last executing test programs: 2.439474343s ago: executing program 2 (id=3506): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty=0x1f4}}, 0x9, 0x8, 0x0, 0x0, 0xd0, 0x6, 0x2}, 0x9c) 1.56814268s ago: executing program 0 (id=3514): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5dd0}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="23c65d54f4c5b2babf5c69a185dbff810f38fd90ca899adb0f5f20000000000000005ccad8c230f11b3f1d4db7d6d15136901ae9b5630dde5ae4617eab63a73595bac8332292e02cbc98162455420f9435aa727b090260f7c68e06e1e54e2bcfe9e4210d9ba263e2000000f8a49f102874d2fe80fec28e0b84552470f43e45c508dae05d842d28101ce992cfb22754e81de7e2ba70efceb435946b644796b2ed7d909371b5094bfbce2c8861f0597561c7440814ee2ce467eb3193558b1c454e6c4ada2d4c4c0671485a7c6b5c13a498e261835b6f1ecd6f513d85eac1c619f77ea9c8b1c4f73a37c398569e780bb5b5d0856030e64da2575e2b5e072c4061c1631d5ee88067f249a3ec00343ff37914226422d33a143ec733c66ba2619c4fea5ee9ff07374ea98620e5cca892997b11bdd7c7e0ea553e207c38df29a5ae58d0ef611a1460bc5b03a63a728eff9b1ce98885a6497033d54486cc939bb92c5d292a37fe9ac2f5e7d3913612ca91dcf2d137f90aab571907673a4399680acec5cc8b5b87ecc14223c95a65c95dda1f227a9db02cca68a4a157c9da8e5dacdab0cd9d3df0f055b8a2c99f1eced693fa46525e21f651fee85f47c6f3fd6acb1e51e5542c1212508a72c7e79a7cb8eeae7aca7bba4b4d9d74c2b7c5cb111f0d716d57ae21b8abda1658abfd250e9be722c37e886d5fb073c39f", 0x2, 0x0, 0x7ffc}, 0x21) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) (async) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async, rerun: 64) close(r3) (async, rerun: 64) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r5, 0x20d, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) (async) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002240)=ANY=[@ANYBLOB="300000000102010100000000000000010200000513000b0063616c6c666f7277617264696e6700000800084000000005"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x90) (async, rerun: 32) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x80}, 0x300}, 0x8040) (rerun: 32) 1.567488693s ago: executing program 2 (id=3515): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x110, 0x2, 0xa, 0x300, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xfb, 0x6, "3554f79fbe53c2470b16b7628ba6c21bb3e4472d364d7adce0d964f440dd0278af8125b5733e8846cbce19010ca9fbccb4798f3fe722f12b01b8c82fe196867ca5ea4546adde317a4c4734b04ec1605fafa108bc597d11a71c0708972849eadc0f9fe3627463e0f8c968affc7ed48371f8a35386aec43918ab977ddf4387f1d29d042eadb7f148befc832c3fb020e1b7f8707a90200a5b373f0de57bf31b06ba000acdd0f3f2e66cb897c9eab8bb487ea9e658aec56bb34d8fafa0d4b708ebef87877d7733e7a38f0fe33d2902a6c4c9fefcb8bf310148f5051685cc95f90b0414e87502eb82242de46a8bd07f51f5c3b53a432c0e424b"}]}, @NFT_MSG_DELSET={0xd0, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x192}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x10c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0xe4, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x52}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xb75a}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x69}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3fc}, 0x1, 0x0, 0x0, 0x404c}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffff6}, 0x28) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00ffec11000f140005000200090000000109000000ec", 0x17) 1.390107883s ago: executing program 0 (id=3517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="230000000b00000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f00000003c0), 0x0, 0x4000}, 0x20) 1.219836177s ago: executing program 0 (id=3518): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xe, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd", 0x12}], 0x1) 1.017591946s ago: executing program 1 (id=3520): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="5fad421f408b1a4eed08dda0bbe31dc631cccaff7295b3a35507a804ff4e2542ca8c8797e17dbcea27"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f00000000c0)="1d0244112acb6776eb843d3f55e047d98c98dfb5520eac335aeb058dd306d07e124b12d447e11897547f6d4e9270c9b2c893695a364c9e676080905e1cae68c0cefc7829fd90f7322823ca6140188a3ff277e94115a9e86c77db23caa2ffd709aac6b058ba0f86f7888b838475a82b145608fd3cb4cff7a0ec27d339129aebd5a634d8cb7d9c35220942b0032d6ede924ed43af937b03ed3512a86650afd0b73be6edd1aec6a6cadb501a9d34d290c49", 0x0}, 0x20) 827.162784ms ago: executing program 0 (id=3521): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000000000000000) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async, rerun: 32) listen(0xffffffffffffffff, 0x5) (async) close(0x4) 826.735104ms ago: executing program 1 (id=3522): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x4c}}, 0x20080800) 745.94592ms ago: executing program 0 (id=3523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c5}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 745.480032ms ago: executing program 1 (id=3524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) 649.335104ms ago: executing program 2 (id=3525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x22, 0x3, 0x0) r2 = socket(0x26, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000780)={0x7, 0x100, 0x29e, 0x2, 0xd1}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x40, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x10001}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4b7}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xff44, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000014e6b565b8927f741305cc0bdfe4f3f9aecbecfe2d6a5201e0f8d4fef4", @ANYRES32=r2, @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 648.650872ms ago: executing program 1 (id=3526): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x5e21, @local}], 0x10) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x13c, r8, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0xcd6ab6b8f5438313}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1800}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x30, r6, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1d}]}, {0x4}]}]}, 0x30}}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5a8609256cd5f8e6a4adbe5f5a964b92"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc5}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7b7913242606e38f2a1a7ab8c9e7f774"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01e34410fa2fd4ba"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0348dde43cc92c1b0264d5d55816e157"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="12210dcf923b8842388c7cb38c3cc4ff3b3623ab12d7ceee"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d126c48d69b4e8e6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b04581de65a61f83e69ad77899b5e3ed"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9b390e00c2d62525"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ba8f670250cc0637d3e205b955863b463aa4f478cd158ef3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="61ce04931cbb41b6868e539d655c03d9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ceeafb26f6340f20"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c2e6ecc945933ae"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e845e8cd41632a6d"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a093f9263f32160ed5f0f3d436034328c338edc9a972fd0d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fec75bb64df6d920e7904affdd2349f3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4e69bb7f699bbf0a8a1d1f13e7cb4a95"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f9f89b003d42336a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="00a7feec7424368e60fee91e09c0543d"}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4800}, 0x48094) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async, rerun: 32) listen(r2, 0x7) (rerun: 32) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="05"], 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x83) 296.947727ms ago: executing program 0 (id=3527): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/245, 0xf5}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) close(r4) 292.830363ms ago: executing program 1 (id=3528): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000140)={r3, &(0x7f0000000040)='\'\x00', 0xc0100, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x9]}, {0x4, 0x5, 0xf, 0x10000}}, 0x29c020f3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) getsockopt(r3, 0x1, 0x3, &(0x7f00000004c0)=""/4096, &(0x7f0000000000)=0x1000) 218.747012ms ago: executing program 1 (id=3529): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000014371a081c141c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r3, 0x1) listen(r3, 0x5) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 216.895619ms ago: executing program 2 (id=3530): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) 129.535688ms ago: executing program 2 (id=3531): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xfdb, 0xffff, {{0x3d, 0x4, 0x1, 0x1, 0xf4, 0x67, 0x0, 0xff, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xbe, 0x3, 0x8, [{@loopback, 0x9}, {@remote, 0x2}, {@multicast2, 0x7f}, {@multicast2, 0x4}, {@multicast1, 0x2ad}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0xf, 0xb1, [@local, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x24, 0x23, 0x3, 0x2, [{@loopback, 0x5}, {@empty, 0x7b}, {@broadcast, 0x2}, {@rand_addr=0x64010102, 0x5}]}, @generic={0x88, 0x3, "94"}, @lsrr={0x83, 0x27, 0xee, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @rand_addr=0x64010101, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0xcb, [@dev={0xac, 0x14, 0x14, 0x23}, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}]}, @timestamp_prespec={0x44, 0x3c, 0x92, 0x3, 0x9, [{@empty, 0xfffffb88}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@broadcast, 0x10001}, {@rand_addr=0x64010102}]}]}}}}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff000000000000000000000000000000000000225b4c8b5eec79573a995525a24f4ac8e5b0996873b5027c7134b0b950ec59d584e1c882ed45c0c674e74c967ece6da7e0abb4f9e4aa12f02edda1acf2fe68508b38ebda518fa8562128d5a27e79fc4b5821db0b669b600474b89096535cbbddc7410f627d4887556aa3100263aec35508ffd04d46a1f0c9e5f273905606e79992f608314c8ba35207d3de7dbabe03d3c63a62243ae3d24f5c88c220eb9eae315e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000640)={{r4, &(0x7f00000001c0)='ip6_vti0\x00', 0x80000, &(0x7f0000000480)={@align=0x97, {0xbaf, 0x9, 0x9f, 0x2158}}, 0x5, &(0x7f00000004c0), &(0x7f0000000500)=0x5}, {[0xc, 0x384, 0x5, 0x7]}, 0xe35, 0xc6, &(0x7f0000000540)=""/198}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1a, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000019d20000b702000014000000b7030000000000008500000083000000bf0900000045090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000e0bb4210fd0ec1c9e4293f89c28d5d9608740ba9194d331488c748164a5f9322a536a4f1e1b90245e72882"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe190, r7, 0x0, 0x0, 0x0, 0x10, 0x4a9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, r8, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r1, 0x6, 0x2, 0x7f, 0x7, 0x19, @private1, @local, 0x7, 0x1, 0x3, 0x3}}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r9, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 0s ago: executing program 2 (id=3532): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, &(0x7f0000000080), &(0x7f0000000100)=0x8) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "715150b1971bbe75", "8c419c4cb217d59a5e2108c76ca18dad", "8869fdbb", "ddc7586e28e54682"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) kernel console output (not intermixed with test programs): freezer. See cgroup.freeze of cgroup v2 [ 117.465833][ T7836] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 117.472603][ T7836] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 117.508237][ T7836] __nla_validate_parse: 64 callbacks suppressed [ 117.508249][ T7836] netlink: 14 bytes leftover after parsing attributes in process `syz.1.678'. [ 117.985433][ T7865] gretap0: left promiscuous mode [ 118.013752][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.021458][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.053293][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.054588][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.057838][ T7865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.057849][ T7865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.061598][ T7865] veth1_vlan: left promiscuous mode [ 118.062238][ T7865] veth0_vlan: left promiscuous mode [ 118.063118][ T7865] veth0_vlan: entered promiscuous mode [ 118.064518][ T7865] veth1_vlan: entered promiscuous mode [ 118.067867][ T7865] veth1_macvtap: left promiscuous mode [ 118.068676][ T7865] veth0_macvtap: left promiscuous mode [ 118.070217][ T7865] veth0_macvtap: entered promiscuous mode [ 118.070838][ T7865] veth1_macvtap: entered promiscuous mode [ 118.074345][ T7865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.074997][ T7865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.075884][ T7865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.076349][ T7865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.080070][ T7865] gretap0: entered promiscuous mode [ 118.084591][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.084664][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.087016][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.087084][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.157477][ T5490] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.158528][ T5490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.158589][ T5490] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.158605][ T5490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.158626][ T5490] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.158641][ T5490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.158661][ T5490] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.158675][ T5490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.488313][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 118.488535][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 118.558872][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 118.558883][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 118.558894][ T7883] netlink: 'syz.2.693': attribute type 15 has an invalid length. [ 118.649033][ T7891] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 119.343493][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 119.343734][ T7893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.693'. [ 119.345405][ T7899] netlink: 'syz.0.697': attribute type 2 has an invalid length. [ 119.357769][ T12] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 119.358106][ T12] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 119.358273][ T12] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 119.358466][ T12] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 119.468280][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 119.521894][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 119.598357][ T7904] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 119.625146][ T7904] batman_adv: batadv0: Adding interface: syzkaller0 [ 119.625160][ T7904] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.625182][ T7904] batman_adv: batadv0: Interface activated: syzkaller0 [ 119.911821][ T7903] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 119.929990][ T7903] batman_adv: batadv0: Removing interface: syzkaller0 [ 121.300771][ T7960] sctp: [Deprecated]: syz.0.716 (pid 7960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.300771][ T7960] Use struct sctp_sack_info instead [ 121.436681][ T7965] raw_sendmsg: syz.0.718 forgot to set AF_INET. Fix it! [ 123.202601][ T7944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.532293][ T8002] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 123.551432][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 123.552559][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 123.552763][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 123.553624][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 123.553702][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 124.383851][ T8041] batadv_slave_1: entered promiscuous mode [ 124.385418][ T8041] batadv_slave_1: left promiscuous mode [ 124.564720][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 124.582182][ T8052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.738'. [ 124.725473][ T8062] syzkaller0: entered promiscuous mode [ 124.725486][ T8062] syzkaller0: entered allmulticast mode [ 124.870287][ T8066] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20001 [ 125.304498][ T8088] netlink: 236 bytes leftover after parsing attributes in process `syz.2.753'. [ 125.866182][ T8094] netlink: 830 bytes leftover after parsing attributes in process `syz.1.755'. [ 126.321909][ T8115] netlink: 64 bytes leftover after parsing attributes in process `syz.1.763'. [ 126.340582][ T8115] syzkaller1: entered promiscuous mode [ 126.340596][ T8115] syzkaller1: entered allmulticast mode [ 126.438178][ T8119] bond1: entered promiscuous mode [ 126.438192][ T8119] bond1: entered allmulticast mode [ 127.518308][ T8146] openvswitch: netlink: Key type 29 is not supported [ 128.189658][ T8165] xt_nfacct: accounting object `' does not exist [ 128.398683][ T8172] xt_hashlimit: size too large, truncated to 1048576 [ 128.668665][ T8185] __nla_validate_parse: 2 callbacks suppressed [ 128.668676][ T8185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.790'. [ 128.856361][ T8203] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.794'. [ 130.193312][ T8213] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 130.193332][ T8213] netlink: 244 bytes leftover after parsing attributes in process `syz.1.798'. [ 130.350908][ T8221] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 130.409663][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'. [ 130.456718][ T8222] bond4: (slave veth5): Enslaving as an active interface with a down link [ 130.460006][ T8223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.145799][ T8258] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 131.563335][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 131.566519][ T8281] gtp0: entered allmulticast mode [ 132.743669][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 132.768341][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 132.774711][ T8311] netlink: 'syz.1.829': attribute type 3 has an invalid length. [ 132.827395][ T5699] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.827431][ T5699] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.827450][ T5699] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.827503][ T5699] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.098882][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098909][ T1379] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225817][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 133.286606][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 133.342117][ T8334] netlink: 'syz.2.837': attribute type 3 has an invalid length. [ 133.416078][ T8358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.839'. [ 133.930328][ T8411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.845'. [ 134.164685][ T8441] Cannot find add_set index 2 as target [ 134.166054][ T8441] netlink: 'syz.1.847': attribute type 7 has an invalid length. [ 134.166062][ T8441] netlink: 'syz.1.847': attribute type 8 has an invalid length. [ 134.993598][ T8455] netlink: 'syz.2.852': attribute type 2 has an invalid length. [ 135.080974][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.854'. [ 135.080996][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.854'. [ 135.081001][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 135.400293][ T8481] netlink: 48 bytes leftover after parsing attributes in process `syz.0.865'. [ 135.400305][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 136.410915][ T8513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.874'. [ 136.447913][ T8513] IPVS: Scheduler module ip_vs_mh not found [ 136.518493][ T8524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.877'. [ 136.518506][ T8524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.877'. [ 136.518514][ T8524] netlink: 9 bytes leftover after parsing attributes in process `syz.0.877'. [ 136.659040][ T8537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.659050][ T8537] IPv6: NLM_F_CREATE should be set when creating new route [ 136.659062][ T8537] IPv6: NLM_F_CREATE should be set when creating new route [ 137.734314][ T8577] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 137.794687][ T8579] netlink: 'syz.1.896': attribute type 3 has an invalid length. [ 138.215880][ T8604] syzkaller0: entered promiscuous mode [ 138.215891][ T8604] syzkaller0: entered allmulticast mode [ 138.225714][ T8604] tipc: Started in network mode [ 138.225740][ T8604] tipc: Node identity 8ef78b195907, cluster identity 4711 [ 138.225992][ T8604] tipc: Enabled bearer , priority 0 [ 138.246490][ T8604] tipc: Resetting bearer [ 138.255604][ T8603] tipc: Resetting bearer [ 138.268650][ T8603] tipc: Disabling bearer [ 138.736016][ T8612] xt_hashlimit: size too large, truncated to 1048576 [ 139.161878][ T8623] __nla_validate_parse: 6 callbacks suppressed [ 139.161891][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.913'. [ 139.746463][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 139.790933][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 139.839704][ T8634] netlink: 'syz.2.917': attribute type 3 has an invalid length. [ 140.333467][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'. [ 140.639752][ T8673] netlink: 'syz.1.931': attribute type 11 has an invalid length. [ 140.867103][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 140.873859][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 140.883722][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 141.984561][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 142.223008][ T8720] gre1: entered promiscuous mode [ 142.785594][ T8739] netlink: 'syz.2.952': attribute type 2 has an invalid length. [ 142.893094][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'. [ 142.894349][ T8748] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 144.072483][ T8786] netlink: 9 bytes leftover after parsing attributes in process `syz.1.970'. [ 144.072666][ T8786] 0·: renamed from hsr0 [ 144.075271][ T8786] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.075289][ T8786] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.080501][ T8786] 0·: entered allmulticast mode [ 144.080518][ T8786] hsr_slave_0: entered allmulticast mode [ 144.080531][ T8786] hsr_slave_1: entered allmulticast mode [ 144.081840][ T8786] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 144.211800][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 144.275473][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 145.090489][ T8808] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 145.131225][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 145.131836][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 145.131998][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 145.132389][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 145.132574][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 145.279475][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'. [ 145.338582][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'. [ 147.927743][ T8864] netlink: 64 bytes leftover after parsing attributes in process `syz.0.995'. [ 149.235788][ T8861] syzkaller1: entered promiscuous mode [ 149.235809][ T8861] syzkaller1: entered allmulticast mode [ 150.569847][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 150.983276][ T8970] netlink: 'syz.2.1023': attribute type 1 has an invalid length. [ 150.983288][ T8970] netlink: 'syz.2.1023': attribute type 2 has an invalid length. [ 151.674445][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 151.674470][ T8999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1032'. [ 151.731004][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 151.812456][ T9003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.094884][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 153.072322][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 153.183714][ T9099] netlink: 'syz.2.1050': attribute type 5 has an invalid length. [ 153.347096][ T9114] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1055'. [ 153.412471][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 153.424864][ T9115] Bluetooth: hci0: unsupported parameter 5135 [ 153.424883][ T9115] Bluetooth: hci0: unsupported parameter 8192 [ 153.424890][ T9115] Bluetooth: hci0: unsupported parameter 5135 [ 153.424899][ T9115] Bluetooth: hci0: unsupported parameter 8192 [ 153.701195][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 154.009834][ T9152] virtio_blk virtio1: 1/0/0 default/read/poll queues [ 154.012535][ T9152] virtio_blk virtio1: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 154.302854][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 154.316748][ T9164] tipc: Enabling of bearer rejected, failed to enable media [ 154.690300][ T9152] syz.0.1069 (9152) used greatest stack depth: 20064 bytes left [ 154.743363][ T9174] Bluetooth: hci0: unsupported parameter 5135 [ 154.743383][ T9174] Bluetooth: hci0: unsupported parameter 8192 [ 154.743390][ T9174] Bluetooth: hci0: unsupported parameter 5135 [ 154.743397][ T9174] Bluetooth: hci0: unsupported parameter 8192 [ 154.987172][ T9188] netlink: 'syz.0.1081': attribute type 32 has an invalid length. [ 155.008609][ T9188] bond5: Setting coupled_control to off (0) [ 155.592987][ T9213] __nla_validate_parse: 2 callbacks suppressed [ 155.592997][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 155.742755][ T9223] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 156.011417][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 156.068695][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 156.068768][ T9231] openvswitch: netlink: Missing valid actions attribute. [ 156.069313][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 156.069398][ T9232] openvswitch: netlink: Missing valid actions attribute. [ 156.133494][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 156.152389][ T9235] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1100'. [ 156.196878][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 156.206858][ T9240] netlink: 'syz.0.1100': attribute type 11 has an invalid length. [ 156.206870][ T9240] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1100'. [ 157.041805][ T9250] syzkaller0: entered promiscuous mode [ 157.041822][ T9250] syzkaller0: entered allmulticast mode [ 159.219158][ T9281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.284089][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 159.521375][ T9328] netlink: 'syz.1.1135': attribute type 23 has an invalid length. [ 159.521398][ T9328] netlink: 'syz.1.1135': attribute type 11 has an invalid length. [ 159.829166][ T9338] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1141'. [ 160.048720][ T9349] erspan0: entered promiscuous mode [ 160.793962][ T9374] __nla_validate_parse: 5 callbacks suppressed [ 160.793976][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1152'. [ 160.977499][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1154'. [ 160.977573][ T9378] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1154'. [ 160.977579][ T9378] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1154'. [ 160.977588][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1154'. [ 161.108205][ T9384] gretap0: entered promiscuous mode [ 161.124379][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.126585][ T9384] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.134643][ T9384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.152779][ T9384] bond_slave_0: entered promiscuous mode [ 161.160899][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.162178][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.166409][ T9384] veth1_vlan: left promiscuous mode [ 161.166846][ T9384] veth0_vlan: left promiscuous mode [ 161.177370][ T9384] veth0_vlan: entered promiscuous mode [ 161.178543][ T9384] veth1_vlan: entered promiscuous mode [ 161.180490][ T9384] veth1_macvtap: left promiscuous mode [ 161.181034][ T9384] veth0_macvtap: left promiscuous mode [ 161.181694][ T9384] veth0_macvtap: entered promiscuous mode [ 161.182197][ T9384] veth1_macvtap: entered promiscuous mode [ 161.183186][ T9384] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 161.185940][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.185982][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.187138][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.187180][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.509528][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1162'. [ 161.531042][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.531329][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.573962][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.576828][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.637353][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.637371][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 161.637380][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.637395][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.637403][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 161.637411][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.637448][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.637457][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 161.637465][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.637543][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.637551][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 161.637559][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.637668][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 161.760801][ T9409] netlink: 'syz.2.1163': attribute type 21 has an invalid length. [ 161.760822][ T9409] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1163'. [ 161.761006][ T9409] netlink: 'syz.2.1163': attribute type 5 has an invalid length. [ 161.761017][ T9409] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1163'. [ 162.166026][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 163.092089][ T9468] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 163.092108][ T9468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.551275][ T9490] syzkaller0: entered promiscuous mode [ 163.551324][ T9490] syzkaller0: entered allmulticast mode [ 163.566109][ T9490] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.675539][ T9493] netlink: 'syz.1.1189': attribute type 8 has an invalid length. [ 164.736166][ T9519] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 165.170700][ T9534] nbd2: detected capacity change from 0 to 63 [ 165.172718][ T9534] block nbd2: NBD_DISCONNECT [ 165.172818][ T9534] block nbd2: Disconnected due to user request. [ 165.172827][ T9534] block nbd2: shutting down sockets [ 165.175882][ T97] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.175938][ T97] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.176057][ T97] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.176072][ T97] Buffer I/O error on dev nbd2, logical block 1, async page read [ 165.176133][ T97] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.176145][ T97] Buffer I/O error on dev nbd2, logical block 2, async page read [ 165.176205][ T97] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.181274][ T97] Buffer I/O error on dev nbd2, logical block 3, async page read [ 165.196510][ T97] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.196537][ T97] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.204039][ T97] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.204064][ T97] Buffer I/O error on dev nbd2, logical block 1, async page read [ 165.211576][ T97] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.211601][ T97] Buffer I/O error on dev nbd2, logical block 2, async page read [ 165.230646][ T97] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.230671][ T97] Buffer I/O error on dev nbd2, logical block 3, async page read [ 165.230772][ T97] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.230786][ T97] Buffer I/O error on dev nbd2, logical block 0, async page read [ 165.238146][ T97] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 165.238171][ T97] Buffer I/O error on dev nbd2, logical block 1, async page read [ 165.261158][ T5602] ldm_validate_partition_table(): Disk read failed. [ 165.261727][ T5602] Dev nbd2: unable to read RDB block 0 [ 165.262439][ T5602] nbd2: unable to read partition table [ 165.271545][ T5602] ldm_validate_partition_table(): Disk read failed. [ 165.272116][ T5602] Dev nbd2: unable to read RDB block 0 [ 165.272990][ T5602] nbd2: unable to read partition table [ 165.691047][ T9559] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 165.691373][ T9560] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 165.801100][ T9564] __nla_validate_parse: 12 callbacks suppressed [ 165.801113][ T9564] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1213'. [ 165.826965][ T9564] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1213'. [ 165.903508][ T9569] block nbd0: shutting down sockets [ 166.227759][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 166.269163][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 167.855652][ T9651] pim6reg1: entered allmulticast mode [ 168.051347][ T9662] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1249'. [ 168.055932][ T9665] 8021q: VLANs not supported on xfrm0 [ 168.057683][ T9667] 8021q: VLANs not supported on xfrm0 [ 168.149598][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 168.483308][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 168.484855][ T9697] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1263'. [ 168.514597][ T9697] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 168.516578][ T9697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.522926][ T9697] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 168.633156][ T9707] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 168.633174][ T9707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1266'. [ 169.366547][ T9733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1275'. [ 170.309889][ T9791] netlink: 'syz.1.1294': attribute type 5 has an invalid length. [ 170.324584][ T9791] openvswitch: netlink: Key type 96 is out of range max 32 [ 171.017355][ T9720] Bluetooth: hci1: command 0x0406 tx timeout [ 173.440098][ T9803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.669193][ T55] Bluetooth: hci1: unexpected event for opcode 0x7c03 [ 174.206613][ T5600] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 174.206636][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 174.206645][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 174.206649][ T5600] Call Trace: [ 174.206653][ T5600] [ 174.206657][ T5600] dump_stack_lvl+0xe8/0x150 [ 174.206674][ T5600] dump_header+0xd3/0x4b0 [ 174.206711][ T5600] oom_kill_process+0x3ab/0x9e0 [ 174.206722][ T5600] out_of_memory+0x1064/0x1480 [ 174.206730][ T5600] ? try_charge_memcg+0xc32/0x15e0 [ 174.206746][ T5600] ? __pfx_out_of_memory+0x10/0x10 [ 174.206753][ T5600] ? do_raw_spin_unlock+0x4d/0x200 [ 174.206768][ T5600] try_charge_memcg+0xcdf/0x15e0 [ 174.206783][ T5600] ? __pfx_try_charge_memcg+0x10/0x10 [ 174.206799][ T5600] ? charge_memcg+0x47/0x310 [ 174.206808][ T5600] charge_memcg+0x1dd/0x310 [ 174.206817][ T5600] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 174.206824][ T5600] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 174.206834][ T5600] swap_cache_alloc_folio+0x4de/0x990 [ 174.206849][ T5600] swap_cache_read_folio+0x44/0x120 [ 174.206860][ T5600] swap_cluster_readahead+0x392/0x630 [ 174.206872][ T5600] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 174.206891][ T5600] swapin_readahead+0x1a3/0xc50 [ 174.206905][ T5600] ? __pfx_swapin_readahead+0x10/0x10 [ 174.206916][ T5600] ? swap_table_get+0x1e/0x260 [ 174.206925][ T5600] ? swap_table_get+0x1e/0x260 [ 174.206932][ T5600] ? swap_table_get+0x1e/0x260 [ 174.206941][ T5600] ? swap_table_get+0x216/0x260 [ 174.206950][ T5600] ? swap_cache_get_folio+0x2e7/0x2f0 [ 174.206962][ T5600] do_swap_page+0x3fb/0x4c10 [ 174.206979][ T5600] ? __lock_acquire+0x747/0x2de0 [ 174.206985][ T5600] ? do_swap_page+0x126/0x4c10 [ 174.206999][ T5600] ? __pfx_do_swap_page+0x10/0x10 [ 174.207007][ T5600] ? __pte_offset_map+0x1ae/0x240 [ 174.207018][ T5600] ? pte_offset_map_rw_nolock+0xea/0x160 [ 174.207028][ T5600] handle_mm_fault+0x1398/0x3750 [ 174.207041][ T5600] ? handle_mm_fault+0xf1/0x3750 [ 174.207054][ T5600] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.207062][ T5600] ? lock_vma_under_rcu+0x45a/0x500 [ 174.207082][ T5600] do_user_addr_fault+0xa4f/0x1340 [ 174.207095][ T5600] ? trace_page_fault_user+0x84/0x1e0 [ 174.207103][ T5600] exc_page_fault+0x6a/0xc0 [ 174.207113][ T5600] asm_exc_page_fault+0x26/0x30 [ 174.207121][ T5600] RIP: 0033:0x7fda6ff5e98e [ 174.207129][ T5600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.207135][ T5600] RSP: 002b:00007ffeeff6b3c8 EFLAGS: 00010246 [ 174.207143][ T5600] RAX: 0000000000000000 RBX: 000055558e621500 RCX: 00007fda6ff5e98e [ 174.207148][ T5600] RDX: 00007ffeeff6b420 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.207152][ T5600] RBP: 00007ffeeff6b48c R08: 0000000000000000 R09: 0000000000000000 [ 174.207157][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 174.207161][ T5600] R13: 00000000000927c0 R14: 000000000002a5a3 R15: 00007ffeeff6b4e0 [ 174.207173][ T5600] [ 174.210150][ T5600] memory: usage 307200kB, limit 307200kB, failcnt 1250 [ 174.210158][ T5600] memory+swap: usage 307352kB, limit 9007199254740988kB, failcnt 0 [ 174.210163][ T5600] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 174.210167][ T5600] Memory cgroup stats for /syz2: [ 174.210719][ T5600] cache 0 [ 174.210724][ T5600] rss 0 [ 174.210726][ T5600] rss_huge 0 [ 174.210729][ T5600] shmem 0 [ 174.210731][ T5600] mapped_file 0 [ 174.210734][ T5600] dirty 0 [ 174.210736][ T5600] writeback 0 [ 174.210739][ T5600] workingset_refault_anon 8 [ 174.210741][ T5600] workingset_refault_file 0 [ 174.210744][ T5600] swap 155648 [ 174.210746][ T5600] swapcached 221184 [ 174.210748][ T5600] pgpgin 57031 [ 174.210751][ T5600] pgpgout 57023 [ 174.210753][ T5600] pgfault 216628 [ 174.210755][ T5600] pgmajfault 2 [ 174.210758][ T5600] inactive_anon 16384 [ 174.210760][ T5600] active_anon 16384 [ 174.210763][ T5600] inactive_file 0 [ 174.210765][ T5600] active_file 0 [ 174.210767][ T5600] unevictable 0 [ 174.210770][ T5600] hierarchical_memory_limit 314572800 [ 174.210772][ T5600] hierarchical_memsw_limit 9223372036854771712 [ 174.210775][ T5600] total_cache 0 [ 174.210777][ T5600] total_rss 0 [ 174.210780][ T5600] total_rss_huge 0 [ 174.210782][ T5600] total_shmem 0 [ 174.210784][ T5600] total_mapped_file 0 [ 174.210787][ T5600] total_dirty 0 [ 174.210789][ T5600] total_writeback 0 [ 174.210792][ T5600] total_workingset_refault_anon 8 [ 174.210795][ T5600] total_workingset_refault_file 0 [ 174.210797][ T5600] total_swap 155648 [ 174.210800][ T5600] total_swapcached 221184 [ 174.210802][ T5600] total_pgpgin 57031 [ 174.210805][ T5600] total_pgpgout 57023 [ 174.210807][ T5600] total_pgfault 216628 [ 174.210809][ T5600] total_pgmajfault 2 [ 174.210812][ T5600] total_inactive_anon 16384 [ 174.210814][ T5600] total_active_anon 16384 [ 174.210817][ T5600] total_inactive_file 0 [ 174.210819][ T5600] total_active_file 0 [ 174.210822][ T5600] total_unevictable 0 [ 174.210824][ T5600] anon_cost 0 [ 174.210826][ T5600] file_cost 0 [ 174.210829][ T5600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1310,pid=9838,uid=0 [ 174.211714][ T5600] Memory cgroup out of memory: Killed process 9838 (syz.2.1310) total-vm:98604kB, anon-rss:1248kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 174.244931][ T9843] syz.2.1310 (9843) used greatest stack depth: 19896 bytes left [ 174.585625][ T9856] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 174.611617][ T9856] bond6 (unregistering): Released all slaves [ 174.616181][ T9859] block nbd0: server does not support multiple connections per device. [ 174.616379][ T9859] block nbd0: shutting down sockets [ 174.633452][ T9860] netlink: Setting conntrack mark requires 'commit' flag. [ 174.633469][ T9860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.883815][ T9869] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 175.406816][ T9863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.406838][ T9863] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 175.443403][ T9863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.443425][ T9863] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 176.102622][ T9936] netlink: 'syz.1.1331': attribute type 8 has an invalid length. [ 177.025022][ T34] audit: type=1800 audit(1790050636.760:4): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1344" name=B702 dev="tmpfs" ino=2252 res=0 errno=0 [ 177.296977][T10000] netlink: set zone limit has 4 unknown bytes [ 177.985986][T10018] ip6t_hbh: Not strict - not implemented [ 178.190744][T10025] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 178.190758][T10025] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 178.190764][T10025] __nla_validate_parse: 1 callbacks suppressed [ 178.190769][T10025] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1357'. [ 179.094915][T10037] sctp: [Deprecated]: syz.0.1361 (pid 10037) Use of int in max_burst socket option deprecated. [ 179.094915][T10037] Use struct sctp_assoc_value instead [ 179.899792][T10042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.113099][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 181.022234][T10058] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 181.194481][T10070] syzkaller1: entered promiscuous mode [ 181.194498][T10070] syzkaller1: entered allmulticast mode [ 181.216786][T10078] syzkaller1: left promiscuous mode [ 181.216800][T10078] syzkaller1: left allmulticast mode [ 181.300281][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 181.300333][T10090] netlink: 'syz.1.1381': attribute type 8 has an invalid length. [ 181.300338][T10090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1381'. [ 181.321213][T10090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.519793][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1385'. [ 181.521285][T10100] syzkaller0: entered promiscuous mode [ 181.521296][T10100] syzkaller0: entered allmulticast mode [ 181.539923][T10100] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 181.542995][T10100] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.754556][T10111] batadv_slave_1: entered promiscuous mode [ 181.808320][T10109] batadv_slave_1: left promiscuous mode [ 182.045637][T10120] tc_dump_action: action bad kind [ 182.170337][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 182.585875][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 182.748846][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'. [ 183.067158][T10168] x_tables: duplicate underflow at hook 1 [ 183.072329][T10168] x_tables: duplicate underflow at hook 1 [ 183.493710][T10190] sctp: [Deprecated]: syz.2.1413 (pid 10190) Use of int in maxseg socket option. [ 183.493710][T10190] Use struct sctp_assoc_value instead [ 183.547572][T10194] x_tables: unsorted entry at hook 2 [ 183.550403][T10194] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1415'. [ 183.845992][T10198] netlink: 'syz.1.1417': attribute type 10 has an invalid length. [ 185.227826][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.230326][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.230640][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.230835][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.231054][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.232824][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.341257][T10237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1428'. [ 185.519099][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1432'. [ 185.569589][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 185.588549][T10264] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.676465][T10269] batman_adv: batadv0: Adding interface: syzkaller0 [ 185.683630][T10269] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.683657][T10269] batman_adv: batadv0: Interface activated: syzkaller0 [ 186.401930][T10267] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 186.419097][T10267] batman_adv: batadv0: Removing interface: syzkaller0 [ 186.897740][T10338] tc_dump_action: action bad kind [ 188.013413][T10386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.898061][T10429] __nla_validate_parse: 3 callbacks suppressed [ 189.898082][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 189.975123][T10433] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1472'. [ 190.213019][T10442] netlink: 'syz.0.1475': attribute type 2 has an invalid length. [ 190.213039][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 190.294318][T10448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.346805][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 190.355477][T10450] netlink: 'syz.0.1478': attribute type 5 has an invalid length. [ 190.355487][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 190.919448][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 190.919471][T10488] netlink: 'syz.2.1485': attribute type 30 has an invalid length. [ 190.925522][T10488] vxlan2: entered promiscuous mode [ 190.925539][T10488] vxlan2: entered allmulticast mode [ 190.937965][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.938008][ T7900] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.938029][ T7900] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.938041][ T7900] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.961026][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 190.961055][T10488] netlink: 'syz.2.1485': attribute type 30 has an invalid length. [ 190.970566][T10488] vxlan3: entered promiscuous mode [ 190.970584][T10488] vxlan3: entered allmulticast mode [ 191.886585][T10505] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 192.175099][T10526] netlink: 4912 bytes leftover after parsing attributes in process `syz.2.1495'. [ 192.411593][T10533] syzkaller1: entered promiscuous mode [ 192.411612][T10533] syzkaller1: entered allmulticast mode [ 192.543044][T10539] netlink: 'syz.2.1501': attribute type 2 has an invalid length. [ 192.543062][T10539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1501'. [ 192.560656][T10539] : entered promiscuous mode [ 192.564950][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 194.541065][ T1379] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.794616][T10641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.961351][T10647] __nla_validate_parse: 8 callbacks suppressed [ 194.961366][T10647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1534'. [ 194.961376][T10647] nbd: must specify at least one socket [ 195.209203][T10659] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1538'. [ 195.658265][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 195.703683][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 195.711908][T10711] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1556'. [ 195.751480][T10711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 195.780003][T10715] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1557'. [ 196.524488][T10736] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1564'. [ 196.677895][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'. [ 196.677923][T10743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'. [ 196.734683][T10747] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000 [ 196.891228][T10758] dvmrp1: entered allmulticast mode [ 197.205281][T10771] IPVS: Error connecting to the multicast addr [ 197.205954][T10773] netlink: ct_mark mask cannot be 0 [ 197.205979][T10773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.006917][ T34] audit: type=1804 audit(1790050658.740:5): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1587" name="/newroot/541/cgroup.controllers" dev="tmpfs" ino=2801 res=1 errno=0 [ 199.007144][ T34] audit: type=1800 audit(1790050658.740:6): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1587" name="cgroup.controllers" dev="tmpfs" ino=2801 res=0 errno=0 [ 199.254993][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.084003][T10846] syzkaller1: entered promiscuous mode [ 200.084026][T10846] syzkaller1: entered allmulticast mode [ 200.181647][T10850] __nla_validate_parse: 6 callbacks suppressed [ 200.181666][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 200.181678][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 200.181687][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1603'. [ 200.542892][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 201.235706][T10888] batman_adv: batadv0: Adding interface: syzkaller0 [ 201.235724][T10888] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.235744][T10888] batman_adv: batadv0: Interface activated: syzkaller0 [ 201.615698][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 201.637016][T10901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.648405][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1621'. [ 201.665649][T10904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.706600][T10909] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 201.723987][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 201.724010][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 201.724156][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 201.724165][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 202.070975][T10888] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 202.095861][T10888] batman_adv: batadv0: Removing interface: syzkaller0 [ 202.442154][T10941] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 202.474997][T10946] netlink: 'syz.0.1635': attribute type 4 has an invalid length. [ 202.502938][T10946] netlink: 'syz.0.1635': attribute type 4 has an invalid length. [ 203.277913][T10955] netlink: 'syz.0.1638': attribute type 12 has an invalid length. [ 204.548931][T10983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 204.551618][T10983] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 204.551941][T10983] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 204.689136][T10985] veth1_to_team: entered promiscuous mode [ 204.691930][T10985] hsr1: entered promiscuous mode [ 205.133094][T10991] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.147421][T10991] bond7: (slave lo): Enslaving as an active interface with an up link [ 205.152355][T10991] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 205.812478][T11014] nbd2: detected capacity change from 0 to 63 [ 205.815026][T11010] block nbd2: NBD_DISCONNECT [ 205.815133][T11010] block nbd2: Disconnected due to user request. [ 205.815143][T11010] block nbd2: shutting down sockets [ 205.815849][ T1251] blk_print_req_error: 138 callbacks suppressed [ 205.815862][ T1251] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.815880][ T1251] buffer_io_error: 138 callbacks suppressed [ 205.815887][ T1251] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.815973][ T1251] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.815988][ T1251] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.816078][ T1251] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.816093][ T1251] Buffer I/O error on dev nbd2, logical block 2, async page read [ 205.816158][ T1251] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.816173][ T1251] Buffer I/O error on dev nbd2, logical block 3, async page read [ 205.816243][ T1251] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.816257][ T1251] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.822560][ T97] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 205.822589][ T97] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.822601][ T97] Buffer I/O error on dev nbd2, logical block 2, async page read [ 205.822611][ T97] Buffer I/O error on dev nbd2, logical block 3, async page read [ 205.822770][ T1251] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.822785][ T1251] Buffer I/O error on dev nbd2, logical block 0, async page read [ 205.822845][ T1251] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.822855][ T1251] Buffer I/O error on dev nbd2, logical block 1, async page read [ 205.822891][ T1251] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.822932][ T1251] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.825662][T11009] ldm_validate_partition_table(): Disk read failed. [ 205.827805][T11009] Dev nbd2: unable to read RDB block 0 [ 205.828640][T11009] nbd2: unable to read partition table [ 205.861750][T11009] ldm_validate_partition_table(): Disk read failed. [ 205.862377][T11009] Dev nbd2: unable to read RDB block 0 [ 205.863092][T11009] nbd2: unable to read partition table [ 206.160991][T11034] syzkaller1: entered promiscuous mode [ 206.161006][T11034] syzkaller1: entered allmulticast mode [ 206.943793][T11054] __nla_validate_parse: 9 callbacks suppressed [ 206.943813][T11054] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1671'. [ 206.958130][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.959234][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.024111][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 207.101595][T11062] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 207.149380][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.149483][T11066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.153121][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.153214][T11066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.160103][T11066] bridge0: entered promiscuous mode [ 207.160269][T11066] bridge0: entered allmulticast mode [ 207.481805][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 207.711799][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 208.094565][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 208.283825][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'. [ 208.283852][T11129] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1698'. [ 208.283864][T11129] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1698'. [ 208.283874][T11129] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1698'. [ 208.335522][T11134] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1699'. [ 208.350347][T11135] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 3, id = 0 [ 208.424210][T11141] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 208.424249][T11141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.437083][T11141] x_tables: duplicate underflow at hook 2 [ 208.731529][T11156] x_tables: duplicate underflow at hook 2 [ 208.731596][T11156] x_tables: duplicate underflow at hook 2 [ 208.731660][T11156] x_tables: duplicate underflow at hook 2 [ 208.731713][T11156] x_tables: duplicate underflow at hook 2 [ 208.731762][T11156] x_tables: duplicate underflow at hook 2 [ 208.731811][T11156] x_tables: duplicate underflow at hook 2 [ 208.731860][T11156] x_tables: duplicate underflow at hook 2 [ 208.731907][T11156] x_tables: duplicate underflow at hook 2 [ 208.731957][T11156] x_tables: duplicate underflow at hook 2 [ 210.191830][T11209] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20264 [ 210.316825][T11222] netlink: 'syz.0.1727': attribute type 1 has an invalid length. [ 210.341839][T11222] bond8: entered promiscuous mode [ 210.342221][T11222] 8021q: adding VLAN 0 to HW filter on device bond8 [ 210.364344][T11222] netlink: 'syz.0.1727': attribute type 1 has an invalid length. [ 210.396108][T11222] bond8: entered allmulticast mode [ 210.414698][T11222] bond8: (slave bridge5): making interface the new active one [ 210.414723][T11222] bridge5: entered promiscuous mode [ 210.414882][T11222] bridge5: entered allmulticast mode [ 210.416199][T11222] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 212.094709][T11255] pim6reg: entered allmulticast mode [ 212.096439][T11255] team0: entered allmulticast mode [ 212.096451][T11255] team_slave_0: entered allmulticast mode [ 212.096459][T11255] team_slave_1: entered allmulticast mode [ 212.113323][T11254] team0: left allmulticast mode [ 212.113339][T11254] team_slave_0: left allmulticast mode [ 212.113347][T11254] team_slave_1: left allmulticast mode [ 212.316088][T11266] can: request_module (can-proto-0) failed. [ 212.836309][T11270] veth0: entered promiscuous mode [ 212.845607][T11269] veth0: left promiscuous mode [ 213.185502][T11298] __nla_validate_parse: 6 callbacks suppressed [ 213.185515][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'. [ 213.185531][T11298] netlink: 'syz.2.1748': attribute type 7 has an invalid length. [ 213.185536][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 214.105375][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1755'. [ 214.223342][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 214.226881][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 214.329103][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 214.329138][T11330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.432342][T11337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1762'. [ 215.040959][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 215.228708][T11373] netlink: 'syz.0.1773': attribute type 21 has an invalid length. [ 215.294895][T11377] Bluetooth: MGMT ver 1.23 [ 215.716749][T11397] netlink: 'syz.2.1782': attribute type 3 has an invalid length. [ 215.942194][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 215.942763][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 216.336965][T11412] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 216.643612][T11423] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.749052][T11436] veth1_to_bridge: mtu less than device minimum [ 216.913439][T11449] netlink: 'syz.1.1800': attribute type 6 has an invalid length. [ 216.976105][T11453] block nbd1: not configured, cannot reconfigure [ 218.051901][T11473] bond0: entered allmulticast mode [ 218.051923][T11473] bond_slave_0: entered allmulticast mode [ 218.051934][T11473] bond_slave_1: entered allmulticast mode [ 218.196455][T11481] 8021q: adding VLAN 0 to HW filter on device bond10 [ 218.243069][T11486] netlink: 'syz.1.1815': attribute type 322 has an invalid length. [ 218.253040][T11486] netlink: 'syz.1.1815': attribute type 322 has an invalid length. [ 218.429467][T11509] openvswitch: netlink: IP tunnel TTL not specified. [ 218.968736][T11522] xt_socket: unknown flags 0x8 [ 219.540444][T11559] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.764998][T11576] __nla_validate_parse: 8 callbacks suppressed [ 219.765018][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 219.765070][T11576] netlink: 'syz.2.1838': attribute type 2 has an invalid length. [ 219.765080][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 220.495331][T11621] netlink: 'syz.2.1851': attribute type 1 has an invalid length. [ 221.344635][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1859'. [ 221.675349][T11653] syz.2.1864 (11653) used obsolete PPPIOCDETACH ioctl [ 221.763551][T11659] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1865'. [ 221.795518][T11659] syzkaller0: entered promiscuous mode [ 221.795544][T11659] syzkaller0: entered allmulticast mode [ 223.906019][T11698] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 223.906033][T11698] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1876'. [ 223.960280][T11702] pim6reg1: entered promiscuous mode [ 223.960293][T11702] pim6reg1: entered allmulticast mode [ 224.052723][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 224.077894][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1881'. [ 224.096971][T11708] 8021q: adding VLAN 0 to HW filter on device bond8 [ 224.126800][T11708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 224.130587][T11708] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 224.174410][T11715] bridge4: entered promiscuous mode [ 224.196835][T11717] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 224.203692][T11715] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1884'. [ 225.271683][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 225.640163][T11764] xt_CT: No such helper "snmp_trap" [ 225.683846][T11768] nftables ruleset with unbound set [ 225.746710][T11772] netlink: 'syz.0.1904': attribute type 11 has an invalid length. [ 225.786599][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 225.810231][T11774] bond7: entered promiscuous mode [ 225.810247][T11774] bond7: entered allmulticast mode [ 226.304527][T11812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.313311][T11812] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.380559][T11818] tipc: Enabling of bearer rejected, failed to enable media [ 226.888145][ T5600] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 226.888168][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 226.888178][ T5600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 226.888183][ T5600] Call Trace: [ 226.888187][ T5600] [ 226.888191][ T5600] dump_stack_lvl+0xe8/0x150 [ 226.888207][ T5600] dump_header+0xd3/0x4b0 [ 226.888218][ T5600] oom_kill_process+0x3ab/0x9e0 [ 226.888230][ T5600] out_of_memory+0x1064/0x1480 [ 226.888239][ T5600] ? try_charge_memcg+0xc32/0x15e0 [ 226.888253][ T5600] ? __pfx_out_of_memory+0x10/0x10 [ 226.888260][ T5600] ? do_raw_spin_unlock+0x4d/0x200 [ 226.888274][ T5600] try_charge_memcg+0xcdf/0x15e0 [ 226.888289][ T5600] ? __pfx_try_charge_memcg+0x10/0x10 [ 226.888296][ T5600] ? lock_acquire+0x115/0x350 [ 226.888311][ T5600] ? charge_memcg+0x47/0x310 [ 226.888320][ T5600] charge_memcg+0x1dd/0x310 [ 226.888329][ T5600] __mem_cgroup_charge+0x25/0x80 [ 226.888337][ T5600] filemap_add_folio+0x140/0x4e0 [ 226.888348][ T5600] __filemap_get_folio_mpol+0x4ff/0x1000 [ 226.888360][ T5600] filemap_fault+0xa84/0x13b0 [ 226.888371][ T5600] ? filemap_map_pages+0x1d1/0x2170 [ 226.888380][ T5600] ? __pfx_filemap_fault+0x10/0x10 [ 226.888390][ T5600] ? __pfx_filemap_map_pages+0x10/0x10 [ 226.888399][ T5600] ? lock_acquire+0x115/0x350 [ 226.888426][ T5600] __do_fault+0x138/0x2a0 [ 226.888436][ T5600] ? do_pte_missing+0x140c/0x34b0 [ 226.888442][ T5600] do_pte_missing+0x2215/0x34b0 [ 226.888454][ T5600] ? handle_mm_fault+0xf1/0x3750 [ 226.888465][ T5600] handle_mm_fault+0x1a53/0x3750 [ 226.888478][ T5600] ? handle_mm_fault+0xf1/0x3750 [ 226.888491][ T5600] ? __pfx_handle_mm_fault+0x10/0x10 [ 226.888499][ T5600] ? lock_vma_under_rcu+0x45a/0x500 [ 226.888519][ T5600] do_user_addr_fault+0xa4f/0x1340 [ 226.888531][ T5600] ? trace_page_fault_user+0x84/0x1e0 [ 226.888539][ T5600] exc_page_fault+0x6a/0xc0 [ 226.888550][ T5600] asm_exc_page_fault+0x26/0x30 [ 226.888557][ T5600] RIP: 0033:0x7fda6fe6c014 [ 226.888566][ T5600] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a0 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 99 96 ee 00 48 01 d1 [ 226.888572][ T5600] RSP: 002b:00007ffeeff6b450 EFLAGS: 00010202 [ 226.888580][ T5600] RAX: 0000001b32224000 RBX: 0000000000000694 RCX: 00000000000372d0 [ 226.888586][ T5600] RDX: 000000000aa8aa90 RSI: 00007ffeeff6b4e0 RDI: 0000000000000001 [ 226.888590][ T5600] RBP: 00007ffeeff6b48c R08: 0000000028a90926 R09: 3fffffffffffffff [ 226.888595][ T5600] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 226.888600][ T5600] R13: 00000000000927c0 R14: 0000000000037470 R15: 00007ffeeff6b4e0 [ 226.888611][ T5600] [ 226.891910][ T5600] memory: usage 307200kB, limit 307200kB, failcnt 2780 [ 226.891961][ T5600] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 226.891969][ T5600] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 226.891976][ T5600] Memory cgroup stats for /syz2: [ 226.892046][ T5600] cache 0 [ 226.892050][ T5600] rss 0 [ 226.892052][ T5600] rss_huge 0 [ 226.892055][ T5600] shmem 0 [ 226.892057][ T5600] mapped_file 0 [ 226.892060][ T5600] dirty 0 [ 226.892062][ T5600] writeback 0 [ 226.892065][ T5600] workingset_refault_anon 23 [ 226.892068][ T5600] workingset_refault_file 584 [ 226.892070][ T5600] swap 393216 [ 226.892073][ T5600] swapcached 675840 [ 226.892075][ T5600] pgpgin 84020 [ 226.892077][ T5600] pgpgout 84017 [ 226.892081][ T5600] pgfault 312189 [ 226.892085][ T5600] pgmajfault 31 [ 226.892088][ T5600] inactive_anon 8192 [ 226.892092][ T5600] active_anon 4096 [ 226.892095][ T5600] inactive_file 0 [ 226.892099][ T5600] active_file 0 [ 226.892103][ T5600] unevictable 0 [ 226.892106][ T5600] hierarchical_memory_limit 314572800 [ 226.892111][ T5600] hierarchical_memsw_limit 9223372036854771712 [ 226.892115][ T5600] total_cache 0 [ 226.892119][ T5600] total_rss 0 [ 226.892123][ T5600] total_rss_huge 0 [ 226.892127][ T5600] total_shmem 0 [ 226.892131][ T5600] total_mapped_file 0 [ 226.892135][ T5600] total_dirty 0 [ 226.892139][ T5600] total_writeback 0 [ 226.892144][ T5600] total_workingset_refault_anon 23 [ 226.892148][ T5600] total_workingset_refault_file 584 [ 226.892153][ T5600] total_swap 393216 [ 226.892157][ T5600] total_swapcached 675840 [ 226.892161][ T5600] total_pgpgin 84020 [ 226.892165][ T5600] total_pgpgout 84017 [ 226.892169][ T5600] total_pgfault 312189 [ 226.892173][ T5600] total_pgmajfault 31 [ 226.892177][ T5600] total_inactive_anon 8192 [ 226.892182][ T5600] total_active_anon 4096 [ 226.892186][ T5600] total_inactive_file 0 [ 226.892190][ T5600] total_active_file 0 [ 226.892194][ T5600] total_unevictable 0 [ 226.892198][ T5600] anon_cost 0 [ 226.892202][ T5600] file_cost 0 [ 226.892206][ T5600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1921,pid=11828,uid=0 [ 226.894047][ T5600] Memory cgroup out of memory: Killed process 11828 (syz.2.1921) total-vm:102312kB, anon-rss:1248kB, file-rss:22992kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 227.336801][T11829] syz.2.1921 (11829) used greatest stack depth: 19616 bytes left [ 228.396733][T11885] IPVS: Scheduler module ip_vs_mh not found [ 228.404031][T11885] netlink: 'syz.0.1936': attribute type 2 has an invalid length. [ 228.483229][T11890] TC_ACT_REPEAT abuse ? [ 228.624651][T11906] netlink: 3596 bytes leftover after parsing attributes in process `syz.0.1944'. [ 228.822361][T11922] xt_check_table_hooks: 56 callbacks suppressed [ 228.822379][T11922] x_tables: unsorted underflow at hook 1 [ 229.694359][T11954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1960'. [ 229.694390][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 229.920287][T11965] Bluetooth: hci0: unsupported parameter 5135 [ 229.920300][T11965] Bluetooth: hci0: unsupported parameter 8192 [ 229.920305][T11965] Bluetooth: hci0: unsupported parameter 5135 [ 229.920309][T11965] Bluetooth: hci0: unsupported parameter 8192 [ 229.943776][T11965] ip6gretap1: entered allmulticast mode [ 229.944536][T11965] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 229.944976][T11965] batman_adv: batadv0: Adding interface: ip6gretap1 [ 229.944982][T11965] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.944994][T11965] batman_adv: batadv0: Interface activated: ip6gretap1 [ 230.141545][T11988] netlink: 'syz.2.1971': attribute type 17 has an invalid length. [ 230.211468][T11991] tun0: tun_chr_ioctl cmd 1074025675 [ 230.211489][T11991] tun0: persist enabled [ 230.211731][T11991] tun0: tun_chr_ioctl cmd 1074025675 [ 230.211740][T11991] tun0: persist enabled [ 230.447291][T11999] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.890620][T12004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'. [ 231.305943][T12032] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1985'. [ 231.541012][T12043] syzkaller0: entered promiscuous mode [ 231.541034][T12043] syzkaller0: entered allmulticast mode [ 231.731453][T12047] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 232.050394][T12052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1994'. [ 232.202277][T12056] tipc: Enabled bearer , priority 0 [ 232.241154][T12056] syzkaller0: entered promiscuous mode [ 232.241185][T12056] syzkaller0: entered allmulticast mode [ 232.241722][T12056] tipc: Resetting bearer [ 232.291184][T12055] tipc: Resetting bearer [ 232.393439][T12066] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1997'. [ 233.382283][T12055] tipc: Disabling bearer [ 233.390301][ T5700] tipc: Node number set to 1532043023 [ 233.523600][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 233.523616][T12085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.523626][T12085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.603026][T12085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.603048][T12085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.604300][T12085] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 233.604313][T12085] batman_adv: batadv0: Removing interface: ip6gretap1 [ 234.022719][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 234.022740][T12105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.156303][T12112] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 234.180968][T12112] bond8: entered promiscuous mode [ 234.181320][T12112] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.203643][T12112] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.203923][T12112] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 234.203938][T12112] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 234.218972][T12112] bond8: (slave ip6gre1): making interface the new active one [ 234.218993][T12112] ip6gre1: entered promiscuous mode [ 234.230992][T12112] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 234.527523][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 234.626429][T12146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'. [ 234.677078][T12154] IPVS: nq: FWM 3 0x00000003 - no destination available [ 234.751272][T12158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2015'. [ 234.836278][T12165] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2013'. [ 234.935056][T12169] : option downdelay: invalid value (18446744073709547007) [ 234.935077][T12169] : option downdelay: allowed values 0 - 2147483647 [ 234.936958][T12169]  (unregistering): Released all slaves [ 235.014461][T12176] netlink: 'syz.0.2018': attribute type 11 has an invalid length. [ 235.014579][T12176] netlink: 'syz.0.2018': attribute type 11 has an invalid length. [ 237.353947][T12247] __nla_validate_parse: 6 callbacks suppressed [ 237.353960][T12247] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2041'. [ 237.411678][T12252] netlink: 'syz.2.2042': attribute type 7 has an invalid length. [ 237.411702][T12252] netlink: 'syz.2.2042': attribute type 3 has an invalid length. [ 237.411712][T12252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2042'. [ 238.360045][T12260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2044'. [ 238.713741][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 239.369539][T12295] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2056'. [ 239.473313][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2060'. [ 239.491416][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 239.887778][T12342] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2072'. [ 239.893219][T12338] syzkaller0: entered promiscuous mode [ 239.893241][T12338] syzkaller0: entered allmulticast mode [ 240.025517][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 241.536592][T12372] syzkaller0: entered promiscuous mode [ 241.536615][T12372] syzkaller0: entered allmulticast mode [ 241.541019][T12378] tipc: Enabled bearer , priority 0 [ 241.543876][T12380] tipc: Resetting bearer [ 241.580048][T12380] tipc: Resetting bearer [ 241.600153][T12380] tipc: Disabling bearer [ 241.855484][T12400] sctp: [Deprecated]: syz.0.2089 (pid 12400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.855484][T12400] Use struct sctp_sack_info instead [ 241.962413][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2091'. [ 242.095517][T12410] openvswitch: netlink: IPv4 frag type 8 is out of range max 2 [ 242.648978][T12424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.007091][T12440] syzkaller0: entered promiscuous mode [ 243.007109][T12440] syzkaller0: entered allmulticast mode [ 245.450322][T12480] syzkaller1: entered promiscuous mode [ 245.450336][T12480] syzkaller1: entered allmulticast mode [ 245.581991][T12482] __nla_validate_parse: 2 callbacks suppressed [ 245.582020][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'. [ 246.003576][T12497] syzkaller1: entered promiscuous mode [ 246.003594][T12497] syzkaller1: entered allmulticast mode [ 246.004364][T12497] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 246.321693][T12511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.338432][T12511] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 246.540999][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 246.541430][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 246.541661][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 246.542066][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 246.542539][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 246.642622][T12518] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2129'. [ 246.675388][T12520] netlink: 'syz.1.2130': attribute type 5 has an invalid length. [ 246.909652][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 246.910145][T12531] netlink: 3596 bytes leftover after parsing attributes in process `syz.2.2133'. [ 247.191618][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 250.071014][T12638] netlink: Invalid conntrack helper [ 250.071041][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.321145][T12655] netlink: 'syz.0.2176': attribute type 1 has an invalid length. [ 250.335837][T12655] 8021q: adding VLAN 0 to HW filter on device bond11 [ 250.343982][T12656] bond11: (slave geneve4): making interface the new active one [ 250.345614][T12656] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 250.611454][ T34] audit: type=1804 audit(1790050710.350:7): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2185" name="/newroot/721/cgroup.controllers" dev="tmpfs" ino=3724 res=1 errno=0 [ 250.611504][ T34] audit: type=1800 audit(1790050710.350:8): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2185" name="cgroup.controllers" dev="tmpfs" ino=3724 res=0 errno=0 [ 250.637888][T12684] __nla_validate_parse: 17 callbacks suppressed [ 250.637907][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 250.670956][T12687] xt_policy: neither incoming nor outgoing policy selected [ 250.683757][T12689] netlink: 'syz.2.2189': attribute type 14 has an invalid length. [ 250.768088][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 250.772252][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2192'. [ 250.772268][T12699] openvswitch: netlink: EtherType 0 is less than min 600 [ 251.075048][T12733] netlink: 'syz.2.2193': attribute type 21 has an invalid length. [ 251.075099][T12733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2193'. [ 251.209273][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 251.255258][T12754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.220682][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 253.015495][T12858] netlink: Unknown nat attribute (0) [ 253.015522][T12858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.091807][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2224'. [ 253.198483][T12867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2225'. [ 253.301735][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 253.305617][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 253.382636][T12888] openvswitch: netlink: Invalid VLAN frame [ 253.983046][T12903] IPv6: Can't replace route, no match found [ 254.103288][T12909] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.103352][T12909] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.288038][T12926] netlink: 'syz.2.2241': attribute type 1 has an invalid length. [ 255.368844][T12933] netlink: 'syz.0.2242': attribute type 5 has an invalid length. [ 256.353718][T12978] IPVS: set_ctl: invalid protocol: 28819 127.0.0.1:20003 [ 256.885002][T13005] x_tables: duplicate underflow at hook 2 [ 257.071401][T13012] netlink: 'syz.0.2266': attribute type 12 has an invalid length. [ 257.202372][T13016] sctp: [Deprecated]: syz.0.2268 (pid 13016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.202372][T13016] Use struct sctp_sack_info instead [ 257.237862][T13019] __nla_validate_parse: 9 callbacks suppressed [ 257.237873][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2269'. [ 257.302455][T13023] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 257.633062][T13042] xt_hashlimit: max too large, truncated to 1048576 [ 257.633337][T13042] No such timeout policy "syz1" [ 257.633547][T13043] xt_hashlimit: max too large, truncated to 1048576 [ 257.633642][T13043] No such timeout policy "syz1" [ 257.635024][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.635043][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.635052][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.635066][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.635074][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 257.748600][T13048] trusted_key: syz.2.2280 sent an empty control message without MSG_MORE. [ 258.310214][T13067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2285'. [ 258.703764][T13081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 259.943439][T13123] netlink: 'syz.0.2304': attribute type 1 has an invalid length. [ 259.943463][T13123] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2304'. [ 260.195460][T13133] syzkaller1: entered promiscuous mode [ 260.195482][T13133] syzkaller1: entered allmulticast mode [ 260.308512][T13135] batadv_slave_1: entered promiscuous mode [ 260.308884][T13135] batadv_slave_1: left promiscuous mode [ 260.998943][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2312'. [ 261.004681][T13144] syzkaller0: entered promiscuous mode [ 261.004694][T13144] syzkaller0: entered allmulticast mode [ 261.026015][T13144] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 261.490264][T13152] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 262.606256][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2324'. [ 262.756776][T13193] xt_hashlimit: max too large, truncated to 1048576 [ 263.469296][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2332'. [ 263.471478][T13204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.472901][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 263.736945][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2336'. [ 263.749992][T13218] veth1_to_hsr: entered promiscuous mode [ 263.750011][T13218] veth1_to_hsr: entered allmulticast mode [ 263.816600][T13220] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 264.735283][T13253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.932087][T13252] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2348'. [ 265.315874][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 265.567730][T13270] netlink: 'syz.1.2352': attribute type 322 has an invalid length. [ 265.600517][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 265.600527][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2353'. [ 265.600538][T13273] netlink: 'syz.0.2353': attribute type 14 has an invalid length. [ 265.600544][T13273] netlink: 'syz.0.2353': attribute type 13 has an invalid length. [ 266.600365][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.774790][T13322] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.774810][T13322] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.832379][T13322] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.832407][T13322] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.893495][T13322] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.893523][T13322] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.954816][T13322] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.954844][T13322] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.017779][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.017803][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.017828][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.017843][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.035012][ T5490] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.035041][ T5490] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.047537][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.048712][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.158782][T13329] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 267.313343][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'. [ 267.313382][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 268.152369][T13366] syzkaller1: entered promiscuous mode [ 268.152398][T13366] syzkaller1: entered allmulticast mode [ 268.325742][T13368] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 268.325763][T13368] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 268.476075][T13373] __nla_validate_parse: 1 callbacks suppressed [ 268.476094][T13373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2386'. [ 269.138391][T13380] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 269.149573][T13380] bond9: entered promiscuous mode [ 269.149905][T13380] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.172913][T13381] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.173133][T13381] bond9: (slave gre4): The slave device specified does not support setting the MAC address [ 269.173147][T13381] bond9: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 269.176765][T13381] bond9: (slave gre4): making interface the new active one [ 269.176779][T13381] gre4: entered promiscuous mode [ 269.180490][T13381] bond9: (slave gre4): Enslaving as an active interface with an up link [ 269.201630][T13380] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2389'. [ 269.404040][T13386] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 269.442066][T13386] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.444607][T13386] bond9: (slave bond10): making interface the new active one [ 269.444998][T13386] bond9: (slave bond10): Enslaving as an active interface with an up link [ 269.455216][T13386] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 269.456577][T13386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2391'. [ 269.998852][T13419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2398'. [ 270.831594][T13447] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.168409][T13476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2420'. [ 271.169910][T13476] xt_hashlimit: size too large, truncated to 1048576 [ 271.224807][T13479] bridge_slave_0 (unregistering): left allmulticast mode [ 271.224822][T13479] bridge_slave_0 (unregistering): left promiscuous mode [ 271.224901][T13479] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.346531][T13483] TC_ACT_REPEAT abuse ? [ 271.731712][T13503] bond8: entered allmulticast mode [ 271.731732][T13503] ip6gre1: entered allmulticast mode [ 271.914524][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2435'. [ 271.926553][T13514] syzkaller0: entered promiscuous mode [ 271.926571][T13514] syzkaller0: entered allmulticast mode [ 272.194421][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 272.194464][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 272.211996][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 272.212036][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'. [ 272.346775][T13558] netlink: 'syz.1.2447': attribute type 1 has an invalid length. [ 272.582995][T13567] netlink: 'syz.0.2449': attribute type 10 has an invalid length. [ 272.606178][T13567] geneve5: entered promiscuous mode [ 272.606194][T13567] geneve5: entered allmulticast mode [ 274.557726][T13593] batman_adv: batadv0: Adding interface: syzkaller0 [ 274.557746][T13593] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.557769][T13593] batman_adv: batadv0: Interface activated: syzkaller0 [ 274.968765][T13592] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 274.983300][T13592] batman_adv: batadv0: Removing interface: syzkaller0 [ 275.131341][T13609] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 275.159469][T13613] netlink: 'syz.0.2464': attribute type 2 has an invalid length. [ 275.168577][T13613] : entered promiscuous mode [ 275.346356][T13621] tipc: Enabled bearer , priority 0 [ 275.356547][T13621] syzkaller0: entered allmulticast mode [ 275.364454][T13623] __nla_validate_parse: 5 callbacks suppressed [ 275.364471][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'. [ 275.365239][T13620] tipc: Disabling bearer [ 275.511527][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 275.511546][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2471'. [ 275.511693][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 275.511704][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2471'. [ 275.580053][T13630] netlink: 'syz.2.2471': attribute type 10 has an invalid length. [ 275.580884][T13630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.582861][T13630] team0: Port device netdevsim1 added [ 275.585922][T13630] netlink: 'syz.2.2471': attribute type 10 has an invalid length. [ 275.610106][T13630] team0: Port device netdevsim1 removed [ 275.612907][T13630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.624331][T13630] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 275.993096][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 276.003158][T13645] openvswitch: netlink: IP tunnel dst address not specified [ 276.211256][T13655] IPVS: set_ctl: invalid protocol: 166 127.0.0.1:20001 [ 276.500747][T13674] IPv6: Can't replace route, no match found [ 276.641145][T13685] openvswitch: netlink: Unknown key attributes 2 [ 276.711911][T13692] netlink: NAT attribute has 4 unknown bytes [ 276.711931][T13692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.849035][T13703] netlink: 'syz.2.2500': attribute type 7 has an invalid length. [ 277.060450][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 277.061288][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 277.296705][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2507'. [ 277.301221][T13726] vlan3: entered promiscuous mode [ 277.301235][T13726] erspan0: entered promiscuous mode [ 277.801235][T13738] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 277.952505][T13745] syzkaller0: entered promiscuous mode [ 277.952527][T13745] syzkaller0: entered allmulticast mode [ 278.106579][T13754] xt_socket: unknown flags 0x4c [ 278.159063][T13756] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 278.159085][T13756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2518'. [ 279.291122][T13816] netlink: 'syz.2.2534': attribute type 11 has an invalid length. [ 280.160764][T13834] syzkaller0: entered promiscuous mode [ 280.160789][T13834] syzkaller0: entered allmulticast mode [ 280.204029][T13836] team0: No ports can be present during mode change [ 280.724157][T13863] netlink: Failed to add ¦â—k\ helper -22 [ 280.724207][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.747392][T13870] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 280.914085][T13889] __nla_validate_parse: 7 callbacks suppressed [ 280.914106][T13889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2560'. [ 280.914121][T13889] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2560'. [ 280.914131][T13889] netlink: 'syz.1.2560': attribute type 6 has an invalid length. [ 280.914140][T13889] netlink: 'syz.1.2560': attribute type 5 has an invalid length. [ 280.914147][T13889] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2560'. [ 281.013324][T13892] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 281.150190][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 281.976199][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2569'. [ 281.984594][T13919] vlan0: entered promiscuous mode [ 282.021047][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.071379][T13928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 282.075030][T13928] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2572'. [ 282.125890][T13935] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2575'. [ 283.076052][T13962] tipc: Enabled bearer , priority 0 [ 283.076537][T13962] syzkaller0: entered promiscuous mode [ 283.076549][T13962] syzkaller0: entered allmulticast mode [ 283.087111][T13961] tipc: Resetting bearer [ 283.109548][T13961] tipc: Disabling bearer [ 284.181753][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2593'. [ 286.081938][T13964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.175854][T14013] netlink: 'syz.2.2598': attribute type 1 has an invalid length. [ 286.175887][T14013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.202782][T14016] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 286.202799][T14016] netlink: 'syz.2.2599': attribute type 268 has an invalid length. [ 286.202808][T14016] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2599'. [ 286.340224][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'. [ 286.342356][T14031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2604'. [ 286.342372][T14031] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 286.344551][T14027] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2604'. [ 286.352971][T14031] geneve3: entered promiscuous mode [ 286.484882][T14045] xfrm0: entered allmulticast mode [ 286.663869][T14047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2608'. [ 287.389823][T14081] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.389845][T14081] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.575463][ T5339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.941286][T14114] netlink: 'syz.0.2629': attribute type 7 has an invalid length. [ 287.941303][T14114] netlink: 'syz.0.2629': attribute type 5 has an invalid length. [ 288.009748][ T9536] block nbd0: Receive control failed (result -32) [ 288.124747][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2633'. [ 288.232768][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 289.134220][T14165] gretap1: entered promiscuous mode [ 289.244746][T14174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 289.697877][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 289.699181][T14187] openvswitch: netlink: IP tunnel dst address not specified [ 289.973734][T14198] nbd: nbd0 already in use [ 290.118678][T14207] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 290.136171][T11177] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.136257][T11177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.556018][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'. [ 290.636101][T14238] ip6gre2: entered promiscuous mode [ 290.636113][T14238] ip6gre2: entered allmulticast mode [ 291.979383][T14283] xt_TCPMSS: Only works on TCP SYN packets [ 293.095936][T14305] __nla_validate_parse: 2 callbacks suppressed [ 293.095947][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2694'. [ 293.113706][T14300] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 293.510189][T14334] netlink: 'syz.0.2702': attribute type 1 has an invalid length. [ 293.542787][T14334] bond13: entered promiscuous mode [ 293.543224][T14334] 8021q: adding VLAN 0 to HW filter on device bond13 [ 293.559690][T14334] 8021q: adding VLAN 0 to HW filter on device bond13 [ 293.559934][T14334] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 293.559949][T14334] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 293.578942][T14334] bond13: (slave wireguard0): making interface the new active one [ 293.578962][T14334] wireguard0: entered promiscuous mode [ 293.581149][T14334] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 293.583617][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 294.955710][T14381] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 295.319505][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2719'. [ 295.477843][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 296.311553][T14423] xt_hashlimit: overflow, rate too high: 0 [ 296.430639][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 296.430659][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'. [ 296.431309][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 296.431322][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'. [ 296.458242][T14444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2732'. [ 297.274700][T14473] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 297.419768][T14481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2745'. [ 297.541837][T14489] netlink: 'syz.1.2744': attribute type 6 has an invalid length. [ 297.541848][T14489] netlink: 'syz.1.2744': attribute type 5 has an invalid length. [ 297.613371][T14494] x_tables: duplicate entry at hook 4 [ 297.879268][T14505] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 298.179703][T14520] __nla_validate_parse: 5 callbacks suppressed [ 298.179783][T14520] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2757'. [ 298.250592][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 298.374729][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 298.615471][T14557] sctp: [Deprecated]: syz.2.2774 (pid 14557) Use of int in max_burst socket option. [ 298.615471][T14557] Use struct sctp_assoc_value instead [ 298.665292][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'. [ 298.666538][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2772'. [ 298.747566][T14569] ip_tables: iptables: counters copy to user failed while replacing table [ 298.802225][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'. [ 298.899594][T14576] netlink: 'syz.1.2780': attribute type 6 has an invalid length. [ 298.899608][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 298.973335][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 298.974099][T14582] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20264 [ 300.840716][T14640] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2802'. [ 300.858568][T14649] syzkaller0: left promiscuous mode [ 300.858594][T14649] syzkaller0: left allmulticast mode [ 301.745721][T14665] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20003 [ 301.925658][T14672] syzkaller1: entered promiscuous mode [ 301.925675][T14672] syzkaller1: entered allmulticast mode [ 302.258696][T14692] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 302.258714][T14692] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2817'. [ 302.522725][T14707] bond14: entered promiscuous mode [ 302.522738][T14707] bond14: entered allmulticast mode [ 303.654733][T14730] pimreg: entered allmulticast mode [ 304.614386][T14740] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 304.615344][T14740] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 304.657305][T14743] __nla_validate_parse: 2 callbacks suppressed [ 304.657324][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2835'. [ 305.864159][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 306.071121][T14767] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 306.091265][T14761] geneve5: entered promiscuous mode [ 306.104648][T14768] block nbd0: Unsupported socket: should be TCP or UNIX. [ 306.146688][T14774] xt_policy: output policy not valid in PREROUTING and INPUT [ 306.147028][T14775] netlink: 'syz.0.2847': attribute type 8 has an invalid length. [ 306.158662][T14774] openvswitch: netlink: Missing valid actions attribute. [ 306.158697][T14774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.481250][T14791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2851'. [ 306.890817][T14794] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2852'. [ 306.890843][T14794] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2852'. [ 307.118320][T14807] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2857'. [ 307.118352][T14807] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2857'. [ 307.118363][T14807] netlink: 'syz.0.2857': attribute type 5 has an invalid length. [ 307.118372][T14807] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2857'. [ 307.241854][T14811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 307.364974][T14818] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 307.364993][T14818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.880825][T14827] syzkaller0: entered promiscuous mode [ 307.880841][T14827] syzkaller0: entered allmulticast mode [ 308.158910][T14841] syzkaller1: entered promiscuous mode [ 308.158925][T14841] syzkaller1: entered allmulticast mode [ 308.193564][T14841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2870'. [ 308.427091][T14855] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 308.493009][T14859] –: renamed from virt_wifi0 [ 308.545313][T14860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2878'. [ 309.242729][T14869] block nbd0: reconnected socket [ 309.245308][ T57] block nbd0: Receive control failed (result -32) [ 309.875586][T14895] __nla_validate_parse: 3 callbacks suppressed [ 309.875604][T14895] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2888'. [ 310.009967][T14901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2889'. [ 310.052746][T14900] syzkaller1: entered promiscuous mode [ 310.052766][T14900] syzkaller1: entered allmulticast mode [ 312.622280][T14917] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 312.622295][T14917] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2893'. [ 312.667911][T14920] syzkaller0: entered promiscuous mode [ 312.667929][T14920] syzkaller0: entered allmulticast mode [ 312.994381][T14943] syzkaller1: entered promiscuous mode [ 312.994405][T14943] syzkaller1: entered allmulticast mode [ 313.191591][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 313.556910][T14950] veth0_to_bridge: entered promiscuous mode [ 313.557125][T14950] macvtap0: entered allmulticast mode [ 313.557135][T14950] veth0_to_bridge: entered allmulticast mode [ 313.571077][T14950] veth0_to_bridge: left allmulticast mode [ 313.571189][T14950] veth0_to_bridge: left promiscuous mode [ 313.733874][T14954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2907'. [ 313.854256][T14964] x_tables: ip_tables: osf match: only valid for protocol 6 [ 314.234135][T15000] syzkaller0: left promiscuous mode [ 314.234153][T15000] syzkaller0: left allmulticast mode [ 314.697808][T15023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2929'. [ 314.825084][T15031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2932'. [ 314.856833][T15033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'. [ 315.028795][T15039] sctp: [Deprecated]: syz.0.2935 (pid 15039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.028795][T15039] Use struct sctp_sack_info instead [ 315.128216][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 315.285128][T15068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.285139][T15068] IPv6: NLM_F_CREATE should be set when creating new route [ 315.285158][T15068] IPv6: NLM_F_CREATE should be set when creating new route [ 315.285168][T15068] IPv6: NLM_F_CREATE should be set when creating new route [ 315.480503][T15090] netlink: 'syz.2.2952': attribute type 10 has an invalid length. [ 315.483398][T15090] team0 (unregistering): Port device team_slave_0 removed [ 315.484807][T15090] team0 (unregistering): Port device team_slave_1 removed [ 315.522547][T15090] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2952'. [ 316.090721][T15098] pim6reg1: entered promiscuous mode [ 316.090744][T15098] pim6reg1: entered allmulticast mode [ 316.162440][T15099] openvswitch: netlink: Duplicate key (type 0). [ 316.465316][T15109] netlink: 'syz.1.2959': attribute type 1 has an invalid length. [ 316.485591][T15109] bond11: entered promiscuous mode [ 316.485887][T15109] 8021q: adding VLAN 0 to HW filter on device bond11 [ 317.018809][T15143] openvswitch: netlink: IP tunnel dst address not specified [ 317.029748][T15143] x_tables: unsorted entry at hook 1 [ 317.134967][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 317.154759][T15155] netlink: 'syz.1.2975': attribute type 5 has an invalid length. [ 317.154787][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 318.178846][T15180] 8021q: VLANs not supported on gre0 [ 318.486303][T15199] syzkaller0: entered promiscuous mode [ 318.493185][T15199] batman_adv: batadv0: Adding interface: syzkaller0 [ 318.493205][T15199] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.493225][T15199] batman_adv: batadv0: Not using interface syzkaller0 (retrying later): interface not active [ 318.496422][T15198] batman_adv: batadv0: Removing interface: syzkaller0 [ 318.786794][T15207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2990'. [ 318.832117][T15209] batadv_slave_1: mtu less than device minimum [ 319.811058][T15235] netlink: 'syz.0.2998': attribute type 4 has an invalid length. [ 319.863639][T15239] tc action pedit offset must be on 32 bit boundaries [ 319.864000][T15240] tc action pedit offset must be on 32 bit boundaries [ 320.259183][T15246] netlink: 'syz.2.3001': attribute type 2 has an invalid length. [ 320.298024][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3002'. [ 320.346878][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3003'. [ 320.346914][T15252] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 320.508876][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3006'. [ 320.957882][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'. [ 320.957908][T15279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3013'. [ 321.754455][T15319] syzkaller0: entered promiscuous mode [ 321.754479][T15319] syzkaller0: entered allmulticast mode [ 321.936662][T15331] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3024'. [ 321.944244][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'. [ 321.944331][T15331] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.296318][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3029'. [ 358.376044][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 358.548273][T15378] netlink: 'syz.0.3040': attribute type 1 has an invalid length. [ 358.550671][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 358.634298][T15383] netlink: 'syz.0.3042': attribute type 1 has an invalid length. [ 358.634314][T15383] netlink: 'syz.0.3042': attribute type 2 has an invalid length. [ 359.154110][T15396] xt_socket: unknown flags 0x4 [ 359.398036][T15407] bond12: option resend_igmp: invalid value (2878) [ 359.398053][T15407] bond12: option resend_igmp: allowed values 0 - 255 [ 359.399439][T15407] bond12 (unregistering): Released all slaves [ 359.494473][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 359.508338][T15407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3048'. [ 359.983348][T15421] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 359.983381][T15421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.984754][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 359.984782][T15421] netlink: 'syz.2.3053': attribute type 5 has an invalid length. [ 359.984789][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 360.036297][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 360.036330][T15425] netlink: 'syz.2.3053': attribute type 5 has an invalid length. [ 360.036337][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 360.089546][T15421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3053'. [ 360.897049][T15451] netlink: 'syz.0.3064': attribute type 1 has an invalid length. [ 361.983093][T15488] tipc: Enabling of bearer rejected, failed to enable media [ 362.834638][T15517] tipc: Invalid UDP bearer configuration [ 362.834678][T15517] tipc: Enabling of bearer rejected, failed to enable media [ 364.813661][T15577] __nla_validate_parse: 10 callbacks suppressed [ 364.813681][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 364.881443][T15575] xt_hashlimit: size too large, truncated to 1048576 [ 364.881665][T15575] xt_hashlimit: Unknown mode mask A2BF, kernel too old? [ 365.116973][T15587] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3104'. [ 365.232651][T15592] netlink: 'syz.1.3106': attribute type 1 has an invalid length. [ 365.898939][T15635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3118'. [ 366.129400][T15647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3121'. [ 366.271691][T15655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3124'. [ 366.350456][T15658] syzkaller0: entered promiscuous mode [ 366.350475][T15658] syzkaller0: entered allmulticast mode [ 366.355837][T15657] tipc: Started in network mode [ 366.355857][T15657] tipc: Node identity 9220d03d9ab, cluster identity 4711 [ 366.355951][T15657] tipc: Enabled bearer , priority 0 [ 366.356187][T15658] tipc: Enabling of bearer rejected, already enabled [ 366.842406][T15668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.155143][T15656] tipc: Resetting bearer [ 367.192561][T15656] tipc: Disabling bearer [ 367.513792][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 367.576844][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 367.646295][T15690] IPVS: set_ctl: invalid protocol: 44 172.20.20.54:20004 [ 367.950549][T15697] tc_dump_action: action bad kind [ 368.183769][T15704] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.183877][T15704] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.249558][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3147'. [ 368.777591][T15483] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.777611][T15483] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.777626][T15483] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.777636][T15483] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.777647][T15483] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.777656][T15483] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.777668][T15483] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.777676][T15483] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.857084][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3149'. [ 369.021665][T15730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3153'. [ 369.522025][T15755] tipc: Invalid UDP bearer configuration [ 369.522050][T15755] tipc: Enabling of bearer rejected, failed to enable media [ 370.673584][T15786] netlink: Conntrack attr has 1 unknown bytes [ 370.673614][T15786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.971720][T15811] __nla_validate_parse: 5 callbacks suppressed [ 370.971736][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3179'. [ 370.971941][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3179'. [ 371.554581][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3186'. [ 371.723348][T15847] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3188'. [ 371.735480][T15847] netlink: 'syz.1.3188': attribute type 3 has an invalid length. [ 371.735501][T15847] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3188'. [ 371.883532][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 372.447992][T15874] syzkaller0: entered promiscuous mode [ 372.448007][T15874] syzkaller0: entered allmulticast mode [ 375.552604][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 375.584909][T15916] tipc: Enabling of bearer rejected, failed to enable media [ 376.457870][T15942] syzkaller0: entered promiscuous mode [ 376.457885][T15942] syzkaller0: entered allmulticast mode [ 376.736993][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3221'. [ 376.858544][T15955] vlan0: entered allmulticast mode [ 376.858563][T15955] bridge7: entered allmulticast mode [ 376.895598][T15948] bridge7: port 1(erspan0) entered blocking state [ 376.896933][T15948] bridge7: port 1(erspan0) entered disabled state [ 376.899172][T15948] erspan0: entered allmulticast mode [ 376.949247][T15948] erspan0: entered promiscuous mode [ 377.200349][T15969] bond12 (unregistering): Released all slaves [ 377.232998][T15969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3227'. [ 377.343171][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3230'. [ 377.650270][T15983] netlink: 11263 bytes leftover after parsing attributes in process `syz.1.3232'. [ 377.885638][T15991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3235'. [ 377.886503][T15991] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 377.901005][T15989] wg1: entered promiscuous mode [ 377.952018][T15991] 8021q: adding VLAN 0 to HW filter on device bond10 [ 378.021795][T15994] bond10: (slave geneve4): making interface the new active one [ 378.036617][T15994] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 378.062095][ T5699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.100215][ T5699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.100251][ T5699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.100275][ T5699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.148598][T15994] netlink: ct family unspecified [ 378.148623][T15994] openvswitch: netlink: Actions may not be safe on all matching packets [ 378.203412][T15999] ip_tables: iptables: counters copy to user failed while replacing table [ 378.206688][T15999] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3236'. [ 378.450349][T15994] syz.2.3235 (15994) used greatest stack depth: 19496 bytes left [ 378.510252][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 378.510268][T16010] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3240'. [ 378.724596][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 379.689142][T16056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3254'. [ 380.230837][T16095] block nbd1: Unsupported socket: should be TCP or UNIX. [ 380.280514][T16102] netlink: 'syz.2.3267': attribute type 10 has an invalid length. [ 380.286508][T16102] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 380.358585][T16109] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 380.432388][T16114] openvswitch: netlink: Duplicate or invalid key (type 0). [ 381.055658][T16106] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 381.162714][T16118] netlink: 'syz.1.3272': attribute type 3 has an invalid length. [ 381.440398][T16135] Bluetooth: hci0: unsupported parameter 5135 [ 381.440416][T16135] Bluetooth: hci0: unsupported parameter 8192 [ 381.440421][T16135] Bluetooth: hci0: unsupported parameter 5135 [ 381.440426][T16135] Bluetooth: hci0: unsupported parameter 8192 [ 381.747836][T16161] vxcan2: entered allmulticast mode [ 381.837804][T16163] x_tables: duplicate entry at hook 1 [ 382.253950][T16170] __nla_validate_parse: 3 callbacks suppressed [ 382.253964][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3289'. [ 382.300190][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 382.603991][T16185] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 382.825323][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3298'. [ 383.405988][T16212] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 383.774602][T16225] syzkaller0: entered promiscuous mode [ 383.774624][T16225] syzkaller0: entered allmulticast mode [ 384.053668][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 384.053686][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 384.055823][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3313'. [ 384.075706][T16237] veth5: entered allmulticast mode [ 385.053429][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 385.055292][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'. [ 385.611542][T16260] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 385.611570][T16260] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 385.945932][T16272] netlink: 'syz.1.3325': attribute type 83 has an invalid length. [ 386.807165][T16279] 8021q: VLANs not supported on gre0 [ 386.895941][T16281] netlink: NAT attribute has 4 unknown bytes [ 386.895974][T16281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.071586][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3334'. [ 387.073150][T16293] ip_tables: iptables: counters copy to user failed while replacing table [ 387.283537][T16301] netlink: 'syz.0.3335': attribute type 5 has an invalid length. [ 387.718786][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 387.894532][T16328] openvswitch: netlink: IPv4 tunnel dst address is zero [ 388.682947][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3348'. [ 388.815635][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3350'. [ 389.002166][T16367] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 389.063745][T16367] 8021q: adding VLAN 0 to HW filter on device bond15 [ 389.239936][T16373] ip_tables: iptables: counters copy to user failed while replacing table [ 390.290655][T16399] 8021q: VLANs not supported on gre0 [ 391.444416][T16440] --map-set only usable from mangle table [ 391.764781][T16452] netlink: NAT attribute has 8 unknown bytes [ 391.764801][T16452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.812943][T16460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 391.836276][T16460] syzkaller1: entered promiscuous mode [ 391.836292][T16460] syzkaller1: entered allmulticast mode [ 391.947463][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 392.010748][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3382'. [ 393.233887][T16495] netlink: 'syz.0.3391': attribute type 1 has an invalid length. [ 393.253912][T16495] bond16: entered promiscuous mode [ 393.254152][T16495] 8021q: adding VLAN 0 to HW filter on device bond16 [ 393.289431][T16495] bond16: (slave bridge7): making interface the new active one [ 393.289455][T16495] bridge7: entered promiscuous mode [ 393.294407][T16495] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 393.616396][T16509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3396'. [ 394.288737][T16521] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3399'. [ 394.291086][T16520] batman_adv: batadv0: Adding interface: syzkaller0 [ 394.291101][T16520] batman_adv: batadv0: Interface activated: syzkaller0 [ 394.375846][T16519] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 394.492682][T16519] batman_adv: batadv0: Removing interface: syzkaller0 [ 394.771238][T16541] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 394.847567][T16541] bond12: entered promiscuous mode [ 394.851918][T16541] 8021q: adding VLAN 0 to HW filter on device bond12 [ 395.060907][T16541] 8021q: adding VLAN 0 to HW filter on device bond12 [ 395.064243][T16541] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 395.064260][T16541] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 395.086352][T16541] bond12: (slave ip6gre3): making interface the new active one [ 395.086372][T16541] ip6gre3: entered promiscuous mode [ 395.106982][T16541] bond12: (slave ip6gre3): Enslaving as an active interface with an up link [ 395.613148][T16561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3410'. [ 395.839418][T16577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.840119][T16577] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 395.941247][T16583] sctp: [Deprecated]: syz.0.3418 (pid 16583) Use of int in maxseg socket option. [ 395.941247][T16583] Use struct sctp_assoc_value instead [ 396.164737][T16598] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3423'. [ 398.187152][T16652] syzkaller0: entered promiscuous mode [ 398.187174][T16652] syzkaller0: entered allmulticast mode [ 398.281783][T16658] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3440'. [ 399.691015][T16698] bond11: option lacp_rate: invalid value (3) [ 399.857336][T16713] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 399.879209][T16698] bond11 (unregistering): Released all slaves [ 399.948749][T16712] IPVS: length: 8 != 27351875312 [ 400.210641][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3463'. [ 401.194061][T16744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.207559][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.786950][T16782] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3480'. [ 401.838982][T16786] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.985447][T16797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.630735][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3501'. [ 402.742582][T16841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3502'. [ 403.615814][T16873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.770294][T16877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3513'. [ 403.770319][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3513'. [ 404.043614][T16888] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20002 [ 404.450926][T16905] netlink: 'syz.1.3520': attribute type 8 has an invalid length. [ 404.450952][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3520'. [ 404.450981][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 404.720983][T16915] bond1: (slave veth0_to_bond): Releasing backup interface [ 404.721001][T16915] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 404.737626][T16915] batman_adv: batadv0: Adding interface: dummy0 [ 404.737640][T16915] batman_adv: batadv0: Interface activated: dummy0 [ 404.936599][T16924] netlink: 'syz.2.3525': attribute type 2 has an invalid length. [ 405.040781][T16915] batadv0: mtu less than device minimum [ 405.043564][T16915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 405.044059][T16915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 405.045798][T16915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 405.046379][T16915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 405.047017][T16915] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 405.484441][T16941] skbuff: __skb_pull(len=4096) [ 405.484463][T16941] skb len=36544 data_len=32768 headroom=0 headlen=3776 tailroom=0 [ 405.484463][T16941] end-tail=0 mac=(-1,-1) mac_len=0 net=(0,-1) trans=-1 [ 405.484463][T16941] shinfo(txflags=0 nr_frags=1 gso(size=0 type=0 segs=0)) [ 405.484463][T16941] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 405.484463][T16941] hash(0x0 sw=0 l4=0) proto=0x0000 pkttype=0 iif=0 [ 405.484463][T16941] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 405.484463][T16941] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 405.484515][T16941] sk family=1 type=1 proto=0 [ 405.484524][T16941] skb linear: 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.484532][T16941] skb linear: 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.484542][T16941] skb linear: 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.484550][T16941] skb linear: 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485260][T16941] skb linear: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485271][T16941] skb linear: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485278][T16941] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485288][T16941] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485296][T16941] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485305][T16941] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485312][T16941] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485320][T16941] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485329][T16941] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485336][T16941] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485344][T16941] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485352][T16941] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485359][T16941] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485368][T16941] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485376][T16941] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 405.485806][T16941] ------------[ cut here ]------------ [ 405.485814][T16941] kernel BUG at ./include/linux/skbuff.h:2847! [ 405.485836][T16941] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 405.582721][T16941] CPU: 1 UID: 0 PID: 16941 Comm: syz.0.3527 Not tainted syzkaller #0 PREEMPT(full) [ 405.587360][T16941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 405.591642][T16941] RIP: 0010:skb_pull+0x1c4/0x1d0 [ 405.593694][T16941] Code: b2 8c f8 8b 44 24 04 89 43 70 48 c7 c7 c0 ba 22 8d 89 ee e8 9e 96 7c f7 48 c7 c7 00 bb 22 8d 48 89 de 31 d2 e8 7d 00 ff ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 405.601432][T16941] RSP: 0018:ffffc9000629f758 EFLAGS: 00010282 [ 405.603912][T16941] RAX: ffffffff89aa3aaa RBX: ffff888107756780 RCX: 0000000000080000 [ 405.607113][T16941] RDX: ffffc90021fe7000 RSI: 000000000000b6ec RDI: 000000000000b6ed [ 405.610370][T16941] RBP: 0000000000001000 R08: ffff88823c624713 R09: 1ffff110478c48e2 [ 405.613602][T16941] R10: dffffc0000000000 R11: ffffed10478c48e3 R12: 0000000000008000 [ 405.616932][T16941] R13: dffffc0000000000 R14: 1ffff11020eeacfe R15: 0000000000007ec0 [ 405.620251][T16941] FS: 00007f4d8a7ef6c0(0000) GS:ffff8882a8cce000(0000) knlGS:0000000000000000 [ 405.623964][T16941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.626748][T16941] CR2: 00002000000c4000 CR3: 000000002253a000 CR4: 00000000000006f0 [ 405.629745][T16941] Call Trace: [ 405.630873][T16941] [ 405.631859][T16941] unix_stream_read_skb+0x34a/0x500 [ 405.633612][T16941] ? __pfx_sk_psock_verdict_recv+0x10/0x10 [ 405.635492][T16941] ? sk_psock_verdict_data_ready+0xad/0x690 [ 405.637390][T16941] sk_psock_verdict_data_ready+0x25f/0x690 [ 405.639262][T16941] unix_stream_sendmsg+0x84e/0xde0 [ 405.640909][T16941] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 405.642684][T16941] ? aa_sock_msg_perm+0x129/0x210 [ 405.644322][T16941] ? apparmor_socket_sendmsg+0x98/0x360 [ 405.646088][T16941] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 405.647872][T16941] sock_sendmsg_nosec+0x13a/0x180 [ 405.649505][T16941] ____sys_sendmsg+0x54e/0x850 [ 405.651060][T16941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.652803][T16941] ? import_iovec+0x73/0xa0 [ 405.654713][T16941] ___sys_sendmsg+0x2a5/0x360 [ 405.656354][T16941] ? __lock_acquire+0x747/0x2de0 [ 405.657990][T16941] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.659731][T16941] ? tomoyo_path_number_perm+0x219/0x5f0 [ 405.661611][T16941] ? __fget_files+0x2a/0x420 [ 405.663164][T16941] ? __fget_files+0x3a2/0x420 [ 405.664806][T16941] __x64_sys_sendmsg+0x1b1/0x290 [ 405.666435][T16941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.668207][T16941] ? kfree+0x4d/0x650 [ 405.669594][T16941] ? __pfx_kcov_ioctl+0x10/0x10 [ 405.671187][T16941] do_syscall_64+0x166/0x520 [ 405.672647][T16941] ? trace_irq_disable+0x3b/0x140 [ 405.674312][T16941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.676247][T16941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.678379][T16941] RIP: 0033:0x7f4d8999e159 [ 405.680064][T16941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.687010][T16941] RSP: 002b:00007f4d8a7ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.689934][T16941] RAX: ffffffffffffffda RBX: 00007f4d89c26180 RCX: 00007f4d8999e159 [ 405.692629][T16941] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 405.695743][T16941] RBP: 00007f4d89a3506b R08: 0000000000000000 R09: 0000000000000000 [ 405.698929][T16941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.702110][T16941] R13: 00007f4d89c26218 R14: 00007f4d89c26180 R15: 00007ffd1de3bf98 [ 405.705288][T16941] [ 405.706576][T16941] Modules linked in: [ 405.708513][T16941] ---[ end trace 0000000000000000 ]--- [ 405.747364][T16941] RIP: 0010:skb_pull+0x1c4/0x1d0 [ 405.747406][T16941] Code: b2 8c f8 8b 44 24 04 89 43 70 48 c7 c7 c0 ba 22 8d 89 ee e8 9e 96 7c f7 48 c7 c7 00 bb 22 8d 48 89 de 31 d2 e8 7d 00 ff ff 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 405.747493][T16941] RSP: 0018:ffffc9000629f758 EFLAGS: 00010282 [ 405.747511][T16941] RAX: ffffffff89aa3aaa RBX: ffff888107756780 RCX: 0000000000080000 [ 405.747520][T16941] RDX: ffffc90021fe7000 RSI: 000000000000b6ec RDI: 000000000000b6ed [ 405.747530][T16941] RBP: 0000000000001000 R08: ffff88823c624713 R09: 1ffff110478c48e2 [ 405.747539][T16941] R10: dffffc0000000000 R11: ffffed10478c48e3 R12: 0000000000008000 [ 405.747548][T16941] R13: dffffc0000000000 R14: 1ffff11020eeacfe R15: 0000000000007ec0 [ 405.747558][T16941] FS: 00007f4d8a7ef6c0(0000) GS:ffff88818d6ce000(0000) knlGS:0000000000000000 [ 405.747569][T16941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.747578][T16941] CR2: 00007fda6ffeb840 CR3: 000000002253a000 CR4: 00000000000006f0 [ 405.747620][T16941] Kernel panic - not syncing: Fatal exception [ 405.788225][T16941] Kernel Offset: disabled [ 405.790027][T16941] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:21:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88823c6414c8 RCX=ffff888102afda00 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900000e7950 RSP=ffffc900000e7800 R8 =ffffffff907a417f R9 =1ffffffff20f482f R10=dffffc0000000000 R11=fffffbfff20f4830 R12=1ffff110478c8299 R13=dffffc0000000000 R14=1ffff1102055fdf3 R15=0000000000000001 RIP=ffffffff81bb8c83 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88818d6ce000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fda6ffeb840 CR3=00000000128e6000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000 XMM02=00007fd4f8ff25e8 00007fd4f8ff2618 XMM03=00007fd4f8ff2600 00007fd4f8ff25e0 XMM04=00007fd4f9b5d020 00007fd4f8ff25c0 XMM05=00007fd4f8ff25d0 00007fd4f8ff2610 XMM06=00007fd4f8ff25f8 00007fd4f8ff25c8 XMM07=00007fd4f8ff2600 00007fd4f8ff25e0 XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000021965 RDI=0000000000021966 RBP=00000000000003f8 RSP=ffffc9000629eda0 R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8572f4d0 R12=dffffc0000000000 R13=0000000000000039 R14=ffffffff9ad3d0c0 R15=0000000000000000 RIP=ffffffff8572f54c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4d8a7ef6c0 ffffffff 00c00000 GS =0000 ffff8882a8cce000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00002000000c4000 CR3=000000002253a000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525 XMM02=00007f4d89bf25e8 00007f4d89bf2618 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 00000000000000ff XMM05=00007f4d89bf25d0 00007f4d89bf2610 XMM06=00007f4d89bf25f8 00007f4d89bf25c8 XMM07=00007f4d89bf2600 00007f4d89bf25e0 XMM08=81035640438a52ad ea73230aaf5d3986 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000