last executing test programs: 3.651660196s ago: executing program 3 (id=16905): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x1, r2, 0x20000002}, 0x10) 3.452143878s ago: executing program 3 (id=16908): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff0000}, 0xfffffffffffffe4c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) 3.029596377s ago: executing program 3 (id=16916): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2, 0x100, 0x220f, {0x77359400}, {}, {0x2, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "433a127efc014c01"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x41) 2.247954027s ago: executing program 3 (id=16925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000ffffffffffffa2aaaaaaaaaa86dd60b79a56004c2900fe8000000000000009002000000000aaff030000ecff0000000000000000000132000400083006"], 0x86) 2.116350111s ago: executing program 0 (id=16927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) accept4(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000180)=0x80, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010084deb62e000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000900000000001416010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001000000000000000000030000"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2.032159131s ago: executing program 4 (id=16928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000800000000000000000000ffffffff020000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff010000000000000200000002000000090000002cbd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.895321966s ago: executing program 1 (id=16929): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@map_fd={0x18, 0x9}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)}, 0x20) 1.893796534s ago: executing program 2 (id=16930): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.810887752s ago: executing program 0 (id=16931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.802894594s ago: executing program 4 (id=16932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.661546314s ago: executing program 2 (id=16933): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 1.597063375s ago: executing program 1 (id=16934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.568308514s ago: executing program 0 (id=16935): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480), 0x0, 0x40010080, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000007000000"], 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.439720036s ago: executing program 2 (id=16936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x1f, 0x1c, 0x66, 0x0, 0xd, 0x2, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x13, 0x7, 0x0, @rand_addr=0x64010101}}}}}}, 0x32) 1.403923188s ago: executing program 0 (id=16937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000000840)=[{&(0x7f00000001c0)=',', 0x1}, {&(0x7f0000000580)="06c391891fe7a0aa63998d25b797", 0xe}, {&(0x7f0000000780)="3ad667fc905d682b82dc7bba428fde5aa0384509182fccd7941df43e2cefc3d87ef7ea2406ea992fb1d50cd454", 0x2d}, {0x0}], 0x4) 1.359288574s ago: executing program 1 (id=16938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0xfffffe35, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.308961477s ago: executing program 3 (id=16939): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f00000002c0)="4cf7", 0x2) splice(r2, &(0x7f0000000040), r1, 0x0, 0x6, 0x0) readv(r0, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 1.082916783s ago: executing program 0 (id=16940): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8048848) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 1.061026004s ago: executing program 2 (id=16941): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d6d"], 0xa) 1.05422163s ago: executing program 1 (id=16942): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1, 0x211d9572}, &(0x7f00000001c0)=0x8) 1.035560928s ago: executing program 3 (id=16943): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x80000000, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x8e}], 0x1, 0x0, 0x0) 905.370096ms ago: executing program 2 (id=16944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x20c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x2e, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x65, '\x00', 0x7, 0x4, 0x5, 0x6}}}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x3, 0x6, 0x0, 0x2, 0x9, 0x8}}, {0x14, 0x2, [0x641, 0x9ec, 0x0, 0x2, 0x2, 0x6, 0x800, 0x7fff]}}, {{0x1c, 0x1, {0x3, 0x3, 0x53b0, 0xa97, 0x0, 0x7, 0x4b, 0x4}}, {0xc, 0x2, [0x1e0, 0x7, 0x80f, 0x0]}}, {{0x1c, 0x1, {0xe, 0x3, 0x84a6, 0x8, 0x1, 0x9, 0x1ff, 0x5}}, {0xe, 0x2, [0x0, 0xee, 0x98b7, 0x4, 0xe8]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x61}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1c}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x401}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x98, 0xc4, 0x7, 0x7, 0x2, 0x7c, 0x3, 0x2}}, {0x8, 0x2, [0x4, 0x5]}}, {{0x1c, 0x1, {0x80, 0x7, 0x6, 0x3, 0x0, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x9, 0x9, 0x8, 0x400, 0x80]}}, {{0x1c, 0x1, {0x1, 0x6, 0x2, 0x3, 0x1, 0x9, 0x2000, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0xdf, 0x5, 0x0, 0x4, 0x2, 0x66d, 0x4, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0x7, 0xcc, 0xe9f, 0x3, 0x0, 0x81, 0xa0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0xa, 0x4, 0x0, 0x7f, 0x2, 0x0, 0xff, 0x5}}, {0xe, 0x2, [0x0, 0x8, 0x8, 0x8000, 0x6]}}]}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc011}, 0x4000010) 900.105032ms ago: executing program 4 (id=16945): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x3, {0x1, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r2, &(0x7f0000004980)=[{{&(0x7f0000000280)=@can={0x1d, r1, 0xc8}, 0x80, &(0x7f00000021c0)}}], 0x1, 0x40050) 873.909067ms ago: executing program 0 (id=16946): syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) 658.416619ms ago: executing program 1 (id=16947): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in6=@local, @in6=@private2, 0x3c, 0x2, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 592.574721ms ago: executing program 4 (id=16948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001080)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) 471.887197ms ago: executing program 1 (id=16949): r0 = socket(0x10, 0x3, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 332.195343ms ago: executing program 4 (id=16950): socket$inet6(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff00000000020000000000000004"], 0x50}}, 0x4000850) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20) 111.222845ms ago: executing program 4 (id=16951): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000bc8dc3ed6997fc840008000300", @ANYRES32=r2, @ANYBLOB="26003300d0800000080211000001080211000000fffffffffffff00f0000840104040000050000000600cd0000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 2 (id=16952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048014}, 0x20004004) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.9632'. [ 568.423511][T25797] netlink: 'syz.0.9634': attribute type 3 has an invalid length. [ 568.423538][T25797] netlink: 'syz.0.9634': attribute type 1 has an invalid length. [ 568.423552][T25797] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9634'. [ 568.763512][T25807] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 568.931656][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 570.503077][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9670'. [ 570.800670][T25881] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9673'. [ 570.800711][T25881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9673'. [ 570.800728][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9673'. [ 571.327158][ T31] audit: type=1800 audit(1789438102.492:7): pid=25897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9681" name="memory.events" dev="tmpfs" ino=9603 res=0 errno=0 [ 571.330021][ T31] audit: type=1804 audit(1789438102.492:8): pid=25897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9681" name="/newroot/1914/memory.events" dev="tmpfs" ino=9603 res=1 errno=0 [ 571.956487][T25914] netlink: 67 bytes leftover after parsing attributes in process `syz.1.9688'. [ 572.059575][T25917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9692'. [ 572.113890][T25914] veth1_vlan: left promiscuous mode [ 572.127800][T25914] veth0_vlan: entered promiscuous mode [ 572.154428][T25914] veth1_vlan: entered promiscuous mode [ 572.188065][T25914] veth0_macvtap: left promiscuous mode [ 572.193245][T25914] veth0_macvtap: entered promiscuous mode [ 572.250743][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.256406][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.268099][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.280046][T25914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.309774][T25924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9695'. [ 572.409663][T25914] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 572.416854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.416992][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.501990][T25962] __nla_validate_parse: 4 callbacks suppressed [ 573.502015][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9715'. [ 573.605527][T25962] bond0: entered allmulticast mode [ 574.347894][T25989] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9724'. [ 575.364234][T26014] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 575.381378][T26016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9738'. [ 575.381404][T26016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9738'. [ 575.383910][T26016] netlink: 'syz.4.9738': attribute type 11 has an invalid length. [ 575.383929][T26016] netlink: 'syz.4.9738': attribute type 14 has an invalid length. [ 576.065229][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9744'. [ 576.065473][T26029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9744'. [ 576.297487][T26037] netlink: 'syz.1.9747': attribute type 8 has an invalid length. [ 576.297512][T26037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9747'. [ 576.297549][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9747'. [ 576.724820][T26056] netlink: 'syz.4.9757': attribute type 5 has an invalid length. [ 576.724844][T26056] netlink: 'syz.4.9757': attribute type 4 has an invalid length. [ 577.605753][T26094] openvswitch: netlink: Missing key (keys=40, expected=100) [ 577.891999][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 577.898824][T26105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9779'. [ 578.734615][T26126] vlan2: entered allmulticast mode [ 578.734639][T26126] bond0: entered allmulticast mode [ 581.087645][T26201] macsec1: entered promiscuous mode [ 581.087672][T26201] macsec1: entered allmulticast mode [ 581.368856][T26215] s: renamed from veth0 [ 581.861826][T26229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9843'. [ 581.976342][T26237] IPVS: Unknown mcast interface: macsec0 [ 585.088699][T26271] tipc: can't start tipc send workqueue [ 585.862942][T26322] netlink: Failed to add ¦â—k helper -22 [ 585.863013][T26322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.791158][T26351] netlink: 47 bytes leftover after parsing attributes in process `syz.2.9896'. [ 588.133981][T26394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9915'. [ 588.343753][T26394] bond4: entered allmulticast mode [ 590.457253][T26466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.457273][T26466] IPv6: NLM_F_CREATE should be set when creating new route [ 590.457344][T26466] IPv6: NLM_F_CREATE should be set when creating new route [ 590.457372][T26466] IPv6: NLM_F_CREATE should be set when creating new route [ 590.459688][T26466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.301298][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9966'. [ 591.373951][T26498] bond3: entered allmulticast mode [ 591.679966][T26519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9975'. [ 592.597262][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9991'. [ 592.597299][T26552] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9991'. [ 593.550515][T26587] nbd: socks must be embedded in a SOCK_ITEM attr [ 593.891771][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.390982][T26594] netlink: 'syz.0.10011': attribute type 8 has an invalid length. [ 594.690568][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10015'. [ 594.790082][T26602] bond5: entered allmulticast mode [ 594.887947][T26610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10018'. [ 595.783756][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10031'. [ 595.812241][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 595.877995][T26640] bond3: entered allmulticast mode [ 595.936157][T26645] tipc: Resetting bearer [ 596.211219][T26649] netlink: 'syz.0.10036': attribute type 3 has an invalid length. [ 596.586113][T26660] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10040'. [ 597.605475][T26684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10052'. [ 597.919187][T26694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10057'. [ 598.443142][T26710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10065'. [ 601.086907][T26797] IPVS: Scheduler module ip_vs_mh not found [ 601.943109][T26830] syz_tun: entered promiscuous mode [ 601.953356][T26830] macvtap1: entered allmulticast mode [ 601.954974][T26830] syz_tun: entered allmulticast mode [ 601.980802][T26835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10125'. [ 601.995026][T26830] syz_tun: left allmulticast mode [ 601.995061][T26830] syz_tun: left promiscuous mode [ 602.079603][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10124'. [ 602.225280][T26841] netlink: 'syz.1.10127': attribute type 15 has an invalid length. [ 602.739573][T26857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10135'. [ 602.739602][T26857] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10135'. [ 602.739619][T26857] netlink: 'syz.2.10135': attribute type 5 has an invalid length. [ 602.739633][T26857] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10135'. [ 603.360540][T26880] netlink: 'syz.4.10146': attribute type 2 has an invalid length. [ 604.760156][T26927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10168'. [ 605.160658][T26937] netlink: 'syz.1.10174': attribute type 4 has an invalid length. [ 605.160685][T26937] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10174'. [ 605.212776][T26942] netlink: 'syz.4.10177': attribute type 10 has an invalid length. [ 605.213340][T26942] netlink: 'syz.4.10177': attribute type 10 has an invalid length. [ 606.184178][T26968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10190'. [ 606.395478][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10191'. [ 606.588541][T26977] ip_tables: iptables: counters copy to user failed while replacing table [ 606.766034][T26981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10195'. [ 606.964497][T26986] Bluetooth: hci0: unsupported parameter 5134 [ 606.964526][T26986] Bluetooth: hci0: unsupported parameter 8192 [ 606.964541][T26986] Bluetooth: hci0: unsupported parameter 5134 [ 606.964554][T26986] Bluetooth: hci0: unsupported parameter 8192 [ 607.571230][T27011] IPv6: sit1: Disabled Multicast RS [ 608.018102][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10219'. [ 608.704878][T27054] xt_hashlimit: size too large, truncated to 1048576 [ 608.704901][T27054] xt_hashlimit: max too large, truncated to 1048576 [ 608.876259][T27057] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.10232'. [ 609.141230][T27064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.492974][T27074] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10239'. [ 609.493001][T27074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10239'. [ 609.493016][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10239'. [ 610.175751][T27092] netlink: Conntrack attr has 4 unknown bytes [ 610.193054][T27093] netlink: 'syz.2.10249': attribute type 1 has an invalid length. [ 611.269522][T27137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10270'. [ 611.541162][T27146] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10275'. [ 611.977894][T27158] sctp: [Deprecated]: syz.1.10280 (pid 27158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.977894][T27158] Use struct sctp_sack_info instead [ 611.980380][T27158] sctp: [Deprecated]: syz.1.10280 (pid 27158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.980380][T27158] Use struct sctp_sack_info instead [ 612.053177][T27160] ip6gretap0: entered promiscuous mode [ 612.083204][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 612.465866][T27180] syz.3.10289: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 612.465946][T27180] CPU: 0 UID: 0 PID: 27180 Comm: syz.3.10289 Not tainted syzkaller #0 PREEMPT(full) [ 612.465972][T27180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 612.465985][T27180] Call Trace: [ 612.465995][T27180] [ 612.466005][T27180] dump_stack_lvl+0xe8/0x150 [ 612.466044][T27180] warn_alloc+0x24d/0x270 [ 612.466069][T27180] ? kasan_save_track+0x4f/0x80 [ 612.466091][T27180] ? kasan_save_track+0x3e/0x80 [ 612.466116][T27180] ? __pfx_warn_alloc+0x10/0x10 [ 612.466133][T27180] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 612.466159][T27180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.466202][T27180] __vmalloc_node_range_noprof+0x127/0x1540 [ 612.466261][T27180] ? rcu_is_watching+0x16/0xb0 [ 612.466294][T27180] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 612.466326][T27180] ? __kmalloc_cache_noprof+0x321/0x600 [ 612.466348][T27180] ? __kmalloc_cache_noprof+0x14d/0x600 [ 612.466369][T27180] ? xskq_create+0x56/0x220 [ 612.466396][T27180] xskq_create+0x148/0x220 [ 612.466418][T27180] ? xsk_init_queue+0x8a/0xe0 [ 612.466453][T27180] xsk_init_queue+0x8a/0xe0 [ 612.466489][T27180] xsk_setsockopt+0x52a/0x960 [ 612.466524][T27180] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.466553][T27180] ? put_files_struct+0x24f/0x350 [ 612.466580][T27180] ? __pfx_aa_sk_perm+0x10/0x10 [ 612.466627][T27180] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 612.466654][T27180] ? __pfx_xsk_setsockopt+0x10/0x10 [ 612.466691][T27180] do_sock_setsockopt+0x17c/0x1b0 [ 612.466723][T27180] __x64_sys_setsockopt+0x13d/0x1b0 [ 612.466756][T27180] do_syscall_64+0x166/0x520 [ 612.466778][T27180] ? trace_irq_disable+0x3b/0x140 [ 612.466799][T27180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.466821][T27180] ? clear_bhb_loop+0x70/0xc0 [ 612.466849][T27180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.466871][T27180] RIP: 0033:0x7f58f659e159 [ 612.466893][T27180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.466911][T27180] RSP: 002b:00007f58f47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.466933][T27180] RAX: ffffffffffffffda RBX: 00007f58f6825fa0 RCX: 00007f58f659e159 [ 612.466949][T27180] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 612.466962][T27180] RBP: 00007f58f663503b R08: 0000000000000004 R09: 0000000000000000 [ 612.466975][T27180] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.466988][T27180] R13: 00007f58f6826038 R14: 00007f58f6825fa0 R15: 00007ffe46304708 [ 612.467025][T27180] [ 612.619972][T27182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.635227][T27180] Mem-Info: [ 612.635266][T27180] active_anon:5433 inactive_anon:0 isolated_anon:0 [ 612.635266][T27180] active_file:3 inactive_file:43339 isolated_file:0 [ 612.635266][T27180] unevictable:0 dirty:276 writeback:0 [ 612.635266][T27180] slab_reclaimable:12162 slab_unreclaimable:115419 [ 612.635266][T27180] mapped:29237 shmem:524 pagetables:1138 [ 612.635266][T27180] sec_pagetables:0 bounce:0 [ 612.635266][T27180] kernel_misc_reclaimable:0 [ 612.635266][T27180] free:1270193 free_pcp:9820 free_cma:0 [ 612.635318][T27180] Node 0 active_anon:21732kB inactive_anon:0kB active_file:12kB inactive_file:173152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116948kB dirty:1104kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12024kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.635373][T27180] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:92kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 612.635420][T27180] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.635480][T27180] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 612.635519][T27180] Node 0 DMA32 free:1111600kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21732kB inactive_anon:0kB active_file:12kB inactive_file:173152kB unevictable:0kB writepending:1104kB zspages:0kB present:3129332kB managed:2546616kB mlocked:0kB bounce:0kB free_pcp:39280kB local_pcp:18740kB free_cma:0kB [ 612.635577][T27180] lowmem_reserve[]: 0 0 0 0 0 [ 612.635613][T27180] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.635666][T27180] lowmem_reserve[]: 0 0 0 0 0 [ 612.635700][T27180] Node 1 Normal free:3953812kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.635754][T27180] lowmem_reserve[]: 0 0 0 0 0 [ 612.635789][T27180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 612.635904][T27180] Node 0 DMA32: 1402*4kB (UME) 945*8kB (UME) 452*16kB (UME) 206*32kB (UME) 66*64kB (UME) 37*128kB (UME) 16*256kB (UM) 9*512kB (UME) 8*1024kB (UM) 3*2048kB (UM) 257*4096kB (UM) = 1111664kB [ 612.636063][T27180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 612.636159][T27180] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 4*16kB (UM) 8*32kB (UM) 6*64kB (UM) 7*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 963*4096kB (M) = 3953812kB [ 612.636395][T27180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.636412][T27180] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.636428][T27180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 612.636443][T27180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 612.636459][T27180] 43864 total pagecache pages [ 612.636467][T27180] 0 pages in swap cache [ 612.636474][T27180] Free swap = 124996kB [ 612.636482][T27180] Total swap = 124996kB [ 612.636490][T27180] 2097051 pages RAM [ 612.636498][T27180] 0 pages HighMem/MovableOnly [ 612.636504][T27180] 428781 pages reserved [ 612.636512][T27180] 0 pages cma reserved [ 612.774535][ T1328] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 612.932106][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.099454][T27196] tipc: Enabling not permitted [ 613.099492][T27196] tipc: Enabling of bearer rejected, failed to enable media [ 613.374620][T27206] Bluetooth: hci0: unsupported parameter 512 [ 613.374816][T27206] Bluetooth: hci0: unsupported parameter 4608 [ 613.374832][T27206] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 613.664481][T27217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10308'. [ 613.813409][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.818744][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.588632][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10323'. [ 614.614478][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 614.694873][T27238] udevd[27238]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 614.933296][T27261] netlink: 'syz.1.10328': attribute type 2 has an invalid length. [ 615.994640][T27285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10339'. [ 616.640709][T27295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10344'. [ 617.638286][T27337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10364'. [ 617.866808][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10368'. [ 617.885268][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10368'. [ 617.885528][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10368'. [ 617.885696][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10368'. [ 617.885855][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10368'. [ 617.971674][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 618.019405][T27352] netlink: 'syz.4.10371': attribute type 4 has an invalid length. [ 619.133240][T27385] __nla_validate_parse: 54 callbacks suppressed [ 619.133264][T27385] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.10388'. [ 619.133282][T27385] netlink: 'syz.1.10388': attribute type 1 has an invalid length. [ 619.964032][T27417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.698072][T27513] netlink: 'syz.0.10451': attribute type 8 has an invalid length. [ 622.698096][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10451'. [ 622.698691][T27513] bridge0: port 3(erspan0) entered disabled state [ 622.699030][T27513] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.701268][T27513] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.721162][T27548] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10469'. [ 624.505068][T27583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10484'. [ 624.505099][T27583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10484'. [ 624.815017][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10489'. [ 624.854261][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10489'. [ 624.855041][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10489'. [ 624.876593][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10489'. [ 624.879030][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10489'. [ 627.171698][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.535788][T27743] netlink: Failed to add %pK helper -22 [ 629.535848][T27743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.543341][T27747] Bluetooth: hci0: unsupported parameter 5135 [ 629.543362][T27747] Bluetooth: hci0: unsupported parameter 8192 [ 629.543375][T27747] Bluetooth: hci0: unsupported parameter 5135 [ 629.543386][T27747] Bluetooth: hci0: unsupported parameter 8192 [ 630.283656][T27771] macvtap1: entered allmulticast mode [ 630.371947][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 630.720338][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.721105][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.721381][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.724556][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.724753][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.724936][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.725118][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.726510][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.726703][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.726888][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 630.892493][T27791] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 630.963396][T27793] ip_tables: iptables: counters copy to user failed while replacing table [ 632.826893][T27855] netlink: 'syz.4.10614': attribute type 3 has an invalid length. [ 635.759996][T27956] __nla_validate_parse: 43 callbacks suppressed [ 635.760019][T27956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10663'. [ 635.806613][T27961] netlink: 'syz.3.10666': attribute type 2 has an invalid length. [ 636.004429][T27963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.216173][T27967] ip_tables: iptables: counters copy to user failed while replacing table [ 636.484730][T27978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10673'. [ 636.939162][T27993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10681'. [ 637.471358][T28009] tipc: Started in network mode [ 637.481709][T28009] tipc: Node identity feffffff000000000000ffffffffffff, cluster identity 4711 [ 637.481777][T28009] tipc: Enabling of bearer rejected, failed to enable media [ 637.623611][T28012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10689'. [ 637.848587][T28019] gre0: left promiscuous mode [ 637.848612][T28019] gre0: left allmulticast mode [ 638.001922][T28019] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10692'. [ 638.001952][T28019] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 638.333084][T28030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10697'. [ 639.197146][T28056] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 641.191357][T28129] macsec3: entered promiscuous mode [ 641.191381][T28129] bridge0: entered promiscuous mode [ 642.017910][T28149] IPVS: Scheduler module ip_vs_sip not found [ 642.356726][T28165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10759'. [ 642.356751][T28165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10759'. [ 642.539602][T28171] netlink: 'syz.0.10764': attribute type 11 has an invalid length. [ 642.609036][T28174] netlink: 'syz.2.10765': attribute type 3 has an invalid length. [ 642.609079][T28174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.332577][T28193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10772'. [ 643.350571][T28194] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 644.411332][T28228] tipc: Enabled bearer , priority 30 [ 644.441431][T28227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10789'. [ 644.890581][T28242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.092698][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 645.703122][T28272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10811'. [ 645.703186][T28272] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 646.282955][T28295] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 646.572588][T28304] netlink: 'syz.3.10825': attribute type 11 has an invalid length. [ 646.617058][T28307] tipc: Enabling of bearer rejected, failed to enable media [ 647.049328][T28322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10835'. [ 647.049356][T28322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10835'. [ 647.356594][T28336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10844'. [ 647.532664][T28341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10846'. [ 648.694491][T28388] macsec1: entered promiscuous mode [ 649.040506][T28404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10876'. [ 649.089561][T28405] ip6tnl4: entered allmulticast mode [ 649.204455][ T1328] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 649.204776][ T1328] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 649.236950][ T5748] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 649.269791][T28410] netlink: Unknown nat attribute (0) [ 649.269830][T28410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.972588][ T5748] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 650.213742][ T5748] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 650.329535][T28445] netlink: 'syz.4.10895': attribute type 1 has an invalid length. [ 651.883834][T28502] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 652.059122][T28507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10921'. [ 652.376112][T28520] Bluetooth: hci0: unsupported parameter 5135 [ 652.376139][T28520] Bluetooth: hci0: unsupported parameter 8192 [ 652.376153][T28520] Bluetooth: hci0: unsupported parameter 5135 [ 652.376165][T28520] Bluetooth: hci0: unsupported parameter 8192 [ 653.446626][T28562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10949'. [ 653.613969][T28568] macsec0: entered promiscuous mode [ 653.651676][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 653.905366][T28577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10955'. [ 656.757872][T28663] Bluetooth: hci0: unsupported parameter 5161 [ 656.757897][T28663] Bluetooth: hci0: unsupported parameter 8192 [ 656.757911][T28663] Bluetooth: hci0: unsupported parameter 5161 [ 656.757923][T28663] Bluetooth: hci0: unsupported parameter 8192 [ 657.385877][T28687] netlink: 'syz.0.11009': attribute type 3 has an invalid length. [ 659.197101][T28743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 659.197493][T28743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 659.808747][T28759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11042'. [ 660.123229][T28769] veth0_to_bond: entered allmulticast mode [ 660.156414][T28774] netlink: 'syz.0.11047': attribute type 1 has an invalid length. [ 660.515239][T28789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11057'. [ 661.034187][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11066'. [ 661.100084][T28813] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11068'. [ 661.100111][T28813] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11068'. [ 662.371672][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 663.232384][T28880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11099'. [ 663.232465][T28880] netlink: 'syz.3.11099': attribute type 1 has an invalid length. [ 663.232480][T28880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11099'. [ 663.328962][T28884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11103'. [ 663.328998][T28884] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 664.709410][T28933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 668.818310][T29041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11178'. [ 668.864774][T29042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11179'. [ 669.518443][T29071] netlink: 'syz.0.11194': attribute type 1 has an invalid length. [ 669.725423][T29083] netlink: 'syz.1.11195': attribute type 9 has an invalid length. [ 669.725449][T29083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11195'. [ 670.059073][T29095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.196108][T29100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11207'. [ 670.328451][T29106] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11210'. [ 670.593654][T29113] macvlan0: entered promiscuous mode [ 670.901036][T29126] tipc: Enabling of bearer rejected, failed to enable media [ 671.112777][T29131] tipc: Enabling of bearer rejected, failed to enable media [ 671.593465][T29148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11231'. [ 671.925482][T29156] dummy0: entered promiscuous mode [ 671.926222][T29153] dummy0: left promiscuous mode [ 672.342659][T29172] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 672.692933][T29183] netlink: 'syz.4.11247': attribute type 8 has an invalid length. [ 672.779404][T29187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11249'. [ 672.914224][T29189] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11250'. [ 674.335128][T29238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11274'. [ 674.556187][T29247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11278'. [ 674.650211][T29247] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 674.878286][T29256] sctp: [Deprecated]: syz.2.11281 (pid 29256) Use of int in max_burst socket option. [ 674.878286][T29256] Use struct sctp_assoc_value instead [ 674.952245][T29258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11285'. [ 675.483405][T29284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11297'. [ 675.569714][T29285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11296'. [ 675.748887][T29289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11298'. [ 676.065954][T29301] netlink: 'syz.1.11305': attribute type 4 has an invalid length. [ 676.257890][T29311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11312'. [ 676.335558][T29315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11314'. [ 677.331183][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11325'. [ 677.950834][T29365] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 677.950872][T29365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.202530][T29369] bond0: option min_links: invalid value (18446744073709551615) [ 678.202558][T29369] bond0: option min_links: allowed values 0 - 2147483647 [ 678.560042][T29385] Bluetooth: hci0: unsupported parameter 5135 [ 678.560070][T29385] Bluetooth: hci0: unsupported parameter 8192 [ 678.560084][T29385] Bluetooth: hci0: unsupported parameter 5135 [ 678.560097][T29385] Bluetooth: hci0: unsupported parameter 8192 [ 678.715344][T29394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11351'. [ 678.972589][T29400] Bluetooth: hci0: unsupported parameter 5135 [ 678.972618][T29400] Bluetooth: hci0: unsupported parameter 8192 [ 678.972631][T29400] Bluetooth: hci0: unsupported parameter 5135 [ 678.972643][T29400] Bluetooth: hci0: unsupported parameter 8192 [ 680.291652][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 680.291954][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 680.555722][T29455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11377'. [ 680.689923][T29458] ip_tables: iptables: counters copy to user failed while replacing table [ 681.956347][T29495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11399'. [ 682.782424][T29527] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 683.770253][T29572] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11434'. [ 684.543593][T29604] sctp: [Deprecated]: syz.4.11450 (pid 29604) Use of int in max_burst socket option deprecated. [ 684.543593][T29604] Use struct sctp_assoc_value instead [ 685.422048][T29632] netlink: 'syz.4.11463': attribute type 1 has an invalid length. [ 687.379253][T29689] openvswitch: netlink: Unknown key attributes 20 [ 687.482859][T29693] Bluetooth: hci0: unsupported parameter 5135 [ 687.482884][T29693] Bluetooth: hci0: unsupported parameter 8192 [ 687.482898][T29693] Bluetooth: hci0: unsupported parameter 5135 [ 687.482911][T29693] Bluetooth: hci0: unsupported parameter 8192 [ 687.484537][ T31] audit: type=1800 audit(1789438218.652:9): pid=29695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11492" name="blkio.bfq.time_recursive" dev="tmpfs" ino=11581 res=0 errno=0 [ 688.325295][T29724] macsec2: entered promiscuous mode [ 688.325320][T29724] hsr0: entered promiscuous mode [ 688.346166][T29724] hsr0: left promiscuous mode [ 688.930718][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11516'. [ 689.314858][T29753] macvtap1: entered promiscuous mode [ 689.770457][T29773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11529'. [ 690.013514][T29780] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 690.343181][T29794] netlink: 271 bytes leftover after parsing attributes in process `syz.4.11538'. [ 690.600923][T29804] netlink: 'syz.2.11543': attribute type 16 has an invalid length. [ 690.600949][T29804] netlink: 'syz.2.11543': attribute type 3 has an invalid length. [ 690.600962][T29804] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.11543'. [ 690.912442][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11546'. [ 691.030805][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11548'. [ 691.157918][T29822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.388090][T29862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11569'. [ 692.653884][T29875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.503077][T29933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11604'. [ 695.148294][T29957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11614'. [ 695.167731][T29957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11614'. [ 695.546717][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11622'. [ 696.168723][T29992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11631'. [ 696.726212][T30003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11636'. [ 697.013515][T30011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11640'. [ 697.032672][T30013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11639'. [ 697.382867][T30024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11647'. [ 697.382898][T30024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11647'. [ 697.412314][T30023] netlink: 'syz.1.11646': attribute type 12 has an invalid length. [ 697.412337][T30023] netlink: 'syz.1.11646': attribute type 11 has an invalid length. [ 697.586204][T30028] netlink: NAT attribute has 4 unknown bytes [ 697.586244][T30028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.144883][T30087] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 700.025316][T30120] vlan3: entered promiscuous mode [ 700.025342][T30120] bridge0: entered promiscuous mode [ 700.217106][T30125] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 700.965560][T30150] __nla_validate_parse: 4 callbacks suppressed [ 700.965583][T30150] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11709'. [ 701.413285][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 702.425411][T30187] Bluetooth: hci0: unsupported parameter 5135 [ 702.425439][T30187] Bluetooth: hci0: unsupported parameter 8192 [ 702.425527][T30187] Bluetooth: hci0: unsupported parameter 5135 [ 702.425541][T30187] Bluetooth: hci0: unsupported parameter 8192 [ 702.481286][T30190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.664177][T30233] netlink: 'syz.0.11747': attribute type 4 has an invalid length. [ 703.664205][T30233] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11747'. [ 703.888447][T30242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11751'. [ 704.424494][T30263] netlink: 'syz.4.11762': attribute type 7 has an invalid length. [ 705.180695][T30289] netlink: 'syz.3.11775': attribute type 11 has an invalid length. [ 705.180722][T30289] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.11775'. [ 705.873854][T30313] netlink: 'syz.2.11785': attribute type 2 has an invalid length. [ 706.713413][T30339] nbd: must specify a size in bytes for the device [ 707.159742][T30357] netlink: 'syz.4.11808': attribute type 4 has an invalid length. [ 707.159768][T30357] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11808'. [ 707.705365][T30377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11816'. [ 708.657805][T30407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.760400][T30411] lo: entered allmulticast mode [ 708.760773][T30411] lo: left allmulticast mode [ 708.898803][T30416] Bluetooth: hci0: unsupported parameter 5135 [ 708.898830][T30416] Bluetooth: hci0: unsupported parameter 8192 [ 708.898844][T30416] Bluetooth: hci0: unsupported parameter 5135 [ 708.898857][T30416] Bluetooth: hci0: unsupported parameter 8192 [ 709.707291][T30450] macsec4: entered promiscuous mode [ 709.707318][T30450] hsr0: entered promiscuous mode [ 709.967550][T30460] sctp: [Deprecated]: syz.1.11856 (pid 30460) Use of int in max_burst socket option. [ 709.967550][T30460] Use struct sctp_assoc_value instead [ 710.129957][T30466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11862'. [ 710.613324][T30479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11866'. [ 710.860564][T30488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11878'. [ 711.254091][T30498] IPVS: Error connecting to the multicast addr [ 712.109782][T30534] netlink: 'syz.2.11889': attribute type 1 has an invalid length. [ 712.109809][T30534] netlink: 'syz.2.11889': attribute type 2 has an invalid length. [ 712.113518][T30534] netlink: 'syz.2.11889': attribute type 1 has an invalid length. [ 712.113537][T30534] netlink: 'syz.2.11889': attribute type 2 has an invalid length. [ 712.311731][T30541] ip_tables: iptables: counters copy to user failed while replacing table [ 713.571617][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 714.742864][T30624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11935'. [ 714.747568][T30624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11935'. [ 714.822990][T30628] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11938'. [ 715.335187][T30643] tipc: Enabling of bearer rejected, failed to enable media [ 715.419379][T30645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11945'. [ 716.107932][T30667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.107959][T30667] IPv6: NLM_F_CREATE should be set when creating new route [ 716.108009][T30667] IPv6: NLM_F_CREATE should be set when creating new route [ 716.361673][T30677] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11960'. [ 718.455377][T30761] netlink: 'syz.0.12000': attribute type 1 has an invalid length. [ 718.455402][T30761] netlink: 'syz.0.12000': attribute type 2 has an invalid length. [ 718.455416][T30761] netlink: 'syz.0.12000': attribute type 3 has an invalid length. [ 718.455429][T30761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12000'. [ 718.819946][T30771] Bluetooth: hci0: unsupported parameter 5135 [ 718.819975][T30771] Bluetooth: hci0: invalid length 1, exp 2 for type 11 [ 719.790653][T30806] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12019'. [ 719.790678][T30806] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12019'. [ 719.790694][T30806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12019'. [ 720.317025][T30823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12028'. [ 720.506045][T30829] ip_tables: iptables: counters copy to user failed while replacing table [ 720.633827][T30833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.954660][T30849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12042'. [ 720.954688][T30849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12042'. [ 720.954713][T30849] netlink: 'syz.3.12042': attribute type 11 has an invalid length. [ 720.954728][T30849] netlink: 'syz.3.12042': attribute type 13 has an invalid length. [ 721.033963][T30850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12040'. [ 721.925097][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12062'. [ 722.207445][T30905] netlink: 204 bytes leftover after parsing attributes in process `syz.1.12067'. [ 722.344625][T30911] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma? [ 722.678262][T30927] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12079'. [ 722.923917][T30940] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 723.749138][T30972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 725.048595][T31011] __nla_validate_parse: 4 callbacks suppressed [ 725.048620][T31011] netlink: 165 bytes leftover after parsing attributes in process `syz.1.12120'. [ 725.727824][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12127'. [ 726.070822][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12130'. [ 726.354401][T31042] netlink: 'syz.1.12134': attribute type 30 has an invalid length. [ 726.650686][T31050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12137'. [ 727.800311][T31089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12156'. [ 729.190256][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12183'. [ 729.513159][T31159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.744788][T31169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12193'. [ 730.448913][T31197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.116253][T31217] netlink: Failed to add filter helper -22 [ 731.116313][T31217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.967485][T31276] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 733.674612][T31284] rdma_op ffff888012ac6a38 conn xmit_rdma 0000000000000000 [ 734.463691][T31300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 734.541259][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12255'. [ 734.541285][T31306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12255'. [ 734.546487][T31304] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 734.586304][T31304] bond5 (unregistering): Released all slaves [ 735.092486][T31324] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.12264'. [ 735.745908][T31345] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12274'. [ 736.929608][T31355] lo: entered promiscuous mode [ 736.932112][T31355] lo: entered allmulticast mode [ 736.934804][T31355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12279'. [ 736.934825][T31355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.056778][T31362] openvswitch: netlink: Missing key (keys=40, expected=100) [ 738.799843][T31407] Bluetooth: hci0: unsupported parameter 5134 [ 738.799869][T31407] Bluetooth: hci0: unsupported parameter 8192 [ 738.799883][T31407] Bluetooth: hci0: unsupported parameter 5134 [ 738.799896][T31407] Bluetooth: hci0: unsupported parameter 8192 [ 738.967556][T31411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12305'. [ 739.302236][T31426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12311'. [ 739.553011][T31437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12313'. [ 739.553040][T31437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12313'. [ 739.553054][T31437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12313'. [ 739.553073][T31437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12313'. [ 739.784961][T31442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12318'. [ 739.884884][T31451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12320'. [ 740.015692][T31454] netlink: Failed to add ¦â—k\ helper -22 [ 740.015840][T31454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.141584][T31495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12343'. [ 741.199808][T31496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12342'. [ 741.199870][T31496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12342'. [ 741.266565][T31502] Bluetooth: MGMT ver 1.23 [ 741.645283][T31515] openvswitch: netlink: Unknown nsh attribute 0 [ 742.637200][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12369'. [ 742.850040][T31549] Bluetooth: hci0: unsupported parameter 5135 [ 742.850068][T31549] Bluetooth: hci0: unsupported parameter 8192 [ 742.850109][T31549] Bluetooth: hci0: unsupported parameter 5135 [ 742.850122][T31549] Bluetooth: hci0: unsupported parameter 8192 [ 743.067421][T31551] batadv_slave_1: entered promiscuous mode [ 743.919188][T31578] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 743.946016][T31580] Bluetooth: MGMT ver 1.23 [ 745.148305][T31619] __nla_validate_parse: 1 callbacks suppressed [ 745.148326][T31619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12404'. [ 746.052603][T31649] netlink: 'syz.1.12420': attribute type 3 has an invalid length. [ 746.764770][T31679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12434'. [ 748.706834][T31747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12461'. [ 748.834889][T31752] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 749.122250][T31756] xt_hashlimit: size too large, truncated to 1048576 [ 751.368563][T31829] netlink: 'syz.0.12489': attribute type 18 has an invalid length. [ 751.543243][ T43] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.544303][ T43] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.611649][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 752.716241][T31870] openvswitch: netlink: Actions may not be safe on all matching packets [ 752.733401][T31871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12506'. [ 752.758197][T31871] vlan4: entered promiscuous mode [ 753.341481][T31891] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12512'. [ 754.995377][T31958] netlink: 'syz.1.12537': attribute type 2 has an invalid length. [ 755.480797][T11432] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 755.494730][T31969] macsec1: entered promiscuous mode [ 755.495814][T31969] macsec1: entered allmulticast mode [ 755.495838][T31969] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 755.535378][T31969] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 755.549705][T31969] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 755.750029][T31978] Bluetooth: hci0: unsupported parameter 5161 [ 755.750056][T31978] Bluetooth: hci0: unsupported parameter 8192 [ 755.750069][T31978] Bluetooth: hci0: unsupported parameter 5161 [ 755.750082][T31978] Bluetooth: hci0: unsupported parameter 8192 [ 755.813174][T11432] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 755.914760][T31980] smc: net device vlan1 applied user defined pnetid SYZ2 [ 757.248847][T32039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12569'. [ 757.503386][T32045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12571'. [ 757.636993][T32039] veth6: entered allmulticast mode [ 758.131234][T32062] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12577'. [ 759.138059][T32087] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12588'. [ 759.293477][T32090] netlink: 'syz.0.12590': attribute type 6 has an invalid length. [ 759.480823][T32095] netlink: 136 bytes leftover after parsing attributes in process `syz.3.12593'. [ 759.480850][T32095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 759.754971][T32109] ipvlan2: entered promiscuous mode [ 759.773755][T32111] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 759.963383][T32115] pim6reg99999999: entered allmulticast mode [ 760.331427][T32136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12610'. [ 761.956169][T32185] wireguard: wg2: Could not create IPv4 socket [ 762.344747][T32198] netlink: 292 bytes leftover after parsing attributes in process `syz.4.12642'. [ 762.842791][T32222] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12652'. [ 763.065280][T32225] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 763.829810][T32255] xt_hashlimit: size too large, truncated to 1048576 [ 763.949260][T32257] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12669'. [ 765.972637][T32325] tipc: Enabling of bearer rejected, failed to enable media [ 766.582267][T32341] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 766.654031][T32345] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12711'. [ 768.187408][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12739'. [ 768.207919][T32403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12739'. [ 768.493835][T32415] netlink: 'syz.0.12745': attribute type 2 has an invalid length. [ 768.823291][T32425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12751'. [ 769.184641][T32436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12755'. [ 769.739302][T32459] ip_tables: iptables: counters copy to user failed while replacing table [ 769.740572][T32459] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 769.807185][T32461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12769'. [ 770.445260][T32485] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 770.927934][T32507] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12790'. [ 771.273538][T32516] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 771.640204][T32530] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 771.825314][T32535] netlink: 'syz.1.12804': attribute type 58 has an invalid length. [ 771.825341][T32535] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12804'. [ 771.862512][T32534] netlink: 'syz.0.12803': attribute type 178 has an invalid length. [ 773.608638][T32583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12827'. [ 773.942430][T32593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12832'. [ 774.284131][T32602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12836'. [ 774.596833][T32612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12841'. [ 774.750470][T32618] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 774.844381][T32624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12846'. [ 775.248066][T32638] tipc: Enabling of bearer rejected, failed to enable media [ 777.138582][T32700] netlink: 'syz.2.12884': attribute type 62 has an invalid length. [ 777.493111][T32713] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12890'. [ 777.493137][T32713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12890'. [ 777.882166][T32729] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12899'. [ 779.371437][ T320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12926'. [ 779.442224][ T322] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12927'. [ 779.517137][ T324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12928'. [ 779.609344][ T326] macsec5: entered promiscuous mode [ 779.763804][ T332] netlink: 240 bytes leftover after parsing attributes in process `syz.1.12932'. [ 779.763833][ T332] netlink: 'syz.1.12932': attribute type 9 has an invalid length. [ 780.042308][ T342] x_tables: ip6_tables: conntrack.2 match: invalid size 160 (kernel) != (user) 168 [ 780.160466][ T346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12938'. [ 780.416758][ T353] tipc: Enabling of bearer rejected, failed to enable media [ 780.943367][ T375] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1282) ! [ 781.050586][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12954'. [ 781.050617][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12954'. [ 782.254469][ T405] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 782.357117][ T408] netlink: 332 bytes leftover after parsing attributes in process `syz.4.12967'. [ 782.357180][ T408] netlink: 'syz.4.12967': attribute type 9 has an invalid length. [ 782.357195][ T408] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12967'. [ 782.357210][ T408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12967'. [ 783.332379][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 783.678219][T11427] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 783.680033][ T457] macsec1: entered allmulticast mode [ 783.680059][ T457] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 783.719389][ T457] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 783.742664][ T457] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 783.767921][ T459] netlink: 'syz.4.12992': attribute type 1 has an invalid length. [ 783.767967][ T459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.009064][T11427] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 784.684358][ T494] __nla_validate_parse: 2 callbacks suppressed [ 784.684380][ T494] netlink: 276 bytes leftover after parsing attributes in process `syz.0.13007'. [ 785.065827][ T507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13014'. [ 785.065871][ T507] netlink: 'syz.4.13014': attribute type 10 has an invalid length. [ 785.065888][ T507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13014'. [ 785.140635][ T507] geneve3: entered promiscuous mode [ 785.140659][ T507] geneve3: entered allmulticast mode [ 786.500536][ T561] ip_tables: iptables: counters copy to user failed while replacing table [ 786.913932][ T571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13046'. [ 788.084495][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13064'. [ 788.084532][ T608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13064'. [ 788.100310][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13064'. [ 788.100344][ T608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13064'. [ 788.583669][ T625] netlink: 'syz.2.13072': attribute type 1 has an invalid length. [ 789.252890][ T650] netlink: 'syz.1.13084': attribute type 1 has an invalid length. [ 789.821815][ T670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13094'. [ 789.944857][ T674] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 790.492734][ T694] netlink: 'syz.2.13105': attribute type 25 has an invalid length. [ 791.217007][ T717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13117'. [ 791.536833][ T732] netlink: 'syz.4.13124': attribute type 4 has an invalid length. [ 791.536863][ T732] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13124'. [ 791.663735][ T735] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000 [ 792.963882][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13147'. [ 793.550885][ T803] netlink: 'syz.2.13156': attribute type 29 has an invalid length. [ 793.550913][ T803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13156'. [ 793.555252][ T803] netlink: 'syz.2.13156': attribute type 29 has an invalid length. [ 793.555273][ T803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13156'. [ 793.715216][ T812] Bluetooth: hci0: unsupported parameter 512 [ 793.715243][ T812] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 794.102075][ T821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13164'. [ 795.315807][ T867] ip6gre6: entered promiscuous mode [ 795.316044][ T867] ip6gre6: entered allmulticast mode [ 795.713121][ T885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13194'. [ 797.235311][ T962] tipc: Enabled bearer , priority 7 [ 797.681418][ T983] netlink: 'syz.4.13236': attribute type 32 has an invalid length. [ 797.681446][ T983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13236'. [ 797.756369][ T986] netlink: 'syz.3.13237': attribute type 1 has an invalid length. [ 797.810006][ T983] bond5: Setting coupled_control to off (0) [ 798.054820][ T992] Bluetooth: hci0: unsupported parameter 5135 [ 798.054846][ T992] Bluetooth: hci0: unsupported parameter 8192 [ 798.054861][ T992] Bluetooth: hci0: unsupported parameter 5135 [ 798.054874][ T992] Bluetooth: hci0: unsupported parameter 8192 [ 798.294515][ T1000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13244'. [ 798.496069][ T1002] veth15: entered promiscuous mode [ 798.496093][ T1002] veth15: entered allmulticast mode [ 798.496869][ T1002] team0: Device veth15 is up. Set it down before adding it as a team port [ 798.555021][ T5748] tipc: Node number set to 16842751 [ 798.972287][ T1020] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 798.975061][ T1020] batman_adv: batadv0: Adding interface: gretap2 [ 798.975079][ T1020] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.975112][ T1020] batman_adv: batadv0: Interface activated: gretap2 [ 799.177232][ T1029] geneve0: entered promiscuous mode [ 799.180001][ T1032] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 799.180035][ T1032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.195861][ T1029] geneve0: left promiscuous mode [ 799.257943][ T1034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13259'. [ 799.553215][ T1045] netlink: NAT attribute has 4 unknown bytes [ 799.553258][ T1045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.617269][ T1047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13264'. [ 799.672769][ T1049] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 800.422264][ T1087] Bluetooth: hci0: invalid length 0, exp 2 for type 30 [ 800.477913][ T1090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13280'. [ 801.267429][ T1123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13297'. [ 801.267502][ T1123] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13297'. [ 801.267525][ T1123] tipc: Invalid UDP bearer configuration [ 801.267572][ T1123] tipc: Enabling of bearer rejected, failed to enable media [ 801.394196][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13296'. [ 801.439207][ T1128] batadv0: entered promiscuous mode [ 801.439483][ T1128] macsec1: entered promiscuous mode [ 801.445886][ T1128] macsec1: entered allmulticast mode [ 801.445907][ T1128] batadv0: entered allmulticast mode [ 801.447231][ T1128] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 801.474318][ T1128] batadv0: left allmulticast mode [ 801.474557][ T1128] batadv0: left promiscuous mode [ 802.033250][ T1148] netlink: 'syz.4.13307': attribute type 2 has an invalid length. [ 802.033275][ T1148] netlink: 'syz.4.13307': attribute type 1 has an invalid length. [ 802.389632][ T1163] netlink: Invalid conntrack timeout [ 802.389668][ T1163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.986043][ T1180] netlink: 'syz.3.13321': attribute type 7 has an invalid length. [ 802.986069][ T1180] netlink: 'syz.3.13321': attribute type 8 has an invalid length. [ 803.324800][ T1190] netlink: 826 bytes leftover after parsing attributes in process `syz.3.13326'. [ 804.252419][ T1217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13339'. [ 804.488773][ T1222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13342'. [ 804.488835][ T1222] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 805.958695][ T1287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.272682][ T1321] gretap0: entered promiscuous mode [ 807.272996][ T1321] vlan4: entered promiscuous mode [ 808.347983][ T1351] ip_tables: iptables: counters copy to user failed while replacing table [ 808.556052][ T1359] ip6gretap2: entered allmulticast mode [ 808.559681][ T1359] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 808.592693][ T1359] batman_adv: batadv0: Adding interface: ip6gretap2 [ 808.592714][ T1359] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.592748][ T1359] batman_adv: batadv0: Interface activated: ip6gretap2 [ 809.329753][ T1390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13421'. [ 809.490680][ T1400] netlink: 'syz.0.13425': attribute type 10 has an invalid length. [ 809.490706][ T1400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13425'. [ 809.490886][ T1400] dummy0: entered promiscuous mode [ 809.491291][ T1400] bridge0: port 4(dummy0) entered blocking state [ 809.528188][ T1400] bridge0: port 4(dummy0) entered disabled state [ 809.528386][ T1400] dummy0: entered allmulticast mode [ 809.558556][ T1400] bridge0: mtu less than device minimum [ 810.119226][ T1418] ip_tables: iptables: counters copy to user failed while replacing table [ 810.267376][ T1420] netlink: 'syz.0.13435': attribute type 4 has an invalid length. [ 811.326702][ T1465] sch_fq: defrate 8 ignored. [ 811.510826][ T1472] xt_hashlimit: size too large, truncated to 1048576 [ 811.553627][ T1475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13461'. [ 811.600387][ T1480] tipc: MTU too low for tipc bearer [ 811.761427][ T1484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13463'. [ 811.761518][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13463'. [ 811.761549][ T1484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13463'. [ 811.762991][ T1484] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13463'. [ 812.847894][ T1520] netlink: 160 bytes leftover after parsing attributes in process `syz.2.13481'. [ 813.530965][ T1543] netlink: 'syz.0.13491': attribute type 1 has an invalid length. [ 813.530992][ T1543] netlink: 200 bytes leftover after parsing attributes in process `syz.0.13491'. [ 813.531009][ T1543] netlink: 'syz.0.13491': attribute type 1 has an invalid length. [ 813.531023][ T1543] netlink: 29 bytes leftover after parsing attributes in process `syz.0.13491'. [ 813.770046][ T1551] tipc: Enabled bearer , priority 0 [ 814.882113][T11427] tipc: Node number set to 3758096386 [ 815.694700][ T1612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13524'. [ 815.844786][ T1617] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.169158][ T1631] ip_tables: iptables: counters copy to user failed while replacing table [ 816.197865][ T1634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13534'. [ 816.306268][ T1639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13539'. [ 818.018926][ T1699] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 818.545535][ T1718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13575'. [ 820.111071][ T1754] bond4: (slave bond_slave_1): Device is not bonding slave [ 820.111095][ T1754] bond4: option active_slave: invalid value (bond_slave_1) [ 820.120332][ T1754] bond4 (unregistering): Released all slaves [ 821.141861][ T1783] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 821.398687][ T1789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13607'. [ 822.362912][ T1817] batadv0: entered promiscuous mode [ 822.363293][ T1817] macvtap2: entered promiscuous mode [ 822.366405][ T1817] macvtap2: entered allmulticast mode [ 822.366428][ T1817] batadv0: entered allmulticast mode [ 822.366868][ T1817] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 822.437146][ T1817] batadv0: left allmulticast mode [ 822.437343][ T1817] batadv0: left promiscuous mode [ 823.678747][ T1835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13628'. [ 826.269731][ T1929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13669'. [ 826.943588][ T1953] tipc: Enabling of bearer rejected, failed to enable media [ 827.218005][ T1961] netlink: 'syz.0.13686': attribute type 2 has an invalid length. [ 827.529170][ T1973] bridge0: port 1(netdevsim0) entered blocking state [ 827.530616][ T1973] bridge0: port 1(netdevsim0) entered disabled state [ 827.530813][ T1973] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 827.550976][ T1973] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 828.214436][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13699'. [ 828.836202][ T2013] ip_tables: iptables: counters copy to user failed while replacing table [ 830.319816][ T2051] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13728'. [ 830.681378][ T2058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13731'. [ 830.769313][ T2065] netlink: 'syz.2.13735': attribute type 1 has an invalid length. [ 830.850072][ T2067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.950841][ T2074] syz_tun: entered promiscuous mode [ 830.951048][ T2074] macsec6: entered promiscuous mode [ 830.951283][ T2074] macsec6: entered allmulticast mode [ 831.023719][ T2074] syz_tun: entered allmulticast mode [ 831.053611][ T2074] syz_tun: left allmulticast mode [ 831.055063][ T2074] syz_tun: left promiscuous mode [ 831.135057][ T2080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13742'. [ 831.630341][ T2097] netlink: 'syz.3.13751': attribute type 2 has an invalid length. [ 832.121052][ T2110] netlink: 'syz.1.13757': attribute type 27 has an invalid length. [ 832.121080][ T2110] netlink: 'syz.1.13757': attribute type 3 has an invalid length. [ 832.552649][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13765'. [ 833.328235][ T2149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13774'. [ 833.328271][ T2149] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 834.297917][ T2178] netlink: 80 bytes leftover after parsing attributes in process `syz.3.13788'. [ 834.535093][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.068048][ T2199] IPVS: Error connecting to the multicast addr [ 836.267170][ T2237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13817'. [ 836.267564][ T2237] xt_cgroup: path and classid specified [ 837.245577][ T2258] netlink: 'syz.2.13827': attribute type 2 has an invalid length. [ 837.607664][ T2276] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13836'. [ 837.852256][ T2281] IPv6: NLM_F_REPLACE set, but no existing node found! [ 839.001933][ T2313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13855'. [ 839.521100][ T2333] netlink: 'syz.2.13863': attribute type 1 has an invalid length. [ 839.521130][ T2333] netlink: 244 bytes leftover after parsing attributes in process `syz.2.13863'. [ 839.652049][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 840.386441][ T2360] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.13875'. [ 840.386471][ T2360] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 840.386488][ T2360] openvswitch: netlink: Message has 512 unknown bytes. [ 841.295110][ T2391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13890'. [ 841.663069][ T2405] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 843.639876][ T2465] netlink: 'syz.2.13919': attribute type 27 has an invalid length. [ 843.742374][ T2467] netlink: 'syz.0.13920': attribute type 1 has an invalid length. [ 843.742400][ T2467] netlink: 240 bytes leftover after parsing attributes in process `syz.0.13920'. [ 843.742417][ T2467] netlink: 'syz.0.13920': attribute type 1 has an invalid length. [ 844.128408][ T2488] tipc: Enabling of bearer rejected, media not registered [ 844.522304][ T2504] pimreg9: entered allmulticast mode [ 844.962759][ T2528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13941'. [ 844.967363][ T2529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13943'. [ 847.325536][ T2616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13975'. [ 847.450776][ T2617] netlink: 'syz.4.13976': attribute type 1 has an invalid length. [ 847.450800][ T2617] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13976'. [ 847.450816][ T2617] netlink: 'syz.4.13976': attribute type 1 has an invalid length. [ 847.803448][ T2628] sit1: entered promiscuous mode [ 847.845088][ T2633] syz.3.13983 (2633) used obsolete PPPIOCDETACH ioctl [ 848.493371][ T2668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13997'. [ 848.534539][ T2666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13995'. [ 849.172765][ T2705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14009'. [ 850.830026][ T2771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14036'. [ 850.909741][ T2776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 851.667353][ T2800] netlink: 'syz.1.14047': attribute type 7 has an invalid length. [ 851.667380][ T2800] netlink: 'syz.1.14047': attribute type 8 has an invalid length. [ 851.667394][ T2800] netlink: 'syz.1.14047': attribute type 13 has an invalid length. [ 851.803713][ T2806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14050'. [ 851.864365][ T2810] netlink: 'syz.1.14051': attribute type 2 has an invalid length. [ 852.150362][ T2798] syz.2.14048 (2798) used greatest stack depth: 17440 bytes left [ 852.416203][ T2825] netlink: 'syz.0.14059': attribute type 11 has an invalid length. [ 852.419503][ T2827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.737020][ T2852] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 853.311878][ T2882] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 853.311917][ T2882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.451787][ T2886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14078'. [ 853.451817][ T2886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14078'. [ 853.451835][ T2886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14078'. [ 853.452069][ T2886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14078'. [ 853.452088][ T2886] netlink: 'syz.2.14078': attribute type 6 has an invalid length. [ 854.841883][ T2933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14100'. [ 856.217336][ T2967] tipc: Enabled bearer , priority 20 [ 857.088046][ T2991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14125'. [ 857.400723][ T3005] netlink: 'syz.4.14134': attribute type 1 has an invalid length. [ 857.400749][ T3005] netlink: 'syz.4.14134': attribute type 2 has an invalid length. [ 857.421943][ T3005] netlink: 'syz.4.14134': attribute type 1 has an invalid length. [ 857.421967][ T3005] netlink: 'syz.4.14134': attribute type 2 has an invalid length. [ 858.104976][ T3034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14148'. [ 858.152454][ T3034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14148'. [ 858.442013][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14154'. [ 858.521168][ T3051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14153'. [ 859.349896][ T3085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14170'. [ 859.481874][ T3089] netlink: 'syz.1.14174': attribute type 11 has an invalid length. [ 859.702893][ T3099] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14177'. [ 859.899461][ T3104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 860.475794][ T3127] tipc: Started in network mode [ 860.475832][ T3127] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 861.597553][ T3171] netlink: 'syz.2.14209': attribute type 4 has an invalid length. [ 861.916248][ T3184] netlink: 'syz.0.14216': attribute type 7 has an invalid length. [ 862.323411][ T3190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14219'. [ 862.444803][ T3198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14221'. [ 864.038997][ T3275] sctp: [Deprecated]: syz.0.14254 (pid 3275) Use of int in maxseg socket option. [ 864.038997][ T3275] Use struct sctp_assoc_value instead [ 864.617931][ T31] audit: type=1804 audit(1789438395.782:10): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14261" name="/newroot/2798/cgroup.controllers" dev="tmpfs" ino=14041 res=1 errno=0 [ 864.620674][ T31] audit: type=1800 audit(1789438395.782:11): pid=3296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14261" name="cgroup.controllers" dev="tmpfs" ino=14041 res=0 errno=0 [ 865.385396][ T3323] pim6reg0: tun_chr_ioctl cmd 35111 [ 866.267325][ T3345] netlink: 'syz.3.14283': attribute type 8 has an invalid length. [ 867.579271][ T3400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14309'. [ 867.939381][ T3411] block nbd1: Unsupported socket: should be TCP or UNIX. [ 869.647436][ T3460] netlink: 'syz.0.14332': attribute type 83 has an invalid length. [ 869.858515][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14338'. [ 872.197471][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14359'. [ 872.727110][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14366'. [ 873.665590][ T3553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14377'. [ 874.002010][ T3568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14384'. [ 874.789630][ T3599] netlink: 'syz.3.14399': attribute type 14 has an invalid length. [ 874.840345][ T3603] netlink: 120 bytes leftover after parsing attributes in process `syz.4.14401'. [ 875.586300][ T3629] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14413'. [ 877.122302][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14432'. [ 879.240519][ T3742] pim6reg: entered allmulticast mode [ 879.274535][ T3741] pim6reg: left allmulticast mode [ 879.565299][ T3752] virt_wifi0: Device is already in use. [ 879.727403][ T3756] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 880.073154][ T3768] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14477'. [ 881.840522][ T3814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14497'. [ 882.098894][ T3818] netlink: 27 bytes leftover after parsing attributes in process `syz.4.14499'. [ 882.687981][ T3833] netlink: 'syz.0.14506': attribute type 32 has an invalid length. [ 883.766685][ T3853] netlink: 'syz.4.14516': attribute type 2 has an invalid length. [ 883.862419][ T3855] netlink: 220 bytes leftover after parsing attributes in process `syz.3.14517'. [ 885.447946][ T3910] ip6tnl5: entered allmulticast mode [ 886.807907][ T3964] netlink: 'syz.4.14565': attribute type 12 has an invalid length. [ 887.905801][ T4007] netlink: 'syz.0.14586': attribute type 29 has an invalid length. [ 888.666722][ T4030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14597'. [ 888.672072][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14597'. [ 888.672098][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14597'. [ 888.741641][ T4032] batman_adv: batadv0: Adding interface: macsec0 [ 888.741661][ T4032] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.741693][ T4032] batman_adv: batadv0: Interface activated: macsec0 [ 889.224519][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14601'. [ 890.875819][ T4081] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 890.880768][ T4085] openvswitch: netlink: IP tunnel dst address not specified [ 890.880807][ T4085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.818601][ T4116] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14635'. [ 891.818646][ T4116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14635'. [ 891.865246][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14636'. [ 891.886902][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14639'. [ 892.086193][ T4122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14640'. [ 892.129956][ T4124] netlink: 27 bytes leftover after parsing attributes in process `syz.3.14641'. [ 896.298479][ T4260] C: renamed from veth1_to_team (while UP) [ 896.330337][ T4260] netlink: 'syz.1.14700': attribute type 2 has an invalid length. [ 896.330360][ T4260] __nla_validate_parse: 2 callbacks suppressed [ 896.330371][ T4260] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14700'. [ 896.330387][ T4260] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 897.795345][ T4315] xt_hashlimit: max too large, truncated to 1048576 [ 898.075830][ T74] tipc: Subscription rejected, illegal request [ 898.574096][ T4335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14737'. [ 899.478013][ T4363] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14749'. [ 899.893097][ T4378] netlink: 'syz.1.14755': attribute type 1 has an invalid length. [ 899.893124][ T4378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14755'. [ 899.893142][ T4378] netlink: 'syz.1.14755': attribute type 1 has an invalid length. [ 900.219715][ T4393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14763'. [ 900.243773][ T4393] veth0_macvtap: left promiscuous mode [ 900.336712][ T4397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14764'. [ 900.962032][ T4419] netlink: 260 bytes leftover after parsing attributes in process `syz.0.14773'. [ 901.091727][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 902.114598][ T4446] sctp: [Deprecated]: syz.0.14784 (pid 4446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.114598][ T4446] Use struct sctp_sack_info instead [ 902.269998][ T4456] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 902.930473][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14793'. [ 902.930518][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.950988][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.953677][ T4468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14795'. [ 902.956286][ T4466] batman_adv: batadv0: Interface deactivated: gretap2 [ 902.956308][ T4466] batman_adv: batadv0: Removing interface: gretap2 [ 902.956587][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14794'. [ 902.961160][ T4466] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 902.961180][ T4466] batman_adv: batadv0: Removing interface: ip6gretap2 [ 903.085334][ T4473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14797'. [ 903.354258][ T4480] netlink: 300 bytes leftover after parsing attributes in process `syz.2.14801'. [ 903.622977][ T4493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14807'. [ 903.641857][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14805'. [ 903.837481][ T4495] netlink: 'syz.4.14808': attribute type 3 has an invalid length. [ 903.837507][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14808'. [ 904.194041][ T4514] netlink: 'syz.1.14816': attribute type 6 has an invalid length. [ 904.194067][ T4514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14816'. [ 904.199947][ T4514] bridge0: port 3(dummy0) entered disabled state [ 904.200221][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.200422][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.621956][ T4528] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 904.621993][ T4528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.203576][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14838'. [ 909.170518][ T4669] pimreg: entered allmulticast mode [ 909.199574][ T4669] pimreg: left allmulticast mode [ 909.459112][ T4680] __nla_validate_parse: 2 callbacks suppressed [ 909.459135][ T4680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14892'. [ 910.058922][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14902'. [ 910.871856][ T4732] netlink: 'syz.4.14915': attribute type 39 has an invalid length. [ 911.214376][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14920'. [ 911.214425][ T4746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14920'. [ 911.214443][ T4746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14920'. [ 911.215445][ T4746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14920'. [ 911.493133][ T4754] netlink: 'syz.0.14922': attribute type 1 has an invalid length. [ 911.493159][ T4754] nbd: error processing sock list [ 911.493723][ T4754] block nbd1: shutting down sockets [ 911.994708][ T4768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14929'. [ 912.700365][ T4795] xt_hashlimit: size too large, truncated to 1048576 [ 912.808586][ T4797] xt_hashlimit: size too large, truncated to 1048576 [ 913.272160][ T4813] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14945'. [ 913.273520][ T4809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.034628][ T4849] tap0: tun_chr_ioctl cmd 1074025677 [ 915.034747][ T4849] tap0: linktype set to 805 [ 916.528678][ T4876] netlink: 'syz.3.14971': attribute type 8 has an invalid length. [ 917.766070][ T4911] netlink: 'syz.3.14987': attribute type 1 has an invalid length. [ 917.766097][ T4911] netlink: 'syz.3.14987': attribute type 2 has an invalid length. [ 917.923439][ T4913] ipvlan2: entered allmulticast mode [ 917.923465][ T4913] macvlan1: entered allmulticast mode [ 917.923479][ T4913] veth1_vlan: entered allmulticast mode [ 917.972159][ T4913] batman_adv: batadv0: Adding interface: ipvlan2 [ 917.972180][ T4913] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.972213][ T4913] batman_adv: batadv0: Interface activated: ipvlan2 [ 919.960052][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15010'. [ 920.704952][ T4996] netlink: 'syz.4.15019': attribute type 6 has an invalid length. [ 920.704978][ T4996] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15019'. [ 920.707807][ T4996] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.710398][ T4996] bridge0: left allmulticast mode [ 921.571841][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 922.360620][ T5053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15046'. [ 922.360661][ T5053] netlink: 'syz.3.15046': attribute type 7 has an invalid length. [ 922.360676][ T5053] netlink: 'syz.3.15046': attribute type 8 has an invalid length. [ 922.360689][ T5053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15046'. [ 922.422835][ T5053] gretap0: entered promiscuous mode [ 922.446675][ T5055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15047'. [ 922.540602][ T5053] gretap0: left promiscuous mode [ 924.774455][ T5119] netlink: 71 bytes leftover after parsing attributes in process `syz.2.15073'. [ 926.195764][ T5155] netlink: 140 bytes leftover after parsing attributes in process `syz.3.15090'. [ 926.219265][ T5155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15090'. [ 926.743567][ T5166] wg0: Master is either lo or non-ether device [ 927.074060][ T5174] netlink: 'syz.0.15098': attribute type 2 has an invalid length. [ 928.128925][ T5204] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 929.394668][ T5230] tap0: tun_chr_ioctl cmd 1074025677 [ 929.394782][ T5230] tap0: linktype set to 778 [ 929.946160][ T5242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15129'. [ 929.999412][ T5244] tipc: New replicast peer: 255.255.255.255 [ 930.017093][ T5244] tipc: Enabled bearer , priority 10 [ 931.376689][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15154'. [ 931.935866][ T5310] netlink: 'syz.2.15159': attribute type 14 has an invalid length. [ 932.325506][ T5329] IPv6: NLM_F_CREATE should be specified when creating new route [ 932.325607][ T5329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 932.325617][ T5329] IPv6: NLM_F_CREATE should be set when creating new route [ 932.325663][ T5329] IPv6: NLM_F_CREATE should be set when creating new route [ 932.325688][ T5329] IPv6: NLM_F_CREATE should be set when creating new route [ 932.329623][ T5329] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.15166'. [ 933.176959][ T5361] netlink: 'syz.0.15179': attribute type 83 has an invalid length. [ 934.945382][ T5424] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15207'. [ 935.171059][ T5619] block nbd1: Receive control failed (result -32) [ 935.497701][ T5436] netpci0: tun_chr_ioctl cmd 1074025681 [ 935.829207][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15215'. [ 937.044457][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15229'. [ 937.302146][ T5474] tap0: tun_chr_ioctl cmd 1074025692 [ 938.819352][ T5542] IPVS: nq: FWM 3 0x00000003 - no destination available [ 939.186763][ T5550] bond4: ARP target 9.0.0.0 is already present [ 939.186792][ T5550] bond4: option arp_ip_target: invalid value (9) [ 939.189070][ T5550] bond4 (unregistering): Released all slaves [ 939.525413][ T5555] netlink: 'syz.0.15259': attribute type 1 has an invalid length. [ 939.525439][ T5555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15259'. [ 941.505135][ T5630] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.15288'. [ 941.505167][ T5630] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.15288'. [ 941.515394][ T5634] netlink: Unknown NAT attribute (type=33, max=9) [ 941.515434][ T5634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 941.981575][ T5644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15294'. [ 943.146399][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15306'. [ 943.146432][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15306'. [ 943.179335][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15306'. [ 943.179367][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15306'. [ 943.179590][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15306'. [ 943.179609][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15306'. [ 943.407861][ T5683] netlink: 'syz.0.15309': attribute type 10 has an invalid length. [ 943.445402][ T5683] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15309'. [ 944.503201][ T5743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15322'. [ 945.247238][ T5772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.187071][ T5808] caif0: tun_chr_ioctl cmd 2147767507 [ 947.344991][ T5815] netlink: 'syz.3.15354': attribute type 1 has an invalid length. [ 947.408751][ T5818] netlink: 'syz.3.15354': attribute type 1 has an invalid length. [ 947.698475][ T5823] syz_tun: entered allmulticast mode [ 947.699537][ T5821] syz_tun: left allmulticast mode [ 949.535452][ T5880] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 950.920503][ T5929] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 951.672019][ T5962] openvswitch: netlink: IP tunnel TTL not specified. [ 951.672056][ T5962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.208900][ T5975] netlink: 'syz.1.15424': attribute type 1 has an invalid length. [ 952.332803][ T5981] netlink: 7 bytes leftover after parsing attributes in process `syz.4.15427'. [ 954.701425][ T1328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.702404][ T1328] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.702444][ T1328] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.702478][ T1328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 955.313713][ T6067] openvswitch: netlink: VLAN attribute unexpected. [ 955.359946][ T6072] sctp: [Deprecated]: syz.3.15469 (pid 6072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 955.359946][ T6072] Use struct sctp_sack_info instead [ 955.609300][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15472'. [ 956.895465][ T6130] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15491'. [ 957.073542][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15496'. [ 957.073742][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15496'. [ 957.129876][ T6139] netlink: 'syz.2.15497': attribute type 1 has an invalid length. [ 957.129900][ T6139] netlink: 84 bytes leftover after parsing attributes in process `syz.2.15497'. [ 957.129915][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15497'. [ 957.543708][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15503'. [ 958.217197][ T6179] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15516'. [ 958.543081][ T6188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 958.809411][ T6204] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15528'. [ 958.913771][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15527'. [ 959.150671][ T6215] netlink: 'syz.1.15531': attribute type 49 has an invalid length. [ 959.167080][ T6212] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 959.407079][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15534'. [ 959.682401][ T6231] Bluetooth: MGMT ver 1.23 [ 959.792813][ T6233] dvmrp0: entered allmulticast mode [ 960.430314][ T6244] tun0: tun_chr_ioctl cmd 1074025677 [ 960.430425][ T6244] tun0: linktype set to 776 [ 960.547119][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15547'. [ 960.874463][ T6250] ip_tables: iptables: counters copy to user failed while replacing table [ 961.172938][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15556'. [ 961.172970][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15556'. [ 961.205686][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15556'. [ 961.205713][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15556'. [ 963.329049][ T6337] __nla_validate_parse: 5 callbacks suppressed [ 963.329071][ T6337] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15589'. [ 963.329088][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15589'. [ 963.329112][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15589'. [ 965.848704][ T6389] ipvlan3: entered promiscuous mode [ 965.849542][ T6389] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 965.849564][ T6389] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 965.858969][ T6389] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 965.939504][ T6398] netlink: 'syz.4.15618': attribute type 1 has an invalid length. [ 966.389160][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15623'. [ 967.080151][ T6438] netlink: 70 bytes leftover after parsing attributes in process `syz.0.15634'. [ 967.547250][ T6457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 968.786412][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15662'. [ 970.238750][ T6540] tun0: tun_chr_ioctl cmd 1074025677 [ 970.238860][ T6540] tun0: linktype set to 0 [ 970.489370][ T6549] netlink: 71 bytes leftover after parsing attributes in process `syz.3.15684'. [ 970.972259][ T6569] netlink: 'syz.4.15695': attribute type 361 has an invalid length. [ 971.355773][ T6582] netlink: 'syz.0.15701': attribute type 10 has an invalid length. [ 971.355799][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15701'. [ 972.298689][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15718'. [ 973.790665][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15736'. [ 973.970364][ T6670] netlink: 'syz.0.15739': attribute type 9 has an invalid length. [ 974.475856][ T6688] pimreg: tun_chr_ioctl cmd 1074812118 [ 974.737189][ T6693] sctp: [Deprecated]: syz.1.15750 (pid 6693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 974.737189][ T6693] Use struct sctp_sack_info instead [ 974.987271][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15753'. [ 976.629860][ T6757] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15777'. [ 976.912568][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15782'. [ 977.125034][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15787'. [ 977.142894][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15787'. [ 977.986891][ T6807] ip_tables: iptables: counters copy to user failed while replacing table [ 978.219410][ T5619] block nbd2: Receive control failed (result -32) [ 978.220153][ T5622] block nbd2: Receive control failed (result -32) [ 979.247397][ T6847] netlink: 'syz.4.15820': attribute type 2 has an invalid length. [ 980.503637][ T6894] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 981.110378][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15845'. [ 981.110410][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15845'. [ 981.487508][ T5619] block nbd3: Receive control failed (result -32) [ 982.664646][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15871'. [ 982.664672][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15871'. [ 982.664698][ T6966] netlink: 'syz.3.15871': attribute type 18 has an invalid length. [ 982.712316][T21185] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 982.712366][T21185] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 982.721935][T21185] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 982.722700][T21185] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 982.744682][ T6970] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 983.246999][ T6983] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.15879'. [ 983.290878][ T6985] ipip1: entered allmulticast mode [ 983.567129][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15884'. [ 985.315624][ T7042] dvmrp0: entered allmulticast mode [ 985.327686][ T7042] dvmrp0: left allmulticast mode [ 985.801286][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15911'. [ 985.801313][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.801489][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.810513][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.810748][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.855703][ T7059] batman_adv: batadv0: Interface deactivated: macsec0 [ 985.855727][ T7059] batman_adv: batadv0: Removing interface: macsec0 [ 985.965841][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15913'. [ 986.553010][ T7083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15922'. [ 986.806790][ T7092] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15926'. [ 987.453744][ T7107] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 987.480464][ T7107] bond5 (unregistering): Released all slaves [ 987.751044][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15939'. [ 987.829226][ T31] audit: type=1804 audit(1789438518.992:12): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.15941" name="/newroot/3217/cgroup.controllers" dev="tmpfs" ino=16145 res=1 errno=0 [ 987.829284][ T31] audit: type=1800 audit(1789438518.992:13): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15941" name="cgroup.controllers" dev="tmpfs" ino=16145 res=0 errno=0 [ 987.829816][ T7126] ip_tables: iptables: counters copy to user failed while replacing table [ 987.840555][ T31] audit: type=1800 audit(1789438519.002:14): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15941" name="cgroup.controllers" dev="tmpfs" ino=16145 res=0 errno=0 [ 988.126083][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15945'. [ 988.148900][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15945'. [ 988.243150][ T7137] xt_hashlimit: size too large, truncated to 1048576 [ 988.323121][ T7138] @0Ù: renamed from bond_slave_1 (while UP) [ 988.728125][ T7152] bond0: entered promiscuous mode [ 988.732898][ T7152] batadv0: entered promiscuous mode [ 988.740018][ T7152] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 988.778686][ T7152] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 988.797037][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15955'. [ 988.814625][ T7152] bond0: left promiscuous mode [ 988.835076][ T7152] batadv0: left promiscuous mode [ 989.364804][ T7173] macvlan0: entered promiscuous mode [ 989.365620][ T7173] netlink: 'syz.0.15964': attribute type 1 has an invalid length. [ 989.365640][ T7173] netlink: 'syz.0.15964': attribute type 2 has an invalid length. [ 990.085872][ T7199] xt_hashlimit: size too large, truncated to 1048576 [ 990.085897][ T7199] xt_hashlimit: max too large, truncated to 1048576 [ 990.086112][ T7199] xt_hashlimit: Unknown mode mask B86BCC12, kernel too old? [ 990.890420][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15983'. [ 991.405018][ T7236] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 991.731507][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15997'. [ 991.737638][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15997'. [ 991.738818][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15997'. [ 991.773102][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15997'. [ 991.774512][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15997'. [ 991.776764][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15997'. [ 992.668236][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16010'. [ 993.159217][ T31] audit: type=1804 audit(1789438524.322:15): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.16017" name="/newroot/3148/cgroup.controllers" dev="tmpfs" ino=15809 res=1 errno=0 [ 993.159277][ T31] audit: type=1800 audit(1789438524.322:16): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16017" name="cgroup.controllers" dev="tmpfs" ino=15809 res=0 errno=0 [ 993.166952][ T31] audit: type=1804 audit(1789438524.332:17): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.16017" name="/newroot/3148/cgroup.controllers" dev="tmpfs" ino=15809 res=1 errno=0 [ 994.213129][ T7331] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 994.213318][ T7331] syzkaller1: linktype set to 825 [ 995.469969][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16044'. [ 996.067840][ T7374] sctp: [Deprecated]: syz.1.16055 (pid 7374) Use of int in maxseg socket option. [ 996.067840][ T7374] Use struct sctp_assoc_value instead [ 996.162929][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16058'. [ 996.369057][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16063'. [ 996.754918][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16071'. [ 996.791879][ T7406] veth1_to_team: entered promiscuous mode [ 996.797163][ T7406] veth1_to_team: left promiscuous mode [ 997.440740][ T7421] ipvlan2: entered promiscuous mode [ 997.464900][ T7421] team0: Device ipvlan2 failed to register rx_handler [ 998.632327][ T7450] netlink: 165 bytes leftover after parsing attributes in process `syz.3.16091'. [ 999.916219][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16108'. [ 999.916249][ T7487] nbd: couldn't find a device at index 65546 [ 999.996552][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16113'. [ 1000.886365][ T7517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1003.640537][ T7601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.989585][ T7603] bond4 (unregistering): Released all slaves [ 1004.274044][ T7617] netlink: 'syz.2.16170': attribute type 83 has an invalid length. [ 1004.335887][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16171'. [ 1004.958459][ T7637] netlink: 'syz.2.16180': attribute type 2 has an invalid length. [ 1005.482792][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16188'. [ 1006.241374][ T7677] openvswitch: netlink: IP tunnel dst address not specified [ 1006.241413][ T7677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.694121][ T7690] netlink: 480 bytes leftover after parsing attributes in process `syz.2.16206'. [ 1006.694227][ T7690] netlink: 480 bytes leftover after parsing attributes in process `syz.2.16206'. [ 1007.818051][ T7720] IPVS: persistence engine module ip_vs_pe_ not found [ 1008.679616][ T7748] batman_adv: batadv0: Adding interface: gretap2 [ 1008.679637][ T7748] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.679672][ T7748] batman_adv: batadv0: Interface activated: gretap2 [ 1009.704881][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16250'. [ 1010.042422][ T7801] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16257'. [ 1010.271030][ T7813] netlink: 'syz.3.16262': attribute type 8 has an invalid length. [ 1010.494085][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16263'. [ 1010.847614][ T7828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1010.847635][ T7828] IPv6: NLM_F_CREATE should be set when creating new route [ 1010.847701][ T7828] IPv6: NLM_F_CREATE should be set when creating new route [ 1010.847820][ T7828] IPv6: NLM_F_CREATE should be set when creating new route [ 1011.690518][ T7851] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 1011.909008][ T7853] sctp: [Deprecated]: syz.0.16280 (pid 7853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1011.909008][ T7853] Use struct sctp_sack_info instead [ 1013.302521][ T7889] netlink: 'syz.2.16297': attribute type 4 has an invalid length. [ 1014.073369][ T7915] netlink: 'syz.0.16308': attribute type 1 has an invalid length. [ 1014.073394][ T7915] netlink: 84 bytes leftover after parsing attributes in process `syz.0.16308'. [ 1014.073411][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16308'. [ 1014.911098][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16312'. [ 1015.296732][ T7946] veth0: entered promiscuous mode [ 1015.300335][ T7945] veth0: left promiscuous mode [ 1016.148509][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16333'. [ 1016.609353][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16343'. [ 1018.777332][ T8083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16376'. [ 1019.273192][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16389'. [ 1019.282092][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16389'. [ 1019.283310][ T8110] netlink: 'syz.2.16386': attribute type 5 has an invalid length. [ 1019.833018][ T8131] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1019.833475][ T8131] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1019.862129][ T8131] bridge0: port 1(netdevsim0) entered disabled state [ 1020.918828][ T8162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.918871][ T8162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1020.985889][ T8169] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1021.178149][ T8162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.178190][ T8162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1021.297778][ T8162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.297819][ T8162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1021.453820][ T8162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.453863][ T8162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 1021.488975][ T8183] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1021.489313][ T8183] syzkaller1: linktype set to 769 [ 1021.649629][ T8191] veth0: entered promiscuous mode [ 1021.658300][ T8190] veth0: left promiscuous mode [ 1022.425525][ T43] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.425567][ T43] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1022.425620][ T43] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.425655][ T43] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1022.425690][ T43] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.425716][ T43] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1022.432507][T21185] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.432539][T21185] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1023.149671][ T8223] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1024.773658][ T8270] netlink: 'syz.2.16458': attribute type 5 has an invalid length. [ 1027.483657][ T8348] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.16495'. [ 1027.769543][ T8357] netlink: 'syz.1.16498': attribute type 1 has an invalid length. [ 1027.769570][ T8357] netlink: 'syz.1.16498': attribute type 7 has an invalid length. [ 1027.769584][ T8357] netlink: 'syz.1.16498': attribute type 8 has an invalid length. [ 1027.769598][ T8357] netlink: 208 bytes leftover after parsing attributes in process `syz.1.16498'. [ 1027.769615][ T8357] NCSI netlink: No device for ifindex 1073545264 [ 1028.188613][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16505'. [ 1028.611145][ T8387] netlink: 100 bytes leftover after parsing attributes in process `syz.4.16513'. [ 1029.148492][ T8401] tipc: Resetting bearer [ 1029.237436][ T8401] hsr0: left promiscuous mode [ 1029.454990][ T8403] tipc: Resetting bearer [ 1029.887807][ T8423] netlink: 'syz.1.16528': attribute type 1 has an invalid length. [ 1031.146097][ T31] audit: type=1800 audit(1789438562.312:18): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16536" name="memory.events" dev="tmpfs" ino=16616 res=0 errno=0 [ 1031.605166][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16552'. [ 1033.254629][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16571'. [ 1033.254669][ T8534] netlink: 'syz.3.16571': attribute type 29 has an invalid length. [ 1033.254685][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16571'. [ 1034.004628][ T8551] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1036.001505][ T8586] netlink: 'syz.2.16595': attribute type 11 has an invalid length. [ 1036.051432][ T8586] netlink: 'syz.2.16595': attribute type 11 has an invalid length. [ 1036.051458][ T8586] netlink: 43 bytes leftover after parsing attributes in process `syz.2.16595'. [ 1036.256558][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16599'. [ 1036.298309][ T8596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16598'. [ 1037.125287][ T8623] netlink: 'syz.1.16612': attribute type 11 has an invalid length. [ 1037.125313][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16612'. [ 1037.925645][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16623'. [ 1038.558307][ T8649] syzkaller1: entered promiscuous mode [ 1038.558335][ T8649] syzkaller1: entered allmulticast mode [ 1039.473339][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16642'. [ 1039.817112][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16644'. [ 1039.817154][ T8694] netlink: 'syz.4.16644': attribute type 7 has an invalid length. [ 1039.817167][ T8694] netlink: 'syz.4.16644': attribute type 8 has an invalid length. [ 1039.817179][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16644'. [ 1040.150571][ T8705] syzkaller1: entered promiscuous mode [ 1040.150597][ T8705] syzkaller1: entered allmulticast mode [ 1040.388167][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16651'. [ 1040.538454][ T8714] team1: entered promiscuous mode [ 1040.541168][ T8714] team1: entered allmulticast mode [ 1040.556690][ T8714] 8021q: adding VLAN 0 to HW filter on device team1 [ 1041.237061][ T8736] sctp: [Deprecated]: syz.1.16663 (pid 8736) Use of int in maxseg socket option. [ 1041.237061][ T8736] Use struct sctp_assoc_value instead [ 1041.709607][ T8758] nbd: nbd3 already in use [ 1041.721990][ T8758] block nbd3: NBD_DISCONNECT [ 1041.722021][ T8758] block nbd3: Send disconnect failed -32 [ 1041.722039][ T8758] block nbd3: shutting down sockets [ 1041.755981][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.756169][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.756349][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.756525][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.756740][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.756910][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.757079][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.757265][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.757454][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1041.757635][ T8759] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1042.560670][ T8782] hsr0: entered promiscuous mode [ 1042.569002][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16683'. [ 1042.593201][ T8782] hsr_slave_0: left promiscuous mode [ 1042.596504][ T8782] hsr_slave_1: left promiscuous mode [ 1042.598712][ T8782] tipc: Resetting bearer [ 1042.645725][ T8782] hsr0 (unregistering): left promiscuous mode [ 1042.645789][ T8782] tipc: Disabling bearer [ 1044.857216][ T8846] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.16708'. [ 1045.325119][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16719'. [ 1045.475734][ T8867] netlink: 'syz.2.16731': attribute type 12 has an invalid length. [ 1045.475759][ T8867] netlink: 'syz.2.16731': attribute type 29 has an invalid length. [ 1045.475771][ T8867] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1045.475791][ T8867] netlink: 59 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1045.477201][ T8867] netlink: 'syz.2.16731': attribute type 12 has an invalid length. [ 1045.477220][ T8867] netlink: 'syz.2.16731': attribute type 29 has an invalid length. [ 1045.477233][ T8867] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1045.477249][ T8867] netlink: 59 bytes leftover after parsing attributes in process `syz.2.16731'. [ 1046.513996][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16730'. [ 1046.536580][ T8891] ip6gre4: entered promiscuous mode [ 1046.536604][ T8891] ip6gre4: entered allmulticast mode [ 1046.905527][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16738'. [ 1048.182886][ T8958] syzkaller1: entered promiscuous mode [ 1048.182911][ T8958] syzkaller1: entered allmulticast mode [ 1048.458815][ T8966] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16760'. [ 1050.172123][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16782'. [ 1050.237807][ T9014] syzkaller1: entered promiscuous mode [ 1050.237835][ T9014] syzkaller1: entered allmulticast mode [ 1050.780135][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16793'. [ 1053.540733][ T9110] netlink: 'syz.4.16820': attribute type 1 has an invalid length. [ 1053.540766][ T9110] netlink: 'syz.4.16820': attribute type 2 has an invalid length. [ 1053.652590][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1053.818058][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16825'. [ 1054.075685][ T9125] sctp: [Deprecated]: syz.0.16827 (pid 9125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1054.075685][ T9125] Use struct sctp_sack_info instead [ 1055.142897][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16836'. [ 1055.142936][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16836'. [ 1055.143177][ T9149] vcan0: tx address claim with dlc 0 [ 1055.189803][ T9151] geneve3: entered promiscuous mode [ 1055.189840][ T9151] geneve3: entered allmulticast mode [ 1055.764852][ T9171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16848'. [ 1055.885029][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16851'. [ 1056.842452][ T9206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.842494][ T9206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.025215][ T9206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.025255][ T9206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.255921][ T9206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.255964][ T9206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.536791][ T9206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.536831][ T9206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.089772][ T9254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16872'. [ 1058.140128][ T9259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16872'. [ 1058.188004][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16875'. [ 1058.188040][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16875'. [ 1058.257858][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16875'. [ 1058.257894][ T9265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16875'. [ 1058.371526][ T1324] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.371565][ T1324] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.411705][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16872'. [ 1058.825257][ T9117] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.825295][ T9117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.912298][ T9117] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.912336][ T9117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.972874][ T1324] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1058.972914][ T1324] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.427438][ T9330] netlink: 67 bytes leftover after parsing attributes in process `syz.2.16899'. [ 1060.590029][ T9336] macsec1: entered allmulticast mode [ 1060.590054][ T9336] veth1_macvtap: entered allmulticast mode [ 1060.648662][ T9336] veth1_macvtap (unregistering): left allmulticast mode [ 1060.796743][ T9336] tipc: Resetting bearer [ 1061.038045][ T9336] tipc: Disabling bearer [ 1061.491919][ T9359] __nla_validate_parse: 1 callbacks suppressed [ 1061.491941][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16912'. [ 1061.766663][ T9368] net_ratelimit: 44 callbacks suppressed [ 1061.766684][ T9368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.371536][ T9415] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1063.782583][ T9425] sctp: [Deprecated]: syz.1.16942 (pid 9425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1063.782583][ T9425] Use struct sctp_sack_info instead [ 1063.782888][ T9425] sctp: [Deprecated]: syz.1.16942 (pid 9425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1063.782888][ T9425] Use struct sctp_sack_info instead [ 1063.935852][ T9431] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1064.265004][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16949'. [ 1064.265043][ T9440] netlink: 'syz.1.16949': attribute type 30 has an invalid length. [ 1064.318534][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16949'. [ 1064.318572][ T9441] netlink: 'syz.1.16949': attribute type 30 has an invalid length. [ 1064.450230][ T9117] smc: removing ib device syz2 [ 1064.510340][ T9432] netlink: 432 bytes leftover after parsing attributes in process `syz.2.16944'. [ 1064.551013][ T9440] vxlan1: entered promiscuous mode [ 1064.551039][ T9440] vxlan1: entered allmulticast mode [ 1064.587129][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.587434][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.587472][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1064.634848][ T9441] vxlan2: entered promiscuous mode [ 1064.634874][ T9441] vxlan2: entered allmulticast mode [ 1064.637945][ T5748] ================================================================== [ 1064.637960][ T5748] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 1064.637990][ T5748] Read of size 1 at addr ffff88807b320e09 by task kworker/1:6/5748 [ 1064.638008][ T5748] [ 1064.638019][ T5748] CPU: 1 UID: 0 PID: 5748 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 1064.638041][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1064.638054][ T5748] Workqueue: infiniband ib_cache_event_task [ 1064.638082][ T5748] Call Trace: [ 1064.638090][ T5748] [ 1064.638099][ T5748] dump_stack_lvl+0xe8/0x150 [ 1064.638127][ T5748] print_address_description+0x55/0x1e0 [ 1064.638153][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1064.638177][ T5748] print_report+0x58/0x70 [ 1064.638201][ T5748] kasan_report+0x117/0x150 [ 1064.638228][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1064.638253][ T5748] __ethtool_get_link_ksettings+0x230/0x250 [ 1064.638277][ T5748] __ethtool_get_link_ksettings+0x11f/0x250 [ 1064.638299][ T5748] ib_get_eth_speed+0x180/0x7f0 [ 1064.638329][ T5748] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1064.638362][ T5748] ? do_raw_spin_unlock+0xf5/0x200 [ 1064.638390][ T5748] ? rxe_query_port+0x6b/0x3d0 [ 1064.638421][ T5748] rxe_query_port+0x93/0x3d0 [ 1064.638451][ T5748] ib_query_port+0x16e/0x830 [ 1064.638481][ T5748] ib_cache_update+0x1ba/0xc50 [ 1064.638509][ T5748] ? do_raw_spin_lock+0x12b/0x2f0 [ 1064.638537][ T5748] ? __pfx_ib_cache_update+0x10/0x10 [ 1064.638562][ T5748] ? lock_acquire+0x115/0x350 [ 1064.638585][ T5748] ib_cache_event_task+0xd3/0x1c0 [ 1064.638609][ T5748] ? process_scheduled_works+0x97a/0x1630 [ 1064.638635][ T5748] process_scheduled_works+0xc3d/0x1630 [ 1064.638673][ T5748] ? __pfx_process_scheduled_works+0x10/0x10 [ 1064.638710][ T5748] ? assign_work+0x3cf/0x5d0 [ 1064.638736][ T5748] worker_thread+0xa47/0xfb0 [ 1064.638768][ T5748] ? __kthread_parkme+0x71/0x1f0 [ 1064.638801][ T5748] kthread+0x38b/0x480 [ 1064.638819][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 1064.638843][ T5748] ? __pfx_kthread+0x10/0x10 [ 1064.638862][ T5748] ret_from_fork+0x514/0xb70 [ 1064.638882][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 1064.638910][ T5748] ? __switch_to+0xc89/0x1420 [ 1064.638938][ T5748] ? __pfx_kthread+0x10/0x10 [ 1064.638956][ T5748] ret_from_fork_asm+0x1a/0x30 [ 1064.638992][ T5748] [ 1064.638999][ T5748] [ 1064.639004][ T5748] Allocated by task 5616: [ 1064.639014][ T5748] kasan_save_track+0x3e/0x80 [ 1064.639032][ T5748] __kasan_kmalloc+0x93/0xb0 [ 1064.639051][ T5748] __kvmalloc_node_noprof+0x50f/0x820 [ 1064.639070][ T5748] alloc_netdev_mqs+0xa9/0x12a0 [ 1064.639094][ T5748] rtnl_create_link+0x321/0xd70 [ 1064.639120][ T5748] rtnl_newlink_create+0x258/0x7b0 [ 1064.639142][ T5748] rtnl_newlink+0x167a/0x1c30 [ 1064.639160][ T5748] rtnetlink_rcv_msg+0x802/0xc00 [ 1064.639179][ T5748] netlink_rcv_skb+0x226/0x4a0 [ 1064.639202][ T5748] netlink_unicast+0x7bd/0x940 [ 1064.639223][ T5748] netlink_sendmsg+0x813/0xb40 [ 1064.639247][ T5748] sock_sendmsg_nosec+0x13a/0x180 [ 1064.639274][ T5748] __sys_sendto+0x408/0x5a0 [ 1064.639293][ T5748] __x64_sys_sendto+0xde/0x100 [ 1064.639312][ T5748] do_syscall_64+0x166/0x520 [ 1064.639330][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.639348][ T5748] [ 1064.639353][ T5748] Freed by task 9433: [ 1064.639362][ T5748] kasan_save_track+0x3e/0x80 [ 1064.639379][ T5748] kasan_save_free_info+0x40/0x50 [ 1064.639404][ T5748] __kasan_slab_free+0x5c/0x80 [ 1064.639422][ T5748] kfree+0x1c5/0x650 [ 1064.639445][ T5748] device_release+0xc4/0x1f0 [ 1064.639466][ T5748] kobject_put+0x222/0x550 [ 1064.639487][ T5748] netdev_run_todo+0xeee/0x1060 [ 1064.639510][ T5748] rtnl_dellink+0x68d/0x810 [ 1064.639529][ T5748] rtnetlink_rcv_msg+0x802/0xc00 [ 1064.639546][ T5748] netlink_rcv_skb+0x226/0x4a0 [ 1064.639569][ T5748] netlink_unicast+0x7bd/0x940 [ 1064.639589][ T5748] netlink_sendmsg+0x813/0xb40 [ 1064.639614][ T5748] sock_sendmsg_nosec+0x13a/0x180 [ 1064.639639][ T5748] ____sys_sendmsg+0x54e/0x850 [ 1064.639660][ T5748] ___sys_sendmsg+0x2a5/0x360 [ 1064.639689][ T5748] __x64_sys_sendmsg+0x1b1/0x290 [ 1064.639710][ T5748] do_syscall_64+0x166/0x520 [ 1064.639728][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.639746][ T5748] [ 1064.639751][ T5748] The buggy address belongs to the object at ffff88807b320000 [ 1064.639751][ T5748] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1064.639767][ T5748] The buggy address is located 3593 bytes inside of [ 1064.639767][ T5748] freed 4096-byte region [ffff88807b320000, ffff88807b321000) [ 1064.639787][ T5748] [ 1064.639792][ T5748] The buggy address belongs to the physical page: [ 1064.639802][ T5748] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b320 [ 1064.639820][ T5748] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1064.639836][ T5748] memcg:ffff88802d682d41 [ 1064.639845][ T5748] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1064.639862][ T5748] page_type: f5(slab) [ 1064.639879][ T5748] raw: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 1064.639896][ T5748] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff88802d682d41 [ 1064.639914][ T5748] head: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 1064.639931][ T5748] head: 0000000000000000 0000000200040004 00000000f5000000 ffff88802d682d41 [ 1064.639947][ T5748] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1064.639964][ T5748] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1064.639973][ T5748] page dumped because: kasan: bad access detected [ 1064.639983][ T5748] page_owner tracks the page as allocated [ 1064.639990][ T5748] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5623, tgid 5623 (syz-executor), ts 83985480214 [ 1064.640021][ T5748] post_alloc_hook+0x1f9/0x250 [ 1064.640047][ T5748] get_page_from_freelist+0x2209/0x2280 [ 1064.640066][ T5748] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1064.640084][ T5748] allocate_slab+0x7d/0x620 [ 1064.640107][ T5748] refill_objects+0x2d5/0x350 [ 1064.640130][ T5748] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1064.640151][ T5748] __kmalloc_noprof+0x47b/0x720 [ 1064.640167][ T5748] __register_sysctl_table+0x6f/0x1370 [ 1064.640184][ T5748] __addrconf_sysctl_register+0x31c/0x4b0 [ 1064.640205][ T5748] addrconf_sysctl_register+0x168/0x1c0 [ 1064.640225][ T5748] ipv6_add_dev+0xd5f/0x1400 [ 1064.640250][ T5748] addrconf_notify+0x771/0x1050 [ 1064.640270][ T5748] notifier_call_chain+0x1a5/0x3d0 [ 1064.640297][ T5748] register_netdevice+0x18a4/0x1eb0 [ 1064.640320][ T5748] ipvlan_link_new+0x3e6/0xa10 [ 1064.640339][ T5748] rtnl_newlink_create+0x305/0x7b0 [ 1064.640361][ T5748] page last free pid 5623 tgid 5623 ts 83976937681 stack trace: [ 1064.640375][ T5748] __free_frozen_pages+0xc93/0xd90 [ 1064.640401][ T5748] __slab_free+0x274/0x2c0 [ 1064.640417][ T5748] qlist_free_all+0x99/0x100 [ 1064.640433][ T5748] kasan_quarantine_reduce+0x148/0x160 [ 1064.640449][ T5748] __kasan_slab_alloc+0x22/0x80 [ 1064.640468][ T5748] __kmalloc_cache_noprof+0x29f/0x600 [ 1064.640484][ T5748] mpls_dev_notify+0xd6/0xd30 [ 1064.640503][ T5748] notifier_call_chain+0x1a5/0x3d0 [ 1064.640528][ T5748] register_netdevice+0x18a4/0x1eb0 [ 1064.640551][ T5748] ipvlan_link_new+0x3e6/0xa10 [ 1064.640568][ T5748] rtnl_newlink_create+0x305/0x7b0 [ 1064.640589][ T5748] rtnl_newlink+0x167a/0x1c30 [ 1064.640608][ T5748] rtnetlink_rcv_msg+0x802/0xc00 [ 1064.640626][ T5748] netlink_rcv_skb+0x226/0x4a0 [ 1064.640650][ T5748] netlink_unicast+0x7bd/0x940 [ 1064.640670][ T5748] netlink_sendmsg+0x813/0xb40 [ 1064.640703][ T5748] [ 1064.640708][ T5748] Memory state around the buggy address: [ 1064.640718][ T5748] ffff88807b320d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.640732][ T5748] ffff88807b320d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.640745][ T5748] >ffff88807b320e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.640754][ T5748] ^ [ 1064.640764][ T5748] ffff88807b320e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.640777][ T5748] ffff88807b320f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1064.640787][ T5748] ================================================================== [ 1064.711833][ T5748] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1065.459998][ T5748] CPU: 1 UID: 0 PID: 5748 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 1065.469378][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1065.479437][ T5748] Workqueue: infiniband ib_cache_event_task [ 1065.485346][ T5748] Call Trace: [ 1065.488626][ T5748] [ 1065.491560][ T5748] vpanic+0x56d/0xa60 [ 1065.495555][ T5748] ? __pfx_vpanic+0x10/0x10 [ 1065.500071][ T5748] panic+0xc5/0xd0 [ 1065.503798][ T5748] ? __pfx_panic+0x10/0x10 [ 1065.508224][ T5748] ? preempt_schedule_thunk+0x16/0x40 [ 1065.513603][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1065.519684][ T5748] ? preempt_schedule_thunk+0x16/0x40 [ 1065.525088][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1065.531194][ T5748] check_panic_on_warn+0x89/0xb0 [ 1065.536158][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1065.542233][ T5748] end_report+0x73/0x170 [ 1065.546486][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1065.552553][ T5748] kasan_report+0x128/0x150 [ 1065.557064][ T5748] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1065.563138][ T5748] __ethtool_get_link_ksettings+0x230/0x250 [ 1065.569035][ T5748] __ethtool_get_link_ksettings+0x11f/0x250 [ 1065.574932][ T5748] ib_get_eth_speed+0x180/0x7f0 [ 1065.579795][ T5748] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1065.585185][ T5748] ? do_raw_spin_unlock+0xf5/0x200 [ 1065.590305][ T5748] ? rxe_query_port+0x6b/0x3d0 [ 1065.595080][ T5748] rxe_query_port+0x93/0x3d0 [ 1065.599688][ T5748] ib_query_port+0x16e/0x830 [ 1065.604296][ T5748] ib_cache_update+0x1ba/0xc50 [ 1065.609069][ T5748] ? do_raw_spin_lock+0x12b/0x2f0 [ 1065.614102][ T5748] ? __pfx_ib_cache_update+0x10/0x10 [ 1065.619397][ T5748] ? lock_acquire+0x115/0x350 [ 1065.624080][ T5748] ib_cache_event_task+0xd3/0x1c0 [ 1065.629111][ T5748] ? process_scheduled_works+0x97a/0x1630 [ 1065.634838][ T5748] process_scheduled_works+0xc3d/0x1630 [ 1065.640409][ T5748] ? __pfx_process_scheduled_works+0x10/0x10 [ 1065.646399][ T5748] ? assign_work+0x3cf/0x5d0 [ 1065.650998][ T5748] worker_thread+0xa47/0xfb0 [ 1065.655604][ T5748] ? __kthread_parkme+0x71/0x1f0 [ 1065.660558][ T5748] kthread+0x38b/0x480 [ 1065.664635][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 1065.669752][ T5748] ? __pfx_kthread+0x10/0x10 [ 1065.674343][ T5748] ret_from_fork+0x514/0xb70 [ 1065.678934][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 1065.684057][ T5748] ? __switch_to+0xc89/0x1420 [ 1065.688744][ T5748] ? __pfx_kthread+0x10/0x10 [ 1065.693335][ T5748] ret_from_fork_asm+0x1a/0x30 [ 1065.698119][ T5748] [ 1065.701398][ T5748] Kernel Offset: disabled [ 1065.705714][ T5748] Rebooting in 86400 seconds..