last executing test programs: 5.249651614s ago: executing program 2 (id=9478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 5.111088088s ago: executing program 2 (id=9481): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x100, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8bf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x888ae8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 4.132695404s ago: executing program 2 (id=9497): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0x0, 0x8001}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 2.071275533s ago: executing program 0 (id=9528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 1.928213599s ago: executing program 0 (id=9531): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7}, &(0x7f0000000040)=0x10) 1.809818176s ago: executing program 0 (id=9534): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r0) 1.685504747s ago: executing program 0 (id=9536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988", 0xd}, {&(0x7f0000000440)='G', 0x1}], 0x2) 1.630098031s ago: executing program 3 (id=9537): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) 1.562758823s ago: executing program 3 (id=9538): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.280436298s ago: executing program 1 (id=9541): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.030502857s ago: executing program 0 (id=9542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 1.03016595s ago: executing program 3 (id=9543): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x1000, 0x0) 922.315987ms ago: executing program 4 (id=9544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 872.481096ms ago: executing program 3 (id=9545): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x4204000c, 0x0, &(0x7f0000000100)) 840.787317ms ago: executing program 1 (id=9546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="6003169e58f4f15fe1da4741cb69937ad2435bf42ee684e21583aad79fe3", 0x1e}, {&(0x7f00000014c0)="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", 0xf2a}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 800.239615ms ago: executing program 0 (id=9547): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0xa, 0x5, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 699.891849ms ago: executing program 1 (id=9548): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0x30, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 682.749453ms ago: executing program 4 (id=9549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 658.004104ms ago: executing program 2 (id=9550): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x400c000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 536.099686ms ago: executing program 1 (id=9551): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x6c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x4008805) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) 534.269506ms ago: executing program 4 (id=9552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 377.520838ms ago: executing program 1 (id=9553): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a0002"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 242.933253ms ago: executing program 2 (id=9554): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 242.608243ms ago: executing program 4 (id=9555): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 211.578393ms ago: executing program 1 (id=9556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "617e5edb37ef999f", "8b3de2aabceef22f419e59f3000000000400", '\x00!\x00S'}, 0x38) 189.981499ms ago: executing program 3 (id=9557): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) connect$vsock_stream(r1, 0x0, 0x0) 148.909291ms ago: executing program 4 (id=9558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 67.504908ms ago: executing program 3 (id=9559): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 64.881047ms ago: executing program 2 (id=9560): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x1ff, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 0s ago: executing program 4 (id=9561): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000012000100000000000000000002"], 0x54}}, 0x20004010) kernel console output (not intermixed with test programs): ted CHECKSUM operation 68 [ 204.694055][T11433] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 204.869595][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 205.103492][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'. [ 205.634536][T11485] netlink: 'syz.1.2719': attribute type 2 has an invalid length. [ 205.657266][T11488] ieee802154 phy0 wpan0: encryption failed: -90 [ 205.667110][T11485] netlink: 'syz.1.2719': attribute type 2 has an invalid length. [ 205.782821][T11492] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.544003][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2743'. [ 206.875848][T11551] netlink: 'syz.4.2750': attribute type 1 has an invalid length. [ 206.884180][T11551] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.2750'. [ 206.980877][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 206.986995][ T5830] Bluetooth: hci0: command 0x0c20 tx timeout [ 206.993172][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 207.004633][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 207.435876][T11584] netlink: 'syz.1.2767': attribute type 21 has an invalid length. [ 207.529684][T11590] netlink: 'syz.0.2770': attribute type 12 has an invalid length. [ 207.711576][T11600] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 208.370036][T11634] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.506099][T11642] openvswitch: netlink: IP tunnel dst address not specified [ 208.697954][T11652] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2801'. [ 208.809409][T11658] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 209.044013][T11670] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 209.284827][T11685] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 209.315027][T11685] netlink: 'syz.1.2817': attribute type 3 has an invalid length. [ 209.341823][T11685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2817'. [ 209.368215][T11691] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2819'. [ 209.473723][T11694] netlink: 'syz.0.2822': attribute type 24 has an invalid length. [ 209.479088][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 209.532805][T11698] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 209.714917][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'. [ 209.756418][T11708] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 210.468992][T11741] netlink: 'syz.0.2847': attribute type 11 has an invalid length. [ 210.530483][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2848'. [ 210.943759][T11764] netlink: 'syz.4.2857': attribute type 1 has an invalid length. [ 210.977444][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 211.234421][T11780] netlink: 'syz.1.2865': attribute type 1 has an invalid length. [ 211.255067][T11780] netlink: 'syz.1.2865': attribute type 2 has an invalid length. [ 212.278187][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 212.710279][T11861] SET target dimension over the limit! [ 212.845486][T11870] IPv6: sit1: Disabled Multicast RS [ 213.041962][T11883] netlink: 'syz.1.2912': attribute type 1 has an invalid length. [ 213.055632][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 213.220335][T11893] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.236598][T11886] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 213.271765][T11886] bond4 (unregistering): Released all slaves [ 213.546963][T11865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.111254][T11940] netlink: 'syz.3.2938': attribute type 1 has an invalid length. [ 214.139850][T11940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2938'. [ 214.739138][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 214.794789][T11974] netlink: 'syz.0.2953': attribute type 4 has an invalid length. [ 214.803886][T11974] netlink: 'syz.0.2953': attribute type 1 has an invalid length. [ 214.812918][T11974] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2953'. [ 214.953428][T11983] netlink: 'syz.1.2957': attribute type 11 has an invalid length. [ 215.264042][T11999] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 215.573440][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2975'. [ 215.685329][T12023] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 215.897613][T12036] netlink: 'syz.3.2984': attribute type 3 has an invalid length. [ 215.938949][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 215.956364][T12039] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 216.141324][T12045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.170225][T12045] bond0: (slave rose0): Enslaving as an active interface with an up link [ 216.215899][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.401829][T12061] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2995'. [ 216.402122][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 217.033343][T12095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.075422][T12098] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 217.133232][T12098] veth0_macvtap: left promiscuous mode [ 217.208293][T12106] lo: left promiscuous mode [ 217.229467][T12106] tunl0: left promiscuous mode [ 217.431105][T12113] openvswitch: netlink: IPv4 tun info is not correct [ 217.780013][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.809359][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.993817][T12134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.001398][T12134] IPv6: NLM_F_CREATE should be set when creating new route [ 218.008808][T12134] IPv6: NLM_F_CREATE should be set when creating new route [ 218.156228][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.166030][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.192124][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.579492][T12159] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 219.567395][T12217] raw_sendmsg: syz.1.3061 forgot to set AF_INET. Fix it! [ 220.155258][T12248] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3075'. [ 221.018191][T12296] 8021q: VLANs not supported on lo [ 221.044596][T12299] netlink: 'syz.2.3095': attribute type 9 has an invalid length. [ 221.636858][T12328] netlink: 'syz.3.3108': attribute type 1 has an invalid length. [ 221.710840][T12334] bond0: option ad_select: unable to set because the bond device is up [ 221.761046][T12336] netlink: 'syz.0.3113': attribute type 21 has an invalid length. [ 221.808818][T12336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3113'. [ 222.358313][T12369] xt_policy: output policy not valid in PREROUTING and INPUT [ 222.538630][T12380] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 222.557034][T12380] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 222.581471][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 222.591270][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 222.591917][T12384] netlink: 'syz.3.3136': attribute type 21 has an invalid length. [ 222.734741][T12387] lo: entered promiscuous mode [ 222.741461][T12387] tunl0: entered promiscuous mode [ 222.746937][T12387] gre0: entered promiscuous mode [ 222.754640][T12387] gretap0: entered promiscuous mode [ 222.761718][T12387] erspan0: entered promiscuous mode [ 222.805040][T12387] ip_vti0: entered promiscuous mode [ 222.842852][T12395] openvswitch: netlink: Multiple metadata blocks provided [ 222.964177][T12399] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 223.319216][T12419] erspan0: left promiscuous mode [ 223.324330][T12419] erspan0: entered allmulticast mode [ 223.351973][T12425] Cannot find del_set index 4 as target [ 223.504583][T12431] netlink: get zone limit has 4 unknown bytes [ 223.687286][T12439] H: renamed from dummy0 (while UP) [ 223.712162][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 223.864162][T12451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.132236][T12465] netlink: 'syz.1.3177': attribute type 2 has an invalid length. [ 224.202621][T12465] 9: entered promiscuous mode [ 224.498604][T12485] bond0: entered allmulticast mode [ 224.518349][T12485] bond_slave_0: entered allmulticast mode [ 224.555572][T12485] bond_slave_1: entered allmulticast mode [ 224.600868][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3190'. [ 224.655833][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3190'. [ 225.028199][T12518] nbd: must specify at least one socket [ 225.863885][T12565] netlink: 'syz.0.3227': attribute type 32 has an invalid length. [ 226.280727][T12586] IPv6: sit1: Disabled Multicast RS [ 226.480436][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 226.592706][T12604] ipt_ECN: cannot use operation on non-tcp rule [ 226.776823][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 226.992720][T12628] netlink: 'syz.4.3255': attribute type 21 has an invalid length. [ 227.001007][T12628] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.012779][T12626] netlink: 'syz.2.3252': attribute type 2 has an invalid length. [ 227.022956][T12628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.030373][T12628] IPv6: NLM_F_CREATE should be set when creating new route [ 227.037819][T12628] IPv6: NLM_F_CREATE should be set when creating new route [ 227.045162][T12628] IPv6: NLM_F_CREATE should be set when creating new route [ 227.071115][T12626] v: entered promiscuous mode [ 227.485851][T12653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.804062][T12669] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 227.857149][T12674] unsupported nla_type 33542 [ 228.163782][T12688] netlink: 'syz.3.3284': attribute type 4 has an invalid length. [ 228.555051][T12712] netlink: 'syz.1.3297': attribute type 11 has an invalid length. [ 228.577845][T12712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3297'. [ 228.865253][T12730] netlink: 'syz.0.3305': attribute type 4 has an invalid length. [ 228.951590][T12735] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 229.079760][T12742] netlink: 'syz.1.3312': attribute type 1 has an invalid length. [ 229.495223][T12752] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 229.524406][T12752] bond2 (unregistering): Released all slaves [ 229.561454][T12763] gtp0: entered promiscuous mode [ 229.566593][T12763] gtp0: entered allmulticast mode [ 229.809979][T12778] netlink: 'syz.1.3327': attribute type 7 has an invalid length. [ 230.150364][T12798] xt_hashlimit: size too large, truncated to 1048576 [ 230.602641][T12824] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3351'. [ 230.650306][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3351'. [ 230.663233][T12824] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3351'. [ 230.699958][T12824] netlink: 'syz.0.3351': attribute type 2 has an invalid length. [ 230.708289][T12824] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3351'. [ 231.820687][T12896] netlink: 'syz.4.3387': attribute type 9 has an invalid length. [ 232.089565][T12908] netlink: 'syz.1.3393': attribute type 1 has an invalid length. [ 232.320512][T12920] netlink: 'syz.0.3400': attribute type 11 has an invalid length. [ 232.328515][T12920] netlink: 'syz.0.3400': attribute type 11 has an invalid length. [ 232.338121][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'. [ 232.396423][T12920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3400'. [ 232.591381][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'. [ 232.833773][T12945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.289837][T12976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.715184][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 234.171560][T13020] netlink: 'syz.4.3441': attribute type 16 has an invalid length. [ 234.203332][T13020] netlink: 'syz.4.3441': attribute type 17 has an invalid length. [ 234.428722][T13020] bridge0: port 1(1x9) entered disabled state [ 234.447470][T13020] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.580846][T13020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.594354][T13020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.604655][T13020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.616611][T13020] geneve2: left promiscuous mode [ 234.625669][T13020] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.645840][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3445'. [ 234.655783][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3445'. [ 235.151207][T13054] netlink: 'syz.4.3455': attribute type 10 has an invalid length. [ 235.195718][T13061] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 235.242647][T13054] batman_adv: batadv0: Adding interface: netdevsim0 [ 235.250247][T13054] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.292178][T13054] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 236.459013][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3485'. [ 237.084034][T13160] netlink: 'syz.3.3498': attribute type 3 has an invalid length. [ 237.257416][T13168] netlink: 'syz.0.3502': attribute type 10 has an invalid length. [ 237.273345][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 237.338424][T13177] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 238.485228][T13237] netlink: 'syz.1.3533': attribute type 2 has an invalid length. [ 238.498413][T13237] netlink: 'syz.1.3533': attribute type 1 has an invalid length. [ 238.523509][T13238] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 238.645218][T13238] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 238.667734][T13238] gretap1: entered promiscuous mode [ 238.697295][T13238] gretap1: entered allmulticast mode [ 238.840377][T13255] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 238.973621][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3545'. [ 239.256895][T13279] Cannot find add_set index 65532 as target [ 239.414133][T13288] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 240.052325][T13323] netlink: 'syz.0.3575': attribute type 10 has an invalid length. [ 240.076033][T13323] team0: Device ipvlan1 failed to register rx_handler [ 240.116728][T13326] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3576'. [ 240.402360][T13341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.615154][T13352] netlink: 'syz.4.3590': attribute type 4 has an invalid length. [ 240.879860][T13370] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.145318][T13384] netlink: zone id is out of range [ 241.180450][T13384] netlink: zone id is out of range [ 241.185648][T13384] netlink: zone id is out of range [ 241.220403][T13384] netlink: zone id is out of range [ 241.236072][T13384] netlink: zone id is out of range [ 241.262052][T13384] netlink: zone id is out of range [ 241.282551][T13384] netlink: zone id is out of range [ 241.287729][T13384] netlink: set zone limit has 4 unknown bytes [ 241.758287][T13420] SET target dimension over the limit! [ 241.813545][ T10] IPVS: starting estimator thread 0... [ 241.901816][T13429] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3628'. [ 241.939604][T13423] IPVS: using max 28 ests per chain, 67200 per kthread [ 242.736273][T13474] netlink: 'syz.4.3647': attribute type 21 has an invalid length. [ 242.749540][T13477] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3646'. [ 242.775044][T13474] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3647'. [ 242.829435][T13477] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.875406][T13477] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.916818][T13477] .` (unregistering): Released all slaves [ 242.966221][T13474] netlink: 'syz.4.3647': attribute type 5 has an invalid length. [ 242.990935][T13474] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3647'. [ 243.690774][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3670'. [ 244.047159][T13547] IPVS: Error connecting to the multicast addr [ 245.041380][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3708'. [ 245.179043][T13610] netlink: 'syz.4.3714': attribute type 10 has an invalid length. [ 245.211695][T13614] netlink: 'syz.2.3715': attribute type 1 has an invalid length. [ 245.235333][T13614] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3715'. [ 245.258509][T13610] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.268346][T13614] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3715'. [ 245.277912][T13614] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3715'. [ 245.290984][T13617] netlink: 'syz.3.3717': attribute type 7 has an invalid length. [ 245.305238][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3716'. [ 245.314744][ T29] audit: type=1107 audit(1775011895.036:2): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 245.330485][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3716'. [ 245.464722][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3716'. [ 245.488244][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3716'. [ 245.517774][T13618] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3716'. [ 245.756101][T13639] netlink: 'syz.0.3726': attribute type 2 has an invalid length. [ 245.768875][T13639] net_ratelimit: 1 callbacks suppressed [ 245.768895][T13639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.941218][T13647] xt_bpf: check failed: parse error [ 246.217518][T13663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3739'. [ 246.249824][T13666] netlink: 'syz.4.3740': attribute type 5 has an invalid length. [ 246.520127][T13682] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 246.819498][T13697] openvswitch: netlink: IP tunnel dst address not specified [ 246.830401][T13699] : renamed from hsr0 (while UP) [ 247.502031][T13733] netlink: 'syz.2.3774': attribute type 16 has an invalid length. [ 247.527293][T13736] Cannot find map_set index 65533 as target [ 247.535158][T13733] netlink: 'syz.2.3774': attribute type 3 has an invalid length. [ 247.861375][T13754] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 247.869808][T13755] IPv6: NLM_F_REPLACE set, but no existing node found! [ 248.116247][T13770] netlink: 'syz.1.3791': attribute type 4 has an invalid length. [ 248.633761][T13796] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 248.847188][T13809] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 248.965441][T13817] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 249.034545][T13813] bond5: option all_slaves_active: invalid value (222) [ 249.054452][T13813] bond5 (unregistering): Released all slaves [ 250.431817][T13897] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 250.575076][T13903] netlink: 'syz.3.3849': attribute type 12 has an invalid length. [ 250.627139][T13903] bond3: option primary_reselect: invalid value (255) [ 250.662414][T13903] bond3 (unregistering): Released all slaves [ 250.784529][T13918] __nla_validate_parse: 6 callbacks suppressed [ 250.784552][T13918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3856'. [ 250.920488][T13918] bond0 (unregistering): Released all slaves [ 251.007838][T13929] netlink: 'syz.0.3858': attribute type 15 has an invalid length. [ 251.333756][T13945] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 251.407973][T13947] xt_hashlimit: max too large, truncated to 1048576 [ 251.467280][T13954] openvswitch: netlink: Key type 30 is not supported [ 252.020032][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 252.170049][T13992] Cannot find del_set index 4 as target [ 252.231204][T13996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.340394][T14000] delete_channel: no stack [ 252.708211][T14022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3905'. [ 252.923499][T14038] xt_recent: Unsupported userspace flags (000000b1) [ 253.217330][T14051] netlink: 'syz.2.3920': attribute type 15 has an invalid length. [ 253.246068][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3920'. [ 253.382755][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3925'. [ 253.399667][T14060] netlink: 'syz.1.3924': attribute type 1 has an invalid length. [ 253.559485][T14070] netlink: 'syz.3.3930': attribute type 5 has an invalid length. [ 254.082067][T14101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.231511][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 254.573001][T14131] netlink: 'syz.0.3960': attribute type 75 has an invalid length. [ 254.724275][T14139] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.777845][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3966'. [ 254.811906][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3966'. [ 254.826546][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'. [ 254.982944][T14151] netlink: 'syz.1.3970': attribute type 1 has an invalid length. [ 255.014715][T14151] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3970'. [ 255.187156][T14161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.119337][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.125741][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.036159][T14267] geneve3: entered promiscuous mode [ 257.052198][T14267] geneve3: entered allmulticast mode [ 257.070431][ T35] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.109035][ T35] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.150403][ T77] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.193393][ T77] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 257.233592][T14280] __nla_validate_parse: 3 callbacks suppressed [ 257.233613][T14280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4032'. [ 257.747484][T14308] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 258.354917][T14348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4066'. [ 258.581854][T14357] --map-set only usable from mangle table [ 258.668502][T14365] netlink: 'syz.0.4075': attribute type 8 has an invalid length. [ 259.099529][T14374] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 259.154685][T14374] bond5 (unregistering): Released all slaves [ 259.378848][T14402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4093'. [ 259.402276][T14402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4093'. [ 259.485499][T14406] netlink: 'syz.2.4094': attribute type 2 has an invalid length. [ 259.975438][T14435] netlink: 'syz.3.4109': attribute type 1 has an invalid length. [ 260.177703][T14446] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4116'. [ 260.866688][T14485] netlink: 'syz.4.4134': attribute type 7 has an invalid length. [ 260.897919][T14489] netlink: 'syz.1.4136': attribute type 5 has an invalid length. [ 260.918929][T14485] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4134'. [ 262.166917][T14559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4170'. [ 262.199125][T14561] openvswitch: netlink: EtherType 50a is less than min 600 [ 262.370292][T14571] netdevsim netdevsim3 : renamed from netdevsim0 [ 262.399924][T14572] netlink: 'syz.4.4175': attribute type 3 has an invalid length. [ 262.427975][T14572] netlink: 'syz.4.4175': attribute type 1 has an invalid length. [ 262.925979][T14602] netlink: 'syz.3.4190': attribute type 5 has an invalid length. [ 262.968949][T14602] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4190'. [ 263.776643][T14651] ip6t_srh: unknown srh match flags 4000 [ 263.825809][T14654] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4213'. [ 264.126695][T14670] delete_channel: no stack [ 264.362381][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 264.789028][T14707] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4242'. [ 264.803346][T14711] bond0: Error: Cannot enslave bond to itself. [ 265.163292][T14732] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4255'. [ 265.255955][T14734] openvswitch: netlink: Multiple metadata blocks provided [ 265.607247][ T948] IPVS: starting estimator thread 0... [ 265.711182][T14757] IPVS: using max 27 ests per chain, 64800 per kthread [ 265.751988][T14764] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 266.129996][T14784] ip6t_srh: unknown srh invflags 4000 [ 266.320586][T14798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.181493][T14848] SET target dimension over the limit! [ 267.275331][T14852] bond0: option arp_validate: invalid value (55553) [ 267.282615][ T35] bond0: (slave bond_slave_0): interface is now down [ 267.318780][ T35] bond0: (slave bond_slave_1): interface is now down [ 267.335781][ T35] bond0: (slave wlan1): interface is now down [ 267.364703][ T35] bond0: now running without any active interface! [ 267.636297][T14870] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 268.175356][T14904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4338'. [ 268.652504][T14930] netlink: 'syz.4.4349': attribute type 1 has an invalid length. [ 268.695547][T14930] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4349'. [ 268.982935][T14945] bond2: option min_links: invalid value (18446744073709551614) [ 268.991700][T14945] bond2: option min_links: allowed values 0 - 2147483647 [ 269.012859][T14945] bond2 (unregistering): Released all slaves [ 269.243112][T14916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.283455][T14916] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 269.318485][T14916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.355336][T14916] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 269.387532][T14916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.420651][T14916] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 269.473321][T14975] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.535929][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 269.557276][T14916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.579057][T14916] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 269.881115][T14997] sit0: entered promiscuous mode [ 269.913492][T14997] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 269.957824][T14997] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4374'. [ 270.272855][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'. [ 270.286774][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4379'. [ 270.316584][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 270.598245][T15025] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 270.611350][T15025] bond0 (unregistering): Released all slaves [ 270.729025][T15028] bridge_slave_0: left allmulticast mode [ 270.762025][T15028] bridge_slave_0: left promiscuous mode [ 270.780121][T15028] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.806441][T15028] bridge_slave_1: left allmulticast mode [ 270.816174][T15028] bridge_slave_1: left promiscuous mode [ 270.828156][T15028] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.880642][T15028] bond0: (slave bond_slave_0): Releasing backup interface [ 270.903703][T15028] bond_slave_0: left allmulticast mode [ 270.948958][T15028] bond0: (slave bond_slave_1): Releasing backup interface [ 270.967976][T15028] bond_slave_1: left allmulticast mode [ 271.021307][T15028] team0: Port device team_slave_0 removed [ 271.046165][T15028] team0: Port device team_slave_1 removed [ 271.066410][T15028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.078119][T15028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.096361][T15028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.117079][T15028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.141342][T15028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.946862][T15093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.055706][T15099] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4412'. [ 272.678879][T15132] netlink: 'syz.1.4422': attribute type 10 has an invalid length. [ 272.711865][T15132] bridge_slave_1: entered allmulticast mode [ 272.746658][T15132] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 273.583561][T15181] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4444'. [ 273.822426][T15200] netlink: 'syz.1.4450': attribute type 4 has an invalid length. [ 273.867385][T15200] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4450'. [ 274.606412][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4468'. [ 274.746974][T15253] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4471'. [ 275.211157][T15280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.599883][T15301] xt_l2tp: wrong L2TP version: 0 [ 275.668298][T15308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.336793][T15348] Bluetooth: MGMT ver 1.23 [ 276.346792][T15351] xt_limit: Overflow, try lower: 604147548/4200216962 [ 276.357592][T15349] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4510'. [ 276.619282][T15362] macsec1: entered promiscuous mode [ 277.551454][T15420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.088912][T15445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4546'. [ 278.393835][T15463] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 278.429334][T15463] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4553'. [ 278.575811][T15478] netlink: 'syz.3.4558': attribute type 62 has an invalid length. [ 278.944910][T15496] netlink: 'syz.1.4563': attribute type 3 has an invalid length. [ 279.552503][T15529] xt_HMARK: spi-set and port-set can't be combined [ 279.974078][T15548] netlink: 'syz.0.4587': attribute type 58 has an invalid length. [ 280.008784][T15548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4587'. [ 281.620258][T15653] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 281.776917][T15667] tipc: Enabling of bearer rejected, failed to enable media [ 282.540505][T15714] netlink: 'syz.3.4666': attribute type 11 has an invalid length. [ 282.548442][T15714] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.4666'. [ 282.572286][T15716] Bluetooth: MGMT ver 1.23 [ 282.733751][T15724] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 283.413414][T15766] tipc: Enabling not permitted [ 283.428533][T15766] tipc: Enabling of bearer rejected, failed to enable media [ 283.843448][T15784] pim6reg: entered allmulticast mode [ 283.868389][T15788] pim6reg: left allmulticast mode [ 283.912835][ T5893] IPVS: starting estimator thread 0... [ 283.919995][T15789] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4704'. [ 284.008780][T15795] IPVS: using max 34 ests per chain, 81600 per kthread [ 285.016001][T15855] netlink: 'syz.2.4735': attribute type 83 has an invalid length. [ 285.195409][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4738'. [ 285.600200][T15884] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 286.110531][T15905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4759'. [ 286.315330][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4766'. [ 286.336897][T15919] veth0_virt_wifi: entered promiscuous mode [ 286.757109][T15943] netlink: 'syz.3.4777': attribute type 12 has an invalid length. [ 288.238056][T16030] vcan2: entered promiscuous mode [ 288.246460][T16035] Cannot find add_set index 46338 as target [ 288.253311][T16030] vcan2: entered allmulticast mode [ 288.661507][T16052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.678939][T16052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.904664][T16052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.979259][T16052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.146086][T16052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.168233][T16052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.197450][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4840'. [ 289.216447][T16088] macsec1: entered promiscuous mode [ 289.222235][T16088] bridge0: entered promiscuous mode [ 289.227725][T16088] macsec1: entered allmulticast mode [ 289.245666][T16088] bridge0: entered allmulticast mode [ 289.259387][T16088] bridge0: port 3(macsec1) entered blocking state [ 289.273916][T16088] bridge0: port 3(macsec1) entered disabled state [ 289.294395][T16088] bridge0: left allmulticast mode [ 289.305507][T16088] bridge0: left promiscuous mode [ 289.361082][T16052] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.398108][T16052] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.466238][T16101] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4846'. [ 289.599848][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.608183][ T35] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 289.710877][ T127] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.730582][ T127] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 289.758889][ T127] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.768366][ T127] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 289.813563][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 289.822207][ T49] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 290.291453][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4867'. [ 290.389475][T16151] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4871'. [ 290.399703][T16152] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4870'. [ 290.403664][T16151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4871'. [ 290.450865][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4872'. [ 290.488924][T16154] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4872'. [ 290.497965][T16154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4872'. [ 290.726879][T16170] xt_l2tp: missing protocol rule (udp|l2tpip) [ 292.074490][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4917'. [ 292.086370][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4917'. [ 292.476547][T16270] tipc: Failed to obtain node identity [ 292.496653][T16270] tipc: Enabling of bearer rejected, failed to enable media [ 292.610414][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4932'. [ 292.942028][T16296] hsr0 speed is unknown, defaulting to 1000 [ 293.037426][T16303] netlink: zone id is out of range [ 293.046482][T16303] netlink: zone id is out of range [ 293.060797][T16303] netlink: zone id is out of range [ 293.078969][T16303] netlink: zone id is out of range [ 293.084189][T16303] netlink: zone id is out of range [ 293.096069][T16303] netlink: zone id is out of range [ 293.101910][T16303] netlink: zone id is out of range [ 293.124813][T16303] netlink: zone id is out of range [ 293.139629][T16303] netlink: zone id is out of range [ 293.155246][T16303] netlink: zone id is out of range [ 293.640533][T16333] Zero length message leads to an empty skb [ 294.022690][T16356] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 294.042135][T16354] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 294.209007][T16363] delete_channel: no stack [ 294.229505][T16367] IPVS: ip_vs_add_dest(): server weight less than zero [ 294.724361][T16393] macvlan0: entered promiscuous mode [ 294.764132][T16395] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 294.780659][T16395] netlink: 'syz.4.4992': attribute type 1 has an invalid length. [ 295.280907][T16429] tipc: Enabling of bearer rejected, media not registered [ 295.756329][T16457] siw: device registration error -23 [ 295.850957][T16459] netlink: 'syz.2.5022': attribute type 18 has an invalid length. [ 295.911078][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.926701][T16465] __nla_validate_parse: 5 callbacks suppressed [ 295.926722][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5025'. [ 295.933195][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.999134][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.032232][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.666775][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5042'. [ 297.499076][T16538] vlan1: entered allmulticast mode [ 297.594019][T16547] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5064'. [ 297.897049][T16568] xt_limit: Overflow, try lower: 271964/0 [ 298.595221][T16605] netlink: 'syz.2.5092': attribute type 178 has an invalid length. [ 298.925203][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5100'. [ 299.419151][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5115'. [ 299.776719][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5126'. [ 299.890839][T16682] netlink: 'syz.1.5130': attribute type 33 has an invalid length. [ 300.427187][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5146'. [ 300.465372][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5146'. [ 300.554597][T16722] nbd: must specify a size in bytes for the device [ 301.135409][T16754] : entered promiscuous mode [ 301.347372][T16768] netlink: 'syz.3.5172': attribute type 2 has an invalid length. [ 301.601602][T16786] net_ratelimit: 45 callbacks suppressed [ 301.601624][T16786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.648230][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5183'. [ 301.674741][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5182'. [ 302.041519][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5193'. [ 302.065768][T16814] netlink: 'syz.4.5193': attribute type 5 has an invalid length. [ 302.096121][T16814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5193'. [ 302.255050][T16823] tipc: Started in network mode [ 302.270678][T16823] tipc: Node identity 4, cluster identity 4711 [ 302.287327][T16823] tipc: Node number set to 4 [ 302.641040][T16849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 302.747226][T16853] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5216'. [ 302.773011][T16853] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5216'. [ 302.783041][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5214'. [ 302.815653][T16856] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 302.907389][T16861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5217'. [ 304.020796][T16928] smc: net device team0 applied user defined pnetid SYZ2 [ 304.190339][T16936] tipc: Enabling of bearer rejected, failed to enable media [ 304.209479][T16942] Driver unsupported XDP return value 0 on prog (id 353) dev N/A, expect packet loss! [ 304.417346][T16954] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5260'. [ 304.746192][T16969] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 305.887229][T17044] netlink: 'syz.3.5301': attribute type 5 has an invalid length. [ 306.481946][T17083] netlink: 'syz.2.5322': attribute type 11 has an invalid length. [ 307.076940][T17112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.103326][T17115] nftables ruleset with unbound set [ 307.116643][T17114] netlink: 'syz.4.5336': attribute type 2 has an invalid length. [ 307.484280][T17139] __nla_validate_parse: 5 callbacks suppressed [ 307.484304][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5349'. [ 307.503389][T17143] xt_l2tp: v2 sid > 0xffff: 1114112 [ 307.781593][T17157] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5358'. [ 307.830249][T17163] team0: Device gtp0 is up. Set it down before adding it as a team port [ 308.288373][T17189] xt_hashlimit: size too large, truncated to 1048576 [ 308.679897][T17212] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5383'. [ 308.788198][T17209] syz.2.5382 (17209) used greatest stack depth: 16920 bytes left [ 309.322145][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'. [ 309.516501][T17253] netlink: 'syz.1.5403': attribute type 1 has an invalid length. [ 309.546501][T17253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.669235][T17259] netlink: 'syz.0.5405': attribute type 32 has an invalid length. [ 309.687462][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5405'. [ 309.763393][T17259] bond1: Setting coupled_control to off (0) [ 310.444707][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5424'. [ 310.521373][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5425'. [ 310.572316][T17306] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 310.590524][T17306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.292372][T17345] vlan2: entered promiscuous mode [ 311.297491][T17345] bridge0: entered promiscuous mode [ 311.483892][T17358] IPVS: Error connecting to the multicast addr [ 311.914490][T17381] netlink: 'syz.3.5463': attribute type 3 has an invalid length. [ 312.404259][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5475'. [ 312.879131][T17431] tipc: Enabling of bearer rejected, failed to enable media [ 313.434400][T17469] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5504'. [ 313.971510][T17497] tipc: Started in network mode [ 313.976467][T17497] tipc: Node identity ac141441, cluster identity 4711 [ 314.000844][T17497] tipc: Enabled bearer , priority 10 [ 314.648207][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5533'. [ 314.678131][T17530] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5533'. [ 314.691766][T17530] netlink: 'syz.2.5533': attribute type 5 has an invalid length. [ 315.119972][ T948] tipc: Node number set to 2886997057 [ 316.517595][T17639] Bluetooth: MGMT ver 1.23 [ 316.782822][T17654] netlink: 'syz.3.5592': attribute type 3 has an invalid length. [ 317.094814][T17672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5602'. [ 317.122081][T17672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5602'. [ 317.544318][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.551078][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.824561][T17717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.068339][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5630'. [ 318.165289][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5634'. [ 318.511590][T17755] gretap0: entered promiscuous mode [ 318.517343][T17755] vlan1: entered promiscuous mode [ 319.419619][T17810] sit2: entered promiscuous mode [ 319.426752][T17810] sit2: entered allmulticast mode [ 319.492422][T17814] netlink: 'syz.1.5668': attribute type 3 has an invalid length. [ 319.541475][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5670'. [ 320.160010][T17854] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5689'. [ 320.202806][T17859] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5690'. [ 320.284789][T17863] netlink: 'syz.0.5692': attribute type 7 has an invalid length. [ 320.994445][T17906] netlink: 'syz.1.5710': attribute type 1 has an invalid length. [ 321.006560][T17904] sctp: [Deprecated]: syz.2.5709 (pid 17904) Use of int in maxseg socket option. [ 321.006560][T17904] Use struct sctp_assoc_value instead [ 321.376398][T17926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5720'. [ 321.452215][T17931] netlink: 'syz.2.5722': attribute type 1 has an invalid length. [ 322.175872][T17965] bridge0: port 1(ipvlan3) entered blocking state [ 322.211510][T17965] bridge0: port 1(ipvlan3) entered disabled state [ 322.218398][T17965] ipvlan3: entered allmulticast mode [ 322.244571][T17965] bridge0: entered allmulticast mode [ 322.269325][T17965] ipvlan3: left allmulticast mode [ 322.275851][T17965] bridge0: left allmulticast mode [ 323.121129][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5763'. [ 323.562077][T18047] netlink: 'syz.1.5778': attribute type 1 has an invalid length. [ 323.571295][T18047] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5778'. [ 323.761315][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5781'. [ 323.957381][T18060] sock: sock_timestamping_bind_phc: sock not bind to device [ 325.231171][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5821'. [ 325.466199][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5829'. [ 325.588908][T18156] nbd: must specify an index to disconnect [ 325.599390][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5833'. [ 325.651757][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5833'. [ 325.673597][T18157] netlink: 'syz.1.5833': attribute type 12 has an invalid length. [ 325.698062][T18157] netlink: 'syz.1.5833': attribute type 11 has an invalid length. [ 326.910411][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5874'. [ 327.171089][T18258] sctp: [Deprecated]: syz.0.5881 (pid 18258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.171089][T18258] Use struct sctp_sack_info instead [ 327.224360][T18258] sctp: [Deprecated]: syz.0.5881 (pid 18258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.224360][T18258] Use struct sctp_sack_info instead [ 327.253835][T18264] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5884'. [ 327.402798][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5891'. [ 327.949580][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5902'. [ 328.265054][T18321] netlink: 'syz.0.5912': attribute type 2 has an invalid length. [ 329.108335][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5937'. [ 330.275577][T18425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5959'. [ 330.873603][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5974'. [ 331.021941][T18465] delete_channel: no stack [ 331.272937][T18480] netlink: 'syz.4.5986': attribute type 11 has an invalid length. [ 331.290114][T18480] netlink: 'syz.4.5986': attribute type 4 has an invalid length. [ 331.307919][T18480] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.5986'. [ 331.613725][T18494] netlink: 'syz.1.5993': attribute type 3 has an invalid length. [ 331.638320][T18494] netlink: 'syz.1.5993': attribute type 1 has an invalid length. [ 331.648884][T18494] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5993'. [ 332.327701][T18528] netlink: 'syz.1.6010': attribute type 2 has an invalid length. [ 332.747430][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6018'. [ 332.937168][T18558] netlink: 'syz.2.6024': attribute type 2 has an invalid length. [ 332.968735][T18558] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6024'. [ 333.799413][T18600] Bluetooth: MGMT ver 1.23 [ 334.069656][T18611] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6049'. [ 335.572396][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6086'. [ 335.957606][T18709] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6095'. [ 336.007496][T18709] vlan1: entered allmulticast mode [ 336.033352][T18709] gretap0: entered allmulticast mode [ 336.086890][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 336.097197][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 336.516816][T18742] pimreg3: entered allmulticast mode [ 336.670777][T18752] block nbd1: not configured, cannot reconfigure [ 337.633154][T18809] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6144'. [ 337.970219][T18830] veth1_macvtap: left promiscuous mode [ 337.988941][T18830] macsec0: entered promiscuous mode [ 337.994228][T18830] macsec0: entered allmulticast mode [ 338.043461][T18837] veth1_macvtap: entered promiscuous mode [ 338.064334][T18837] veth1_macvtap: entered allmulticast mode [ 338.086284][T18837] macsec0: left promiscuous mode [ 338.097813][T18837] macsec0: left allmulticast mode [ 338.105784][T18837] veth1_macvtap: left allmulticast mode [ 338.320997][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6165'. [ 338.342331][T18854] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 338.605443][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6172'. [ 338.658914][T18866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6172'. [ 338.907702][T18884] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6180'. [ 338.917563][T18884] xt_policy: neither incoming nor outgoing policy selected [ 339.236537][T18897] netlink: 'syz.2.6187': attribute type 3 has an invalid length. [ 339.332387][T18903] netlink: 'syz.4.6190': attribute type 11 has an invalid length. [ 339.389057][T18903] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.6190'. [ 339.436967][T18911] tipc: Enabling of bearer rejected, failed to enable media [ 339.597209][ T29] audit: type=1107 audit(1775011989.336:3): pid=18920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 339.757279][T18926] tipc: Enabling of bearer rejected, failed to enable media [ 340.569859][T18977] openvswitch: netlink: Message has 6 unknown bytes. [ 341.200445][T19015] __nla_validate_parse: 1 callbacks suppressed [ 341.200467][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6245'. [ 341.476422][T19032] netlink: 'syz.3.6252': attribute type 11 has an invalid length. [ 341.605071][T19037] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6255'. [ 341.616217][T19037] netlink: 'syz.2.6255': attribute type 2 has an invalid length. [ 341.638231][T19040] netlink: 'syz.1.6256': attribute type 4 has an invalid length. [ 341.653827][T19040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6256'. [ 342.096252][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6266'. [ 342.131794][T19067] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6269'. [ 342.329899][ T5884] IPVS: starting estimator thread 0... [ 342.337330][T19077] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 342.422733][T19078] IPVS: using max 28 ests per chain, 67200 per kthread [ 342.564247][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6280'. [ 342.710298][T19099] sock: sock_set_timeout: `syz.4.6285' (pid 19099) tries to set negative timeout [ 343.331559][T19136] nbd: couldn't find device at index 242 [ 343.654095][T19150] netlink: zone id is out of range [ 343.669180][T19150] netlink: zone id is out of range [ 343.674699][T19150] netlink: zone id is out of range [ 343.687904][T19150] netlink: zone id is out of range [ 343.703366][T19150] netlink: zone id is out of range [ 343.717026][T19150] netlink: zone id is out of range [ 343.722653][T19150] netlink: zone id is out of range [ 343.728081][T19150] netlink: zone id is out of range [ 343.771860][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6311'. [ 343.825097][T19157] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6312'. [ 343.920503][T19161] netlink: 'syz.0.6313': attribute type 2 has an invalid length. [ 344.371990][T19191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6329'. [ 344.391992][T19191] F: renamed from gre0 [ 344.401486][T19191] F: left promiscuous mode [ 344.406083][T19191] F: entered allmulticast mode [ 344.421120][T19191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6329'. [ 345.024938][T19233] netlink: 'syz.4.6350': attribute type 1 has an invalid length. [ 345.040559][T19233] netlink: 'syz.4.6350': attribute type 1 has an invalid length. [ 345.055764][T19233] netlink: 'syz.4.6350': attribute type 8 has an invalid length. [ 345.442350][T19260] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.359414][T19384] net_ratelimit: 186 callbacks suppressed [ 347.359438][T19384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.675188][T19409] wireguard0: entered promiscuous mode [ 347.698382][T19409] wireguard0: entered allmulticast mode [ 347.727208][T19409] team0: Device wireguard0 is of different type [ 348.036196][T19430] syz.1.6439 (19430) used obsolete PPPIOCDETACH ioctl [ 348.402846][T19455] __nla_validate_parse: 6 callbacks suppressed [ 348.402870][T19455] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6451'. [ 348.682696][T19472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6459'. [ 348.808565][T19481] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.832639][T19481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6464'. [ 349.594317][T19532] netlink: 'syz.0.6489': attribute type 4 has an invalid length. [ 349.609684][T19532] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6489'. [ 350.116458][T19564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6505'. [ 350.449706][T19574] "syz.4.6510" (19574) uses obsolete ecb(arc4) skcipher [ 352.771436][T19706] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6567'. [ 352.794700][T19706] nbd: illegal input index -8454144 [ 353.467982][T19744] vlan2: entered promiscuous mode [ 353.481604][T19744] geneve1: entered promiscuous mode [ 353.496465][T19744] vlan2: entered allmulticast mode [ 353.503291][T19744] geneve1: entered allmulticast mode [ 353.857498][T19761] vlan1: entered allmulticast mode [ 353.865903][T19761] veth0_vlan: entered allmulticast mode [ 354.714186][T19807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6614'. [ 354.724319][T19807] netlink: 'syz.0.6614': attribute type 3 has an invalid length. [ 354.865529][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6619'. [ 354.895822][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6619'. [ 355.095909][T19827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6624'. [ 355.282357][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6629'. [ 355.759002][T19872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6646'. [ 355.932356][T19885] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 355.951044][T19885] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6652'. [ 355.963683][T19885] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 355.978829][T19885] netlink: 'syz.2.6652': attribute type 8 has an invalid length. [ 355.991837][T19885] netlink: 606 bytes leftover after parsing attributes in process `syz.2.6652'. [ 356.016685][T19885] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6652'. [ 356.137626][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6656'. [ 356.678064][T19929] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 357.179691][T19959] sctp: [Deprecated]: syz.3.6691 (pid 19959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.179691][T19959] Use struct sctp_sack_info instead [ 357.198080][T19961] tipc: Started in network mode [ 357.204303][T19961] tipc: Node identity ac14140f, cluster identity 4711 [ 357.211916][T19961] tipc: New replicast peer: 255.255.255.255 [ 357.218348][T19961] tipc: Enabled bearer , priority 10 [ 357.487129][T19971] sit0: left promiscuous mode [ 357.489738][T19978] vcan0: tx address claim with dlc 0 [ 357.653245][T19971] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check. [ 358.127126][T20011] bond0: entered promiscuous mode [ 358.139304][T20011] bond_slave_0: entered promiscuous mode [ 358.145259][T20011] bond_slave_1: entered promiscuous mode [ 358.163375][T20011] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 358.188148][T20011] bond0: left promiscuous mode [ 358.193520][T20011] bond_slave_0: left promiscuous mode [ 358.199749][T20011] bond_slave_1: left promiscuous mode [ 358.209275][T20011] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 358.331569][ T948] tipc: Node number set to 2886997007 [ 359.719957][T20086] __nla_validate_parse: 10 callbacks suppressed [ 359.719980][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6751'. [ 359.985978][ T5826] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 360.109679][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6757'. [ 360.128790][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 360.128820][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.128832][ T5826] Call Trace: [ 360.128840][ T5826] [ 360.128849][ T5826] dump_stack_lvl+0xe8/0x150 [ 360.128884][ T5826] dump_header+0xd3/0x4c0 [ 360.128913][ T5826] oom_kill_process+0x3ab/0x970 [ 360.128940][ T5826] out_of_memory+0x106c/0x1410 [ 360.128967][ T5826] ? __pfx___mutex_lock+0x10/0x10 [ 360.129003][ T5826] ? __pfx_out_of_memory+0x10/0x10 [ 360.129022][ T5826] ? do_raw_spin_unlock+0xf5/0x210 [ 360.129056][ T5826] try_charge_memcg+0xc53/0x1560 [ 360.129085][ T5826] ? __lock_acquire+0x6b5/0x2cf0 [ 360.129127][ T5826] ? __pfx_try_charge_memcg+0x10/0x10 [ 360.129148][ T5826] ? xa_load+0x60/0x210 [ 360.129183][ T5826] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 360.129212][ T5826] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 360.129240][ T5826] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 360.129269][ T5826] __swap_cache_prepare_and_add+0x52a/0x700 [ 360.129332][ T5826] swap_cache_alloc_folio+0xf1/0x240 [ 360.129365][ T5826] swap_cluster_readahead+0x369/0x690 [ 360.129402][ T5826] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 360.129447][ T5826] ? get_vma_policy+0x27b/0x3c0 [ 360.129477][ T5826] swapin_readahead+0x196/0xc50 [ 360.129522][ T5826] ? __pfx_swapin_readahead+0x10/0x10 [ 360.129551][ T5826] ? swap_table_get+0x1e/0x260 [ 360.129577][ T5826] ? swap_table_get+0x1e/0x260 [ 360.129601][ T5826] ? swap_table_get+0x1e/0x260 [ 360.129630][ T5826] ? swap_table_get+0x216/0x260 [ 360.129660][ T5826] ? swap_cache_get_folio+0x513/0x520 [ 360.129696][ T5826] do_swap_page+0x56f/0x5a20 [ 360.129750][ T5826] ? do_swap_page+0x127/0x5a20 [ 360.129778][ T5826] ? __pfx_do_swap_page+0x10/0x10 [ 360.129803][ T5826] ? __pte_offset_map+0x1ae/0x240 [ 360.129828][ T5826] ? pte_offset_map_rw_nolock+0xea/0x160 [ 360.129852][ T5826] handle_mm_fault+0x12d2/0x3310 [ 360.129899][ T5826] ? handle_mm_fault+0xee/0x3310 [ 360.129939][ T5826] ? __pfx_handle_mm_fault+0x10/0x10 [ 360.129966][ T5826] ? lock_vma_under_rcu+0x45a/0x500 [ 360.130016][ T5826] do_user_addr_fault+0xa73/0x1340 [ 360.130052][ T5826] ? rcu_is_watching+0x15/0xb0 [ 360.130081][ T5826] ? trace_page_fault_user+0x84/0x210 [ 360.130111][ T5826] exc_page_fault+0x6a/0xc0 [ 360.130137][ T5826] asm_exc_page_fault+0x26/0x30 [ 360.130157][ T5826] RIP: 0033:0x7f64c415d04e [ 360.130177][ T5826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.130196][ T5826] RSP: 002b:00007ffd79819c88 EFLAGS: 00010246 [ 360.130216][ T5826] RAX: 0000000000000000 RBX: 00005555809a5500 RCX: 00007f64c415d04e [ 360.130231][ T5826] RDX: 00007ffd79819ce0 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.130244][ T5826] RBP: 00007ffd79819d4c R08: 0000000000000000 R09: 0000000000000000 [ 360.130257][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 360.130269][ T5826] R13: 00000000000927c0 R14: 0000000000057986 R15: 00007ffd79819da0 [ 360.130305][ T5826] [ 360.130314][ T5826] memory: usage 307200kB, limit 307200kB, failcnt 550 [ 360.189532][T20098] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6757'. [ 360.221206][ T5826] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 360.488714][ T5826] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 360.508946][ T5826] Memory cgroup stats for /syz1: [ 360.509239][ T5826] cache 0 [ 360.517780][ T5826] rss 0 [ 360.542561][ T5826] rss_huge 0 [ 360.545824][ T5826] shmem 0 [ 360.573877][ T5826] mapped_file 0 [ 360.577417][ T5826] dirty 0 [ 360.630150][ T5826] writeback 0 [ 360.633522][ T5826] workingset_refault_anon 0 [ 360.638065][ T5826] workingset_refault_file 0 [ 360.658896][ T5826] swap 192512 [ 360.662253][ T5826] swapcached 192512 [ 360.666107][ T5826] pgpgin 58193 [ 360.718705][ T5826] pgpgout 58193 [ 360.722247][ T5826] pgfault 144120 [ 360.725848][ T5826] pgmajfault 3 [ 360.758728][ T5826] inactive_anon 0 [ 360.771487][ T5826] active_anon 0 [ 360.789251][ T5826] inactive_file 0 [ 360.798829][ T5826] active_file 0 [ 360.802422][ T5826] unevictable 0 [ 360.805943][ T5826] hierarchical_memory_limit 314572800 [ 360.850757][ T5826] hierarchical_memsw_limit 9223372036854771712 [ 360.856998][ T5826] total_cache 0 [ 360.888784][ T5826] total_rss 0 [ 360.892164][ T5826] total_rss_huge 0 [ 360.896002][ T5826] total_shmem 0 [ 360.922502][ T5826] total_mapped_file 0 [ 360.926617][ T5826] total_dirty 0 [ 360.957876][ T5826] total_writeback 0 [ 360.962320][ T5826] total_workingset_refault_anon 0 [ 360.967500][ T5826] total_workingset_refault_file 0 [ 361.002019][ T5826] total_swap 192512 [ 361.005900][ T5826] total_swapcached 192512 [ 361.028723][ T5826] total_pgpgin 58193 [ 361.032704][ T5826] total_pgpgout 58193 [ 361.036725][ T5826] total_pgfault 144120 [ 361.076154][ T5826] total_pgmajfault 3 [ 361.089255][ T5826] total_inactive_anon 0 [ 361.093471][ T5826] total_active_anon 0 [ 361.097473][ T5826] total_inactive_file 0 [ 361.100419][T20132] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6773'. [ 361.111989][ T5826] total_active_file 0 [ 361.116016][ T5826] total_unevictable 0 [ 361.132202][ T5826] anon_cost 0 [ 361.135554][ T5826] file_cost 0 [ 361.153348][ T5826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6713,pid=20000,uid=0 [ 361.200317][ T5826] Memory cgroup out of memory: Killed process 20000 (syz.1.6713) total-vm:102288kB, anon-rss:1248kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 361.288897][T20136] netlink: 'syz.2.6775': attribute type 1 has an invalid length. [ 361.318794][T20136] netlink: 'syz.2.6775': attribute type 7 has an invalid length. [ 361.326770][T20136] netlink: 'syz.2.6775': attribute type 8 has an invalid length. [ 361.376885][T20136] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6775'. [ 361.419044][T20136] NCSI netlink: No device for ifindex 65584 [ 361.421845][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6778'. [ 361.605279][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6780'. [ 362.220058][T20177] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6795'. [ 362.286682][T20181] netlink: 54 bytes leftover after parsing attributes in process `syz.1.6796'. [ 362.307658][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6796'. [ 362.370309][T20185] netlink: 'syz.4.6799': attribute type 1 has an invalid length. [ 362.378498][T20185] netlink: 'syz.4.6799': attribute type 1 has an invalid length. [ 362.988948][T20216] netlink: 'syz.3.6812': attribute type 11 has an invalid length. [ 364.459337][T20294] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.486559][T20296] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 364.502001][T20296] syzkaller1: linktype set to 823 [ 364.789121][T20315] __nla_validate_parse: 4 callbacks suppressed [ 364.789145][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6862'. [ 365.091651][T20336] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6872'. [ 365.119345][T20336] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6872'. [ 365.177795][T20340] dvmrp0: left allmulticast mode [ 366.044133][T20389] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6898'. [ 366.102390][T20389] netem: invalid attributes len -24 [ 366.111519][T20389] netem: change failed [ 366.623673][T20413] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 367.162400][T20448] netlink: 766 bytes leftover after parsing attributes in process `syz.2.6925'. [ 367.698582][T20485] block nbd0: Unsupported socket: should be TCP or UNIX. [ 367.895301][T20494] netem: incorrect ge model size [ 367.904027][T20494] netem: change failed [ 367.919029][T20496] netlink: 'syz.3.6948': attribute type 5 has an invalid length. [ 368.974104][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6979'. [ 368.993531][T20566] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6979'. [ 369.008950][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6979'. [ 369.207560][T20578] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 369.234830][T20578] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6985'. [ 369.258988][T20578] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6985'. [ 369.272142][T20578] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 369.281184][T20578] netlink: 'syz.2.6985': attribute type 8 has an invalid length. [ 370.269727][T20637] __nla_validate_parse: 2 callbacks suppressed [ 370.269747][T20637] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7013'. [ 370.559349][T20643] nbd0: detected capacity change from 0 to 63 [ 370.587442][ T5825] block nbd0: Receive control failed (result -32) [ 370.596596][ T51] block nbd0: Receive control failed (result -32) [ 370.604260][T20400] block nbd0: Send control failed (result -32) [ 370.616379][T20400] block nbd0: Request send failed, requeueing [ 370.618573][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 370.636918][ T25] block nbd0: Dead connection, failed to find a fallback [ 370.645129][ T25] block nbd0: shutting down sockets [ 370.653106][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.665628][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 370.673947][T20400] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.688742][T20400] Buffer I/O error on dev nbd0, logical block 1, async page read [ 370.697351][T20400] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.707285][T20400] Buffer I/O error on dev nbd0, logical block 2, async page read [ 370.708172][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 370.715357][T20400] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.734389][T20400] Buffer I/O error on dev nbd0, logical block 3, async page read [ 370.742684][T20400] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.752540][T20400] Buffer I/O error on dev nbd0, logical block 0, async page read [ 370.760518][T20400] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.770329][T20400] Buffer I/O error on dev nbd0, logical block 1, async page read [ 370.779952][T20400] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.789592][T20400] Buffer I/O error on dev nbd0, logical block 2, async page read [ 370.797423][T20400] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.807838][T20400] Buffer I/O error on dev nbd0, logical block 3, async page read [ 370.816393][T20400] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.830254][T20400] Buffer I/O error on dev nbd0, logical block 0, async page read [ 370.838140][T20400] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 370.848821][T20400] Buffer I/O error on dev nbd0, logical block 1, async page read [ 370.857661][T20400] ldm_validate_partition_table(): Disk read failed. [ 370.885989][T20400] Dev nbd0: unable to read RDB block 0 [ 370.909492][T20400] nbd0: unable to read partition table [ 370.936544][T20400] ldm_validate_partition_table(): Disk read failed. [ 370.949255][T20400] Dev nbd0: unable to read RDB block 0 [ 370.959800][T20400] nbd0: unable to read partition table [ 371.120452][T20680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7034'. [ 371.245267][T20688] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7036'. [ 371.382929][T20696] netlink: 'syz.0.7041': attribute type 6 has an invalid length. [ 371.496603][T20702] ip6gre0: Master is either lo or non-ether device [ 371.655860][T20715] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 371.779382][T20722] netlink: 'syz.3.7054': attribute type 28 has an invalid length. [ 371.787024][T20723] tipc: Enabling of bearer rejected, already enabled [ 371.787526][T20722] netlink: 'syz.3.7054': attribute type 3 has an invalid length. [ 371.803604][T20722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7054'. [ 372.347049][T20756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7071'. [ 372.468161][T20763] tipc: New replicast peer: 255.255.255.255 [ 372.511037][T20763] tipc: Enabled bearer , priority 10 [ 372.518231][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7075'. [ 372.764798][T20772] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 372.806621][T20776] netlink: 'syz.2.7080': attribute type 12 has an invalid length. [ 372.819080][T20776] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.7080'. [ 373.127134][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7087'. [ 373.210628][T20789] macvlan2: entered allmulticast mode [ 373.216527][T20789] hsr0: entered allmulticast mode [ 373.253506][T20789] hsr_slave_0: entered allmulticast mode [ 373.279020][T20789] hsr_slave_1: entered allmulticast mode [ 374.190342][T20836] bond5: ARP target 1.0.0.0 is already present [ 374.196872][T20836] bond5: option arp_ip_target: invalid value (1) [ 374.237975][T20836] bond5 (unregistering): Released all slaves [ 375.696874][T20925] __nla_validate_parse: 5 callbacks suppressed [ 375.696896][T20925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7149'. [ 375.792781][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7150'. [ 375.904906][T20935] veth0_to_team: entered allmulticast mode [ 376.583185][T20975] netlink: 'syz.1.7174': attribute type 33 has an invalid length. [ 376.596703][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7175'. [ 376.700589][T20975] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 376.736274][T20975] bond3 (unregistering): Released all slaves [ 376.783982][T20988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7181'. [ 376.949542][T20999] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7185'. [ 377.033716][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7189'. [ 377.215851][T21016] tap0: tun_chr_ioctl cmd 2148553947 [ 377.271092][T21021] veth0: entered promiscuous mode [ 377.283576][T21020] veth0: left promiscuous mode [ 377.338897][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7196'. [ 377.366094][T21023] netlink: 'syz.0.7196': attribute type 1 has an invalid length. [ 377.409288][T21023] netlink: 'syz.0.7196': attribute type 2 has an invalid length. [ 377.563806][ T51] block nbd1: Receive control failed (result -32) [ 377.752164][T21050] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7208'. [ 378.337850][T21088] netlink: 'syz.4.7225': attribute type 2 has an invalid length. [ 378.983217][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.992597][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.433368][T21140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7250'. [ 379.625035][T21147] sch_fq: defrate 0 ignored. [ 379.657875][T21150] h: entered promiscuous mode [ 379.999798][T21177] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7267'. [ 380.900769][T21234] netlink: 'syz.2.7295': attribute type 1 has an invalid length. [ 380.908923][T21234] __nla_validate_parse: 3 callbacks suppressed [ 380.908945][T21234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7295'. [ 381.002174][T21240] xt_hashlimit: size too large, truncated to 1048576 [ 381.208887][T21249] netlink: 'syz.2.7300': attribute type 83 has an invalid length. [ 382.365088][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7334'. [ 383.911265][T21423] tap0: tun_chr_ioctl cmd 1074025678 [ 383.924620][T21423] tap0: group set to 0 [ 384.188848][T21439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7388'. [ 384.874908][T21473] netlink: zone id is out of range [ 384.900436][T21467] netlink: set zone limit has 4 unknown bytes [ 384.924729][T21473] netlink: zone id is out of range [ 385.383610][T21500] netem: incorrect gi model size [ 385.408780][T21500] netem: change failed [ 387.104478][T21606] veth0_to_bridge: entered promiscuous mode [ 387.114499][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7463'. [ 387.130304][T21603] veth0_to_bridge: left promiscuous mode [ 387.445554][T21626] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7472'. [ 387.730371][T21644] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7481'. [ 387.976333][T21658] tipc: Started in network mode [ 387.982499][T21658] tipc: Node identity ac14140f, cluster identity 4711 [ 387.990864][T21658] tipc: New replicast peer: 255.255.255.255 [ 387.997874][T21658] tipc: Enabled bearer , priority 10 [ 388.090000][T21664] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7491'. [ 389.109533][ T5893] tipc: Node number set to 2886997007 [ 389.119468][T21728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7521'. [ 389.137662][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7521'. [ 389.168848][T21728] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7521'. [ 389.193284][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7521'. [ 389.226495][T21728] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7521'. [ 389.421089][T21744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7529'. [ 390.217427][T21796] TCP: TCP_TX_DELAY enabled [ 390.596780][T21816] batadv_slave_1: default FDB implementation only supports local addresses [ 390.664112][T21822] macvtap1: entered allmulticast mode [ 390.683438][T21822] veth0_macvtap: entered allmulticast mode [ 391.761512][T21894] ipvlan2: entered allmulticast mode [ 391.769686][T21894] batadv_slave_1: entered allmulticast mode [ 391.777843][T21894] batman_adv: batadv0: Adding interface: ipvlan2 [ 391.786370][T21894] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.814782][T21894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.825882][T21894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.836588][T21894] batman_adv: batadv0: Interface activated: ipvlan2 [ 392.335324][T21918] hsr0 speed is unknown, defaulting to 1000 [ 392.412075][T21918] wg1 speed is unknown, defaulting to 1000 [ 392.429961][T21933] __nla_validate_parse: 5 callbacks suppressed [ 392.429982][T21933] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.7619'. [ 392.705751][T21947] sctp: [Deprecated]: syz.0.7626 (pid 21947) Use of int in maxseg socket option. [ 392.705751][T21947] Use struct sctp_assoc_value instead [ 392.963819][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7632'. [ 392.973060][T21963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7632'. [ 393.211447][T21974] netlink: 'syz.0.7637': attribute type 1 has an invalid length. [ 393.233754][T21974] netlink: 'syz.0.7637': attribute type 2 has an invalid length. [ 393.268229][T21974] netlink: 'syz.0.7637': attribute type 1 has an invalid length. [ 393.276636][T21974] netlink: 'syz.0.7637': attribute type 3 has an invalid length. [ 393.286463][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7637'. [ 393.478074][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7641'. [ 393.616556][T21994] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7646'. [ 394.597461][T22052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7673'. [ 394.868497][T22065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7679'. [ 395.159867][T22080] bridge0: port 3(syz_tun) entered blocking state [ 395.167510][T22080] bridge0: port 3(syz_tun) entered disabled state [ 395.174539][T22080] syz_tun: entered allmulticast mode [ 395.184611][T22080] syz_tun: entered promiscuous mode [ 395.192071][T22080] bridge0: port 3(syz_tun) entered blocking state [ 395.199145][T22080] bridge0: port 3(syz_tun) entered forwarding state [ 395.493152][T22097] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 396.016913][T22124] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7707'. [ 396.501258][T22158] netlink: 'syz.4.7723': attribute type 4 has an invalid length. [ 396.566043][T22162] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7725'. [ 396.599687][T22162] erspan0: entered promiscuous mode [ 397.839266][T22244] __nla_validate_parse: 1 callbacks suppressed [ 397.839282][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7764'. [ 398.013700][T22250] block nbd2: Unsupported socket: should be TCP or UNIX. [ 398.684216][T22277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7779'. [ 398.717557][T22277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7779'. [ 399.369062][T22307] IPVS: persistence engine module ip_vs_pe_ not found [ 399.466271][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7798'. [ 399.637797][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7798'. [ 400.251509][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7816'. [ 400.809072][T22377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7828'. [ 401.955430][T22451] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 401.979044][T22451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.579706][T22539] sctp: [Deprecated]: syz.3.7903 (pid 22539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.579706][T22539] Use struct sctp_sack_info instead [ 403.632581][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7906'. [ 403.683569][T22543] netlink: 'syz.1.7906': attribute type 30 has an invalid length. [ 403.693902][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7906'. [ 404.100514][T22572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7918'. [ 404.622459][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7933'. [ 405.161775][T22637] bond0 (unregistering): Released all slaves [ 405.249018][T22642] bond0: entered promiscuous mode [ 405.257164][T22642] bond_slave_0: entered promiscuous mode [ 405.264009][T22642] bond_slave_1: entered promiscuous mode [ 405.270344][T22642] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 405.280360][T22642] batadv0: entered promiscuous mode [ 405.287521][T22642] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 405.312048][T22642] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 405.331588][T22642] hsr1: entered promiscuous mode [ 405.337017][T22642] hsr1: entered allmulticast mode [ 405.343036][T22642] bond0: entered allmulticast mode [ 405.365140][T22642] bond_slave_0: entered allmulticast mode [ 405.375284][T22642] bond_slave_1: entered allmulticast mode [ 405.389824][T22642] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 405.400301][T22642] batadv0: entered allmulticast mode [ 405.406396][T22642] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.418335][T22642] bond0: left promiscuous mode [ 405.423436][T22642] bond_slave_0: left promiscuous mode [ 405.429644][T22642] bond_slave_1: left promiscuous mode [ 405.435268][T22642] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 405.444155][T22642] batadv0: left promiscuous mode [ 405.462677][T22640] netlink: 'syz.1.7951': attribute type 4 has an invalid length. [ 406.031189][T22682] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.038412][T22682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.304748][T22698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7977'. [ 406.806447][T22731] netlink: 'syz.2.7989': attribute type 9 has an invalid length. [ 406.832033][T22733] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7990'. [ 407.028985][T22744] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7996'. [ 407.262825][T22761] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8003'. [ 407.293812][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8002'. [ 407.324834][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8002'. [ 408.156161][T22817] netlink: 'syz.4.8029': attribute type 21 has an invalid length. [ 408.182418][T22817] netlink: 'syz.4.8029': attribute type 4 has an invalid length. [ 408.201687][T22821] netlink: 'syz.4.8029': attribute type 21 has an invalid length. [ 408.208151][T22817] netlink: 'syz.4.8029': attribute type 5 has an invalid length. [ 408.227910][T22823] netlink: 'syz.3.8031': attribute type 83 has an invalid length. [ 408.243173][T22821] netlink: 'syz.4.8029': attribute type 4 has an invalid length. [ 408.251515][T22821] netlink: 'syz.4.8029': attribute type 5 has an invalid length. [ 408.862632][T22862] __nla_validate_parse: 6 callbacks suppressed [ 408.862655][T22862] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8053'. [ 409.419696][T22891] netlink: 'syz.1.8064': attribute type 3 has an invalid length. [ 409.459663][T22891] netlink: 'syz.1.8064': attribute type 3 has an invalid length. [ 409.563985][T22891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8064'. [ 410.061765][T22915] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8075'. [ 410.332280][T22927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8081'. [ 410.577956][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8087'. [ 410.765337][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 410.795008][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 410.821987][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 410.842268][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 410.870372][T22958] IPv6: Can't replace route, no match found [ 410.871415][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 410.876865][T22958] IPv6: Can't replace route, no match found [ 410.911246][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 410.942024][T22953] netlink: 'syz.1.8094': attribute type 29 has an invalid length. [ 411.746252][T22995] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8114'. [ 411.955082][T23002] veth0: entered promiscuous mode [ 411.973455][T23001] veth0: left promiscuous mode [ 412.416463][T23032] netlink: 'syz.1.8130': attribute type 1 has an invalid length. [ 412.443052][T23032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8130'. [ 412.777805][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8143'. [ 413.721546][T23114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8169'. [ 413.973430][T23130] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.8177'. [ 414.017468][T23130] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 414.105980][T23138] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 414.515808][ T49] tipc: Subscription rejected, illegal request [ 414.770086][T23179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8202'. [ 415.394546][T23221] xt_hashlimit: size too large, truncated to 1048576 [ 415.579071][T23229] Bluetooth: hci1: too big key_count value 32778 [ 415.948294][T23242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8230'. [ 416.625953][T23280] validate_nla: 4 callbacks suppressed [ 416.625977][T23280] netlink: 'syz.0.8247': attribute type 17 has an invalid length. [ 416.642750][T23280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8247'. [ 416.652898][T23280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8247'. [ 416.892276][T23291] sctp: [Deprecated]: syz.0.8252 (pid 23291) Use of int in max_burst socket option deprecated. [ 416.892276][T23291] Use struct sctp_assoc_value instead [ 417.120507][T23305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8259'. [ 417.304222][T23313] syzkaller1: entered promiscuous mode [ 417.315839][T23313] syzkaller1: entered allmulticast mode [ 417.606722][T23325] netlink: 'syz.3.8269': attribute type 1 has an invalid length. [ 417.629784][T23325] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8269'. [ 417.650022][T23325] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8269'. [ 417.670696][T23325] netlink: 'syz.3.8269': attribute type 1 has an invalid length. [ 417.690001][T23325] netlink: 634 bytes leftover after parsing attributes in process `syz.3.8269'. [ 417.815230][T23335] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 417.896284][T23343] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8276'. [ 417.946291][T23346] netlink: 'syz.0.8278': attribute type 1 has an invalid length. [ 418.226215][T23362] sctp: [Deprecated]: syz.1.8283 (pid 23362) Use of int in max_burst socket option deprecated. [ 418.226215][T23362] Use struct sctp_assoc_value instead [ 418.990387][T23406] __nla_validate_parse: 4 callbacks suppressed [ 418.990410][T23406] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8304'. [ 419.226759][T23417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8310'. [ 419.400849][T23422] syzkaller1: entered promiscuous mode [ 419.413828][T23422] syzkaller1: entered allmulticast mode [ 420.117863][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8330'. [ 420.216700][T23466] veth0: entered promiscuous mode [ 420.243050][T23464] veth0: left promiscuous mode [ 420.395348][T23475] xt_hashlimit: size too large, truncated to 1048576 [ 420.507631][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8340'. [ 420.547495][T23484] gtp1: entered promiscuous mode [ 420.561088][T23484] gtp1: entered allmulticast mode [ 420.635223][T23490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8343'. [ 420.683838][T23490] veth0_to_team: entered promiscuous mode [ 420.705620][T23490] veth0_to_team: left promiscuous mode [ 420.796197][ T5884] IPVS: starting estimator thread 0... [ 420.865281][T23499] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8347'. [ 420.908939][T23497] IPVS: using max 27 ests per chain, 64800 per kthread [ 421.054494][T23508] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8352'. [ 421.108071][T23511] sctp: [Deprecated]: syz.4.8351 (pid 23511) Use of int in max_burst socket option. [ 421.108071][T23511] Use struct sctp_assoc_value instead [ 421.146154][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'. [ 421.196030][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'. [ 421.415930][T23531] netlink: 'syz.2.8361': attribute type 4 has an invalid length. [ 421.438998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.565998][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8365'. [ 423.005251][T23621] netlink: 'syz.0.8402': attribute type 39 has an invalid length. [ 423.516309][T23649] ieee802154 phy1 wpan1: encryption failed: -22 [ 423.582152][T23652] syzkaller1: entered promiscuous mode [ 423.587791][T23652] syzkaller1: entered allmulticast mode [ 423.772356][T23657] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.244412][T23691] veth0: entered promiscuous mode [ 424.252018][T23691] veth0: left promiscuous mode [ 424.472113][T23699] __nla_validate_parse: 2 callbacks suppressed [ 424.472133][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8436'. [ 425.351099][T23737] netlink: 'syz.4.8455': attribute type 4 has an invalid length. [ 425.443286][T23743] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.8456'. [ 425.596846][T23752] team0: No ports can be present during mode change [ 425.745455][T23754] netlink: 'syz.1.8462': attribute type 2 has an invalid length. [ 425.808842][T23754] netlink: 'syz.1.8462': attribute type 2 has an invalid length. [ 426.059884][T23772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8470'. [ 426.075210][T23772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8470'. [ 426.087547][T23772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8470'. [ 426.102174][T23772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8470'. [ 426.542756][T23795] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8481'. [ 427.417052][ T10] hsr0 speed is unknown, defaulting to 1000 [ 427.423913][ T5907] hsr0 speed is unknown, defaulting to 1000 [ 427.428302][T23837] syzkaller1: entered promiscuous mode [ 427.435574][T23837] syzkaller1: entered allmulticast mode [ 427.441210][ T5886] hsr0 speed is unknown, defaulting to 1000 [ 427.484224][T23841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8501'. [ 427.562525][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8501'. [ 427.594169][T23841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8501'. [ 427.809724][T23857] syzkaller1: entered promiscuous mode [ 427.825507][T23857] syzkaller1: entered allmulticast mode [ 427.940024][T23863] nbd: device at index 3 is going down [ 428.218158][T23865] udevd[23865]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 429.955798][T23971] hsr0 speed is unknown, defaulting to 1000 [ 430.007359][T23971] wg1 speed is unknown, defaulting to 1000 [ 430.746037][T24018] netlink: 'syz.3.8575': attribute type 3 has an invalid length. [ 430.809465][T24001] syzkaller1: entered promiscuous mode [ 430.828154][T24001] syzkaller1: entered allmulticast mode [ 430.951523][T24025] netlink: 'syz.0.8578': attribute type 1 has an invalid length. [ 431.020378][T24026] __nla_validate_parse: 3 callbacks suppressed [ 431.020402][T24026] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8577'. [ 431.158287][T24032] netlink: 'syz.0.8582': attribute type 4 has an invalid length. [ 432.270959][T24101] netlink: 'syz.4.8613': attribute type 11 has an invalid length. [ 432.319579][T24100] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 432.393664][T24110] netlink: 'syz.2.8618': attribute type 12 has an invalid length. [ 432.419319][T24110] netlink: 'syz.2.8618': attribute type 29 has an invalid length. [ 432.443663][T24110] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8618'. [ 432.453343][T24110] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8618'. [ 432.578677][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 432.598961][ T29] audit: type=1800 audit(1775012082.326:4): pid=24116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8621" name="memory.events" dev="tmpfs" ino=8715 res=0 errno=0 [ 432.626381][T24121] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8622'. [ 432.635910][T24121] netlink: 'syz.0.8622': attribute type 2 has an invalid length. [ 432.962140][T24136] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.8630'. [ 433.508543][T24154] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8638'. [ 433.574877][T24158] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 433.599789][T24158] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 433.608247][T24158] gretap1: entered promiscuous mode [ 433.618771][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 433.618917][T24158] gretap1: entered allmulticast mode [ 434.047026][T24176] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8649'. [ 434.176045][T24184] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8653'. [ 434.658826][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 434.734997][T24204] netlink: 'syz.1.8661': attribute type 1 has an invalid length. [ 434.743259][T24204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8661'. [ 435.457704][T24232] syzkaller1: entered promiscuous mode [ 435.469426][T24232] syzkaller1: entered allmulticast mode [ 435.493478][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8677'. [ 435.617874][T24243] =a: renamed from lo [ 435.698683][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 435.925420][T24258] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 435.957824][T24258] batman_adv: batadv0: Removing interface: ipvlan2 [ 435.986449][T24258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.512725][T24295] tipc: Started in network mode [ 436.554114][T24295] tipc: Node identity e0000001, cluster identity 4711 [ 436.569449][T24295] tipc: Enabling of bearer rejected, failed to enable media [ 436.632278][T24301] __nla_validate_parse: 1 callbacks suppressed [ 436.632302][T24301] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.8709'. [ 436.738769][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 436.976336][T24322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.984228][T24322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.999681][T24322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.011944][T24322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.021252][T24322] batman_adv: batadv0: Removing interface: netdevsim0 [ 437.215770][T24332] team0 (unregistering): Port device team_slave_0 removed [ 437.246107][T24332] team0 (unregistering): Port device team_slave_1 removed [ 437.249877][T24336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8722'. [ 437.270372][T24334] macvlan0: entered promiscuous mode [ 437.557719][T24349] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8728'. [ 437.778799][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 437.855394][T24372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8737'. [ 438.044122][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8741'. [ 438.133468][T24381] netlink: 'syz.3.8741': attribute type 1 has an invalid length. [ 438.141891][T24381] netlink: 'syz.3.8741': attribute type 2 has an invalid length. [ 438.180152][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8746'. [ 438.760676][T24426] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8759'. [ 438.818793][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 439.189807][T24440] erspan0: entered promiscuous mode [ 439.202447][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8765'. [ 439.254392][T24450] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8771'. [ 439.290747][T24452] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 439.683424][T24478] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8783'. [ 439.744089][T24482] netlink: 'syz.4.8784': attribute type 7 has an invalid length. [ 439.771984][T24482] gretap0: entered promiscuous mode [ 439.791928][T24482] gretap0: left promiscuous mode [ 439.858793][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 440.424580][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.436350][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.583400][T24520] veth0_to_team (unregistering): left allmulticast mode [ 440.635628][T24520] team0: Port device team_slave_0 removed [ 440.890319][T24549] netlink: 'syz.4.8814': attribute type 11 has an invalid length. [ 440.898672][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 441.155533][ T5884] wg1 speed is unknown, defaulting to 1000 [ 441.650392][T24585] __nla_validate_parse: 4 callbacks suppressed [ 441.650414][T24585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8830'. [ 441.729898][T24592] netlink: 'syz.0.8833': attribute type 10 has an invalid length. [ 441.938859][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 442.679750][T24638] block nbd2: server does not support multiple connections per device. [ 442.689952][T24638] block nbd2: shutting down sockets [ 442.978677][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 443.479669][T24688] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8875'. [ 443.608729][T24696] sock: sock_set_timeout: `syz.2.8878' (pid 24696) tries to set negative timeout [ 444.018678][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 444.568782][T24751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8905'. [ 445.058773][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 445.395460][T24801] syzkaller1: entered promiscuous mode [ 445.408188][T24801] syzkaller1: entered allmulticast mode [ 445.850567][T24828] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8943'. [ 446.098674][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 446.651544][T24868] bridge0: port 3(syz_tun) entered disabled state [ 446.662712][T24868] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.671257][T24868] bridge0: port 1(0x9) entered disabled state [ 446.723736][T24868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.735408][T24868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.823644][T24868] veth0_macvtap: left allmulticast mode [ 446.834974][ T5884] hsr0 speed is unknown, defaulting to 1000 [ 446.841349][ T5884] syz1: Port: 1 Link DOWN [ 446.841405][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 446.841437][ T13] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.879511][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 446.888014][ T13] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.898068][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 446.927552][ T13] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.955003][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 446.973962][ T13] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.138805][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 447.327713][T24901] netlink: 'syz.0.8971': attribute type 9 has an invalid length. [ 447.348367][T24901] netlink: 'syz.0.8971': attribute type 11 has an invalid length. [ 447.373906][T24901] netlink: 'syz.0.8971': attribute type 12 has an invalid length. [ 447.389053][T24901] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.8971'. [ 447.399810][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8971'. [ 448.149199][T24946] netlink: 'syz.4.8984': attribute type 1 has an invalid length. [ 448.178735][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 448.243461][T24946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.361341][T24960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.792885][T24986] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.8996'. [ 448.857816][T24988] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 448.966734][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8999'. [ 448.976041][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8999'. [ 449.030209][T24995] netlink: 'syz.1.9000': attribute type 15 has an invalid length. [ 449.042628][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9000'. [ 449.088366][T24995] netlink: 'syz.1.9000': attribute type 15 has an invalid length. [ 449.096384][T24995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9000'. [ 449.097786][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 449.115816][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 449.127168][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 449.146903][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 449.218814][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.584253][T25024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9012'. [ 449.600385][T25024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9012'. [ 449.684586][T25024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9012'. [ 450.258747][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 450.550822][T25056] netlink: 'syz.2.9023': attribute type 7 has an invalid length. [ 450.988141][T25056] netlink: 'syz.2.9023': attribute type 7 has an invalid length. [ 451.298659][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 452.086606][T25089] syzkaller1: entered promiscuous mode [ 452.092496][T25089] syzkaller1: entered allmulticast mode [ 452.220294][T25093] netlink: Conntrack attr has 3 unknown bytes [ 452.338678][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 452.721808][T25108] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.741246][T25108] bond3: (slave lo): Enslaving as an active interface with an up link [ 452.750335][T25108] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 452.780191][T25112] __nla_validate_parse: 9 callbacks suppressed [ 452.780213][T25112] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9045'. [ 452.877016][T25114] bond3: option mode: unable to set because the bond device has slaves [ 452.923296][T25116] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9047'. [ 453.314879][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9054'. [ 453.378664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 453.502974][T25136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9057'. [ 453.524196][T25136] netlink: 'syz.2.9057': attribute type 7 has an invalid length. [ 453.540244][T25136] netlink: 'syz.2.9057': attribute type 8 has an invalid length. [ 453.558495][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9057'. [ 453.812710][T25150] bond3: option mode: unable to set because the bond device has slaves [ 453.840618][T25150] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 454.026084][T25158] trusted_key: syz.3.9069 sent an empty control message without MSG_MORE. [ 454.371922][T25176] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9075'. [ 454.401367][T25176] netlink: 320 bytes leftover after parsing attributes in process `syz.2.9075'. [ 454.418684][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 454.696666][T25194] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9081'. [ 454.792207][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9083'. [ 454.834388][T25201] netlink: 'syz.4.9084': attribute type 7 has an invalid length. [ 454.866342][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9085'. [ 454.894233][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.908995][T25201] netlink: 'syz.4.9084': attribute type 7 has an invalid length. [ 454.919269][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.928560][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.977542][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.458977][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 455.698510][T25249] netlink: 'syz.4.9101': attribute type 3 has an invalid length. [ 456.499021][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 456.923494][T25296] chnl_net:caif_netlink_parms(): no params data found [ 457.181084][T25305] netlink: 'syz.3.9123': attribute type 4 has an invalid length. [ 457.234289][T25305] netlink: 'syz.3.9123': attribute type 4 has an invalid length. [ 457.538767][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 457.774150][T25330] siw: device registration error -23 [ 457.807630][T25330] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 457.826161][T25330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.852860][T25332] netlink: 'syz.4.9135': attribute type 12 has an invalid length. [ 457.879327][T25332] __nla_validate_parse: 8 callbacks suppressed [ 457.879348][T25332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9135'. [ 457.924889][T25332] netlink: 'syz.4.9135': attribute type 12 has an invalid length. [ 457.934584][T25332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9135'. [ 458.322486][T25346] netlink: 'syz.4.9140': attribute type 3 has an invalid length. [ 458.578682][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 458.623953][T25354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9143'. [ 459.618662][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 459.994357][T25368] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 460.009199][T25368] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 460.254186][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9161'. [ 460.264365][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9161'. [ 460.448005][T25408] validate_nla: 1 callbacks suppressed [ 460.448030][T25408] netlink: 'syz.4.9165': attribute type 9 has an invalid length. [ 460.503365][T25408] netlink: 'syz.4.9165': attribute type 11 has an invalid length. [ 460.537306][T25408] netlink: 'syz.4.9165': attribute type 12 has an invalid length. [ 460.547008][T25408] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.9165'. [ 460.557290][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9165'. [ 460.595809][T25416] netlink: 'syz.3.9169': attribute type 14 has an invalid length. [ 460.621892][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9169'. [ 460.633032][T25420] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.9170'. [ 460.658689][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 460.659056][T25416] netlink: 'syz.3.9169': attribute type 14 has an invalid length. [ 460.666658][ T127] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.673920][T25416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9169'. [ 460.703526][ T127] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.713194][ T127] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.724248][ T127] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.963494][T25430] netlink: 'syz.1.9176': attribute type 1 has an invalid length. [ 461.698707][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 462.621220][T25504] hsr_slave_0 (unregistering): left promiscuous mode [ 462.668010][T25505] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 462.738669][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 462.921692][T25518] __nla_validate_parse: 7 callbacks suppressed [ 462.921715][T25518] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.9215'. [ 463.100362][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9217'. [ 463.132553][T25526] xt_hashlimit: size too large, truncated to 1048576 [ 463.288019][T25532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9222'. [ 463.778664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 464.345063][T25581] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 464.435776][T25581] bond3: (slave lo): Enslaving as an active interface with an up link [ 464.487485][T25581] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 464.818671][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 465.024129][T25614] syzkaller1: entered promiscuous mode [ 465.031054][T25613] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9254'. [ 465.039951][T25614] syzkaller1: entered allmulticast mode [ 465.116407][T25618] syzkaller0: entered allmulticast mode [ 465.151324][T25618] syzkaller0 (unregistering): left allmulticast mode [ 465.153747][T25621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9257'. [ 465.431312][T25636] vlan1: left allmulticast mode [ 465.436403][T25636] veth0_vlan: left allmulticast mode [ 465.583800][ T29] audit: type=1800 audit(1775012115.326:5): pid=25643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9267" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9290 res=0 errno=0 [ 465.858660][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 465.881741][T25659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9273'. [ 466.459201][T25679] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9281'. [ 466.898677][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 467.118046][T25711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9294'. [ 467.597809][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9304'. [ 467.632083][T25737] block nbd0: reconnected socket [ 467.632574][ T51] block nbd0: Receive control failed (result -107) [ 467.909918][T25741] syzkaller1: entered promiscuous mode [ 467.931161][T25741] syzkaller1: entered allmulticast mode [ 467.938735][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 468.597751][T25766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9316'. [ 468.632615][T25763] syzkaller1: entered promiscuous mode [ 468.644439][T25763] syzkaller1: entered allmulticast mode [ 468.931647][T25775] netlink: 'syz.2.9320': attribute type 1 has an invalid length. [ 468.948921][T25775] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9320'. [ 468.968186][T25775] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9320'. [ 468.978654][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 469.148313][T25788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9324'. [ 469.184031][T25787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 469.225432][T25790] netlink: 'syz.2.9326': attribute type 1 has an invalid length. [ 469.609265][T25805] syzkaller1: entered promiscuous mode [ 469.615163][T25805] syzkaller1: entered allmulticast mode [ 469.624818][T25805] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 469.674014][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9334'. [ 470.018775][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 470.094505][T25827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.127225][T25830] netlink: 'syz.2.9343': attribute type 1 has an invalid length. [ 470.151697][T25830] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9343'. [ 470.243231][T25833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9346'. [ 470.299116][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9349'. [ 470.310503][T25843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9349'. [ 470.322019][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9349'. [ 470.901291][T25875] netlink: 'syz.4.9364': attribute type 18 has an invalid length. [ 470.951435][T25875] netlink: 'syz.4.9364': attribute type 18 has an invalid length. [ 471.058672][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 471.934725][T25930] netlink: 'syz.1.9388': attribute type 9 has an invalid length. [ 471.946625][T25930] netlink: 'syz.1.9388': attribute type 11 has an invalid length. [ 471.957071][T25930] netlink: 'syz.1.9388': attribute type 12 has an invalid length. [ 472.098780][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 472.132162][T25940] syzkaller1: entered promiscuous mode [ 472.149062][T25940] syzkaller1: entered allmulticast mode [ 472.587017][T25967] netlink: 'syz.1.9403': attribute type 10 has an invalid length. [ 472.955526][T25988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.138773][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 473.281000][T26010] "syz.2.9424" (26010) uses obsolete ecb(arc4) skcipher [ 473.652596][T26031] __nla_validate_parse: 10 callbacks suppressed [ 473.652618][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9434'. [ 473.769637][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9435'. [ 473.792499][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9435'. [ 474.178770][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 475.218685][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 476.108012][ T5488] veth1_macvtap: left promiscuous mode [ 476.165159][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9487'. [ 476.203999][T26171] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 476.215253][T26171] syzkaller1: Refused to change device type [ 476.258764][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 476.424379][T26185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9491'. [ 477.298668][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 477.773925][T26241] netlink: 'syz.0.9509': attribute type 9 has an invalid length. [ 477.798115][T26241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9509'. [ 477.814100][T26241] netlink: 'syz.0.9509': attribute type 9 has an invalid length. [ 477.823016][T26241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9509'. [ 478.266230][T26262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9516'. [ 478.338668][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 478.390283][T26267] netlink: 'syz.0.9519': attribute type 21 has an invalid length. [ 478.427519][T26267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9519'. [ 478.437611][T26268] syzkaller1: entered promiscuous mode [ 478.445874][T26268] syzkaller1: entered allmulticast mode [ 478.455080][T26267] netlink: 'syz.0.9519': attribute type 21 has an invalid length. [ 478.467439][T26267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9519'. [ 479.027918][T26293] vlan4: entered allmulticast mode [ 479.051710][T26293] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9532'. [ 479.104289][T26293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.140540][T26293] bond_slave_0: left allmulticast mode [ 479.172619][T26293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.222319][T26293] bond_slave_1: left allmulticast mode [ 479.240810][T26293] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 479.264761][T26293] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 479.264765][T26307] netlink: 'syz.3.9538': attribute type 1 has an invalid length. [ 479.281883][T26293] bond0 (unregistering): Released all slaves [ 479.378671][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 479.404696][T26307] bond4: entered promiscuous mode [ 479.417601][T26307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 479.417964][T26313] netlink: 'syz.4.9540': attribute type 1 has an invalid length. [ 479.447843][T26308] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 479.456361][T26308] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 479.555641][T26313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.577304][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9541'. [ 479.593886][T26311] 8021q: adding VLAN 0 to HW filter on device bond4 [ 479.601602][T26311] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 479.620388][T26311] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 479.636258][T26311] bond4: (slave ip6gre1): making interface the new active one [ 479.644623][T26311] ip6gre1: entered promiscuous mode [ 479.652806][T26311] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 479.697598][T26318] bond0: (slave geneve3): making interface the new active one [ 479.722349][T26318] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 479.812445][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9541'. [ 479.827443][ T13] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 479.841857][ T13] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 479.867284][ T13] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 479.881578][ T13] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 480.143387][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9548'. [ 480.199463][T26340] netlink: 'syz.2.9550': attribute type 1 has an invalid length. [ 480.292726][T26340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.391879][T26343] bond0: (slave ip6erspan0): making interface the new active one [ 480.410235][T26343] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 480.418780][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 480.650209][T26354] tls_set_device_offload_rx: netdev not found [ 480.699179][T26359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9558'. [ 480.820699][T26354] [ 480.823113][T26354] ====================================================== [ 480.830158][T26354] WARNING: possible circular locking dependency detected [ 480.837283][T26354] syzkaller #0 Not tainted [ 480.841721][T26354] ------------------------------------------------------ [ 480.848747][T26354] syz.1.9556/26354 is trying to acquire lock: [ 480.854935][T26354] ffffffff8ee9de90 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 480.864702][T26354] [ 480.864702][T26354] but task is already holding lock: [ 480.872065][T26354] ffff888069266c60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 480.881468][T26354] [ 480.881468][T26354] which lock already depends on the new lock. [ 480.881468][T26354] [ 480.891881][T26354] [ 480.891881][T26354] the existing dependency chain (in reverse order) is: [ 480.900904][T26354] [ 480.900904][T26354] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 480.908672][T26354] lock_sock_nested+0x48/0x100 [ 480.913994][T26354] inet_shutdown+0x6a/0x390 [ 480.919221][T26354] nbd_mark_nsock_dead+0x2e9/0x560 [ 480.924893][T26354] recv_work+0x1c7f/0x1d90 [ 480.929839][T26354] process_scheduled_works+0xb6e/0x18c0 [ 480.935944][T26354] worker_thread+0xa53/0xfc0 [ 480.941067][T26354] kthread+0x388/0x470 [ 480.945747][T26354] ret_from_fork+0x51e/0xb90 [ 480.950871][T26354] ret_from_fork_asm+0x1a/0x30 [ 480.956257][T26354] [ 480.956257][T26354] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 480.964020][T26354] __mutex_lock+0x19f/0x1300 [ 480.969157][T26354] nbd_queue_rq+0x37b/0x1100 [ 480.974363][T26354] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 480.980440][T26354] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 480.987298][T26354] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 480.993808][T26354] blk_mq_run_hw_queue+0x348/0x4f0 [ 480.999447][T26354] blk_mq_dispatch_list+0xd16/0xe10 [ 481.005270][T26354] blk_mq_flush_plug_list+0x48d/0x570 [ 481.011683][T26354] __blk_flush_plug+0x3ed/0x4d0 [ 481.017063][T26354] __submit_bio+0x28d/0x580 [ 481.022196][T26354] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 481.028390][T26354] block_read_full_folio+0x599/0x830 [ 481.034206][T26354] filemap_read_folio+0x137/0x3b0 [ 481.039758][T26354] do_read_cache_folio+0x358/0x590 [ 481.045398][T26354] read_part_sector+0xb6/0x2b0 [ 481.050689][T26354] adfspart_check_ICS+0xa5/0xa40 [ 481.056166][T26354] bdev_disk_changed+0x7ba/0x1550 [ 481.061721][T26354] blkdev_get_whole+0x380/0x510 [ 481.067098][T26354] bdev_open+0x31e/0xd30 [ 481.071867][T26354] blkdev_open+0x470/0x610 [ 481.076814][T26354] do_dentry_open+0x785/0x14e0 [ 481.082118][T26354] vfs_open+0x3b/0x340 [ 481.086807][T26354] path_openat+0x2e08/0x3860 [ 481.091947][T26354] do_file_open+0x23e/0x4a0 [ 481.097011][T26354] do_sys_openat2+0x113/0x200 [ 481.102264][T26354] __x64_sys_openat+0x138/0x170 [ 481.107655][T26354] do_syscall_64+0x14d/0xf80 [ 481.112773][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.119242][T26354] [ 481.119242][T26354] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 481.126489][T26354] __mutex_lock+0x19f/0x1300 [ 481.131823][T26354] nbd_queue_rq+0xc6/0x1100 [ 481.136878][T26354] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 481.142972][T26354] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 481.149989][T26354] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 481.156505][T26354] blk_mq_run_hw_queue+0x348/0x4f0 [ 481.162166][T26354] blk_mq_dispatch_list+0xd16/0xe10 [ 481.167891][T26354] blk_mq_flush_plug_list+0x48d/0x570 [ 481.173789][T26354] __blk_flush_plug+0x3ed/0x4d0 [ 481.179258][T26354] __submit_bio+0x28d/0x580 [ 481.184304][T26354] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 481.190463][T26354] block_read_full_folio+0x599/0x830 [ 481.196662][T26354] filemap_read_folio+0x137/0x3b0 [ 481.202239][T26354] do_read_cache_folio+0x358/0x590 [ 481.207981][T26354] read_part_sector+0xb6/0x2b0 [ 481.213300][T26354] adfspart_check_ICS+0xa5/0xa40 [ 481.219742][T26354] bdev_disk_changed+0x7ba/0x1550 [ 481.225388][T26354] blkdev_get_whole+0x380/0x510 [ 481.230851][T26354] bdev_open+0x31e/0xd30 [ 481.235622][T26354] blkdev_open+0x470/0x610 [ 481.240656][T26354] do_dentry_open+0x785/0x14e0 [ 481.245948][T26354] vfs_open+0x3b/0x340 [ 481.250643][T26354] path_openat+0x2e08/0x3860 [ 481.255758][T26354] do_file_open+0x23e/0x4a0 [ 481.260788][T26354] do_sys_openat2+0x113/0x200 [ 481.266008][T26354] __x64_sys_openat+0x138/0x170 [ 481.271651][T26354] do_syscall_64+0x14d/0xf80 [ 481.276793][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.283209][T26354] [ 481.283209][T26354] -> #5 (set->srcu){.+.+}-{0:0}: [ 481.290345][T26354] __synchronize_srcu+0xca/0x300 [ 481.295899][T26354] elevator_switch+0x1e8/0x7a0 [ 481.301197][T26354] elevator_change+0x2cc/0x450 [ 481.306679][T26354] elevator_set_default+0x36c/0x430 [ 481.312400][T26354] blk_register_queue+0x366/0x430 [ 481.317963][T26354] __add_disk+0x677/0xd50 [ 481.322821][T26354] add_disk_fwnode+0xfb/0x480 [ 481.328029][T26354] nbd_dev_add+0x72c/0xb50 [ 481.332967][T26354] nbd_init+0x168/0x1f0 [ 481.337667][T26354] do_one_initcall+0x250/0x8d0 [ 481.342960][T26354] do_initcall_level+0x104/0x190 [ 481.348434][T26354] do_initcalls+0x59/0xa0 [ 481.353288][T26354] kernel_init_freeable+0x2a6/0x3e0 [ 481.359016][T26354] kernel_init+0x1d/0x1d0 [ 481.363880][T26354] ret_from_fork+0x51e/0xb90 [ 481.369000][T26354] ret_from_fork_asm+0x1a/0x30 [ 481.374295][T26354] [ 481.374295][T26354] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 481.382140][T26354] __mutex_lock+0x19f/0x1300 [ 481.387268][T26354] elevator_change+0x1b3/0x450 [ 481.392569][T26354] elevator_set_none+0xb5/0x140 [ 481.397946][T26354] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 481.404283][T26354] nbd_start_device+0x17f/0xb10 [ 481.409670][T26354] nbd_genl_connect+0x165b/0x1cf0 [ 481.415348][T26354] genl_family_rcv_msg_doit+0x22a/0x330 [ 481.421453][T26354] genl_rcv_msg+0x61c/0x7a0 [ 481.426488][T26354] netlink_rcv_skb+0x232/0x4b0 [ 481.432221][T26354] genl_rcv+0x28/0x40 [ 481.436736][T26354] netlink_unicast+0x80f/0x9b0 [ 481.442041][T26354] netlink_sendmsg+0x813/0xb40 [ 481.447362][T26354] ____sys_sendmsg+0x972/0x9f0 [ 481.452670][T26354] ___sys_sendmsg+0x2a5/0x360 [ 481.457882][T26354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.463432][T26354] do_syscall_64+0x14d/0xf80 [ 481.468547][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.474975][T26354] [ 481.474975][T26354] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 481.483681][T26354] blk_alloc_queue+0x546/0x680 [ 481.488972][T26354] __blk_mq_alloc_disk+0x197/0x390 [ 481.494639][T26354] nbd_dev_add+0x499/0xb50 [ 481.499581][T26354] nbd_init+0x168/0x1f0 [ 481.504353][T26354] do_one_initcall+0x250/0x8d0 [ 481.509736][T26354] do_initcall_level+0x104/0x190 [ 481.515206][T26354] do_initcalls+0x59/0xa0 [ 481.520065][T26354] kernel_init_freeable+0x2a6/0x3e0 [ 481.525794][T26354] kernel_init+0x1d/0x1d0 [ 481.530668][T26354] ret_from_fork+0x51e/0xb90 [ 481.535788][T26354] ret_from_fork_asm+0x1a/0x30 [ 481.541123][T26354] [ 481.541123][T26354] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 481.548344][T26354] fs_reclaim_acquire+0x71/0x100 [ 481.553814][T26354] __kmalloc_cache_noprof+0x40/0x660 [ 481.559649][T26354] cryptomgr_notify+0x85/0x930 [ 481.565085][T26354] notifier_call_chain+0x1be/0x400 [ 481.570780][T26354] blocking_notifier_call_chain+0x6a/0x90 [ 481.577031][T26354] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 481.582848][T26354] crypto_alloc_tfm_node+0x13e/0x3f0 [ 481.588845][T26354] crypto_alloc_sync_skcipher+0x39/0xd0 [ 481.594930][T26354] rxkad_init+0x20/0xe0 [ 481.599700][T26354] rxrpc_init_security+0x72/0x120 [ 481.605263][T26354] af_rxrpc_init+0x13d/0x2e0 [ 481.610429][T26354] do_one_initcall+0x250/0x8d0 [ 481.615744][T26354] do_initcall_level+0x104/0x190 [ 481.621234][T26354] do_initcalls+0x59/0xa0 [ 481.626110][T26354] kernel_init_freeable+0x2a6/0x3e0 [ 481.631863][T26354] kernel_init+0x1d/0x1d0 [ 481.636729][T26354] ret_from_fork+0x51e/0xb90 [ 481.641873][T26354] ret_from_fork_asm+0x1a/0x30 [ 481.647191][T26354] [ 481.647191][T26354] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 481.655301][T26354] down_read+0x47/0x2e0 [ 481.659993][T26354] blocking_notifier_call_chain+0x54/0x90 [ 481.666239][T26354] __crypto_register_alg+0x32b/0x3c0 [ 481.672052][T26354] crypto_register_alg+0x447/0x810 [ 481.677687][T26354] do_one_initcall+0x250/0x8d0 [ 481.683068][T26354] do_initcall_level+0x104/0x190 [ 481.688626][T26354] do_initcalls+0x59/0xa0 [ 481.693482][T26354] kernel_init_freeable+0x2a6/0x3e0 [ 481.699300][T26354] kernel_init+0x1d/0x1d0 [ 481.704167][T26354] ret_from_fork+0x51e/0xb90 [ 481.709644][T26354] ret_from_fork_asm+0x1a/0x30 [ 481.714940][T26354] [ 481.714940][T26354] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 481.722507][T26354] __lock_acquire+0x15a5/0x2cf0 [ 481.727983][T26354] lock_acquire+0xf0/0x2e0 [ 481.732922][T26354] down_write+0x96/0x200 [ 481.738044][T26354] crypto_alg_mod_lookup+0x211/0x5f0 [ 481.743863][T26354] crypto_alloc_tfm_node+0x13e/0x3f0 [ 481.749680][T26354] tls_set_sw_offload+0xa33/0x1780 [ 481.755421][T26354] tls_setsockopt+0xf3e/0x15c0 [ 481.760803][T26354] do_sock_setsockopt+0x17c/0x1b0 [ 481.766362][T26354] __x64_sys_setsockopt+0x13d/0x1b0 [ 481.772100][T26354] do_syscall_64+0x14d/0xf80 [ 481.777403][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.783930][T26354] [ 481.783930][T26354] other info that might help us debug this: [ 481.783930][T26354] [ 481.794160][T26354] Chain exists of: [ 481.794160][T26354] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 481.794160][T26354] [ 481.807209][T26354] Possible unsafe locking scenario: [ 481.807209][T26354] [ 481.814661][T26354] CPU0 CPU1 [ 481.820029][T26354] ---- ---- [ 481.825448][T26354] lock(sk_lock-AF_INET6); [ 481.830054][T26354] lock(&nsock->tx_lock); [ 481.837172][T26354] lock(sk_lock-AF_INET6); [ 481.844216][T26354] lock(crypto_alg_sem); [ 481.848668][T26354] [ 481.848668][T26354] *** DEADLOCK *** [ 481.848668][T26354] [ 481.856826][T26354] 1 lock held by syz.1.9556/26354: [ 481.861954][T26354] #0: ffff888069266c60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 481.871894][T26354] [ 481.871894][T26354] stack backtrace: [ 481.877794][T26354] CPU: 1 UID: 0 PID: 26354 Comm: syz.1.9556 Not tainted syzkaller #0 PREEMPT(full) [ 481.877814][T26354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.877825][T26354] Call Trace: [ 481.877832][T26354] [ 481.877840][T26354] dump_stack_lvl+0xe8/0x150 [ 481.877865][T26354] print_circular_bug+0x2e1/0x300 [ 481.877892][T26354] check_noncircular+0x12e/0x150 [ 481.877919][T26354] __lock_acquire+0x15a5/0x2cf0 [ 481.877949][T26354] lock_acquire+0xf0/0x2e0 [ 481.877968][T26354] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 481.877993][T26354] down_write+0x96/0x200 [ 481.878014][T26354] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 481.878034][T26354] ? __pfx_down_write+0x10/0x10 [ 481.878057][T26354] ? crypto_larval_alloc+0x1bf/0x290 [ 481.878077][T26354] crypto_alg_mod_lookup+0x211/0x5f0 [ 481.878100][T26354] crypto_alloc_tfm_node+0x13e/0x3f0 [ 481.878125][T26354] tls_set_sw_offload+0xa33/0x1780 [ 481.878153][T26354] tls_setsockopt+0xf3e/0x15c0 [ 481.878173][T26354] ? __pfx_tls_setsockopt+0x10/0x10 [ 481.878193][T26354] ? __fget_files+0x2a/0x420 [ 481.878215][T26354] ? aa_sock_opt_perm+0xff/0x1a0 [ 481.878246][T26354] ? sock_common_setsockopt+0x36/0xc0 [ 481.878270][T26354] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 481.878295][T26354] do_sock_setsockopt+0x17c/0x1b0 [ 481.878314][T26354] __x64_sys_setsockopt+0x13d/0x1b0 [ 481.878334][T26354] do_syscall_64+0x14d/0xf80 [ 481.878352][T26354] ? trace_irq_disable+0x3b/0x150 [ 481.878366][T26354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.878382][T26354] ? clear_bhb_loop+0x40/0x90 [ 481.878399][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.878415][T26354] RIP: 0033:0x7f64c419c819 [ 481.878430][T26354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.878445][T26354] RSP: 002b:00007f64c5029028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 481.878462][T26354] RAX: ffffffffffffffda RBX: 00007f64c4415fa0 RCX: 00007f64c419c819 [ 481.878474][T26354] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 481.878485][T26354] RBP: 00007f64c4232c91 R08: 0000000000000038 R09: 0000000000000000 [ 481.878495][T26354] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 481.878506][T26354] R13: 00007f64c4416038 R14: 00007f64c4415fa0 R15: 00007ffd798199a8 [ 481.878525][T26354] [ 482.113664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 483.138748][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 484.178883][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 485.218763][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 486.258948][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 487.298738][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 488.338919][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 489.378794][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 490.418862][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available