last executing test programs: 1.592451515s ago: executing program 3 (id=14523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000e000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) 1.417714744s ago: executing program 3 (id=14525): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020"], 0x38}}, 0x0) 1.395207058s ago: executing program 3 (id=14526): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400}) 951.883779ms ago: executing program 1 (id=14528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000a76e089b0000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 913.644921ms ago: executing program 2 (id=14530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 883.010554ms ago: executing program 3 (id=14531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 856.305095ms ago: executing program 4 (id=14532): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x82, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3a4f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x54840}, 0x0) 786.518058ms ago: executing program 0 (id=14533): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @loopback, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1, 0xfffffff8}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 778.17321ms ago: executing program 1 (id=14534): syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) 777.482008ms ago: executing program 2 (id=14535): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="b42d5567db16") 722.22817ms ago: executing program 3 (id=14536): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) 674.24577ms ago: executing program 4 (id=14537): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) close(r2) 654.932832ms ago: executing program 0 (id=14538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}}, 0x90) 635.74177ms ago: executing program 2 (id=14539): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 557.860801ms ago: executing program 1 (id=14540): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4) 534.707498ms ago: executing program 4 (id=14541): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x29) 521.452365ms ago: executing program 0 (id=14542): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvfrom(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 457.861768ms ago: executing program 2 (id=14543): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000400), 0x0}, 0x20) 413.573122ms ago: executing program 1 (id=14544): unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 387.678599ms ago: executing program 4 (id=14545): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000001c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x32c1}], 0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}], 0x1, 0x4040081) 357.63127ms ago: executing program 0 (id=14546): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 274.009778ms ago: executing program 0 (id=14547): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x6) 209.757702ms ago: executing program 2 (id=14548): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) 209.606639ms ago: executing program 1 (id=14549): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x120}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 179.476389ms ago: executing program 4 (id=14550): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x3, 0x8, 0x6, 0xb942, 0x5, 0x1, r1}, 0x20) 112.69812ms ago: executing program 0 (id=14551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) 43.833677ms ago: executing program 3 (id=14552): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), 0x4) 23.262031ms ago: executing program 4 (id=14553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) socket$inet(0x2, 0x2, 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="00d60000000000", 0x7}, {0x0, 0x54}], 0x2) 5.595994ms ago: executing program 2 (id=14554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x599e, 0x8, 0x8, 0x1e, 0x72, 0x9, 0x200, 0xe899]}}]}]}]}, 0x38}}, 0x4000) 0s ago: executing program 1 (id=14555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) kernel console output (not intermixed with test programs): to perfect channel medium [ 363.663436][T19107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.935456][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6293'. [ 363.996498][T19127] netlink: 'syz.0.6296': attribute type 1 has an invalid length. [ 364.006210][T19127] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6296'. [ 364.057821][T19129] unsupported nlmsg_type 40 [ 364.297290][T19143] sctp: [Deprecated]: syz.0.6303 (pid 19143) Use of int in max_burst socket option. [ 364.297290][T19143] Use struct sctp_assoc_value instead [ 364.520804][T19155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6309'. [ 364.607140][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6311'. [ 364.649998][T19163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6311'. [ 364.806116][T19171] netlink: 'syz.1.6317': attribute type 1 has an invalid length. [ 364.844343][T19171] nbd: couldn't find device at index -427251215 [ 365.451122][T19211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6337'. [ 365.495980][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6337'. [ 365.520952][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6337'. [ 365.570436][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6340'. [ 365.867422][T19230] dummy0: entered allmulticast mode [ 365.902009][T19229] dummy0: left allmulticast mode [ 366.057526][T19242] netlink: 'syz.1.6352': attribute type 1 has an invalid length. [ 366.467626][T19261] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 366.857535][T19281] x_tables: unsorted underflow at hook 2 [ 366.876099][T19284] x_tables: duplicate underflow at hook 2 [ 367.208363][T19305] netlink: 'syz.4.6383': attribute type 12 has an invalid length. [ 367.530326][T19325] netlink: 'syz.3.6394': attribute type 2 has an invalid length. [ 368.185571][T19355] xt_CT: No such helper "snmp_trap" [ 369.632569][T19441] __nla_validate_parse: 8 callbacks suppressed [ 369.632590][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6450'. [ 369.909028][T19459] netlink: 'syz.0.6459': attribute type 32 has an invalid length. [ 370.024000][T19463] hm3): entered promiscuous mode [ 370.379668][T19485] 0: renamed from batadv_slave_1 [ 370.558927][T19496] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6476'. [ 370.572753][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6477'. [ 370.756861][T19505] team0: left allmulticast mode [ 370.771252][T19505] team_slave_0: left allmulticast mode [ 370.791892][T19505] team_slave_1: left allmulticast mode [ 370.827264][T19505] veth0_to_batadv: left promiscuous mode [ 370.838277][T19511] netlink: 'syz.0.6485': attribute type 1 has an invalid length. [ 370.842486][T19505] veth0_to_batadv: left allmulticast mode [ 370.876680][T19505] netdevsim netdevsim2 : left allmulticast mode [ 370.894265][T19515] netlink: 'syz.1.6487': attribute type 2 has an invalid length. [ 370.902927][T19505] xfrm1: left allmulticast mode [ 370.913768][T19505] ip6erspan0: left promiscuous mode [ 370.930969][T19505] ip6erspan0: left allmulticast mode [ 370.941012][T19515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6487'. [ 370.955248][T19505] bridge1: left promiscuous mode [ 370.972475][T19505] bridge1: left allmulticast mode [ 370.993741][T19519] netlink: 'syz.4.6489': attribute type 1 has an invalid length. [ 371.117964][T19526] netlink: 'syz.1.6491': attribute type 5 has an invalid length. [ 371.139006][T19525] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 371.210995][T19531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.384769][T19539] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 371.442108][T18793] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 371.563460][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6504'. [ 371.639527][T19557] ipt_REJECT: TCP_RESET invalid for non-tcp [ 371.658027][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6508'. [ 371.711904][ T1003] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 372.070569][T19584] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.6517'. [ 372.342071][T18793] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 372.742162][ T1003] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 372.786303][ T1003] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 372.911414][ T979] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 373.150376][T19648] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 373.168409][T19647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6543'. [ 373.181368][T19647] openvswitch: netlink: Unknown nsh attribute 0 [ 373.197507][T19650] netlink: 'syz.4.6544': attribute type 13 has an invalid length. [ 373.369587][T19657] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6549'. [ 373.420547][T19663] netlink: 'syz.4.6550': attribute type 1 has an invalid length. [ 374.112986][T19702] netlink: 'syz.2.6568': attribute type 4 has an invalid length. [ 374.250432][T19709] xt_socket: unknown flags 0x8 [ 374.340062][T19717] xt_hashlimit: size too large, truncated to 1048576 [ 374.348045][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6572'. [ 374.358066][T19717] xt_hashlimit: max too large, truncated to 1048576 [ 374.726904][T19738] wg1: entered promiscuous mode [ 374.746978][T19738] wg1: entered allmulticast mode [ 374.764754][ T5828] wg1 speed is unknown, defaulting to 1000 [ 374.782352][ T5828] syz0: Port: 1 Link ACTIVE [ 374.803725][ T5828] wg1 speed is unknown, defaulting to 1000 [ 374.842086][T19744] x_tables: duplicate underflow at hook 2 [ 374.938459][T19750] xt_cluster: node mask cannot exceed total number of nodes [ 375.307700][T19770] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535) [ 375.892187][T19808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6612'. [ 376.337253][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6623'. [ 376.825222][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6636'. [ 377.221037][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 377.476195][T19905] netlink: 'syz.1.6655': attribute type 2 has an invalid length. [ 377.776100][T19920] netlink: 'syz.0.6662': attribute type 4 has an invalid length. [ 377.813137][T19920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6662'. [ 378.133412][T19936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6670'. [ 378.287516][T19940] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.6672'. [ 378.694595][T19966] netlink: 'syz.0.6685': attribute type 1 has an invalid length. [ 378.718866][T19966] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6685'. [ 378.740412][T19972] netlink: 'syz.4.6687': attribute type 21 has an invalid length. [ 378.749869][T19968] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 378.758240][T19966] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6685'. [ 378.759344][T19972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6687'. [ 378.776847][T19966] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6685'. [ 378.929541][T19977] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 379.537227][T20013] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 379.727206][T20023] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 380.303490][T20048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.016126][T20082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.044073][T20088] __nla_validate_parse: 3 callbacks suppressed [ 381.044096][T20088] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6742'. [ 381.334873][T20102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6747'. [ 381.575448][T20116] openvswitch: netlink: EtherType 50a is less than min 600 [ 381.645596][T20118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.371274][T20159] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 382.408039][T20159] bond1 (unregistering): Released all slaves [ 382.615381][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6784'. [ 382.779924][T20188] netlink: 424 bytes leftover after parsing attributes in process `syz.3.6787'. [ 382.813131][T20188] netlink: 'syz.3.6787': attribute type 1 has an invalid length. [ 383.022800][T20202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.452031][T20232] netlink: 45 bytes leftover after parsing attributes in process `syz.2.6808'. [ 383.789834][T20246] netlink: 'syz.2.6816': attribute type 3 has an invalid length. [ 383.873548][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6819'. [ 384.074467][T20262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6824'. [ 384.109254][T20267] sock: sock_timestamping_bind_phc: sock not bind to device [ 384.533772][T20286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6833'. [ 384.621035][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6836'. [ 384.885857][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6844'. [ 385.710897][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 386.724447][T20415] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 386.732533][T20415] __nla_validate_parse: 1 callbacks suppressed [ 386.732554][T20415] netlink: 276 bytes leftover after parsing attributes in process `syz.0.6895'. [ 386.946606][T20427] openvswitch: netlink: IP tunnel dst address not specified [ 387.361940][T20454] netlink: 'syz.3.6914': attribute type 10 has an invalid length. [ 387.471766][T20456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6915'. [ 387.910476][T20484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.048243][T20490] gre0: entered promiscuous mode [ 388.063672][T20490] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 389.085591][T20553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6964'. [ 389.095591][T20553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6964'. [ 389.778855][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6982'. [ 389.928757][T20600] netlink: 'syz.2.6987': attribute type 10 has an invalid length. [ 389.951467][T20600] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6987'. [ 389.981237][T20600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.019459][T20600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.041209][T20600] hsr0: entered promiscuous mode [ 390.059187][T20600] bridge0: port 3(hsr0) entered blocking state [ 390.086110][T20600] bridge0: port 3(hsr0) entered disabled state [ 390.108943][T20600] hsr0: entered allmulticast mode [ 390.124928][T20600] hsr_slave_0: entered allmulticast mode [ 390.136441][T20600] hsr_slave_1: entered allmulticast mode [ 390.828249][T20631] netlink: 'syz.1.7002': attribute type 10 has an invalid length. [ 391.343510][T20658] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 391.562398][T20672] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7020'. [ 391.811937][T20688] netlink: 'syz.0.7028': attribute type 5 has an invalid length. [ 391.901541][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7029'. [ 391.959693][T20697] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7032'. [ 392.179235][T20708] veth1_to_bridge: entered allmulticast mode [ 392.208335][T20708] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 392.500477][T20726] netlink: 'syz.0.7045': attribute type 1 has an invalid length. [ 392.516780][T20726] netlink: 'syz.0.7045': attribute type 2 has an invalid length. [ 393.023308][T20758] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 393.055184][T20762] netlink: 'syz.3.7065': attribute type 4 has an invalid length. [ 393.246348][T20773] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7070'. [ 393.276595][T20773] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7070'. [ 393.472074][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7076'. [ 393.699088][T20801] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 394.065895][T20821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.325042][T20834] netlink: 'syz.3.7099': attribute type 2 has an invalid length. [ 394.363552][T20837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7102'. [ 394.398077][T20837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7102'. [ 394.875442][T20860] netlink: 'syz.0.7112': attribute type 1 has an invalid length. [ 396.003359][T20923] openvswitch: netlink: Key type 310 is out of range max 32 [ 396.550015][T20955] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 397.088403][T20988] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7165'. [ 397.158625][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7167'. [ 397.569518][T21014] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 397.749060][T21026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7183'. [ 397.779193][T21026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7183'. [ 397.970188][T21039] netlink: 'syz.3.7188': attribute type 1 has an invalid length. [ 398.090983][T21045] bond0: Error: Cannot enslave bond to itself. [ 398.644834][T21081] netlink: 'syz.3.7208': attribute type 309 has an invalid length. [ 398.890613][T21092] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 398.929649][T21092] bond6 (unregistering): Released all slaves [ 399.100484][T21108] netlink: 'syz.3.7220': attribute type 1 has an invalid length. [ 399.362840][T21124] netlink: 'syz.0.7229': attribute type 2 has an invalid length. [ 399.371134][T21124] netlink: 'syz.0.7229': attribute type 11 has an invalid length. [ 399.379193][T21124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7229'. [ 399.535780][T21129] --map-set only usable from mangle table [ 399.564240][T21134] netlink: 'syz.0.7234': attribute type 1 has an invalid length. [ 399.585836][T21134] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7234'. [ 400.361551][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7259'. [ 400.617581][T21202] openvswitch: netlink: EtherType 0 is less than min 600 [ 401.216868][T21226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7280'. [ 401.370264][T21230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7283'. [ 401.551083][T21237] netlink: 13 bytes leftover after parsing attributes in process `syz.1.7286'. [ 401.694165][T21242] netlink: 'syz.3.7288': attribute type 13 has an invalid length. [ 401.728922][T21242] netlink: 'syz.3.7288': attribute type 17 has an invalid length. [ 401.755117][T21242] netlink: 'syz.3.7288': attribute type 27 has an invalid length. [ 401.782049][T21248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.902965][T21250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.019859][T21258] netlink: 'syz.1.7296': attribute type 1 has an invalid length. [ 402.306678][T21273] l2: entered promiscuous mode [ 402.391142][T21275] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7304'. [ 402.436506][T21277] 5: entered promiscuous mode [ 402.666161][T21285] netlink: 268 bytes leftover after parsing attributes in process `syz.1.7309'. [ 402.980926][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 403.067686][T21296] geneve2: entered promiscuous mode [ 403.079437][T21296] geneve2: entered allmulticast mode [ 403.095857][ T82] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.121852][ T82] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.139583][ T82] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.170771][ T82] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.576589][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7327'. [ 403.602571][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7327'. [ 404.647111][T21372] validate_nla: 2 callbacks suppressed [ 404.647132][T21372] netlink: 'syz.1.7352': attribute type 6 has an invalid length. [ 404.983600][T21393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7360'. [ 405.537626][T21428] ip6t_rpfilter: unknown options [ 405.632156][T21433] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 405.633502][T21431] netlink: 'syz.0.7379': attribute type 10 has an invalid length. [ 405.705737][T21431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7379'. [ 405.719130][T21431] dummy0: entered promiscuous mode [ 405.727409][T21431] bridge0: port 3(dummy0) entered blocking state [ 405.734412][T21431] bridge0: port 3(dummy0) entered disabled state [ 405.748162][T21431] dummy0: entered allmulticast mode [ 405.763480][T21431] bridge0: port 3(dummy0) entered blocking state [ 405.769999][T21431] bridge0: port 3(dummy0) entered forwarding state [ 405.893895][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7385'. [ 405.925593][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7385'. [ 406.234743][T21463] netlink: 'syz.4.7395': attribute type 1 has an invalid length. [ 406.242837][T21463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.556707][T21480] netlink: 'syz.1.7403': attribute type 1 has an invalid length. [ 406.583559][T21480] netlink: 'syz.1.7403': attribute type 2 has an invalid length. [ 406.609464][T21480] netlink: 'syz.1.7403': attribute type 3 has an invalid length. [ 406.849992][T21499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7413'. [ 407.842575][T21539] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7433'. [ 407.956040][T21541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7435'. [ 408.223260][T21559] netlink: 'syz.3.7443': attribute type 1 has an invalid length. [ 408.757443][T21587] netlink: zone id is out of range [ 408.783060][T21587] netlink: zone id is out of range [ 408.798018][T21587] netlink: zone id is out of range [ 408.827330][T21587] netlink: zone id is out of range [ 408.852297][T21587] netlink: zone id is out of range [ 408.884945][T21587] netlink: zone id is out of range [ 408.901708][T21587] netlink: zone id is out of range [ 408.912740][T21587] netlink: zone id is out of range [ 408.927842][T21587] netlink: zone id is out of range [ 409.753677][T21646] netlink: 'syz.4.7483': attribute type 8 has an invalid length. [ 410.059039][T21666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7490'. [ 410.101746][T21666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7490'. [ 410.289525][T21679] netlink: 712 bytes leftover after parsing attributes in process `syz.0.7494'. [ 410.344928][T21679] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.7494'. [ 410.362197][T21675] bond4: entered promiscuous mode [ 410.387451][T21675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.389508][T21679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7494'. [ 410.687836][T21701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7505'. [ 410.876796][T21713] ip6t_REJECT: ECHOREPLY is not supported [ 410.884238][T21714] netlink: 'syz.3.7509': attribute type 8 has an invalid length. [ 411.046238][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7515'. [ 411.080010][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7515'. [ 411.268660][T21729] delete_channel: no stack [ 411.781896][T21756] netlink: 'syz.1.7532': attribute type 2 has an invalid length. [ 411.810113][T21756] netlink: 'syz.1.7532': attribute type 9 has an invalid length. [ 412.062676][T21770] gretap1: entered promiscuous mode [ 412.078224][T21770] gretap1: entered allmulticast mode [ 412.770859][T21816] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0 [ 412.862305][T21821] __nla_validate_parse: 6 callbacks suppressed [ 412.862324][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7564'. [ 412.899178][T21821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7564'. [ 412.914736][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7564'. [ 413.750970][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7593'. [ 413.900975][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7597'. [ 413.938329][T21888] netlink: 'syz.0.7596': attribute type 13 has an invalid length. [ 413.970202][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7596'. [ 413.996311][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7600'. [ 414.131173][T21899] netlink: 'syz.1.7604': attribute type 4 has an invalid length. [ 414.140361][T21900] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7603'. [ 414.165518][T21900] netlink: 'syz.0.7603': attribute type 1 has an invalid length. [ 414.264053][T21908] netlink: 'syz.2.7607': attribute type 21 has an invalid length. [ 415.137496][T21965] netlink: 'syz.4.7634': attribute type 1 has an invalid length. [ 415.150818][T21965] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7634'. [ 415.169208][T21965] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7634'. [ 415.253735][T21963] xt_CT: No such helper "syz0" [ 416.084473][T22017] netlink: 'syz.3.7662': attribute type 29 has an invalid length. [ 416.118536][T22020] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 416.254489][T22029] netlink: 'syz.3.7667': attribute type 1 has an invalid length. [ 416.537729][T22045] xt_HMARK: spi-set and port-set can't be combined [ 417.706606][T22114] netlink: 'syz.2.7699': attribute type 3 has an invalid length. [ 417.935355][T22124] netlink: 'syz.2.7703': attribute type 3 has an invalid length. [ 417.966332][T22124] netlink: 'syz.2.7703': attribute type 3 has an invalid length. [ 417.996779][T22124] __nla_validate_parse: 6 callbacks suppressed [ 417.996798][T22124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7703'. [ 418.135276][T22131] ip6tnl2: entered promiscuous mode [ 419.597106][T22217] netlink: 'syz.4.7740': attribute type 1 has an invalid length. [ 419.614649][T22217] netlink: 'syz.4.7740': attribute type 1 has an invalid length. [ 419.618779][T22218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 419.894936][T22235] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 419.915303][T22235] batman_adv: batadv0: Removing interface: virt_wifi0 [ 419.974061][T22239] xt_TCPMSS: Only works on TCP SYN packets [ 420.214290][T22253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7755'. [ 420.227053][T22252] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7756'. [ 420.283668][T22252] netlink: 680 bytes leftover after parsing attributes in process `syz.2.7756'. [ 420.317878][T22252] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7756'. [ 420.366644][T22261] netlink: 'syz.4.7759': attribute type 1 has an invalid length. [ 420.571940][T22269] net_ratelimit: 17 callbacks suppressed [ 420.571963][T22269] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 420.912180][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 420.922734][T22290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.019886][T22292] netlink: 'syz.1.7772': attribute type 2 has an invalid length. [ 421.053905][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7772'. [ 421.095119][T22298] netlink: 'syz.0.7773': attribute type 61 has an invalid length. [ 421.137556][T22298] netlink: 'syz.0.7773': attribute type 62 has an invalid length. [ 421.703021][T22330] openvswitch: netlink: IPv4 tun info is not correct [ 421.899829][T22346] netlink: 'syz.0.7798': attribute type 21 has an invalid length. [ 422.028898][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7800'. [ 422.035855][T22352] netlink: 'syz.2.7801': attribute type 9 has an invalid length. [ 422.057144][T22352] netlink: 'syz.2.7801': attribute type 6 has an invalid length. [ 422.441937][T22376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.459421][T22427] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 423.544523][T22431] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7838'. [ 423.612183][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7840'. [ 424.460943][T22477] openvswitch: netlink: Actions may not be safe on all matching packets [ 424.733975][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7869'. [ 424.779242][T22496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7872'. [ 425.237117][T22522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 425.633346][T22551] xt_bpf: check failed: parse error [ 425.674673][T22553] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 426.181349][T22583] x_tables: unsorted underflow at hook 4 [ 426.540786][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7923'. [ 427.128073][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7936'. [ 427.330071][T22645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.373490][T22645] batman_adv: batadv0: Removing interface: 0 [ 427.425379][T22651] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 427.645421][T22661] netlink: 'syz.3.7949': attribute type 61 has an invalid length. [ 427.704738][T22665] netlink: 'syz.0.7952': attribute type 1 has an invalid length. [ 427.777719][T22669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7953'. [ 428.243538][T22701] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7968'. [ 428.282438][T22701] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7968'. [ 428.538765][T22715] xt_nat: multiple ranges no longer supported [ 428.709061][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 428.815185][T22727] netlink: 'syz.3.7982': attribute type 1 has an invalid length. [ 428.831285][T22727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7982'. [ 428.933541][T22695] infiniband !yz!: set down [ 428.947119][T22695] infiniband !yz!: added team_slave_0 [ 429.029589][T22736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7985'. [ 429.101910][T22695] RDS/IB: !yz!: added [ 429.106764][T22695] smc: adding ib device !yz! with port count 1 [ 429.113681][T22695] smc: ib device !yz! port 1 has no pnetid [ 429.743223][T22770] netlink: 'syz.1.8003': attribute type 11 has an invalid length. [ 429.940114][T22781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.041028][T22784] bond3: Removing last arp target with arp_interval on [ 430.221678][T22793] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 430.240455][T22793] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 430.410578][T22802] veth1_to_bridge: entered allmulticast mode [ 430.793178][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8029'. [ 431.362255][T22851] Cannot find del_set index 4 as target [ 431.504049][T22857] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8046'. [ 431.537573][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8046'. [ 431.940845][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 432.057174][T22881] Unsupported ieee802154 address type: 0 [ 432.102705][T22884] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8058'. [ 432.409782][T22902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.609201][T22916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8076'. [ 432.693280][T22921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.840058][T22931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8083'. [ 432.962233][T22939] netlink: 'syz.1.8085': attribute type 1 has an invalid length. [ 433.012039][T22939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8085'. [ 433.105315][T22943] xt_hashlimit: max too large, truncated to 1048576 [ 433.135420][T22943] xt_bpf: check failed: parse error [ 434.224019][T22995] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 434.280065][T23000] netlink: zone id is out of range [ 434.292821][T23000] netlink: zone id is out of range [ 434.305814][T23000] netlink: zone id is out of range [ 434.326277][T23000] netlink: zone id is out of range [ 434.346073][T23000] netlink: zone id is out of range [ 434.363693][T23000] netlink: zone id is out of range [ 434.380828][T23000] netlink: zone id is out of range [ 434.548822][T23011] xt_CT: No such helper "syz1" [ 434.758262][T23028] __nla_validate_parse: 1 callbacks suppressed [ 434.758284][T23028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8128'. [ 434.764256][T23027] netlink: 'syz.1.8127': attribute type 3 has an invalid length. [ 434.791829][T23027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8127'. [ 434.996418][T23038] net_ratelimit: 393 callbacks suppressed [ 434.996439][T23038] openvswitch: netlink: Flow actions attr not present in new flow. [ 435.503412][T23060] netlink: 'syz.3.8142': attribute type 2 has an invalid length. [ 435.810287][T23077] ip6gre1: entered promiscuous mode [ 435.956593][T23086] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8156'. [ 436.262222][T23100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8164'. [ 436.286412][T23100] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 436.365879][T23108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8168'. [ 436.504418][T23116] netlink: 'syz.1.8172': attribute type 16 has an invalid length. [ 436.522113][T23116] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8172'. [ 436.678713][T23124] SET target dimension over the limit! [ 436.693969][T23125] Cannot find set identified by id 65534 to match [ 436.749812][T23128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8178'. [ 437.116086][T23149] sctp: [Deprecated]: syz.0.8188 (pid 23149) Use of int in maxseg socket option. [ 437.116086][T23149] Use struct sctp_assoc_value instead [ 437.253349][T23158] netlink: 'syz.4.8193': attribute type 3 has an invalid length. [ 437.291294][T23158] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8193'. [ 437.363351][T23167] netlink: 'syz.0.8198': attribute type 6 has an invalid length. [ 437.540899][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 437.765343][T23189] netlink: 'syz.1.8207': attribute type 7 has an invalid length. [ 437.791975][T23189] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8207'. [ 437.821841][T23194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8210'. [ 438.265549][T23222] netlink: 'syz.3.8223': attribute type 8 has an invalid length. [ 438.941649][T23266] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 439.208674][T23281] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 439.536494][T23304] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 440.260544][T23350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.317702][T23353] __nla_validate_parse: 5 callbacks suppressed [ 440.317723][T23353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8286'. [ 440.359987][T23353] netlink: 560 bytes leftover after parsing attributes in process `syz.4.8286'. [ 440.501714][T23362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8292'. [ 440.665762][T23373] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 440.719404][T23376] mac80211_hwsim hwsim3 ;: renamed from wlan0 [ 440.996553][T23396] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 441.048310][T23400] Cannot find set identified by id 3 to match [ 441.552852][T23433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8324'. [ 441.828874][T23451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8332'. [ 441.855989][T23451] netlink: 'syz.0.8332': attribute type 1 has an invalid length. [ 441.881883][T23451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8332'. [ 442.010080][T23461] batadv1: entered promiscuous mode [ 442.022566][T23461] batadv1: entered allmulticast mode [ 442.173050][T23471] macsec0: entered promiscuous mode [ 442.206878][T23471] macsec0: entered allmulticast mode [ 442.377437][T23483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8348'. [ 442.570608][T23494] xt_TCPMSS: Only works on TCP SYN packets [ 442.671909][T23496] : entered promiscuous mode [ 442.702158][T23501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8358'. [ 442.910351][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8363'. [ 442.998905][T23514] geneve4: entered promiscuous mode [ 443.031183][ T130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.045279][ T130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.070014][ T130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.101171][ T130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.238673][T23527] netlink: 'syz.0.8370': attribute type 10 has an invalid length. [ 443.523970][T23527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.542948][T23527] `: Port device netdevsim0 added [ 443.717459][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8376'. [ 443.907965][T23543] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 443.928408][ T1159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.957923][ T1159] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.990821][ T1159] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.010055][ T1159] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.176362][T23565] netlink: 'syz.4.8387': attribute type 61 has an invalid length. [ 444.609431][T23590] unsupported nla_type 216 [ 445.102671][T23622] openvswitch: netlink: Key type 29 is not supported [ 445.719614][T23655] __nla_validate_parse: 3 callbacks suppressed [ 445.719636][T23655] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8432'. [ 445.767515][T23646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8428'. [ 445.791091][T23646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8428'. [ 445.813558][ T795] wg1 speed is unknown, defaulting to 1000 [ 445.813709][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 445.825424][ T795] syz0: Port: 1 Link DOWN [ 445.849678][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 445.878175][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8433'. [ 445.888436][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 445.898194][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 445.911407][ T795] wg1 speed is unknown, defaulting to 1000 [ 446.426706][T23687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8448'. [ 446.748329][T23703] openvswitch: netlink: Invalid VLAN frame [ 447.416904][T23743] wg2: entered allmulticast mode [ 447.452155][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8477'. [ 447.912233][T23778] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8492'. [ 448.173005][T23791] netlink: zone id is out of range [ 448.200516][T23791] netlink: zone id is out of range [ 448.215807][T23784] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 448.231179][T23791] netlink: zone id is out of range [ 448.244923][T23791] netlink: zone id is out of range [ 448.254285][T23784] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 448.282123][T23791] netlink: zone id is out of range [ 448.288887][T23791] netlink: zone id is out of range [ 448.304546][T23791] netlink: zone id is out of range [ 448.319243][T23791] netlink: zone id is out of range [ 448.333958][T23791] netlink: zone id is out of range [ 449.160276][T23845] netlink: 'syz.1.8523': attribute type 2 has an invalid length. [ 449.287154][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8527'. [ 449.319342][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8527'. [ 449.494950][T23864] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8534'. [ 449.833482][T23887] netlink: 'syz.4.8544': attribute type 11 has an invalid length. [ 450.280069][T23915] xt_l2tp: wrong L2TP version: 0 [ 450.473056][T23925] netlink: 'syz.1.8563': attribute type 9 has an invalid length. [ 450.491306][T23925] netlink: 'syz.1.8563': attribute type 7 has an invalid length. [ 450.511989][T23925] netlink: 'syz.1.8563': attribute type 8 has an invalid length. [ 450.569551][T23931] SET target dimension over the limit! [ 450.862928][T23951] wg1 speed is unknown, defaulting to 1000 [ 451.090844][T23961] __nla_validate_parse: 2 callbacks suppressed [ 451.090864][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 451.118061][T23963] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8583'. [ 451.127525][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 451.147404][T23961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8581'. [ 451.321922][T23972] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 451.563005][T23985] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8592'. [ 451.792561][T23995] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 451.820483][T23995] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 451.844454][T23995] veth1_virt_wifi: entered allmulticast mode [ 451.871708][T23995] veth1_virt_wifi: left allmulticast mode [ 452.331839][T24026] net_ratelimit: 17 callbacks suppressed [ 452.331858][T24026] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 452.536560][T24035] netlink: 'syz.3.8618': attribute type 1 has an invalid length. [ 452.569379][T24035] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8618'. [ 452.848803][T24053] xt_bpf: check failed: parse error [ 453.593326][T24090] nftables ruleset with unbound chain [ 454.276292][T24118] netlink: 'syz.0.8658': attribute type 1 has an invalid length. [ 454.548815][T24131] ip6erspan1: entered allmulticast mode [ 454.631165][T24134] openvswitch: netlink: IP tunnel dst address not specified [ 454.827437][T24144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8671'. [ 455.103446][T24160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8679'. [ 455.137300][T24160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8679'. [ 455.167337][T24160] netlink: 'syz.2.8679': attribute type 4 has an invalid length. [ 455.302002][T24172] xt_TCPMSS: Only works on TCP SYN packets [ 456.408727][T24232] tipc: Started in network mode [ 456.426709][T24232] tipc: Node identity ac14140f, cluster identity 4711 [ 456.435152][T24232] tipc: New replicast peer: 172.20.20.170 [ 456.441946][T24232] tipc: Enabled bearer , priority 10 [ 456.562834][T24241] netlink: 'syz.1.8719': attribute type 4 has an invalid length. [ 456.606902][T24241] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8719'. [ 456.645121][T24241] .`: renamed from bond0 [ 457.442113][T24293] tipc: Started in network mode [ 457.449425][T24293] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 457.459076][T24293] tipc: Enabling of bearer rejected, failed to enable media [ 457.572555][ T979] tipc: Node number set to 2886997007 [ 457.777487][T24313] tipc: Enabling of bearer rejected, media not registered [ 458.099125][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8763'. [ 458.219246][T24339] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8764'. [ 459.226408][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8794'. [ 459.251511][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8794'. [ 459.583240][T24422] netlink: 'syz.3.8804': attribute type 2 has an invalid length. [ 459.694418][T24426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8805'. [ 459.770943][T24426] vlan0: entered promiscuous mode [ 459.793332][T24426] bridge0: entered promiscuous mode [ 460.276759][T24461] openvswitch: netlink: Duplicate or invalid key (type 0). [ 460.303274][T24461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.783630][T24489] ipvlan2: entered promiscuous mode [ 460.800410][T24489] bridge0: port 4(ipvlan2) entered blocking state [ 460.843497][T24489] bridge0: port 4(ipvlan2) entered disabled state [ 460.853226][T24489] ipvlan2: entered allmulticast mode [ 460.870354][T24489] bridge0: entered allmulticast mode [ 460.905755][T24489] ipvlan2: left allmulticast mode [ 460.940138][T24489] bridge0: left allmulticast mode [ 461.418646][T24515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8848'. [ 461.625122][T24528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8853'. [ 461.758474][T24533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8857'. [ 461.913524][T24545] netlink: 'syz.0.8862': attribute type 1 has an invalid length. [ 462.593024][T24589] netlink: 'syz.3.8882': attribute type 66 has an invalid length. [ 462.939994][T24606] netlink: 'syz.0.8890': attribute type 28 has an invalid length. [ 462.948457][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8891'. [ 463.043910][T24613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8894'. [ 463.063293][T24613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8894'. [ 463.462427][T24632] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.594192][T24641] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8906'. [ 463.607597][T24641] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 463.622986][T24643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8907'. [ 463.868207][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8914'. [ 464.239970][T24680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.278304][ T5828] IPVS: starting estimator thread 0... [ 464.335141][T24684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8925'. [ 464.380807][T24681] IPVS: using max 26 ests per chain, 62400 per kthread [ 464.547608][T24697] atomic_op ffff88802b851998 conn xmit_atomic 0000000000000000 [ 464.689065][T24705] ip6gretap3: entered allmulticast mode [ 464.886437][T24715] macsec0: entered allmulticast mode [ 464.911541][T24715] veth1_macvtap: entered allmulticast mode [ 464.928956][T24715] macsec0: left allmulticast mode [ 464.940702][T24715] veth1_macvtap: left allmulticast mode [ 465.068415][T24724] tipc: Started in network mode [ 465.085400][T24724] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 465.114543][T24724] tipc: Enabling of bearer rejected, failed to enable media [ 465.127228][T24729] netlink: 'syz.3.8948': attribute type 4 has an invalid length. [ 465.139577][T24728] sch_tbf: burst 240 is lower than device lo mtu (1294) ! [ 465.352105][T24742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8954'. [ 465.603346][T24758] nbd: socks must be embedded in a SOCK_ITEM attr [ 466.010378][T24786] ip6tnl0: Caught tx_queue_len zero misconfig [ 466.474961][T24814] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 466.936454][T24844] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 467.165417][T24856] smc: net device wlan0 applied user defined pnetid SYZ0 [ 467.360116][T24867] netlink: 'syz.1.9014': attribute type 1 has an invalid length. [ 467.368411][T24867] __nla_validate_parse: 5 callbacks suppressed [ 467.368429][T24867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9014'. [ 467.478569][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9018'. [ 467.939196][T24899] tipc: Started in network mode [ 467.946233][T24899] tipc: Node identity fff, cluster identity 4711 [ 467.953118][T24899] tipc: Node number set to 4095 [ 467.958524][T24899] tipc: Cannot configure node identity twice [ 468.149151][T24910] tipc: Enabled bearer , priority 21 [ 469.225802][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9060'. [ 469.528244][T24977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9067'. [ 469.619971][T24983] vxcan3: entered promiscuous mode [ 469.696079][T24985] : entered promiscuous mode [ 469.710095][T24991] Bluetooth: MGMT ver 1.23 [ 469.978536][T25005] tipc: Started in network mode [ 469.983821][T25005] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 469.998903][T25005] tipc: Enabling of bearer rejected, failed to enable media [ 470.237586][T25021] Bluetooth: MGMT ver 1.23 [ 470.244193][T25023] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9090'. [ 470.264370][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9090'. [ 470.712159][T25052] tipc: Cannot configure node identity twice [ 472.022459][T25122] smc: net device hsr0 applied user defined pnetid SYZ2 [ 473.066369][T25173] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (165) ! [ 473.229884][T25185] netlink: 'syz.2.9161': attribute type 5 has an invalid length. [ 473.400401][T25197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9164'. [ 473.427901][T25197] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 473.774498][T25222] netlink: 'syz.3.9179': attribute type 1 has an invalid length. [ 473.783283][T25222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9179'. [ 473.846554][T25224] bridge0: port 3(veth0_to_bridge) entered blocking state [ 473.856706][T25224] bridge0: port 3(veth0_to_bridge) entered disabled state [ 473.864796][T25224] veth0_to_bridge: entered allmulticast mode [ 473.876136][T25224] veth0_to_bridge: entered promiscuous mode [ 474.115208][T25238] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9187'. [ 474.497309][T25258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9197'. [ 474.662258][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 474.669907][ T5834] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 474.841528][T25250] ipvlan0: entered promiscuous mode [ 475.985966][T25311] xt_hashlimit: size too large, truncated to 1048576 [ 476.072197][T25315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9223'. [ 476.166451][T25318] netlink: 'syz.4.9224': attribute type 6 has an invalid length. [ 476.193384][T25318] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.9224'. [ 477.469710][T25382] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9254'. [ 477.501707][T25382] netlink: 'syz.4.9254': attribute type 1 has an invalid length. [ 477.532948][T25382] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9254'. [ 478.427125][T25434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.557896][T25503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9311'. [ 479.800092][T25519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9320'. [ 480.055263][T25526] bond0: Removing last ns target with arp_interval on [ 480.848824][T25579] macvtap0: entered promiscuous mode [ 480.868386][T25578] macvtap0: left promiscuous mode [ 481.479547][T25607] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9361'. [ 481.628027][T25607] IPv6: sit2: Disabled Multicast RS [ 481.641827][T25607] sit2: entered allmulticast mode [ 481.957464][T25628] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9370'. [ 482.127529][T25634] netlink: 'syz.2.9373': attribute type 4 has an invalid length. [ 482.163207][T25634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9373'. [ 482.629527][T25662] sctp: [Deprecated]: syz.0.9386 (pid 25662) Use of int in max_burst socket option. [ 482.629527][T25662] Use struct sctp_assoc_value instead [ 482.727855][T25667] netlink: 'syz.4.9388': attribute type 11 has an invalid length. [ 482.779002][T25667] netlink: 'syz.4.9388': attribute type 4 has an invalid length. [ 482.815694][T25667] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.9388'. [ 483.023989][T25683] IPVS: Error connecting to the multicast addr [ 483.265450][T25697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9400'. [ 483.499293][T25710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9404'. [ 483.524720][T25710] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9404'. [ 483.536178][T25710] tipc: Invalid UDP bearer configuration [ 483.536236][T25710] tipc: Enabling of bearer rejected, failed to enable media [ 483.987227][T25738] macsec1: entered promiscuous mode [ 484.349589][T25758] tipc: Invalid UDP bearer configuration [ 484.349639][T25758] tipc: Enabling of bearer rejected, failed to enable media [ 485.027259][T25801] netlink: 'syz.4.9447': attribute type 8 has an invalid length. [ 485.037469][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9447'. [ 485.134294][T25805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9450'. [ 485.152387][T25805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9450'. [ 485.183341][T25805] netlink: 'syz.0.9450': attribute type 14 has an invalid length. [ 485.208124][T25805] netlink: 'syz.0.9450': attribute type 11 has an invalid length. [ 485.282950][T25813] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9454'. [ 485.353448][T25814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9454'. [ 485.842589][T25844] bond3: option lacp_rate: invalid value (128) [ 485.869105][T25844] bond3 (unregistering): Released all slaves [ 485.909100][ T795] IPVS: starting estimator thread 0... [ 486.000961][T25853] IPVS: using max 29 ests per chain, 69600 per kthread [ 486.920557][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9500'. [ 487.152515][T25926] netlink: 'syz.0.9507': attribute type 32 has an invalid length. [ 487.160494][T25926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9507'. [ 487.207484][T25926] bond6: option coupled_control: invalid value (12) [ 487.236638][T25926] bond6 (unregistering): Released all slaves [ 487.579177][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9514'. [ 487.619422][T25942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9514'. [ 487.653808][T25942] netlink: 'syz.0.9514': attribute type 15 has an invalid length. [ 488.709943][T25987] netlink: 'syz.2.9535': attribute type 1 has an invalid length. [ 488.729152][T25987] netlink: 728 bytes leftover after parsing attributes in process `syz.2.9535'. [ 489.074476][T26010] xt_hashlimit: size too large, truncated to 1048576 [ 489.595579][T26039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.578871][T26096] __nla_validate_parse: 4 callbacks suppressed [ 490.578894][T26096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9587'. [ 490.807500][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9593'. [ 491.194223][T26134] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9606'. [ 491.495958][T26152] ipip0: entered promiscuous mode [ 491.876287][ T5911] IPVS: starting estimator thread 0... [ 491.917864][T26176] netlink: 'syz.4.9624': attribute type 142 has an invalid length. [ 491.959449][T26181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9628'. [ 491.973454][T26181] 8021q: VLANs not supported on gre0 [ 491.981446][T26175] IPVS: using max 27 ests per chain, 64800 per kthread [ 492.442045][T26201] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9637'. [ 492.836386][T26215] xt_time: unknown flags 0xf4 [ 493.222259][T26231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9652'. [ 494.599546][T26296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9679'. [ 494.649616][T26303] netlink: 'syz.4.9679': attribute type 22 has an invalid length. [ 494.668610][T26303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9679'. [ 494.992785][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9686'. [ 495.013787][T26316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9686'. [ 495.034138][T26316] netlink: 'syz.0.9686': attribute type 12 has an invalid length. [ 495.056034][T26316] netlink: 'syz.0.9686': attribute type 13 has an invalid length. [ 495.878333][T26356] vlan0: entered promiscuous mode [ 495.889613][T26356] geneve1: entered promiscuous mode [ 495.906654][T26356] vlan0: entered allmulticast mode [ 495.924159][T26356] geneve1: entered allmulticast mode [ 495.982213][T26362] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.9702'. [ 496.007588][T26362] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.9702'. [ 496.017369][T26363] netlink: 'syz.2.9701': attribute type 12 has an invalid length. [ 496.223406][T26359] wg1 speed is unknown, defaulting to 1000 [ 497.121940][T26407] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 497.154775][T26407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.273652][T26412] netlink: 'syz.4.9724': attribute type 17 has an invalid length. [ 497.367097][T26418] netlink: 'syz.0.9726': attribute type 1 has an invalid length. [ 497.391102][T26418] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9726'. [ 497.528699][T26425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.489919][T26473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9751'. [ 498.681221][T26481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9755'. [ 498.762791][T26483] wg1 speed is unknown, defaulting to 1000 [ 500.047909][T26524] bridge0: entered promiscuous mode [ 500.594222][T26553] netlink: 504 bytes leftover after parsing attributes in process `syz.2.9788'. [ 501.025171][T26571] netlink: 'syz.1.9796': attribute type 2 has an invalid length. [ 501.054783][ T130] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 501.088706][ T5911] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 501.102773][ T130] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 501.720912][ T5911] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 501.761258][T26617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9815'. [ 501.839791][T26620] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9817'. [ 502.101229][ T5911] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 502.814010][T26668] netlink: 'syz.1.9840': attribute type 3 has an invalid length. [ 502.833431][T26668] netlink: 'syz.1.9840': attribute type 1 has an invalid length. [ 502.851274][T26668] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9840'. [ 503.224099][T26696] netlink: 'syz.2.9854': attribute type 1 has an invalid length. [ 503.569497][T26716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9863'. [ 503.604787][T26716] netlink: 'syz.0.9863': attribute type 2 has an invalid length. [ 503.626491][T26716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9863'. [ 503.717887][T26722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9866'. [ 504.135029][T26746] lo: entered allmulticast mode [ 504.147087][T26746] lo: left allmulticast mode [ 504.379692][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9882'. [ 504.946021][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9898'. [ 505.022649][T26797] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9901'. [ 505.036396][T26797] netlink: 'syz.3.9901': attribute type 9 has an invalid length. [ 505.230927][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 505.437553][T26821] netlink: 'syz.4.9910': attribute type 1 has an invalid length. [ 505.446254][T26821] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9910'. [ 505.488656][T26825] tipc: Enabling of bearer rejected, failed to enable media [ 505.597983][T26831] nbd: illegal input index -1113835520 [ 505.733243][T26837] openvswitch: netlink: Missing valid actions attribute. [ 505.741072][T26837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.905179][T26846] Bluetooth: MGMT ver 1.23 [ 506.818169][T26899] netlink: 'syz.1.9944': attribute type 1 has an invalid length. [ 509.634000][T27060] netlink: 'syz.3.10011': attribute type 3 has an invalid length. [ 509.739609][T27064] netlink: 'syz.1.10012': attribute type 1 has an invalid length. [ 509.762619][T27064] __nla_validate_parse: 7 callbacks suppressed [ 509.762638][T27064] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10012'. [ 509.929166][T27075] netlink: 17 bytes leftover after parsing attributes in process `syz.3.10018'. [ 509.954081][T27079] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10020'. [ 510.297988][T27100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10029'. [ 510.701583][T27126] netlink: 'syz.1.10043': attribute type 1 has an invalid length. [ 511.731303][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10067'. [ 511.773969][T27179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10067'. [ 511.790789][T27179] netlink: 'syz.4.10067': attribute type 12 has an invalid length. [ 511.825053][T27179] netlink: 'syz.4.10067': attribute type 11 has an invalid length. [ 511.873173][T27185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10070'. [ 512.374523][T27218] macsec1: entered promiscuous mode [ 512.393141][T27218] virt_wifi0: entered promiscuous mode [ 512.709452][T27243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10098'. [ 512.971136][T27258] netlink: 364 bytes leftover after parsing attributes in process `syz.1.10106'. [ 513.026296][T27261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10107'. [ 513.060815][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 513.823182][T27288] xt_hashlimit: size too large, truncated to 1048576 [ 514.994727][T27364] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 515.204745][T27380] sctp: [Deprecated]: syz.0.10157 (pid 27380) Use of int in max_burst socket option deprecated. [ 515.204745][T27380] Use struct sctp_assoc_value instead [ 515.309289][T27384] __nla_validate_parse: 5 callbacks suppressed [ 515.309311][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10164'. [ 515.751713][T27408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10175'. [ 515.986537][T27421] tipc: Enabling of bearer rejected, failed to enable media [ 516.766928][T27464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10201'. [ 516.944621][T27474] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 516.960557][T27476] netlink: 'syz.2.10207': attribute type 2 has an invalid length. [ 517.182487][T27488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10212'. [ 517.972563][T27527] netlink: 'syz.3.10231': attribute type 83 has an invalid length. [ 518.121735][T27531] netlink: 'syz.3.10233': attribute type 298 has an invalid length. [ 518.423939][T27539] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.513575][T27553] pim6reg: entered allmulticast mode [ 518.535643][T27553] pim6reg: left allmulticast mode [ 518.623520][T27539] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.763156][T27539] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.895608][T27539] `: Port device netdevsim0 removed [ 518.943161][T27539] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.202580][ T82] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.261997][ T82] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.335091][ T1003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.385851][ T1003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.443969][T27601] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 519.804491][T27623] netlink: 'syz.0.10278': attribute type 11 has an invalid length. [ 519.847936][T27623] netlink: 'syz.0.10278': attribute type 11 has an invalid length. [ 519.868312][T27623] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10278'. [ 519.931873][T27627] syz.4.10280 (27627) used obsolete PPPIOCDETACH ioctl [ 520.834210][T27684] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10301'. [ 520.844923][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10301'. [ 521.318589][T27710] tunl0: Caught tx_queue_len zero misconfig [ 521.690529][T27734] netlink: 'syz.4.10322': attribute type 1 has an invalid length. [ 522.027148][T27758] dvmrp0: entered allmulticast mode [ 522.905936][T27814] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.10361'. [ 522.940955][T27814] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 523.244992][T27837] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 523.595189][T27851] netlink: 'syz.0.10377': attribute type 1 has an invalid length. [ 523.622186][T27851] netlink: 'syz.0.10377': attribute type 1 has an invalid length. [ 524.539167][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10401'. [ 524.552045][T27902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10399'. [ 524.659353][T27906] netlink: 'syz.1.10402': attribute type 178 has an invalid length. [ 525.116535][T27932] netlink: 280 bytes leftover after parsing attributes in process `syz.2.10414'. [ 525.147944][T27934] nbd: must specify a device to reconfigure [ 525.197320][T27936] netlink: 'syz.3.10416': attribute type 1 has an invalid length. [ 525.214803][T27936] netlink: 'syz.3.10416': attribute type 2 has an invalid length. [ 525.548572][T27960] netlink: 'syz.0.10427': attribute type 10 has an invalid length. [ 525.588541][T27960] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10427'. [ 526.256550][T28004] netlink: 'syz.2.10448': attribute type 1 has an invalid length. [ 526.282788][T28004] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10448'. [ 526.292917][T28004] netlink: 658 bytes leftover after parsing attributes in process `syz.2.10448'. [ 526.381719][T28003] netlink: 'syz.1.10446': attribute type 322 has an invalid length. [ 526.677111][T28022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10456'. [ 526.899929][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10461'. [ 527.491474][T28072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10480'. [ 528.211531][T28115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10500'. [ 528.420860][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 528.748866][T28147] pim6reg99999991: entered allmulticast mode [ 529.314858][T28173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10529'. [ 529.345792][T28173] tipc: Enabled bearer , priority 0 [ 529.565773][T28190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10537'. [ 529.620940][T28192] tipc: Enabling of bearer rejected, failed to enable media [ 529.689538][T28199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10540'. [ 529.768448][T28203] bridge0: port 4(veth0_to_bridge) entered blocking state [ 529.775985][T28203] bridge0: port 4(veth0_to_bridge) entered disabled state [ 529.786729][T28203] veth0_to_bridge: entered allmulticast mode [ 529.795393][T28203] veth0_to_bridge: entered promiscuous mode [ 530.107644][T28224] pim6reg: entered allmulticast mode [ 530.132985][T28224] pim6reg: left allmulticast mode [ 530.177202][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.185581][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10556'. [ 530.206186][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.222495][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.238841][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.249138][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.257668][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.266079][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.276759][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.285134][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 530.301134][T28229] netlink: 'syz.3.10556': attribute type 29 has an invalid length. [ 531.200198][T28287] IPVS: Error connecting to the multicast addr [ 532.688704][T28361] tipc: Enabled bearer , priority 14 [ 532.846605][T28367] __nla_validate_parse: 29 callbacks suppressed [ 532.846626][T28367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10623'. [ 533.416178][T28396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.596083][T28404] netlink: 296 bytes leftover after parsing attributes in process `syz.2.10641'. [ 533.887342][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10650'. [ 533.920264][T28428] nbd: error processing sock list [ 534.471763][T28455] bond4: (slave bond_slave_1): Device is not our slave [ 534.495875][T28455] bond4: option active_slave: invalid value (bond_slave_1) [ 534.541029][T28455] bond4 (unregistering): Released all slaves [ 534.606519][T28463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10670'. [ 534.749832][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10673'. [ 534.887905][T28479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10676'. [ 535.356673][T28504] bridge0: port 3(veth0_to_bridge) entered blocking state [ 535.372551][T28504] bridge0: port 3(veth0_to_bridge) entered disabled state [ 535.395856][T28504] veth0_to_bridge: entered allmulticast mode [ 535.407042][T28504] veth0_to_bridge: entered promiscuous mode [ 535.946425][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10702'. [ 535.967083][T28542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10703'. [ 535.982985][T28540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10704'. [ 536.035064][T28546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10706'. [ 536.139108][T28548] validate_nla: 20 callbacks suppressed [ 536.139130][T28548] netlink: 'syz.2.10707': attribute type 4 has an invalid length. [ 536.180946][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 537.822277][T28648] netlink: 'syz.0.10755': attribute type 4 has an invalid length. [ 538.419410][T28676] __nla_validate_parse: 4 callbacks suppressed [ 538.419430][T28676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10768'. [ 538.485648][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10769'. [ 538.513327][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10769'. [ 538.535236][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10769'. [ 538.565584][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10769'. [ 538.967064][T28694] netlink: 'syz.0.10779': attribute type 28 has an invalid length. [ 539.018737][T28698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.453464][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10789'. [ 539.599889][T28723] tipc: Enabling of bearer rejected, failed to enable media [ 539.667614][T28728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.077982][T28756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.511613][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10821'. [ 540.836930][T28802] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10828'. [ 541.793473][T28848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10850'. [ 542.052405][T28864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10858'. [ 542.953676][T28920] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 542.984520][T28920] bond4 (unregistering): Released all slaves [ 543.552762][T28967] Bluetooth: MGMT ver 1.23 [ 544.265549][T29013] netlink: 'syz.2.10928': attribute type 2 has an invalid length. [ 544.356917][T29016] netlink: 'syz.1.10929': attribute type 13 has an invalid length. [ 544.392733][T29016] netlink: 'syz.1.10929': attribute type 17 has an invalid length. [ 544.409352][T29020] __nla_validate_parse: 3 callbacks suppressed [ 544.409371][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10929'. [ 544.646986][T29016] 8021q: adding VLAN 0 to HW filter on device .` [ 544.656906][T29016] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.672858][T29016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.691910][T29026] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 544.795873][T29037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10938'. [ 544.806399][T29037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10938'. [ 544.816577][T29037] netlink: 'syz.2.10938': attribute type 11 has an invalid length. [ 544.904913][T29041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10940'. [ 544.932740][T29041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10940'. [ 544.987077][T29045] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 545.703138][T29095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10966'. [ 546.076098][T29116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10976'. [ 546.744825][T29154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10995'. [ 546.772263][T29152] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig [ 546.861574][T29162] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 547.016519][T29170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11001'. [ 547.323777][T29191] netlink: 'syz.0.11014': attribute type 1 has an invalid length. [ 547.341070][T29191] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11014'. [ 547.350906][T29191] netlink: 'syz.0.11014': attribute type 1 has an invalid length. [ 548.401819][T29254] pimreg9: entered allmulticast mode [ 548.834368][T29278] netlink: 'syz.4.11055': attribute type 1 has an invalid length. [ 549.083977][T29292] netlink: 'syz.4.11062': attribute type 58 has an invalid length. [ 549.539187][T29319] netlink: 'syz.2.11075': attribute type 11 has an invalid length. [ 549.560747][T29319] __nla_validate_parse: 4 callbacks suppressed [ 549.560795][T29319] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.11075'. [ 549.932217][T29343] netlink: 'syz.1.11086': attribute type 9 has an invalid length. [ 549.959039][T29343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11086'. [ 549.990474][T29343] gretap0: entered promiscuous mode [ 550.002327][T29343] macvlan0: entered promiscuous mode [ 550.012483][T29343] macvlan0: entered allmulticast mode [ 550.024364][T29343] gretap0: entered allmulticast mode [ 550.310328][T29364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11097'. [ 551.287797][T29408] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11118'. [ 552.937310][T29481] netlink: 'syz.4.11154': attribute type 3 has an invalid length. [ 553.102522][T29492] netlink: 'syz.4.11160': attribute type 13 has an invalid length. [ 553.139573][T29492] netlink: 'syz.4.11160': attribute type 17 has an invalid length. [ 553.149755][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11160'. [ 553.204373][T29492] gre0: left promiscuous mode [ 553.243913][T29502] netlink: 'syz.1.11163': attribute type 61 has an invalid length. [ 553.349919][T29492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.368563][T29492] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.403201][T29492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.963312][T29546] netlink: 216 bytes leftover after parsing attributes in process `syz.4.11185'. [ 553.993756][T29546] netlink: 'syz.4.11185': attribute type 2 has an invalid length. [ 554.020854][T29546] netlink: 'syz.4.11185': attribute type 1 has an invalid length. [ 554.192699][T29556] tipc: New replicast peer: 255.255.255.255 [ 554.208890][T29556] tipc: Enabled bearer , priority 10 [ 554.700201][T29589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11203'. [ 554.738274][T29589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11203'. [ 554.766692][T29589] netlink: 'syz.1.11203': attribute type 13 has an invalid length. [ 554.797392][T29589] netlink: 'syz.1.11203': attribute type 11 has an invalid length. [ 555.006496][T29607] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11213'. [ 555.212735][ T979] tipc: Node number set to 4227858433 [ 555.838692][T29658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11238'. [ 555.853237][T29658] netlink: 11 bytes leftover after parsing attributes in process `syz.0.11238'. [ 555.961158][T29663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11242'. [ 556.019028][T29670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11243'. [ 556.093494][T29672] netlink: 'syz.2.11247': attribute type 11 has an invalid length. [ 556.104092][T29672] netlink: 'syz.2.11247': attribute type 4 has an invalid length. [ 556.132035][T29672] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.11247'. [ 556.579181][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11258'. [ 556.612548][T29700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11258'. [ 556.641274][T29700] netlink: 'syz.4.11258': attribute type 5 has an invalid length. [ 557.014978][T29727] netlink: 'syz.2.11271': attribute type 13 has an invalid length. [ 557.035950][T29727] netlink: 'syz.2.11271': attribute type 17 has an invalid length. [ 557.199232][T29727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.223970][T29727] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.254236][T29727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.465515][T29747] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 558.501008][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 559.698912][T29863] tipc: Enabling of bearer rejected, failed to enable media [ 560.281347][T29897] __nla_validate_parse: 10 callbacks suppressed [ 560.281368][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11349'. [ 560.357209][T29897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11349'. [ 560.792294][T29929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11366'. [ 561.138411][T29946] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11373'. [ 561.332968][T29953] netlink: 67 bytes leftover after parsing attributes in process `syz.2.11377'. [ 561.402348][T29957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.916215][T29986] netlink: 136 bytes leftover after parsing attributes in process `syz.2.11393'. [ 562.419371][T30006] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11404'. [ 562.666095][T30017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11408'. [ 562.820033][T30022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.553806][T30069] dvmrp1: entered allmulticast mode [ 563.584756][T30069] dvmrp1: left allmulticast mode [ 563.660127][T30075] vlan2: entered allmulticast mode [ 563.665729][T30075] bond0: entered allmulticast mode [ 563.671087][T30075] bond_slave_0: entered allmulticast mode [ 563.683935][T30075] bond_slave_1: entered allmulticast mode [ 563.805637][T30079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11440'. [ 563.892786][T30087] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11442'. [ 563.910904][T30087] netlink: 'syz.0.11442': attribute type 5 has an invalid length. [ 564.142531][T30102] vlan3: entered promiscuous mode [ 564.158227][T30102] bridge0: entered promiscuous mode [ 565.297270][T30180] __nla_validate_parse: 4 callbacks suppressed [ 565.297289][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11487'. [ 565.487979][T30192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11493'. [ 565.634194][T30196] ipvlan2: entered promiscuous mode [ 565.639550][T30196] ipvlan2: entered allmulticast mode [ 565.645570][T30196] dummy0: entered allmulticast mode [ 566.218997][T30231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11512'. [ 566.497305][T30246] sctp: [Deprecated]: syz.3.11519 (pid 30246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.497305][T30246] Use struct sctp_sack_info instead [ 566.544669][T30246] sctp: [Deprecated]: syz.3.11519 (pid 30246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.544669][T30246] Use struct sctp_sack_info instead [ 566.791568][T30260] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11526'. [ 566.807651][T30260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.204665][T30342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11562'. [ 568.211693][T30345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11564'. [ 568.459788][T30356] TCP: TCP_TX_DELAY enabled [ 569.221587][T30408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11593'. [ 570.142645][T30460] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11618'. [ 570.372611][T30478] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11628'. [ 570.478122][T30484] netlink: 'syz.2.11630': attribute type 13 has an invalid length. [ 570.506478][T30484] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.11630'. [ 571.350516][T30528] netlink: 'syz.4.11651': attribute type 2 has an invalid length. [ 571.621361][T30537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11655'. [ 571.676671][T30541] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11657'. [ 571.761909][T30543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11658'. [ 571.788817][T30543] vlan0: entered promiscuous mode [ 571.810735][T30543] bridge0: entered promiscuous mode [ 571.999257][T30552] netlink: 'syz.3.11662': attribute type 1 has an invalid length. [ 572.033086][T30558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11665'. [ 572.043847][T30552] netlink: 'syz.3.11662': attribute type 2 has an invalid length. [ 572.080728][T30552] netlink: 'syz.3.11662': attribute type 1 has an invalid length. [ 572.109410][T30552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11662'. [ 572.119168][T30558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11665'. [ 572.329139][T30572] netlink: 'syz.0.11671': attribute type 3 has an invalid length. [ 572.615166][T30590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11680'. [ 572.712033][T30593] netlink: 'syz.4.11681': attribute type 1 has an invalid length. [ 572.734070][T30596] netlink: 'syz.3.11683': attribute type 10 has an invalid length. [ 572.764553][T30596] netlink: 'syz.3.11683': attribute type 10 has an invalid length. [ 572.811991][T30596] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 572.967974][T30606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11688'. [ 573.088464][T30613] tipc: Enabling of bearer rejected, media not registered [ 573.391484][T30621] netlink: 'syz.4.11695': attribute type 10 has an invalid length. [ 573.407360][T30621] dummy0: entered promiscuous mode [ 573.414857][T30621] bridge0: port 4(dummy0) entered blocking state [ 573.421989][T30621] bridge0: port 4(dummy0) entered disabled state [ 573.429227][T30621] dummy0: entered allmulticast mode [ 573.694711][T30631] sctp: [Deprecated]: syz.4.11700 (pid 30631) Use of int in max_burst socket option. [ 573.694711][T30631] Use struct sctp_assoc_value instead [ 575.364908][T30706] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 575.467997][T30710] __nla_validate_parse: 3 callbacks suppressed [ 575.468018][T30710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11737'. [ 575.552324][T30714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11739'. [ 575.913800][T30730] gtp1: entered promiscuous mode [ 575.930766][T30730] gtp1: entered allmulticast mode [ 577.493464][T30799] netlink: 292 bytes leftover after parsing attributes in process `syz.4.11778'. [ 577.542849][T30802] macsec0: entered promiscuous mode [ 577.569052][T30802] macsec0: left promiscuous mode [ 578.060416][T30829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11794'. [ 578.270063][T30844] netlink: 'syz.1.11801': attribute type 1 has an invalid length. [ 578.292301][T30844] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11801'. [ 578.332172][T30844] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11801'. [ 578.371126][T30844] netlink: 'syz.1.11801': attribute type 1 has an invalid length. [ 578.392961][T30844] netlink: 634 bytes leftover after parsing attributes in process `syz.1.11801'. [ 579.634568][T30906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11827'. [ 580.513003][T30955] netlink: 'syz.4.11849': attribute type 1 has an invalid length. [ 580.644747][T30963] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11853'. [ 581.014031][T30987] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 581.551720][T31018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11880'. [ 581.589934][T31023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11882'. [ 581.638838][T31024] ip6gretap0: entered promiscuous mode [ 582.276427][T31067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11903'. [ 582.293440][T31067] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11903'. [ 582.464585][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11908'. [ 582.532733][T31081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11911'. [ 582.878240][T31103] netlink: 'syz.0.11921': attribute type 1 has an invalid length. [ 582.897238][T31103] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11921'. [ 582.921608][T31103] netlink: 'syz.0.11921': attribute type 1 has an invalid length. [ 582.941757][T31103] netlink: 'syz.0.11921': attribute type 8 has an invalid length. [ 582.968982][T31103] netlink: 606 bytes leftover after parsing attributes in process `syz.0.11921'. [ 583.104759][T31114] rdma_op ffff8880373ba1f0 conn xmit_rdma 0000000000000000 [ 583.353501][T31125] : option downdelay: invalid value (18446744073709547007) [ 583.362270][T31125] : option downdelay: allowed values 0 - 2147483647 [ 583.372801][T31125]  (unregistering): Released all slaves [ 583.540506][T31133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11934'. [ 585.829107][T31274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.860833][T31276] __nla_validate_parse: 2 callbacks suppressed [ 585.860851][T31276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12003'. [ 586.210024][T31295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12012'. [ 587.012432][T31343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12036'. [ 587.022548][T31343] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12036'. [ 587.154692][T31351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12041'. [ 587.184479][T31351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12041'. [ 588.111734][T31402] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12064'. [ 588.238773][T31405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12065'. [ 588.865994][T31434] rdma_op ffff8880336a69f0 conn xmit_rdma 0000000000000000 [ 589.442307][T31475] netlink: 'syz.1.12099': attribute type 3 has an invalid length. [ 589.852813][T31501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12111'. [ 590.077793][T31515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12119'. [ 590.916952][T31569] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 592.466311][T31658] vlan3: entered promiscuous mode [ 592.481412][T31662] tipc: Enabling of bearer rejected, failed to enable media [ 592.599654][T31667] __nla_validate_parse: 3 callbacks suppressed [ 592.599673][T31667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12192'. [ 592.853951][T31686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12202'. [ 592.991393][T31689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12204'. [ 594.292563][T31778] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 594.308829][T31778] bond3 (unregistering): Released all slaves [ 594.316018][T31780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12244'. [ 594.358978][T31780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12244'. [ 595.723439][T31856] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 595.746761][T31857] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12281'. [ 595.862050][T31865] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12285'. [ 595.871738][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12285'. [ 596.097735][T31879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12293'. [ 596.352186][T31895] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12301'. [ 596.385210][T31895] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 599.952556][T31964] __nla_validate_parse: 5 callbacks suppressed [ 599.952577][T31964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12331'. [ 600.057340][T31971] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.12332'. [ 600.118783][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12336'. [ 600.141529][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12336'. [ 600.251895][T31980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12339'. [ 600.363046][T31989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12343'. [ 600.384681][T31989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12343'. [ 600.408527][T31989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12343'. [ 600.579503][T32001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12349'. [ 601.250426][T32037] netlink: 'syz.0.12366': attribute type 13 has an invalid length. [ 601.309539][T32037] tipc: Resetting bearer [ 601.435970][T32037] bridge0: port 3(dummy0) entered disabled state [ 601.631780][ T82] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.649531][ T82] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.680340][ T82] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.710011][ T82] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.002951][T32071] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.12380'. [ 602.016524][T32071] openvswitch: netlink: Message has 16 unknown bytes. [ 602.679333][T32108] syz.4.12397 (32108) used greatest stack depth: 17560 bytes left [ 606.020916][T32251] __nla_validate_parse: 8 callbacks suppressed [ 606.020937][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12461'. [ 606.061968][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12461'. [ 606.111690][T32253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12462'. [ 606.259951][T32263] netlink: 'syz.2.12467': attribute type 1 has an invalid length. [ 606.301352][T32263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12467'. [ 606.648256][T32284] batadv_slave_0: entered promiscuous mode [ 606.664544][T32283] batadv_slave_0: left promiscuous mode [ 606.747105][T32289] netlink: 'syz.2.12478': attribute type 2 has an invalid length. [ 607.223246][T32295] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12483'. [ 607.896496][T32329] tipc: Enabling of bearer rejected, failed to enable media [ 608.648008][T32356] netlink: 'syz.2.12508': attribute type 3 has an invalid length. [ 608.836108][T32366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12513'. [ 609.006414][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12519'. [ 609.307370][T32392] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 610.452270][T32455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12552'. [ 610.462583][T32455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12552'. [ 610.473020][T32455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12552'. [ 610.483860][T32455] netlink: 'syz.0.12552': attribute type 6 has an invalid length. [ 610.667360][T32468] netlink: 'syz.3.12559': attribute type 9 has an invalid length. [ 611.682691][T32521] __nla_validate_parse: 4 callbacks suppressed [ 611.682712][T32521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12583'. [ 612.393975][T32548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12593'. [ 612.896427][T32573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12606'. [ 613.164627][T32583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12613'. [ 613.193804][T32583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12613'. [ 614.070348][T32616] netlink: 'syz.1.12627': attribute type 2 has an invalid length. [ 614.095071][T32616] !9: entered promiscuous mode [ 614.113991][T32616] netlink: 'syz.1.12627': attribute type 2 has an invalid length. [ 614.123197][T32616] !9: left promiscuous mode [ 614.487935][T32626] netlink: 'syz.0.12632': attribute type 12 has an invalid length. [ 614.509065][T32626] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.12632'. [ 614.808449][T32644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12642'. [ 615.258386][ T30] audit: type=1804 audit(1776853088.627:5): pid=32666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12652" name="/newroot/2609/cgroup.controllers" dev="tmpfs" ino=13085 res=1 errno=0 [ 615.331122][ T30] audit: type=1800 audit(1776853088.667:6): pid=32666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12652" name="cgroup.controllers" dev="tmpfs" ino=13085 res=0 errno=0 [ 616.005456][T32699] netlink: 'syz.4.12667': attribute type 6 has an invalid length. [ 616.025863][T32699] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12667'. [ 616.618760][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12683'. [ 616.628551][T32732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12683'. [ 617.042974][T32733] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12681'. [ 617.504741][T32749] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 617.522339][T32749] bond6 (unregistering): Released all slaves [ 617.847760][ T302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12698'. [ 617.900387][ T302] hsr_slave_0: left promiscuous mode [ 617.914159][ T302] hsr_slave_1: left promiscuous mode [ 617.959430][ T302] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 618.784488][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12718'. [ 618.812295][ T343] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 618.910997][ T349] netlink: 'syz.2.12721': attribute type 2 has an invalid length. [ 618.928592][ T349] !: entered promiscuous mode [ 618.953513][ T349] netlink: 'syz.2.12721': attribute type 2 has an invalid length. [ 619.300752][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 619.367105][ T130] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.382852][ T130] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.404862][ T130] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.427557][ T130] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.136428][ T5834] block nbd1: Receive control failed (result -32) [ 620.141831][ T408] netlink: 124 bytes leftover after parsing attributes in process `syz.0.12748'. [ 623.216579][ T50] block nbd2: Receive control failed (result -32) [ 623.217161][ T5834] block nbd2: Receive control failed (result -32) [ 623.451506][ T562] tipc: New replicast peer: 255.255.255.255 [ 623.478093][ T562] tipc: Enabled bearer , priority 5 [ 623.786575][ T583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12829'. [ 623.888879][ T589] netlink: 292 bytes leftover after parsing attributes in process `syz.4.12832'. [ 623.917817][ T589] netlink: 292 bytes leftover after parsing attributes in process `syz.4.12832'. [ 623.979868][ T594] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.12834'. [ 624.159123][ T603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12837'. [ 624.309006][ T611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12842'. [ 624.327745][ T612] tipc: New replicast peer: 255.255.255.255 [ 624.343720][ T612] tipc: Enabled bearer , priority 5 [ 624.359263][ T612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12841'. [ 624.502660][ T617] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 624.954503][ T637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12854'. [ 624.973134][ T642] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 624.980496][ T642] pim6reg0: persist disabled [ 625.092798][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12857'. [ 625.473480][ T979] tipc: Node number set to 4269801488 [ 626.809960][ T703] pim6reg: entered allmulticast mode [ 626.820227][ T708] pim6reg: left allmulticast mode [ 627.381349][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 627.553829][ T742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12899'. [ 627.927031][ T765] netlink: 'syz.4.12910': attribute type 11 has an invalid length. [ 628.311694][ T788] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 630.171640][ T876] netlink: 'syz.4.12961': attribute type 1 has an invalid length. [ 630.907383][ T924] syzkaller1: tun_chr_ioctl cmd 35111 [ 631.755889][ T962] netlink: 'syz.4.12988': attribute type 1 has an invalid length. [ 631.772038][ T962] netlink: 'syz.4.12988': attribute type 3 has an invalid length. [ 631.789924][ T962] __nla_validate_parse: 5 callbacks suppressed [ 631.789943][ T962] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12988'. [ 631.812007][ T962] NCSI netlink: No device for ifindex 813332851 [ 632.339192][ T50] block nbd3: Receive control failed (result -32) [ 632.339635][ T5834] block nbd3: Receive control failed (result -32) [ 632.768249][ T1024] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13013'. [ 632.873212][ T1027] bond0: (slave macvlan1): Opening slave failed [ 633.056507][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13020'. [ 633.332171][ T1069] netlink: 'syz.4.13029': attribute type 15 has an invalid length. [ 634.198233][ T1120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13052'. [ 634.234248][ T1120] bond5: entered promiscuous mode [ 634.239913][ T1120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 634.302342][ T1120] bond5 (unregistering): Released all slaves [ 634.685629][ T1135] netlink: 'syz.1.13058': attribute type 11 has an invalid length. [ 634.851626][ T1140] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13060'. [ 635.300223][ T50] block nbd4: Receive control failed (result -32) [ 635.311737][ T5834] block nbd4: Receive control failed (result -32) [ 635.547268][ T1178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13076'. [ 635.720062][ T1190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13083'. [ 635.822109][ T1193] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 636.001784][ T1203] netlink: 84 bytes leftover after parsing attributes in process `syz.2.13088'. [ 636.113062][ T1205] block nbd5: server does not support multiple connections per device. [ 636.142476][ T1205] block nbd5: shutting down sockets [ 636.160131][ T1207] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 636.198205][ T1207] syzkaller1: linktype set to 260 [ 636.215080][ T1213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13093'. [ 636.296465][ T1221] netlink: 236 bytes leftover after parsing attributes in process `syz.3.13096'. [ 638.951792][ T1388] netlink: 'syz.0.13173': attribute type 10 has an invalid length. [ 638.959910][ T1388] __nla_validate_parse: 1 callbacks suppressed [ 638.959926][ T1388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13173'. [ 639.297367][ T1401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13179'. [ 639.344380][ T1401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13179'. [ 639.363276][ T995] block nbd64: NBD_DISCONNECT [ 639.605038][ T995] udevd[995]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 640.165335][ T1435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13193'. [ 640.206933][ T1435] erspan0: entered promiscuous mode [ 640.686166][ T1465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13206'. [ 640.712831][ T1465] vlan4: entered allmulticast mode [ 640.718151][ T1465] macvtap0: entered allmulticast mode [ 640.850805][ T1475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13211'. [ 641.718783][ T1523] tap0: tun_chr_ioctl cmd 1074025676 [ 641.740730][ T1523] tap0: owner set to 0 [ 641.876610][ T1530] syz_tun: entered promiscuous mode [ 641.883649][ T1529] syz_tun: left promiscuous mode [ 642.087236][ T1543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13243'. [ 642.192106][ T1545] tap0: tun_chr_ioctl cmd 21731 [ 642.215707][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13247'. [ 643.032977][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13262'. [ 643.358249][ T1608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13270'. [ 643.390412][ T1608] ip6gre2: entered promiscuous mode [ 643.400094][ T1608] ip6gre2: entered allmulticast mode [ 643.424988][ T1159] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 643.446177][ T1159] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 643.454868][ T795] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 643.693582][ T1619] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.731803][ T795] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 643.811426][ T1619] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.896103][ T1619] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.000206][ T1619] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.202083][ T82] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.218126][ T1644] __nla_validate_parse: 1 callbacks suppressed [ 644.218145][ T1644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13287'. [ 644.254531][ T82] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.263316][ T795] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 644.335961][ T130] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.404642][ T1159] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.827755][ T1729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13326'. [ 645.839989][ T1729] sctp: [Deprecated]: syz.1.13326 (pid 1729) Use of int in maxseg socket option. [ 645.839989][ T1729] Use struct sctp_assoc_value instead [ 645.990399][ T1734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13328'. [ 646.006330][ T1734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13328'. [ 646.171235][ T1745] netlink: 'syz.3.13333': attribute type 1 has an invalid length. [ 646.187910][ T1745] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13333'. [ 646.216327][ T30] audit: type=1804 audit(1776853119.587:7): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13334" name="/newroot/2724/cgroup.controllers" dev="tmpfs" ino=13669 res=1 errno=0 [ 646.296183][ T30] audit: type=1800 audit(1776853119.587:8): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13334" name="cgroup.controllers" dev="tmpfs" ino=13669 res=0 errno=0 [ 646.372312][ T30] audit: type=1800 audit(1776853119.617:9): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13334" name="cgroup.controllers" dev="tmpfs" ino=13669 res=0 errno=0 [ 647.140837][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 647.948991][ T1830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.367907][ T1847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13376'. [ 648.392678][ T1847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13376'. [ 648.988480][ T1886] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13395'. [ 649.144236][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13400'. [ 649.281985][ T1899] wg1 speed is unknown, defaulting to 1000 [ 649.506621][ T1913] netlink: 71 bytes leftover after parsing attributes in process `syz.0.13407'. [ 650.777788][ T1950] erspan0: entered promiscuous mode [ 651.583434][ T1984] tap0: tun_chr_ioctl cmd 2147767521 [ 652.118220][ T2005] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.137889][ T2005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.145257][ T2005] IPv6: NLM_F_CREATE should be set when creating new route [ 652.152620][ T2005] IPv6: NLM_F_CREATE should be set when creating new route [ 652.159893][ T2005] IPv6: NLM_F_CREATE should be set when creating new route [ 652.187361][ T2005] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.13448'. [ 652.619659][ T2026] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 653.237553][ T2050] 8021q: adding VLAN 0 to HW filter on device bond6 [ 654.500754][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 654.999366][ T2103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13493'. [ 655.164549][ T2107] bond3: entered promiscuous mode [ 655.186204][ T2107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.204645][ T2107] bridge0: port 4(bond3) entered blocking state [ 655.214004][ T2107] bridge0: port 4(bond3) entered disabled state [ 655.221723][ T2107] bond3: entered allmulticast mode [ 655.233517][ T2107] bridge0: port 4(bond3) entered blocking state [ 655.241207][ T2107] bridge0: port 4(bond3) entered forwarding state [ 655.255063][ T82] bridge0: port 4(bond3) entered disabled state [ 655.385360][ T2122] netlink: 'syz.3.13502': attribute type 14 has an invalid length. [ 655.759917][ T2143] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 656.018912][ T2158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13518'. [ 656.187007][ T2169] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13524'. [ 656.364832][ T2181] sctp: [Deprecated]: syz.2.13529 (pid 2181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.364832][ T2181] Use struct sctp_sack_info instead [ 656.436282][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13531'. [ 656.462378][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13531'. [ 656.715897][ T2197] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.13537'. [ 656.899475][ T2209] sctp: [Deprecated]: syz.1.13544 (pid 2209) Use of int in maxseg socket option. [ 656.899475][ T2209] Use struct sctp_assoc_value instead [ 657.375698][ T2242] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13558'. [ 657.779716][ T2265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13568'. [ 657.806635][ T2270] netlink: 'syz.2.13571': attribute type 1 has an invalid length. [ 657.812342][ T2269] netlink: 228 bytes leftover after parsing attributes in process `syz.0.13569'. [ 657.824150][ T2269] netlink: 228 bytes leftover after parsing attributes in process `syz.0.13569'. [ 657.842115][ T2270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.014551][ T2281] netlink: 'syz.4.13576': attribute type 1 has an invalid length. [ 658.033908][ T2281] netlink: 'syz.4.13576': attribute type 2 has an invalid length. [ 658.049840][ T2281] netlink: 'syz.4.13576': attribute type 1 has an invalid length. [ 658.069069][ T2281] netlink: 'syz.4.13576': attribute type 3 has an invalid length. [ 658.996453][ T2320] bond6 (unregistering): Released all slaves [ 659.070427][ T2325] lo: entered allmulticast mode [ 659.079899][ T2325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.954600][ T2380] erspan0: entered promiscuous mode [ 660.633838][ T2435] vxcan4: entered allmulticast mode [ 660.819757][ T2446] __nla_validate_parse: 10 callbacks suppressed [ 660.819779][ T2446] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.13645'. [ 661.004665][ T2463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13651'. [ 661.333748][ T2485] sctp: [Deprecated]: syz.4.13659 (pid 2485) Use of int in max_burst socket option deprecated. [ 661.333748][ T2485] Use struct sctp_assoc_value instead [ 662.122792][ T2517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13669'. [ 663.291169][ T2597] netlink: 'syz.4.13699': attribute type 2 has an invalid length. [ 663.322957][ T2597] !: entered promiscuous mode [ 663.344450][ T2597] netlink: 'syz.4.13699': attribute type 2 has an invalid length. [ 663.365618][ T2597] !: left promiscuous mode [ 663.672427][ T2622] xt_hashlimit: size too large, truncated to 1048576 [ 663.707578][ T2627] netlink: 'syz.0.13711': attribute type 4 has an invalid length. [ 663.716358][ T2627] netlink: 'syz.0.13711': attribute type 8 has an invalid length. [ 663.727132][ T2627] netlink: 212 bytes leftover after parsing attributes in process `syz.0.13711'. [ 663.837390][ T2633] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13715'. [ 664.578537][ T130] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.637499][ T2678] bond0: entered promiscuous mode [ 664.652191][ T2678] bond_slave_0: entered promiscuous mode [ 664.661665][ T2678] bond_slave_1: entered promiscuous mode [ 664.670271][ T2678] syz_tun: entered promiscuous mode [ 664.679022][ T2683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13732'. [ 664.688408][ T2678] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 664.688449][ T2678] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 664.714225][ T130] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.730042][ T130] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.774668][ T130] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.063188][ T2712] team0: No ports can be present during mode change [ 665.481856][ T2733] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13752'. [ 665.571287][ T2741] netlink: 27 bytes leftover after parsing attributes in process `syz.3.13753'. [ 665.712037][ T2746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13757'. [ 665.759527][ T2746] macvlan2: entered allmulticast mode [ 665.776861][ T2746] hsr0: entered allmulticast mode [ 665.809767][ T2746] hsr_slave_0: entered allmulticast mode [ 665.827765][ T2746] hsr_slave_1: entered allmulticast mode [ 665.848079][ T2746] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.022959][ T2763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13763'. [ 666.547556][ T2794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13777'. [ 666.763934][ T2808] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.13783'. [ 667.292723][ T2865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13797'. [ 667.589523][ T2884] bridge1: left promiscuous mode [ 667.597668][ T2884] geneve4: left promiscuous mode [ 667.621030][ T2884] ip6gre1: left promiscuous mode [ 667.645201][ T2884] bridge5: left promiscuous mode [ 667.667973][ T2884] ipip0: left promiscuous mode [ 667.678122][ T2884] vlan3: left promiscuous mode [ 667.683763][ T2884] bridge0: left promiscuous mode [ 667.689547][ T2884] gtp1: left promiscuous mode [ 667.697950][ T2884] ip6gre2: left promiscuous mode [ 669.124527][ T2978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13842'. [ 669.860802][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 670.114235][ T3026] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13863'. [ 670.465897][ T3037] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 670.501347][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 670.982104][ T3057] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 670.997272][ T3057] syzkaller1: linktype set to 780 [ 671.176457][ T3063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13880'. [ 671.193708][ T3063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13880'. [ 671.517615][ T3078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13887'. [ 671.544437][ T3081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13889'. [ 672.216985][ T3116] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13904'. [ 672.366265][ T3120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13906'. [ 672.395939][ T3122] nbd: nbd3 already in use [ 672.676279][ T3133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13912'. [ 673.093129][ T3150] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.13920'. [ 674.231966][ T5834] block nbd5: Receive control failed (result -32) [ 674.310471][ T3223] block nbd5: NBD_DISCONNECT [ 674.329767][ T3223] block nbd5: Send disconnect failed -32 [ 674.374606][ T3223] block nbd5: shutting down sockets [ 674.528378][ T3237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13959'. [ 674.559874][ T3237] ipvlan1: entered promiscuous mode [ 674.577802][ T3237] ipvlan1: left promiscuous mode [ 674.659629][ T3223] udevd[3223]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 675.051548][ T3262] netlink: 726 bytes leftover after parsing attributes in process `syz.4.13969'. [ 675.089919][ T3262] netlink: 'syz.4.13969': attribute type 1 has an invalid length. [ 675.228005][ T3267] vlan4: entered promiscuous mode [ 676.356372][ T3311] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 676.885802][ T3331] netlink: 'syz.4.14004': attribute type 14 has an invalid length. [ 677.327839][ T3358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14016'. [ 677.355637][ T3358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14016'. [ 677.386557][ T3359] netem: incorrect gi model size [ 677.400265][ T3359] netem: change failed [ 677.410413][ T3365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14019'. [ 677.553090][ T3372] sctp: [Deprecated]: syz.4.14024 (pid 3372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 677.553090][ T3372] Use struct sctp_sack_info instead [ 678.183739][ T3414] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 678.917037][ T3444] block nbd6: Unsupported socket: should be TCP or UNIX. [ 678.963547][ T3446] tap0: tun_chr_ioctl cmd 1074025692 [ 681.156721][ T5834] block nbd6: Receive control failed (result -32) [ 681.588150][ T3576] netlink: 'syz.2.14116': attribute type 3 has an invalid length. [ 681.777172][ T3589] sctp: [Deprecated]: syz.4.14122 (pid 3589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.777172][ T3589] Use struct sctp_sack_info instead [ 682.089788][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14128'. [ 682.114985][ T3601] bond4 (unregistering): Released all slaves [ 682.355589][ T3619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14135'. [ 682.837307][ T3649] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.853798][ T3649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 682.861117][ T3649] IPv6: NLM_F_CREATE should be set when creating new route [ 682.868413][ T3649] IPv6: NLM_F_CREATE should be set when creating new route [ 682.875726][ T3649] IPv6: NLM_F_CREATE should be set when creating new route [ 682.920360][ T3652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.076208][ T3702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14176'. [ 684.686522][ T3733] netlink: 'syz.0.14190': attribute type 16 has an invalid length. [ 684.733147][ T3735] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 684.742618][ T3735] dvmrp1: linktype set to 804 [ 685.221952][ T3763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14204'. [ 685.254591][ T3763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14204'. [ 687.363110][ T3828] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 687.380877][ T3828] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 687.786983][ T3859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14249'. [ 687.839860][ T3859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14249'. [ 689.378902][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14286'. [ 689.543545][ T3955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14293'. [ 689.775332][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14299'. [ 689.793720][ T3968] gtp1: entered promiscuous mode [ 689.799052][ T3968] gtp1: entered allmulticast mode [ 690.442880][ T3996] tun0: tun_chr_ioctl cmd 1074025672 [ 690.448409][ T3996] tun0: ignored: set checksum disabled [ 692.449235][ T4072] nbd7: detected capacity change from 0 to 127 [ 692.464964][ T5834] block nbd7: Receive control failed (result -32) [ 692.533977][ T4084] block nbd7: Dead connection, failed to find a fallback [ 692.582897][ T4084] block nbd7: shutting down sockets [ 692.622465][ T4084] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.674763][ T4084] Buffer I/O error on dev nbd7, logical block 0, async page read [ 692.697933][ T4084] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.701323][ T4094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14354'. [ 692.738351][ T4084] Buffer I/O error on dev nbd7, logical block 1, async page read [ 692.761784][ T4084] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.786124][ T4084] Buffer I/O error on dev nbd7, logical block 2, async page read [ 692.810019][ T4084] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.839804][ T4084] Buffer I/O error on dev nbd7, logical block 3, async page read [ 692.861971][ T4084] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.886770][ T4084] Buffer I/O error on dev nbd7, logical block 0, async page read [ 692.910740][ T4084] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.943092][ T4084] Buffer I/O error on dev nbd7, logical block 1, async page read [ 692.966102][ T4084] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.000175][ T4084] Buffer I/O error on dev nbd7, logical block 2, async page read [ 693.019317][ T4098] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 693.031596][ T4084] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.050344][ T4084] Buffer I/O error on dev nbd7, logical block 3, async page read [ 693.068516][ T4084] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.104938][ T4084] Buffer I/O error on dev nbd7, logical block 0, async page read [ 693.126301][ T4098] bond5 (unregistering): Released all slaves [ 693.130280][ T4084] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.172633][ T4084] Buffer I/O error on dev nbd7, logical block 1, async page read [ 693.247744][ T4084] ldm_validate_partition_table(): Disk read failed. [ 693.269146][ T4084] Dev nbd7: unable to read RDB block 0 [ 693.290539][ T4084] nbd7: unable to read partition table [ 693.355838][ T4084] ldm_validate_partition_table(): Disk read failed. [ 693.392675][ T4084] Dev nbd7: unable to read RDB block 0 [ 693.418609][ T4084] nbd7: unable to read partition table [ 694.001309][ T4132] netlink: 'syz.3.14370': attribute type 3 has an invalid length. [ 694.013286][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14370'. [ 694.740920][ T4170] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.14389'. [ 694.765504][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14389'. [ 694.786117][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14389'. [ 695.162557][ T4192] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 695.169189][ T4192] syzkaller1: linktype set to 270 [ 695.538115][ T4222] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14413'. [ 696.011155][ T4234] nbd: socks must be embedded in a SOCK_ITEM attr [ 696.033149][ T4234] block nbd8: shutting down sockets [ 696.071077][ T4237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14421'. [ 696.224995][ T4248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14422'. [ 696.577650][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14433'. [ 697.480170][ T4326] netlink: 'syz.4.14459': attribute type 2 has an invalid length. [ 697.995701][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14471'. [ 698.373888][ T4376] sctp: [Deprecated]: syz.4.14482 (pid 4376) Use of int in max_burst socket option. [ 698.373888][ T4376] Use struct sctp_assoc_value instead [ 698.579942][ T4387] sctp: [Deprecated]: syz.4.14489 (pid 4387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 698.579942][ T4387] Use struct sctp_sack_info instead [ 698.660737][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 698.780951][ T4400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14494'. [ 698.846182][ T82] tipc: Subscription rejected, illegal request [ 698.923487][ T4408] netlink: 'syz.1.14496': attribute type 6 has an invalid length. [ 699.003101][ T4413] tipc: Enabling of bearer rejected, already enabled [ 699.044449][ T4413] __nla_validate_parse: 2 callbacks suppressed [ 699.044471][ T4413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14500'. [ 699.120205][ T4418] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.14502'. [ 699.173545][ T4422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14505'. [ 699.216249][ T4422] bond0: entered promiscuous mode [ 699.234110][ T4422] bond_slave_0: entered promiscuous mode [ 699.246878][ T4422] bond_slave_1: entered promiscuous mode [ 699.260347][ T4422] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 699.280971][ T4422] batadv_slave_0: entered promiscuous mode [ 699.301547][ T4422] debugfs: 'hsr1' already exists in 'hsr' [ 699.314437][ T4422] Cannot create hsr debugfs directory [ 699.326232][ T4425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14504'. [ 699.688755][ T4452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14517'. [ 700.501263][ T4450] geneve2: entered promiscuous mode [ 701.552316][ T4524] [ 701.554709][ T4524] ====================================================== [ 701.561762][ T4524] WARNING: possible circular locking dependency detected [ 701.568828][ T4524] syzkaller #0 Not tainted [ 701.573272][ T4524] ------------------------------------------------------ [ 701.580319][ T4524] syz.0.14551/4524 is trying to acquire lock: [ 701.586423][ T4524] ffffffff8ea84780 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 701.595625][ T4524] [ 701.595625][ T4524] but task is already holding lock: [ 701.603023][ T4524] ffff8880325827f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 701.612662][ T4524] [ 701.612662][ T4524] which lock already depends on the new lock. [ 701.612662][ T4524] [ 701.623093][ T4524] [ 701.623093][ T4524] the existing dependency chain (in reverse order) is: [ 701.632135][ T4524] [ 701.632135][ T4524] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 701.639738][ T4524] __might_fault+0xcb/0x130 [ 701.644805][ T4524] _copy_from_user+0x28/0xb0 [ 701.649977][ T4524] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 701.656520][ T4524] ip_generic_getfrag+0x149/0x2d0 [ 701.662086][ T4524] __ip6_append_data+0x39e4/0x3f70 [ 701.667774][ T4524] ip6_append_data+0x10f/0x280 [ 701.673085][ T4524] rawv6_sendmsg+0x12d3/0x18e0 [ 701.678485][ T4524] ____sys_sendmsg+0x80a/0x9f0 [ 701.683799][ T4524] ___sys_sendmsg+0x2a5/0x360 [ 701.689023][ T4524] __x64_sys_sendmsg+0x1bd/0x2a0 [ 701.694525][ T4524] do_syscall_64+0x15f/0xf80 [ 701.699656][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.706093][ T4524] [ 701.706093][ T4524] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 701.713852][ T4524] lock_sock_nested+0x41/0x100 [ 701.719170][ T4524] inet_shutdown+0x6a/0x390 [ 701.724225][ T4524] nbd_mark_nsock_dead+0x2e9/0x560 [ 701.729896][ T4524] sock_shutdown+0x15e/0x260 [ 701.735071][ T4524] nbd_clear_sock+0x24/0x170 [ 701.740220][ T4524] nbd_config_put+0x2dd/0x580 [ 701.745457][ T4524] nbd_genl_connect+0x19d5/0x1cf0 [ 701.751054][ T4524] genl_family_rcv_msg_doit+0x22a/0x330 [ 701.757161][ T4524] genl_rcv_msg+0x61c/0x7a0 [ 701.762215][ T4524] netlink_rcv_skb+0x232/0x4b0 [ 701.767533][ T4524] genl_rcv+0x28/0x40 [ 701.772059][ T4524] netlink_unicast+0x75c/0x8e0 [ 701.777385][ T4524] netlink_sendmsg+0x813/0xb40 [ 701.782698][ T4524] ____sys_sendmsg+0x972/0x9f0 [ 701.788020][ T4524] ___sys_sendmsg+0x2a5/0x360 [ 701.793254][ T4524] __x64_sys_sendmsg+0x1bd/0x2a0 [ 701.798750][ T4524] do_syscall_64+0x15f/0xf80 [ 701.803895][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.810340][ T4524] [ 701.810340][ T4524] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 701.818016][ T4524] __mutex_lock+0x1a3/0x1550 [ 701.823162][ T4524] nbd_queue_rq+0x37b/0x1100 [ 701.828295][ T4524] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 701.834500][ T4524] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 701.841374][ T4524] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 701.847900][ T4524] blk_mq_run_hw_queue+0x348/0x4f0 [ 701.853563][ T4524] blk_mq_dispatch_list+0xd16/0xe10 [ 701.859315][ T4524] blk_mq_flush_plug_list+0x48d/0x570 [ 701.865386][ T4524] __blk_flush_plug+0x3ed/0x4d0 [ 701.873112][ T4524] __submit_bio+0x28d/0x580 [ 701.878707][ T4524] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 701.884898][ T4524] block_read_full_folio+0x599/0x830 [ 701.890720][ T4524] filemap_read_folio+0x137/0x3b0 [ 701.896357][ T4524] do_read_cache_folio+0x358/0x590 [ 701.902004][ T4524] read_part_sector+0xb6/0x2b0 [ 701.907302][ T4524] adfspart_check_ICS+0xb1/0x960 [ 701.912776][ T4524] bdev_disk_changed+0x817/0x1770 [ 701.918336][ T4524] blkdev_get_whole+0x380/0x510 [ 701.923735][ T4524] bdev_open+0x31e/0xd30 [ 701.928518][ T4524] blkdev_open+0x470/0x610 [ 701.933473][ T4524] do_dentry_open+0x785/0x14e0 [ 701.938792][ T4524] vfs_open+0x3b/0x340 [ 701.943403][ T4524] path_openat+0x2e08/0x3860 [ 701.948537][ T4524] do_file_open+0x23e/0x4a0 [ 701.953589][ T4524] do_sys_openat2+0x113/0x200 [ 701.958817][ T4524] __x64_sys_openat+0x138/0x170 [ 701.964327][ T4524] do_syscall_64+0x15f/0xf80 [ 701.969470][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.975898][ T4524] [ 701.975898][ T4524] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 701.983131][ T4524] __mutex_lock+0x1a3/0x1550 [ 701.988276][ T4524] nbd_queue_rq+0xc6/0x1100 [ 701.993317][ T4524] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 701.999400][ T4524] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 702.006262][ T4524] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 702.012783][ T4524] blk_mq_run_hw_queue+0x348/0x4f0 [ 702.018499][ T4524] blk_mq_dispatch_list+0xd16/0xe10 [ 702.024234][ T4524] blk_mq_flush_plug_list+0x48d/0x570 [ 702.030139][ T4524] __blk_flush_plug+0x3ed/0x4d0 [ 702.035526][ T4524] __submit_bio+0x28d/0x580 [ 702.040567][ T4524] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 702.046738][ T4524] block_read_full_folio+0x599/0x830 [ 702.052565][ T4524] filemap_read_folio+0x137/0x3b0 [ 702.058129][ T4524] do_read_cache_folio+0x358/0x590 [ 702.063796][ T4524] read_part_sector+0xb6/0x2b0 [ 702.069098][ T4524] adfspart_check_ICS+0xb1/0x960 [ 702.074594][ T4524] bdev_disk_changed+0x817/0x1770 [ 702.080159][ T4524] blkdev_get_whole+0x380/0x510 [ 702.085548][ T4524] bdev_open+0x31e/0xd30 [ 702.090328][ T4524] blkdev_open+0x470/0x610 [ 702.095309][ T4524] do_dentry_open+0x785/0x14e0 [ 702.100620][ T4524] vfs_open+0x3b/0x340 [ 702.105226][ T4524] path_openat+0x2e08/0x3860 [ 702.110379][ T4524] do_file_open+0x23e/0x4a0 [ 702.115422][ T4524] do_sys_openat2+0x113/0x200 [ 702.120644][ T4524] __x64_sys_openat+0x138/0x170 [ 702.126205][ T4524] do_syscall_64+0x15f/0xf80 [ 702.131340][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.137768][ T4524] [ 702.137768][ T4524] -> #3 (set->srcu){.+.+}-{0:0}: [ 702.145006][ T4524] __synchronize_srcu+0xca/0x300 [ 702.150487][ T4524] elevator_switch+0x1e8/0x7a0 [ 702.155793][ T4524] elevator_change+0x2cc/0x450 [ 702.161189][ T4524] elevator_set_default+0x36c/0x430 [ 702.166931][ T4524] blk_register_queue+0x3e9/0x4e0 [ 702.172497][ T4524] __add_disk+0x677/0xd50 [ 702.177376][ T4524] add_disk_fwnode+0xfb/0x480 [ 702.182597][ T4524] nbd_dev_add+0x72c/0xb50 [ 702.187577][ T4524] nbd_init+0x168/0x1f0 [ 702.192282][ T4524] do_one_initcall+0x250/0x870 [ 702.197605][ T4524] do_initcall_level+0x104/0x190 [ 702.203099][ T4524] do_initcalls+0x59/0xa0 [ 702.207998][ T4524] kernel_init_freeable+0x2a6/0x3e0 [ 702.213745][ T4524] kernel_init+0x1d/0x1d0 [ 702.218623][ T4524] ret_from_fork+0x514/0xb70 [ 702.223771][ T4524] ret_from_fork_asm+0x1a/0x30 [ 702.229108][ T4524] [ 702.229108][ T4524] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 702.236947][ T4524] __mutex_lock+0x1a3/0x1550 [ 702.242084][ T4524] elevator_change+0x1b3/0x450 [ 702.247375][ T4524] elevator_set_none+0xb5/0x140 [ 702.252762][ T4524] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 702.259111][ T4524] nbd_start_device+0x17f/0xb10 [ 702.264507][ T4524] nbd_genl_connect+0x165b/0x1cf0 [ 702.270074][ T4524] genl_family_rcv_msg_doit+0x22a/0x330 [ 702.276159][ T4524] genl_rcv_msg+0x61c/0x7a0 [ 702.281192][ T4524] netlink_rcv_skb+0x232/0x4b0 [ 702.286517][ T4524] genl_rcv+0x28/0x40 [ 702.291067][ T4524] netlink_unicast+0x75c/0x8e0 [ 702.296548][ T4524] netlink_sendmsg+0x813/0xb40 [ 702.301867][ T4524] ____sys_sendmsg+0x972/0x9f0 [ 702.307185][ T4524] ___sys_sendmsg+0x2a5/0x360 [ 702.312414][ T4524] __x64_sys_sendmsg+0x1bd/0x2a0 [ 702.317900][ T4524] do_syscall_64+0x15f/0xf80 [ 702.323045][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.329477][ T4524] [ 702.329477][ T4524] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 702.338111][ T4524] blk_alloc_queue+0x546/0x680 [ 702.343428][ T4524] __blk_mq_alloc_disk+0x197/0x390 [ 702.349101][ T4524] nbd_dev_add+0x499/0xb50 [ 702.354061][ T4524] nbd_init+0x168/0x1f0 [ 702.358769][ T4524] do_one_initcall+0x250/0x870 [ 702.364091][ T4524] do_initcall_level+0x104/0x190 [ 702.369573][ T4524] do_initcalls+0x59/0xa0 [ 702.374532][ T4524] kernel_init_freeable+0x2a6/0x3e0 [ 702.380271][ T4524] kernel_init+0x1d/0x1d0 [ 702.385139][ T4524] ret_from_fork+0x514/0xb70 [ 702.390276][ T4524] ret_from_fork_asm+0x1a/0x30 [ 702.395592][ T4524] [ 702.395592][ T4524] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 702.402820][ T4524] __lock_acquire+0x15a5/0x2cf0 [ 702.408234][ T4524] lock_acquire+0x106/0x350 [ 702.413281][ T4524] fs_reclaim_acquire+0x71/0x100 [ 702.418758][ T4524] prepare_alloc_pages+0x152/0x650 [ 702.424423][ T4524] __alloc_frozen_pages_noprof+0x12f/0x380 [ 702.430822][ T4524] alloc_pages_mpol+0x232/0x4a0 [ 702.436232][ T4524] alloc_pages_noprof+0xa8/0x1a0 [ 702.441703][ T4524] pte_alloc_one+0x22/0x370 [ 702.446742][ T4524] do_pte_missing+0x12c2/0x3490 [ 702.452146][ T4524] handle_mm_fault+0x1bec/0x3310 [ 702.457626][ T4524] do_user_addr_fault+0x75b/0x1340 [ 702.463285][ T4524] exc_page_fault+0x6a/0xc0 [ 702.468422][ T4524] asm_exc_page_fault+0x26/0x30 [ 702.473810][ T4524] rep_movs_alternative+0xf/0x90 [ 702.479301][ T4524] _copy_from_user+0x7a/0xb0 [ 702.484435][ T4524] sco_sock_setsockopt+0x67d/0x10c0 [ 702.490178][ T4524] do_sock_setsockopt+0x17c/0x1b0 [ 702.495752][ T4524] __x64_sys_setsockopt+0x13d/0x1b0 [ 702.501492][ T4524] do_syscall_64+0x15f/0xf80 [ 702.506626][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.513060][ T4524] [ 702.513060][ T4524] other info that might help us debug this: [ 702.513060][ T4524] [ 702.523301][ T4524] Chain exists of: [ 702.523301][ T4524] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 702.523301][ T4524] [ 702.535964][ T4524] Possible unsafe locking scenario: [ 702.535964][ T4524] [ 702.543422][ T4524] CPU0 CPU1 [ 702.548892][ T4524] ---- ---- [ 702.554267][ T4524] rlock(&mm->mmap_lock); [ 702.558721][ T4524] lock(sk_lock-AF_INET6); [ 702.565760][ T4524] lock(&mm->mmap_lock); [ 702.572712][ T4524] lock(fs_reclaim); [ 702.576720][ T4524] [ 702.576720][ T4524] *** DEADLOCK *** [ 702.576720][ T4524] [ 702.584872][ T4524] 2 locks held by syz.0.14551/4524: [ 702.590085][ T4524] #0: ffff888029565260 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_sock_setsockopt+0x151/0x10c0 [ 702.601684][ T4524] #1: ffff8880325827f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 702.611662][ T4524] [ 702.611662][ T4524] stack backtrace: [ 702.617603][ T4524] CPU: 1 UID: 0 PID: 4524 Comm: syz.0.14551 Not tainted syzkaller #0 PREEMPT(full) [ 702.617628][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 702.617645][ T4524] Call Trace: [ 702.617655][ T4524] [ 702.617664][ T4524] dump_stack_lvl+0xe8/0x150 [ 702.617695][ T4524] print_circular_bug+0x2e1/0x300 [ 702.617727][ T4524] check_noncircular+0x12e/0x150 [ 702.617758][ T4524] __lock_acquire+0x15a5/0x2cf0 [ 702.617789][ T4524] ? __lock_acquire+0x6b5/0x2cf0 [ 702.617815][ T4524] ? prepare_alloc_pages+0x152/0x650 [ 702.617833][ T4524] lock_acquire+0x106/0x350 [ 702.617855][ T4524] ? prepare_alloc_pages+0x152/0x650 [ 702.617879][ T4524] fs_reclaim_acquire+0x71/0x100 [ 702.617895][ T4524] ? prepare_alloc_pages+0x152/0x650 [ 702.617911][ T4524] prepare_alloc_pages+0x152/0x650 [ 702.617931][ T4524] __alloc_frozen_pages_noprof+0x12f/0x380 [ 702.617953][ T4524] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.617973][ T4524] ? __pfx_policy_nodemask+0x10/0x10 [ 702.617996][ T4524] alloc_pages_mpol+0x232/0x4a0 [ 702.618018][ T4524] alloc_pages_noprof+0xa8/0x1a0 [ 702.618037][ T4524] pte_alloc_one+0x22/0x370 [ 702.618055][ T4524] do_pte_missing+0x12c2/0x3490 [ 702.618092][ T4524] handle_mm_fault+0x1bec/0x3310 [ 702.618122][ T4524] ? handle_mm_fault+0xee/0x3310 [ 702.618148][ T4524] ? __pfx_handle_mm_fault+0x10/0x10 [ 702.618183][ T4524] ? __lock_acquire+0x6b5/0x2cf0 [ 702.618208][ T4524] ? lock_mm_and_find_vma+0xa7/0x340 [ 702.618236][ T4524] do_user_addr_fault+0x75b/0x1340 [ 702.618269][ T4524] exc_page_fault+0x6a/0xc0 [ 702.618292][ T4524] asm_exc_page_fault+0x26/0x30 [ 702.618314][ T4524] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 702.618343][ T4524] Code: c4 10 e9 d4 53 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 702.618360][ T4524] RSP: 0018:ffffc9000f3f7c18 EFLAGS: 00050202 [ 702.618377][ T4524] RAX: 00007ffffffff001 RBX: 0000000000000002 RCX: 0000000000000002 [ 702.618390][ T4524] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000f3f7ca0 [ 702.618403][ T4524] RBP: ffffc9000f3f7e48 R08: 0000000000000001 R09: 0000000000000002 [ 702.618414][ T4524] R10: dffffc0000000000 R11: fffff52001e7ef94 R12: 1ffff110052acab7 [ 702.618433][ T4524] R13: ffff8880295655b8 R14: ffffc9000f3f7ca0 R15: 0000200000000000 [ 702.618456][ T4524] _copy_from_user+0x7a/0xb0 [ 702.618475][ T4524] sco_sock_setsockopt+0x67d/0x10c0 [ 702.618500][ T4524] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 702.618533][ T4524] ? __fget_files+0x2a/0x420 [ 702.618555][ T4524] ? aa_sock_opt_perm+0xff/0x1a0 [ 702.618589][ T4524] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 702.618620][ T4524] ? __pfx_sco_sock_setsockopt+0x10/0x10 [ 702.618641][ T4524] do_sock_setsockopt+0x17c/0x1b0 [ 702.618681][ T4524] __x64_sys_setsockopt+0x13d/0x1b0 [ 702.618723][ T4524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.618741][ T4524] do_syscall_64+0x15f/0xf80 [ 702.618762][ T4524] ? trace_irq_disable+0x3b/0x140 [ 702.618780][ T4524] ? clear_bhb_loop+0x40/0x90 [ 702.618800][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.618817][ T4524] RIP: 0033:0x7f608679c819 [ 702.618833][ T4524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.618848][ T4524] RSP: 002b:00007f608766d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 702.618866][ T4524] RAX: ffffffffffffffda RBX: 00007f6086a15fa0 RCX: 00007f608679c819 [ 702.618879][ T4524] RDX: 000000000000000b RSI: 0000000000000112 RDI: 0000000000000005 [ 702.618890][ T4524] RBP: 00007f6086832c91 R08: 0000000000000002 R09: 0000000000000000 [ 702.618901][ T4524] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.618912][ T4524] R13: 00007f6086a16038 R14: 00007f6086a15fa0 R15: 00007ffcd1dce2b8 [ 702.618932][ T4524] [ 703.048028][ T4531] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 703.055527][ T4528] sctp: [Deprecated]: syz.3.14552 (pid 4528) Use of int in maxseg socket option. [ 703.055527][ T4528] Use struct sctp_assoc_value instead