: fffffffffffffffc RBX: 00007f12da825fa0 RCX: 00007f12da59f559 [ 976.622471][ T3178] RDX: 0000000000000050 RSI: 0000200000001880 RDI: 000000000000000a [ 976.630490][ T3178] RBP: 00007f12da636b50 R08: 0000000000000000 R09: 0000000000000000 [ 976.638496][ T3178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.646477][ T3178] R13: 00007f12da826038 R14: 00007f12da825fa0 R15: 00007ffc95394f38 [ 976.654471][ T3178]