last executing test programs: 1.653093963s ago: executing program 0 (id=10323): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)='na', 0x2}], 0x1) 1.536474578s ago: executing program 0 (id=10326): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 1.282176691s ago: executing program 0 (id=10330): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 1.18302785s ago: executing program 1 (id=10332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.173349963s ago: executing program 3 (id=10333): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = socket(0x1000000010, 0x80802, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 1.084911458s ago: executing program 0 (id=10334): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff12"], 0x30}}, 0x0) 1.007525349s ago: executing program 4 (id=10337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 979.633983ms ago: executing program 0 (id=10338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) 965.347974ms ago: executing program 3 (id=10339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 929.226327ms ago: executing program 4 (id=10340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x3e, r1}, 0x5) 835.984636ms ago: executing program 3 (id=10342): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 816.199403ms ago: executing program 0 (id=10343): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) 763.830388ms ago: executing program 4 (id=10344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 750.926505ms ago: executing program 3 (id=10345): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 686.770228ms ago: executing program 4 (id=10346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="5986c661ebb42bfa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa03972917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c7526052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72f", 0xb0}, {&(0x7f0000000280)="1e25e80382bd1827bdc3f0fceccd579926a015127aa1976a5c33e96aeef6851a1b8f9d374b63e964057cdbce25017982ae54f374fe612cd9b1d538a0da89711c177750e23274fb6b86bf86ca307beef221e5b04445fbf8d2d72547a7b61915849eee34e5d637c40fd036e69c61b3110c9107895c3666a6be717dee1cf6cb144727efc7e284b75b2fc9ce3d39beddc7c3c1087cedf8dc0c905cdec76ff8fc0604efbd4c96ff5d0474c35aa339df54f4db", 0xb0}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 662.754614ms ago: executing program 3 (id=10347): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) 610.57421ms ago: executing program 3 (id=10349): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="26fe", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) 599.235209ms ago: executing program 4 (id=10350): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) 539.422726ms ago: executing program 4 (id=10352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xffffffffffffffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 334.766328ms ago: executing program 2 (id=10358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x4, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x4, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) 235.890239ms ago: executing program 1 (id=10359): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 235.379728ms ago: executing program 2 (id=10360): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x15010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 211.808571ms ago: executing program 1 (id=10361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080005"], 0x8c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 211.046319ms ago: executing program 2 (id=10362): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffad}, 0x48) socket$kcm(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 170.037909ms ago: executing program 1 (id=10363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 108.441583ms ago: executing program 2 (id=10364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0xfffffffd) close(r1) 104.248928ms ago: executing program 1 (id=10365): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 96.527673ms ago: executing program 2 (id=10366): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 24.123938ms ago: executing program 1 (id=10367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) 0s ago: executing program 2 (id=10368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.085045][T13488] Node 0 DMA32: 3345*4kB (UME) 2131*8kB (UM) 782*16kB (UME) 46*32kB (UM) 233*64kB (UM) 414*128kB (UM) 359*256kB (UM) 283*512kB (UM) 191*1024kB (UM) 89*2048kB (UM) 157*4096kB (UM) = 1370044kB [ 209.097419][T13539] netlink: 'syz.0.3664': attribute type 64 has an invalid length. [ 209.135608][T13488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 209.145640][T13539] __nla_validate_parse: 7 callbacks suppressed [ 209.145659][T13539] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3664'. [ 209.160811][T13488] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3937668kB [ 209.219500][T13488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.229386][T13543] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3668'. [ 209.242064][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'. [ 209.258153][T13488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.268177][T13543] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3668'. [ 209.279522][T13543] netlink: 'syz.3.3668': attribute type 3 has an invalid length. [ 209.290168][T13488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.301584][T13543] netlink: 'syz.3.3668': attribute type 2 has an invalid length. [ 209.316007][T13488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 209.335346][T13543] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3668'. [ 209.345739][T13488] 44313 total pagecache pages [ 209.365324][T13488] 0 pages in swap cache [ 209.369784][T13488] Free swap = 124996kB [ 209.374054][T13488] Total swap = 124996kB [ 209.397368][T13488] 2097051 pages RAM [ 209.401228][T13488] 0 pages HighMem/MovableOnly [ 209.424900][T13488] 427077 pages reserved [ 209.430637][T13488] 0 pages cma reserved [ 209.444748][T13553] tc_dump_action: action bad kind [ 209.511523][T13558] netlink: 'syz.2.3675': attribute type 1 has an invalid length. [ 209.556187][T13558] netlink: 'syz.2.3675': attribute type 2 has an invalid length. [ 209.866783][T13574] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 209.897749][T13574] bond3 (unregistering): Released all slaves [ 210.289402][T13608] gre1: entered promiscuous mode [ 210.305393][T13608] gre1: entered allmulticast mode [ 210.484024][T13622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.011304][T13657] delete_channel: no stack [ 211.649018][ T24] IPVS: starting estimator thread 0... [ 211.745675][T13702] IPVS: using max 35 ests per chain, 84000 per kthread [ 211.831976][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 211.917109][T13720] netlink: 'syz.2.3751': attribute type 1 has an invalid length. [ 211.934875][T13720] netlink: 'syz.2.3751': attribute type 2 has an invalid length. [ 212.011775][T13724] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 212.333496][T13693] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 212.530698][T13763] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3772'. [ 212.554930][T13765] netlink: 'syz.4.3773': attribute type 1 has an invalid length. [ 212.642986][T13771] netlink: 'syz.3.3776': attribute type 21 has an invalid length. [ 212.814444][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'. [ 213.195902][T13808] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.610293][T13841] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 213.619888][T13841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.637499][T13841] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 213.683896][T13844] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.3812'. [ 214.116863][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3828'. [ 214.394286][T13896] openvswitch: netlink: IP tunnel TTL not specified. [ 214.425192][T13898] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3837'. [ 214.552702][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3842'. [ 214.702180][T13918] x_tables: duplicate entry at hook 1 [ 214.934243][T13932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.047552][T13940] ip6t_REJECT: ECHOREPLY is not supported [ 215.303034][T13959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.813443][T13991] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 215.971954][T14003] validate_nla: 2 callbacks suppressed [ 215.971974][T14003] netlink: 'syz.3.3889': attribute type 20 has an invalid length. [ 215.992600][T14003] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.531098][T14046] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 216.778096][T14064] openvswitch: netlink: Key type 343 is out of range max 32 [ 217.079126][T14081] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 217.088834][T14081] bond1: option packets_per_slave: allowed values 0 - 65535 [ 217.103545][T14081] bond1 (unregistering): Released all slaves [ 217.109992][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 217.303541][T14099] openvswitch: netlink: IP tunnel dst address not specified [ 217.477347][T14112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3941'. [ 217.955455][T14147] netlink: 'syz.0.3958': attribute type 2 has an invalid length. [ 218.007931][T14147] 9: entered promiscuous mode [ 218.526151][T14190] set match dimension is over the limit! [ 218.552861][T14187] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 218.589585][T14196] netlink: 'syz.4.3981': attribute type 1 has an invalid length. [ 218.600380][T14187] bond1 (unregistering): Released all slaves [ 218.825577][T14209] netlink: 'syz.2.3989': attribute type 1 has an invalid length. [ 218.865094][T14213] openvswitch: netlink: IP tunnel TTL not specified. [ 219.371493][T14249] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4008'. [ 219.554300][T14263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.589920][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4017'. [ 219.645386][T14267] netlink: 'syz.2.4017': attribute type 3 has an invalid length. [ 219.687889][T14271] netlink: 'syz.0.4021': attribute type 1 has an invalid length. [ 219.695458][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4020'. [ 219.704418][T14271] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4021'. [ 219.718846][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4020'. [ 220.407926][T14324] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4045'. [ 220.479175][T14324] bond2 (unregistering): Released all slaves [ 220.659449][T14341] netlink: 'syz.3.4054': attribute type 1 has an invalid length. [ 220.835634][T14355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4061'. [ 221.007714][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4065'. [ 221.056888][T14371] netlink: 'syz.2.4069': attribute type 7 has an invalid length. [ 221.366035][T14390] netlink: 'syz.0.4077': attribute type 6 has an invalid length. [ 221.684344][T14417] netlink: 'syz.3.4091': attribute type 16 has an invalid length. [ 221.699041][T14417] netlink: 'syz.3.4091': attribute type 17 has an invalid length. [ 221.738319][T14417] tunl0: left promiscuous mode [ 221.807729][T14417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.862330][T14421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.245543][T14450] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.757795][T14483] netlink: 'syz.4.4124': attribute type 21 has an invalid length. [ 222.805436][T14483] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4124'. [ 222.888559][T14494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.930345][T14501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.942184][T14500] netlink: 'syz.4.4132': attribute type 1 has an invalid length. [ 223.208573][T14513] netlink: 'syz.4.4139': attribute type 3 has an invalid length. [ 223.228642][T14512] netlink: 'syz.3.4138': attribute type 12 has an invalid length. [ 223.241458][T14512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4138'. [ 223.573396][T14540] netlink: 'syz.4.4152': attribute type 8 has an invalid length. [ 223.759365][T14553] netlink: 'syz.4.4158': attribute type 10 has an invalid length. [ 223.803159][T14553] veth0_vlan: left promiscuous mode [ 223.810801][T14553] veth0_vlan: entered promiscuous mode [ 223.821616][T14553] team0: Device veth0_vlan failed to register rx_handler [ 224.064513][T14574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.195390][T14577] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 224.249670][T14577] bond5 (unregistering): Released all slaves [ 224.790380][T14626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4195'. [ 225.580965][T14680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.714547][T14692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.940102][T14710] SET target dimension over the limit! [ 225.982139][T14706] veth3: entered allmulticast mode [ 226.123386][T14719] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 226.145786][T14724] : renamed from virt_wifi0 [ 226.272640][T14728] ipt_REJECT: TCP_RESET invalid for non-tcp [ 226.598525][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4251'. [ 226.664349][T14756] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 226.950116][T14776] validate_nla: 2 callbacks suppressed [ 226.950137][T14776] netlink: 'syz.1.4264': attribute type 1 has an invalid length. [ 227.017097][T14776] netlink: 'syz.1.4264': attribute type 3 has an invalid length. [ 227.025055][T14776] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4264'. [ 227.202575][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4273'. [ 227.252106][T14798] Cannot find map_set index 65533 as target [ 227.272160][T14800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.299852][T14802] : renamed from hsr0 (while UP) [ 227.461452][T14811] netlink: 'syz.3.4282': attribute type 11 has an invalid length. [ 227.479826][T14811] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4282'. [ 227.653307][T14826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.664191][T14824] bond2: entered promiscuous mode [ 227.671813][T14824] bond2: entered allmulticast mode [ 227.679425][T14824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.709397][T14831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.955693][T14848] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4299'. [ 227.980571][T14848] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4299'. [ 228.012003][T14848] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4299'. [ 228.041495][T14853] openvswitch: netlink: Message has 1 unknown bytes. [ 228.078236][T14853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.544796][T14889] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4320'. [ 228.576413][T14892] SET target dimension over the limit! [ 228.603027][T14889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.643199][T14889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.657942][T14889] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 228.693935][T14889] bond0 (unregistering): Released all slaves [ 228.837253][T14908] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 229.175081][T14933] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 229.604899][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4355'. [ 229.637450][T14959] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 229.684766][T14959] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 229.711268][T14959] gretap2: entered promiscuous mode [ 229.719217][T14959] gretap2: entered allmulticast mode [ 230.570524][T15029] __nla_validate_parse: 1 callbacks suppressed [ 230.570543][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4389'. [ 230.900273][T15048] netlink: 'syz.4.4401': attribute type 2 has an invalid length. [ 231.997800][T15134] bond0: Error: Cannot enslave bond to itself. [ 232.204726][T15146] bridge_slave_0: left allmulticast mode [ 232.237746][T15146] bridge_slave_0: left promiscuous mode [ 232.243568][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.269110][T15154] netlink: 'syz.0.4451': attribute type 5 has an invalid length. [ 232.277134][T15154] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4451'. [ 232.287819][T15146] bond0: (slave bridge_slave_1): Releasing backup interface [ 232.312629][T15146] bridge_slave_1: left allmulticast mode [ 232.319109][T15158] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4453'. [ 232.345883][T15146] bond0: (slave bond_slave_0): Releasing backup interface [ 232.372962][T15146] bond_slave_0: left allmulticast mode [ 232.419239][T15146] bond0: (slave bond_slave_1): Releasing backup interface [ 232.447419][T15146] bond_slave_1: left allmulticast mode [ 232.471132][T15146] team0: Port device team_slave_0 removed [ 232.527477][T15146] team0: Port device team_slave_1 removed [ 232.534872][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.552146][T15146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.587896][T15146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.596398][T15146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.610031][T15146] net_ratelimit: 61 callbacks suppressed [ 232.610053][T15146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.111028][T15198] netlink: 'syz.2.4473': attribute type 28 has an invalid length. [ 233.194546][T15211] geneve3: entered promiscuous mode [ 233.217880][T15216] netlink: 'syz.1.4481': attribute type 1 has an invalid length. [ 233.226119][T15211] geneve3: entered allmulticast mode [ 233.227734][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.255403][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.295600][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.324188][ T78] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.877109][T15260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.006250][T15269] delete_channel: no stack [ 234.310462][T15293] netlink: 'syz.4.4520': attribute type 1 has an invalid length. [ 234.319578][T15293] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4520'. [ 234.632577][T15312] wg1: entered promiscuous mode [ 234.648688][T15312] wg1: entered allmulticast mode [ 235.186089][T15352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.265508][T15354] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 235.667996][T15385] netlink: 'syz.4.4563': attribute type 12 has an invalid length. [ 235.912681][T15401] netlink: 'syz.0.4571': attribute type 1 has an invalid length. [ 235.945367][T15401] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4571'. [ 235.973478][T15401] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4571'. [ 236.005364][T15401] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4571'. [ 236.334474][T15432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4584'. [ 236.498587][T15443] openvswitch: netlink: Missing key (keys=40, expected=80) [ 236.504609][T15445] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 236.534554][T15447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4591'. [ 236.618082][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 236.636578][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 236.794231][T15462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4599'. [ 236.877914][T15468] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4603'. [ 236.895463][T15468] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 236.929747][T15473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.937216][T15473] IPv6: NLM_F_CREATE should be set when creating new route [ 236.944831][T15473] IPv6: NLM_F_CREATE should be set when creating new route [ 236.976021][T15475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.157957][T15489] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.172876][T15489] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.451536][T15509] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.907610][T15540] netlink: 'syz.0.4637': attribute type 1 has an invalid length. [ 237.927443][T15540] netlink: 'syz.0.4637': attribute type 2 has an invalid length. [ 238.352667][T15573] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 238.551794][T15585] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4660'. [ 238.670162][T15590] delete_channel: no stack [ 238.872882][T15602] xt_cgroup: path and classid specified [ 240.335383][T15710] bond0: Removing last arp target with arp_interval on [ 240.666266][T15737] openvswitch: netlink: IPv4 tun info is not correct [ 240.909587][T15754] netlink: 'syz.4.4741': attribute type 1 has an invalid length. [ 241.253162][T15776] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.551811][T15798] netlink: 'syz.0.4760': attribute type 12 has an invalid length. [ 241.685947][T15807] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 241.809764][T15819] sctp: [Deprecated]: syz.3.4770 (pid 15819) Use of int in maxseg socket option. [ 241.809764][T15819] Use struct sctp_assoc_value instead [ 242.124393][T15841] C: renamed from lo (while UP) [ 242.147010][T15841] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 242.253129][T15848] netlink: 'syz.4.4786': attribute type 12 has an invalid length. [ 242.319352][T15857] __nla_validate_parse: 4 callbacks suppressed [ 242.319370][T15857] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4789'. [ 242.321561][T15848] bond2: option primary_reselect: invalid value (255) [ 242.344256][T15848] bond2 (unregistering): Released all slaves [ 242.470880][T15859] bond0: Unable to set down delay as MII monitoring is disabled [ 242.529992][T15859] bond0 (unregistering): Released all slaves [ 242.858502][T15881] openvswitch: netlink: Missing key (keys=40, expected=100) [ 243.418670][T15922] netlink: 'syz.4.4816': attribute type 1 has an invalid length. [ 243.435697][T15922] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.4816'. [ 243.752132][T15942] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.759385][T15942] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 244.067622][T15967] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 244.083311][T15968] netlink: 'syz.2.4838': attribute type 13 has an invalid length. [ 244.263408][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4844'. [ 244.469870][T15994] bond2: Removing last arp target with arp_interval on [ 244.589273][T16004] SET target dimension over the limit! [ 244.688253][T16012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4858'. [ 244.778661][T16017] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 244.921343][T16028] Driver unsupported XDP return value 0 on prog (id 315) dev N/A, expect packet loss! [ 245.623382][T16080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4893'. [ 245.657025][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4894'. [ 245.776374][T16091] netlink: 'syz.3.4898': attribute type 2 has an invalid length. [ 246.102142][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4912'. [ 246.440207][T16141] netlink: 'syz.0.4922': attribute type 1 has an invalid length. [ 246.785436][T16165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4935'. [ 247.062354][T16185] netlink: 'syz.4.4945': attribute type 1 has an invalid length. [ 247.066278][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4944'. [ 247.087410][T16185] netlink: 476 bytes leftover after parsing attributes in process `syz.4.4945'. [ 247.604805][T16166] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 248.067416][T16253] erspan0: left allmulticast mode [ 248.184442][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.192438][T16253] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.455030][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.482719][T16253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.563600][T16287] xt_NFQUEUE: number of total queues is 0 [ 248.581610][T16253] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 248.633282][T16253] bridge1: left promiscuous mode [ 248.638950][T16253] bridge1: left allmulticast mode [ 248.651481][T16253] gre1: left promiscuous mode [ 248.656685][T16253] gre1: left allmulticast mode [ 248.671966][T16291] __nla_validate_parse: 1 callbacks suppressed [ 248.671983][T16291] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4997'. [ 248.692104][T16253] bond2: left promiscuous mode [ 248.697539][T16253] bond2: left allmulticast mode [ 248.732955][T16285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.740900][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.755069][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.789324][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.877709][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.891641][T16298] netlink: 'syz.1.4998': attribute type 11 has an invalid length. [ 248.931468][T16298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4998'. [ 249.069614][T16310] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5007'. [ 249.819682][T16366] Unsupported ieee802154 address type: 0 [ 250.115526][T16388] xt_hashlimit: overflow, rate too high: 0 [ 250.258663][T16395] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5049'. [ 250.322125][T16404] netlink: 'syz.2.5053': attribute type 11 has an invalid length. [ 250.330802][T16404] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5053'. [ 250.651082][T16427] netlink: 'syz.3.5064': attribute type 11 has an invalid length. [ 250.675391][T16427] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5064'. [ 250.756363][T16433] netlink: 'syz.1.5067': attribute type 10 has an invalid length. [ 250.803819][T16438] xt_CONNSECMARK: invalid mode: 0 [ 250.826445][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 250.920768][T16444] openvswitch: netlink: Duplicate key (type 2). [ 251.406826][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5089'. [ 251.644147][T16499] tipc: Started in network mode [ 251.650041][T16499] tipc: Node identity 0104000000000000cc, cluster identity 4711 [ 251.930658][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5109'. [ 252.563507][T16555] bond1: (slave bond_slave_1): Device is not our slave [ 252.584376][T16555] bond1: option active_slave: invalid value (bond_slave_1) [ 252.654461][T16555] bond1 (unregistering): Released all slaves [ 252.806343][T16576] netlink: 'syz.0.5137': attribute type 3 has an invalid length. [ 252.851834][T16580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.362913][T16616] netlink: 'syz.0.5156': attribute type 29 has an invalid length. [ 253.969463][T16656] xt_l2tp: v2 sid > 0xffff: 1114112 [ 254.013139][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5179'. [ 254.022851][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5179'. [ 254.176260][T16671] netlink: 'syz.0.5185': attribute type 1 has an invalid length. [ 254.200219][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5185'. [ 254.219637][T16671] netlink: 'syz.0.5185': attribute type 1 has an invalid length. [ 254.379726][T16687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5192'. [ 254.387812][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5193'. [ 254.437157][T16683] syz.4.5190 (16683) used greatest stack depth: 17128 bytes left [ 254.514754][T16693] tipc: Started in network mode [ 254.530776][T16693] tipc: Node identity , cluster identity 4711 [ 254.573533][T16693] tipc: Failed to set node id, please configure manually [ 254.593900][T16693] tipc: Enabling of bearer rejected, failed to enable media [ 255.190162][T16737] netlink: 'syz.3.5215': attribute type 4 has an invalid length. [ 255.203154][T16737] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5215'. [ 255.588683][T16768] Zero length message leads to an empty skb [ 255.759119][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.919553][T16791] Bluetooth: MGMT ver 1.23 [ 256.108767][T16803] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 256.124628][T16803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.674431][T16842] nftables ruleset with unbound set [ 256.858186][T16853] vlan1: entered allmulticast mode [ 256.867003][T16853] veth0_vlan: entered allmulticast mode [ 257.050716][T16866] atomic_op ffff88805626e998 conn xmit_atomic 0000000000000000 [ 257.092454][T16869] netlink: 'syz.4.5273': attribute type 1 has an invalid length. [ 257.532710][T16899] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 257.542043][ T980] IPVS: starting estimator thread 0... [ 257.591578][T16902] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5290'. [ 257.645582][T16900] IPVS: using max 36 ests per chain, 86400 per kthread [ 258.722359][T16974] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 258.769368][T16974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.876834][T16987] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 258.920600][T16991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5334'. [ 259.038946][T16996] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.284015][T17016] tipc: Started in network mode [ 259.292147][T17016] tipc: Node identity , cluster identity 4711 [ 259.298723][T17016] tipc: Failed to set node id, please configure manually [ 259.308575][T17016] tipc: Enabling of bearer rejected, failed to enable media [ 259.332847][T17009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5343'. [ 259.358874][T17009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5343'. [ 259.394693][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 259.470685][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5352'. [ 259.480672][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5352'. [ 259.501386][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'. [ 260.861514][T17126] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5400'. [ 260.901239][T17128] xt_hashlimit: size too large, truncated to 1048576 [ 260.994859][T17135] Bluetooth: MGMT ver 1.23 [ 261.079949][T17139] IPVS: Scheduler module ip_vs_sip not found [ 261.652252][T17181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.766130][T17187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5429'. [ 261.771943][ T1211] IPVS: starting estimator thread 0... [ 261.875521][T17190] IPVS: using max 32 ests per chain, 76800 per kthread [ 262.354386][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.395017][T17235] team0: Device gtp1 is up. Set it down before adding it as a team port [ 262.640592][ T30] audit: type=1107 audit(1776273042.420:3): pid=17246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 263.013271][T17273] macvlan0: entered promiscuous mode [ 263.148707][T17285] netlink: 'syz.4.5476': attribute type 11 has an invalid length. [ 263.167883][T17285] netlink: 'syz.4.5476': attribute type 4 has an invalid length. [ 263.183370][T17285] netlink: 199768 bytes leftover after parsing attributes in process `syz.4.5476'. [ 263.250071][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5479'. [ 263.283769][T17292] netlink: 'syz.2.5479': attribute type 30 has an invalid length. [ 264.214820][T17359] nbd: must specify an index to disconnect [ 264.385010][T17367] __nla_validate_parse: 1 callbacks suppressed [ 264.385028][T17367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5515'. [ 264.415817][T17371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.623071][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5523'. [ 264.685990][T17385] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5522'. [ 264.965969][T17403] netlink: 'syz.2.5532': attribute type 32 has an invalid length. [ 264.977402][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5532'. [ 265.021010][T17403] bond3: Setting coupled_control to off (0) [ 266.072000][T17480] netlink: 'syz.4.5568': attribute type 29 has an invalid length. [ 266.095503][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5568'. [ 266.125059][T17480] netlink: 'syz.4.5568': attribute type 29 has an invalid length. [ 266.143857][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5568'. [ 266.379105][T17495] netlink: 'syz.1.5576': attribute type 2 has an invalid length. [ 267.242947][T17549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5602'. [ 267.344851][T17555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.094772][T17609] netlink: 'syz.4.5633': attribute type 1 has an invalid length. [ 268.226032][T17619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.227694][T17618] tipc: Invalid UDP bearer configuration [ 268.242563][T17618] tipc: Enabling of bearer rejected, failed to enable media [ 268.291417][T17621] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5639'. [ 268.535127][T17638] sit2: entered promiscuous mode [ 268.540733][T17638] sit2: entered allmulticast mode [ 268.955519][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5661'. [ 269.202613][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5669'. [ 270.414529][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5695'. [ 271.161034][T17812] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5714'. [ 271.368907][T17822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.462556][T17817] bridge0: port 3(gretap0) entered disabled state [ 271.486562][T17817] erspan0: left promiscuous mode [ 271.499093][T17817] erspan0: left allmulticast mode [ 271.715795][T17835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.723093][T17835] IPv6: NLM_F_CREATE should be set when creating new route [ 271.730411][T17835] IPv6: NLM_F_CREATE should be set when creating new route [ 271.737698][T17835] IPv6: NLM_F_CREATE should be set when creating new route [ 271.767476][T17839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.832448][T17817] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.840377][T17817] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.152420][T17817] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 273.736742][T17942] veth0_to_bond: entered allmulticast mode [ 274.002184][T17949] wireguard1: entered promiscuous mode [ 274.034622][T17949] wireguard1: entered allmulticast mode [ 274.352721][T17972] : entered promiscuous mode [ 275.159748][T18033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.493934][T18056] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5810'. [ 275.515101][T18056] netlink: 'syz.3.5810': attribute type 2 has an invalid length. [ 275.524845][T18056] netlink: 'syz.3.5810': attribute type 1 has an invalid length. [ 275.649965][T18066] bridge0: port 3(veth0_to_bridge) entered blocking state [ 275.668073][T18066] bridge0: port 3(veth0_to_bridge) entered disabled state [ 275.679132][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5816'. [ 275.696478][T18066] veth0_to_bridge: entered allmulticast mode [ 275.710853][T18066] veth0_to_bridge: entered promiscuous mode [ 276.519787][ T24] IPVS: starting estimator thread 0... [ 276.618614][T18126] IPVS: using max 30 ests per chain, 72000 per kthread [ 276.951825][T18157] netlink: 'syz.3.5861': attribute type 1 has an invalid length. [ 276.966073][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5861'. [ 276.983701][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5861'. [ 276.998470][T18157] netlink: 'syz.3.5861': attribute type 2 has an invalid length. [ 277.010445][T18157] netlink: 'syz.3.5861': attribute type 2 has an invalid length. [ 277.020640][T18157] netlink: 'syz.3.5861': attribute type 2 has an invalid length. [ 277.029319][T18163] netlink: 'syz.2.5859': attribute type 1 has an invalid length. [ 277.037571][T18163] netlink: 'syz.2.5859': attribute type 3 has an invalid length. [ 277.065722][T18163] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5859'. [ 277.091473][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5864'. [ 277.104383][T18163] NCSI netlink: No device for ifindex 813332851 [ 277.397029][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5875'. [ 278.730729][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5915'. [ 279.078600][T18297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5925'. [ 279.501267][T18321] veth7: entered allmulticast mode [ 279.577803][T18333] wg1 speed is unknown, defaulting to 1000 [ 280.166695][T18372] vcan1: entered promiscuous mode [ 280.172118][T18372] vcan1: entered allmulticast mode [ 280.238308][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5965'. [ 280.274423][T18381] xt_socket: unknown flags 0xe4 [ 280.398034][T18389] Bluetooth: MGMT ver 1.23 [ 280.784058][T18415] sock: sock_timestamping_bind_phc: sock not bind to device [ 281.062911][T18433] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 281.153780][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5992'. [ 281.207607][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5992'. [ 281.294154][T18452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.451584][T18460] vlan3: entered promiscuous mode [ 281.476635][T18460] bridge0: entered promiscuous mode [ 281.533898][T18466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6006'. [ 281.791291][T18482] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6016'. [ 281.850585][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6019'. [ 281.879985][T18488] wg1 speed is unknown, defaulting to 1000 [ 281.956588][T18488] C speed is unknown, defaulting to 1000 [ 282.121276][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'. [ 283.061606][T18550] smc: net device team0 applied user defined pnetid SYZ2 [ 283.107232][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6047'. [ 283.819499][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6071'. [ 284.047449][T18615] netlink: 'syz.4.6077': attribute type 29 has an invalid length. [ 284.157674][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6082'. [ 284.208481][T18628] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 284.380783][T18637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.970697][T18682] Bluetooth: MGMT ver 1.23 [ 285.148939][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6116'. [ 285.201511][T18698] netlink: 'syz.1.6118': attribute type 1 has an invalid length. [ 285.412688][T18716] netlink: 'syz.2.6126': attribute type 2 has an invalid length. [ 285.541883][T18722] batadv0: entered promiscuous mode [ 285.562926][T18722] macsec1: entered promiscuous mode [ 285.570109][T18722] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 285.591695][T18722] batadv0: left promiscuous mode [ 286.435855][T18786] xt_HMARK: spi-set and port-set can't be combined [ 286.580455][ T30] audit: type=1800 audit(1776273066.360:4): pid=18793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6164" name="memory.events" dev="tmpfs" ino=6301 res=0 errno=0 [ 286.656900][ T30] audit: type=1804 audit(1776273066.360:5): pid=18793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6164" name="/newroot/1254/memory.events" dev="tmpfs" ino=6301 res=1 errno=0 [ 286.741226][T18808] __nla_validate_parse: 4 callbacks suppressed [ 286.741247][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6171'. [ 286.818150][T18812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6173'. [ 287.462020][T18858] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6196'. [ 287.733925][T18881] openvswitch: netlink: Missing valid actions attribute. [ 287.743908][T18881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.990993][T18900] netlink: 'syz.2.6216': attribute type 2 has an invalid length. [ 289.100709][T18974] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6255'. [ 289.299098][T18987] netlink: 'syz.1.6259': attribute type 2 has an invalid length. [ 289.313895][T18987] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6259'. [ 289.708312][T19015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6274'. [ 290.019707][T19039] netlink: 'syz.1.6285': attribute type 3 has an invalid length. [ 290.154389][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6288'. [ 290.172114][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6288'. [ 290.177334][T19045] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 290.194669][T19045] bond4 (unregistering): Released all slaves [ 290.212989][T19044] netlink: 'syz.2.6287': attribute type 2 has an invalid length. [ 290.243420][T19051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6290'. [ 290.419901][T19061] vlan2: entered allmulticast mode [ 290.732314][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'. [ 291.118352][T19096] tipc: Enabling of bearer rejected, media not registered [ 291.228431][T19101] vlan2: entered allmulticast mode [ 291.235597][T19101] gretap0: entered allmulticast mode [ 291.489605][T19120] netlink: 'syz.3.6319': attribute type 1 has an invalid length. [ 291.499163][T19120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.769798][T19134] tipc: Enabling of bearer rejected, failed to enable media [ 292.577128][T19190] __nla_validate_parse: 2 callbacks suppressed [ 292.577149][T19190] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6356'. [ 292.608428][T19190] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6356'. [ 293.209879][T19230] tipc: Started in network mode [ 293.214962][T19230] tipc: Node identity 4, cluster identity 4711 [ 293.225108][T19230] tipc: Node number set to 4 [ 293.362246][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6375'. [ 294.876477][T19338] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 295.996883][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6466'. [ 296.014357][T19420] macsec1: entered promiscuous mode [ 296.021505][T19420] bridge0: entered promiscuous mode [ 296.033776][T19420] macsec1: entered allmulticast mode [ 296.042708][T19420] bridge0: entered allmulticast mode [ 296.049359][T19420] bridge0: port 4(macsec1) entered blocking state [ 296.056389][T19420] bridge0: port 4(macsec1) entered disabled state [ 296.068145][T19420] bridge0: left allmulticast mode [ 296.073552][T19420] bridge0: left promiscuous mode [ 296.535199][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6480'. [ 296.812885][T19469] raw_sendmsg: syz.1.6490 forgot to set AF_INET. Fix it! [ 297.354027][T19510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6509'. [ 297.786065][T19538] netlink: 'syz.4.6521': attribute type 1 has an invalid length. [ 298.058372][T19562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6532'. [ 298.127777][T19566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6536'. [ 298.146033][T19566] F: renamed from gre0 (while UP) [ 298.164322][T19566] F: entered allmulticast mode [ 298.166227][T19568] xt_policy: too many policy elements [ 298.193763][T19571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6536'. [ 298.487586][T19596] netlink: 'syz.0.6549': attribute type 32 has an invalid length. [ 298.497241][T19596] netlink: 776 bytes leftover after parsing attributes in process `syz.0.6549'. [ 298.539683][T19599] netlink: 'syz.3.6551': attribute type 7 has an invalid length. [ 298.647452][T19608] netlink: 'syz.0.6555': attribute type 1 has an invalid length. [ 299.056295][T19636] tipc: Enabling of bearer rejected, failed to enable media [ 299.182561][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6572'. [ 299.202615][T19647] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6574'. [ 299.767267][T19689] netlink: 'syz.4.6593': attribute type 1 has an invalid length. [ 299.775145][T19689] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6593'. [ 299.820716][T19689] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6593'. [ 299.840589][T19689] netlink: 'syz.4.6593': attribute type 1 has an invalid length. [ 299.856159][T19689] netlink: 618 bytes leftover after parsing attributes in process `syz.4.6593'. [ 300.231303][T19721] netlink: zone id is out of range [ 300.238115][T19721] netlink: zone id is out of range [ 300.243350][T19721] netlink: zone id is out of range [ 300.250624][T19721] netlink: zone id is out of range [ 300.257478][T19721] netlink: zone id is out of range [ 300.262718][T19721] netlink: zone id is out of range [ 300.269647][T19721] netlink: zone id is out of range [ 300.274887][T19721] netlink: zone id is out of range [ 300.285008][T19721] netlink: zone id is out of range [ 300.294515][T19721] netlink: zone id is out of range [ 300.476392][T19739] block nbd0: not configured, cannot reconfigure [ 300.588307][ T1033] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.607349][ T1033] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.636822][ T1033] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.690045][ T1033] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.954424][T19770] xt_hashlimit: size too large, truncated to 1048576 [ 301.264746][T19790] netlink: 'syz.0.6642': attribute type 10 has an invalid length. [ 301.282130][T19790] team0: Device vxcan1 is of different type [ 302.700487][T19876] xt_hashlimit: size too large, truncated to 1048576 [ 303.338799][T19912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6697'. [ 303.863871][T19950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6711'. [ 303.885131][T19947] delete_channel: no stack [ 304.057803][T19963] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6717'. [ 304.110418][T19963] block nbd0: not configured, cannot reconfigure [ 304.756278][T20007] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6735'. [ 304.823536][T20013] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6737'. [ 305.855870][T20079] netlink: 'syz.4.6765': attribute type 23 has an invalid length. [ 306.048290][T20097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6775'. [ 306.076039][T20095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6774'. [ 306.164654][T20103] netlink: 'syz.3.6778': attribute type 1 has an invalid length. [ 306.170802][T20105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6779'. [ 306.190151][T20105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6779'. [ 306.243437][T20110] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 306.563692][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6795'. [ 306.900633][T20163] rdma_op ffff8880333ee9f0 conn xmit_rdma 0000000000000000 [ 307.428313][T20200] netlink: 'syz.1.6824': attribute type 2 has an invalid length. [ 307.520719][T20206] netlink: 'syz.1.6827': attribute type 3 has an invalid length. [ 307.692480][T20218] syz.3.6833 (20218) used obsolete PPPIOCDETACH ioctl [ 308.057505][T20239] net_ratelimit: 133 callbacks suppressed [ 308.057527][T20239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.213246][T20323] vlan2: entered allmulticast mode [ 309.218607][T20323] bond0: entered allmulticast mode [ 309.239032][T20323] : entered allmulticast mode [ 309.251178][T20323] bond_slave_1: entered allmulticast mode [ 309.351330][T20334] __nla_validate_parse: 2 callbacks suppressed [ 309.351350][T20334] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6886'. [ 309.463926][T20340] IPVS: length: 8 != 1152 [ 309.632474][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6896'. [ 309.983583][T20381] netlink: 'syz.4.6909': attribute type 178 has an invalid length. [ 310.905973][T20448] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6942'. [ 311.292221][T20477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6956'. [ 311.327784][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6958'. [ 311.375102][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6956'. [ 311.421848][T20483] bond5: Invalid ad_actor_system MAC address. [ 311.438348][T20483] bond5: option ad_actor_system: invalid value (1) [ 311.456304][T20483] bond5 (unregistering): Released all slaves [ 312.233261][T20548] : entered promiscuous mode [ 312.466133][T20568] xt_HMARK: proto mask must be zero with L3 mode [ 312.596852][T20580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7004'. [ 312.705207][T20587] tipc: Enabling of bearer rejected, failed to enable media [ 312.760330][T20590] netlink: 'syz.3.7009': attribute type 2 has an invalid length. [ 312.794531][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7010'. [ 312.905828][T20602] netlink: 'syz.0.7015': attribute type 1 has an invalid length. [ 313.075804][T20615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7021'. [ 313.112044][T20617] pim6reg527: entered allmulticast mode [ 313.160510][T20620] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7023'. [ 313.170279][T20620] netlink: 'syz.0.7023': attribute type 2 has an invalid length. [ 313.658747][T20656] netlink: 'syz.0.7041': attribute type 3 has an invalid length. [ 314.038572][T20680] tipc: Enabling of bearer rejected, failed to enable media [ 314.245085][T20696] veth0_virt_wifi: entered promiscuous mode [ 314.463247][T20713] __nla_validate_parse: 5 callbacks suppressed [ 314.463268][T20713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7069'. [ 314.709092][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7074'. [ 315.461598][T20787] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7102'. [ 315.770170][T20807] netlink: 'syz.0.7110': attribute type 1 has an invalid length. [ 316.616207][T20856] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7131'. [ 317.016926][T20881] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7140'. [ 317.026294][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7140'. [ 317.050874][T20881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7140'. [ 317.189483][T20896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.202915][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.304096][T20903] sctp: [Deprecated]: syz.3.7150 (pid 20903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.304096][T20903] Use struct sctp_sack_info instead [ 317.310758][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7152'. [ 317.364417][T20907] sctp: [Deprecated]: syz.3.7150 (pid 20907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.364417][T20907] Use struct sctp_sack_info instead [ 317.440645][T20910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7154'. [ 317.759008][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7166'. [ 317.843622][T20939] sctp: [Deprecated]: syz.2.7167 (pid 20939) Use of int in max_burst socket option deprecated. [ 317.843622][T20939] Use struct sctp_assoc_value instead [ 317.938520][T20947] IPVS: ip_vs_edit_dest(): server weight less than zero [ 318.416276][T20985] macvlan0: entered promiscuous mode [ 319.035939][T21022] "syz.1.7208" (21022) uses obsolete ecb(arc4) skcipher [ 319.049704][T21029] bridge0: port 3(ipvlan2) entered blocking state [ 319.057419][T21029] bridge0: port 3(ipvlan2) entered disabled state [ 319.064752][T21029] ipvlan2: entered allmulticast mode [ 319.070518][T21029] bridge0: entered allmulticast mode [ 319.098081][T21029] ipvlan2: left allmulticast mode [ 319.103258][T21029] bridge0: left allmulticast mode [ 319.833989][T21079] __nla_validate_parse: 4 callbacks suppressed [ 319.834012][T21079] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7232'. [ 319.867581][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7232'. [ 320.770617][T21156] netlink: 'syz.4.7270': attribute type 1 has an invalid length. [ 320.856662][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7272'. [ 320.959491][T21169] nbd: must specify a size in bytes for the device [ 320.967122][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7277'. [ 321.139094][T21183] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 321.265451][T21191] macsec0: entered promiscuous mode [ 321.282328][T21191] macsec0: entered allmulticast mode [ 321.305628][T21191] veth1_macvtap: entered allmulticast mode [ 321.311862][T21191] macsec0: left promiscuous mode [ 321.338373][T21191] macsec0: left allmulticast mode [ 321.346888][T21191] veth1_macvtap: left allmulticast mode [ 321.498994][T21204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7293'. [ 321.566263][T21204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7293'. [ 321.668472][T21214] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 321.922601][T21233] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 322.123318][T21251] xt_l2tp: invalid flags combination: 0 [ 323.024270][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7346'. [ 323.689975][T21368] tipc: Started in network mode [ 323.706384][T21368] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 323.716354][T21368] tipc: Enabling of bearer rejected, failed to enable media [ 324.408065][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7395'. [ 324.476642][T21424] netlink: 'syz.3.7399': attribute type 142 has an invalid length. [ 324.927667][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7416'. [ 325.152224][ T30] audit: type=1804 audit(1776273104.930:6): pid=21469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7422" name="/newroot/1507/cgroup.controllers" dev="tmpfs" ino=7561 res=1 errno=0 [ 325.202587][ T30] audit: type=1800 audit(1776273104.930:7): pid=21469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7422" name="cgroup.controllers" dev="tmpfs" ino=7561 res=0 errno=0 [ 325.434951][T21494] netlink: 'syz.3.7435': attribute type 10 has an invalid length. [ 325.487106][T21494] netlink: 'syz.3.7435': attribute type 10 has an invalid length. [ 325.509170][T21494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7435'. [ 325.531795][T21494] batadv0: entered promiscuous mode [ 325.539006][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7436'. [ 325.545764][T21494] batadv0: entered allmulticast mode [ 325.566018][T21494] bridge0: port 3(batadv0) entered blocking state [ 325.583768][T21494] bridge0: port 3(batadv0) entered disabled state [ 325.616056][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 325.625804][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 325.723080][T21512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7443'. [ 325.769967][T21512] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7443'. [ 325.832634][T21512] netlink: 'syz.4.7443': attribute type 6 has an invalid length. [ 325.845147][T21512] netlink: 'syz.4.7443': attribute type 5 has an invalid length. [ 325.895494][T21512] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7443'. [ 326.628813][T21579] tun0: tun_chr_ioctl cmd 1074025675 [ 326.649653][T21579] tun0: persist disabled [ 326.821558][T21591] tipc: New replicast peer: 255.255.255.255 [ 326.850448][T21591] tipc: Enabled bearer , priority 10 [ 326.887381][T21598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7485'. [ 326.980957][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7490'. [ 327.127244][T21617] netlink: 'syz.2.7492': attribute type 2 has an invalid length. [ 327.997002][T21664] netlink: 'syz.0.7517': attribute type 83 has an invalid length. [ 328.172531][T21671] bond4 (unregistering): Released all slaves [ 328.928552][T21730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7548'. [ 329.278480][T21755] netlink: 'syz.0.7560': attribute type 5 has an invalid length. [ 329.759632][T21794] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7578'. [ 329.873970][T21800] veth0: entered promiscuous mode [ 329.886028][T21799] veth0: left promiscuous mode [ 331.096892][T21881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7617'. [ 331.525584][T21917] netlink: 'syz.4.7634': attribute type 83 has an invalid length. [ 331.708291][T21932] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7642'. [ 331.740141][T21932] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7642'. [ 331.763940][T21937] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7644'. [ 331.776228][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7644'. [ 331.827044][T21940] netlink: 112 bytes leftover after parsing attributes in process `syz.1.7646'. [ 331.964597][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7650'. [ 332.057154][T21955] sctp: [Deprecated]: syz.2.7653 (pid 21955) Use of int in maxseg socket option. [ 332.057154][T21955] Use struct sctp_assoc_value instead [ 332.324730][T21974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7663'. [ 333.027652][T22024] nbd0: detected capacity change from 0 to 127 [ 333.036717][ T5826] block nbd0: Receive control failed (result -32) [ 333.089845][T22034] block nbd0: Dead connection, failed to find a fallback [ 333.098717][T22034] block nbd0: shutting down sockets [ 333.105027][T22034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.119100][T22034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 333.127241][T22034] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.137683][T22034] Buffer I/O error on dev nbd0, logical block 1, async page read [ 333.146492][T22034] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.161118][T22034] Buffer I/O error on dev nbd0, logical block 2, async page read [ 333.189440][T22034] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.215754][T22034] Buffer I/O error on dev nbd0, logical block 3, async page read [ 333.229743][T22034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.255334][T22034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 333.275471][T22034] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.313495][T22034] Buffer I/O error on dev nbd0, logical block 1, async page read [ 333.325516][T22034] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.347542][T22034] Buffer I/O error on dev nbd0, logical block 2, async page read [ 333.362227][T22048] netlink: 'syz.3.7698': attribute type 1 has an invalid length. [ 333.371316][T22034] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.395522][T22034] Buffer I/O error on dev nbd0, logical block 3, async page read [ 333.404284][T22048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7698'. [ 333.424929][T22034] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.442830][T22034] Buffer I/O error on dev nbd0, logical block 0, async page read [ 333.456338][T22054] netlink: 'syz.4.7701': attribute type 83 has an invalid length. [ 333.470882][T22034] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.502073][T22034] Buffer I/O error on dev nbd0, logical block 1, async page read [ 333.516178][T22034] ldm_validate_partition_table(): Disk read failed. [ 333.541327][T22034] Dev nbd0: unable to read RDB block 0 [ 333.556041][T22034] nbd0: unable to read partition table [ 333.583133][T22034] ldm_validate_partition_table(): Disk read failed. [ 333.603899][T22034] Dev nbd0: unable to read RDB block 0 [ 333.623634][T22034] nbd0: unable to read partition table [ 333.767210][T22074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7710'. [ 334.007912][T22092] netlink: 'syz.1.7718': attribute type 4 has an invalid length. [ 335.273248][T22174] : renamed from bond0 (while UP) [ 336.139360][T22243] __nla_validate_parse: 1 callbacks suppressed [ 336.139379][T22243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7789'. [ 336.188730][T22247] ip6gre0: Master is either lo or non-ether device [ 336.227017][T22249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7791'. [ 336.493142][T22270] netlink: 'syz.0.7801': attribute type 19 has an invalid length. [ 336.508680][T22272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7802'. [ 336.638735][T22280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 337.671986][T22351] sctp: [Deprecated]: syz.1.7840 (pid 22351) Use of int in max_burst socket option deprecated. [ 337.671986][T22351] Use struct sctp_assoc_value instead [ 337.973496][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7854'. [ 337.984857][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7854'. [ 338.798550][T22427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7875'. [ 339.255485][T22461] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7892'. [ 339.273425][T22461] netem: invalid attributes len -24 [ 339.282394][T22461] netem: change failed [ 339.616967][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7906'. [ 339.752552][T22501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7912'. [ 340.432384][T22557] xt_hashlimit: size too large, truncated to 1048576 [ 340.568100][T22565] netem: incorrect ge model size [ 340.582355][T22565] netem: change failed [ 341.176629][T22598] __nla_validate_parse: 4 callbacks suppressed [ 341.176764][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7955'. [ 342.253835][T22655] tipc: Enabling of bearer rejected, already enabled [ 342.272534][T22655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7979'. [ 342.572240][T22671] netlink: 'syz.2.7988': attribute type 1 has an invalid length. [ 342.581190][T22671] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7988'. [ 342.592557][T22671] netlink: 'syz.2.7988': attribute type 1 has an invalid length. [ 342.601959][T22671] netlink: 'syz.2.7988': attribute type 8 has an invalid length. [ 342.610957][T22675] netem: change failed [ 342.685358][T22671] netlink: 582 bytes leftover after parsing attributes in process `syz.2.7988'. [ 342.704962][T22671] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7988'. [ 343.362698][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8005'. [ 343.372671][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8005'. [ 345.216655][T22835] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8057'. [ 345.258315][T22835] erspan0: entered promiscuous mode [ 345.393276][ T5491] veth0_macvtap: left promiscuous mode [ 346.147383][ T5826] block nbd1: Receive control failed (result -32) [ 346.156568][ T5826] block nbd1: Receive control failed (result -32) [ 346.176203][T22839] nbd1: detected capacity change from 0 to 63 [ 346.184668][T22764] block nbd1: Dead connection, failed to find a fallback [ 346.198636][T22764] block nbd1: shutting down sockets [ 346.204057][T22764] blk_print_req_error: 138 callbacks suppressed [ 346.204074][T22764] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.288604][T22764] buffer_io_error: 138 callbacks suppressed [ 346.288623][T22764] Buffer I/O error on dev nbd1, logical block 0, async page read [ 346.344300][T22764] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.368040][T22764] Buffer I/O error on dev nbd1, logical block 1, async page read [ 346.375567][T22875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8069'. [ 346.390941][T22764] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.398237][T22875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8069'. [ 346.457634][T22764] Buffer I/O error on dev nbd1, logical block 2, async page read [ 346.466342][T22882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8071'. [ 346.508670][T22764] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.537570][T22764] Buffer I/O error on dev nbd1, logical block 3, async page read [ 346.543867][T22877] netlink: set zone limit has 4 unknown bytes [ 346.549004][T22887] netlink: zone id is out of range [ 346.585505][T22887] netlink: zone id is out of range [ 346.590914][T22764] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.616185][T22764] Buffer I/O error on dev nbd1, logical block 0, async page read [ 346.625445][T22764] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.644599][T22891] netlink: 'syz.1.8076': attribute type 10 has an invalid length. [ 346.693287][T22764] Buffer I/O error on dev nbd1, logical block 1, async page read [ 346.716237][T22764] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.745996][T22764] Buffer I/O error on dev nbd1, logical block 2, async page read [ 346.763613][T22764] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.795334][T22764] Buffer I/O error on dev nbd1, logical block 3, async page read [ 346.815911][T22764] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.846906][T22764] Buffer I/O error on dev nbd1, logical block 0, async page read [ 346.867617][T22764] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 346.891299][T22764] Buffer I/O error on dev nbd1, logical block 1, async page read [ 346.928215][T22764] ldm_validate_partition_table(): Disk read failed. [ 346.948810][T22764] Dev nbd1: unable to read RDB block 0 [ 346.974691][T22764] nbd1: unable to read partition table [ 347.006418][T22764] ldm_validate_partition_table(): Disk read failed. [ 347.027488][T22764] Dev nbd1: unable to read RDB block 0 [ 347.034350][T22764] nbd1: unable to read partition table [ 347.071233][T22913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.098266][T22913] bridge0: port 4(bond1) entered blocking state [ 347.130102][T22913] bridge0: port 4(bond1) entered disabled state [ 347.137015][T22913] bond1: entered allmulticast mode [ 347.146324][T22913] bond1: entered promiscuous mode [ 347.354376][T22934] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8091'. [ 347.547486][T22940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8094'. [ 347.848331][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8101'. [ 347.884624][T22958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8101'. [ 348.099296][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.127338][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.169028][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.201327][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8114'. [ 348.215905][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.236350][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.270107][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.285770][T22981] netlink: 'syz.2.8113': attribute type 29 has an invalid length. [ 348.437441][T23007] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8122'. [ 348.538438][T23015] xt_hashlimit: size too large, truncated to 1048576 [ 348.608553][T23021] : renamed from vxcan1 (while UP) [ 348.800587][T23029] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8132'. [ 349.048393][T23046] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.055773][T23046] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.338964][T23063] bond0: entered promiscuous mode [ 349.347323][T23068] netlink: 'syz.0.8147': attribute type 1 has an invalid length. [ 349.397734][T23073] ipvlan2: entered allmulticast mode [ 349.401778][T23068] netlink: 'syz.0.8147': attribute type 3 has an invalid length. [ 349.403070][T23073] batadv_slave_1: entered allmulticast mode [ 349.421492][T23073] batman_adv: batadv0: Adding interface: ipvlan2 [ 349.429758][T23073] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.455668][T23073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.464674][T23068] netlink: 'syz.0.8147': attribute type 7 has an invalid length. [ 349.466515][T23073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.486783][T23073] batman_adv: batadv0: Interface activated: ipvlan2 [ 349.508365][T23068] NCSI netlink: No device for ifindex 131092 [ 350.258072][T23125] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 350.264186][T23125] syzkaller1: linktype set to 823 [ 350.314771][T23134] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 350.326024][T23134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.281260][T23206] tipc: Started in network mode [ 351.290368][T23206] tipc: Node identity ac14140f, cluster identity 5 [ 351.297854][T23206] tipc: New replicast peer: 255.255.255.255 [ 351.306190][T23206] tipc: Enabled bearer , priority 10 [ 351.570329][T23229] __nla_validate_parse: 5 callbacks suppressed [ 351.570348][T23229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8220'. [ 351.633854][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8223'. [ 351.654973][T23233] hsr0: entered promiscuous mode [ 351.660996][T23233] macvlan2: entered allmulticast mode [ 351.667483][T23233] hsr0: entered allmulticast mode [ 351.672697][T23233] hsr_slave_0: entered allmulticast mode [ 351.679195][T23233] hsr_slave_1: entered allmulticast mode [ 352.062964][T23260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8236'. [ 352.183066][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8241'. [ 352.426138][ T29] tipc: Node number set to 2886997007 [ 353.519074][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8276'. [ 353.537700][T23352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8276'. [ 353.740556][T23365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8284'. [ 354.681874][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8317'. [ 354.839866][T23450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8321'. [ 354.849867][T23450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8321'. [ 355.455792][T23496] veth0: entered promiscuous mode [ 355.461866][T23495] veth0: left promiscuous mode [ 356.138509][T23530] hsr0 (unregistering): left allmulticast mode [ 356.242937][T23538] syz.0.8360: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 356.258970][T23538] CPU: 1 UID: 0 PID: 23538 Comm: syz.0.8360 Not tainted syzkaller #0 PREEMPT(full) [ 356.258999][T23538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.259017][T23538] Call Trace: [ 356.259025][T23538] [ 356.259033][T23538] dump_stack_lvl+0xe8/0x150 [ 356.259067][T23538] warn_alloc+0x249/0x340 [ 356.259091][T23538] ? stack_trace_save+0xa9/0x100 [ 356.259115][T23538] ? __pfx_warn_alloc+0x10/0x10 [ 356.259145][T23538] ? kasan_save_track+0x4f/0x80 [ 356.259166][T23538] ? kasan_save_track+0x3e/0x80 [ 356.259185][T23538] ? __kasan_kmalloc+0x93/0xb0 [ 356.259207][T23538] ? __kmalloc_cache_noprof+0x31c/0x660 [ 356.259236][T23538] ? xskq_create+0x56/0x170 [ 356.259262][T23538] ? xsk_setsockopt+0x54c/0x990 [ 356.259283][T23538] ? do_sock_setsockopt+0x17c/0x1b0 [ 356.259308][T23538] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 356.259333][T23538] ? do_syscall_64+0x14d/0xf80 [ 356.259362][T23538] __vmalloc_node_range_noprof+0x132/0x1730 [ 356.259416][T23538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 356.259446][T23538] ? __kasan_kmalloc+0x93/0xb0 [ 356.259477][T23538] vmalloc_user_noprof+0xad/0xe0 [ 356.259500][T23538] ? xskq_create+0xbf/0x170 [ 356.259526][T23538] xskq_create+0xbf/0x170 [ 356.259554][T23538] xsk_init_queue+0x8a/0xe0 [ 356.259582][T23538] xsk_setsockopt+0x54c/0x990 [ 356.259609][T23538] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.259632][T23538] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.259667][T23538] ? aa_sock_opt_perm+0xff/0x1a0 [ 356.259689][T23538] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 356.259713][T23538] ? __pfx_xsk_setsockopt+0x10/0x10 [ 356.259739][T23538] do_sock_setsockopt+0x17c/0x1b0 [ 356.259769][T23538] __x64_sys_setsockopt+0x13d/0x1b0 [ 356.259801][T23538] do_syscall_64+0x14d/0xf80 [ 356.259828][T23538] ? trace_irq_disable+0x3b/0x150 [ 356.259846][T23538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.259867][T23538] ? clear_bhb_loop+0x40/0x90 [ 356.259893][T23538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.259919][T23538] RIP: 0033:0x7feaa519c819 [ 356.259938][T23538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.259956][T23538] RSP: 002b:00007feaa60a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.259976][T23538] RAX: ffffffffffffffda RBX: 00007feaa5415fa0 RCX: 00007feaa519c819 [ 356.259989][T23538] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 356.260002][T23538] RBP: 00007feaa5232c91 R08: 0000000000000004 R09: 0000000000000000 [ 356.260015][T23538] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.260029][T23538] R13: 00007feaa5416038 R14: 00007feaa5415fa0 R15: 00007fffa79357e8 [ 356.260064][T23538] [ 356.260078][T23538] Mem-Info: [ 356.571997][T23538] active_anon:5487 inactive_anon:12 isolated_anon:0 [ 356.571997][T23538] active_file:2376 inactive_file:40650 isolated_file:0 [ 356.571997][T23538] unevictable:768 dirty:264 writeback:0 [ 356.571997][T23538] slab_reclaimable:11717 slab_unreclaimable:99954 [ 356.571997][T23538] mapped:29119 shmem:1356 pagetables:1258 [ 356.571997][T23538] sec_pagetables:0 bounce:0 [ 356.571997][T23538] kernel_misc_reclaimable:0 [ 356.571997][T23538] free:1324890 free_pcp:13571 free_cma:0 [ 356.622389][T23538] Node 0 active_anon:21948kB inactive_anon:48kB active_file:9504kB inactive_file:162400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116476kB dirty:1052kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12496kB pagetables:5000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.658002][T23538] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.691499][T23538] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.728631][T23538] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 356.741675][T23538] Node 0 DMA32 free:1346068kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21948kB inactive_anon:48kB active_file:9504kB inactive_file:162400kB unevictable:1536kB writepending:1052kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:54480kB local_pcp:33316kB free_cma:0kB [ 356.800390][T23538] lowmem_reserve[]: 0 0 0 0 0 [ 356.805183][T23538] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 356.838983][T23538] lowmem_reserve[]: 0 0 0 0 0 [ 356.843844][T23538] Node 1 Normal free:3938132kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.883894][T23538] lowmem_reserve[]: 0 0 0 0 0 [ 356.893844][T23538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.908474][T23538] Node 0 DMA32: 3463*4kB (UM) 3608*8kB (UME) 1708*16kB (UME) 67*32kB (UME) 17*64kB (UE) 434*128kB (UME) 393*256kB (UME) 295*512kB (UM) 201*1024kB (UM) 87*2048kB (UM) 142*4096kB (UM) = 1346108kB [ 356.929199][T23538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.972630][T23538] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 8*16kB (UM) 10*32kB (UM) 8*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3938132kB [ 357.021635][T23538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.066347][T23538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.076793][T23538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 357.088215][T23538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 357.098638][T23538] 44378 total pagecache pages [ 357.106711][T23538] 0 pages in swap cache [ 357.111265][T23538] Free swap = 124996kB [ 357.141036][T23538] Total swap = 124996kB [ 357.183647][T23538] 2097051 pages RAM [ 357.192916][T23538] 0 pages HighMem/MovableOnly [ 357.199691][T23538] 427077 pages reserved [ 357.203974][T23538] 0 pages cma reserved [ 357.545078][T23596] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 357.736286][T23607] __nla_validate_parse: 3 callbacks suppressed [ 357.736306][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8391'. [ 357.778260][T23607] xfrm1: entered promiscuous mode [ 357.794232][T23607] xfrm1: entered allmulticast mode [ 357.811308][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8391'. [ 358.194041][T23635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8402'. [ 358.854904][T23672] validate_nla: 1 callbacks suppressed [ 358.854923][T23672] netlink: 'syz.2.8415': attribute type 8 has an invalid length. [ 359.280142][T23695] netlink: 'syz.1.8425': attribute type 3 has an invalid length. [ 359.303553][T23695] netlink: 'syz.1.8425': attribute type 1 has an invalid length. [ 359.329684][T23695] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8425'. [ 359.359543][T23695] NCSI netlink: No device for ifindex 813332851 [ 359.415536][T23702] netlink: 'syz.4.8428': attribute type 83 has an invalid length. [ 359.465554][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8427'. [ 359.503443][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8427'. [ 360.233903][T23732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8438'. [ 360.351860][T23681] syz.2.8421 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 360.475972][T23681] CPU: 1 UID: 0 PID: 23681 Comm: syz.2.8421 Not tainted syzkaller #0 PREEMPT(full) [ 360.476000][T23681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 360.476011][T23681] Call Trace: [ 360.476018][T23681] [ 360.476026][T23681] dump_stack_lvl+0xe8/0x150 [ 360.476056][T23681] dump_header+0xd3/0x4c0 [ 360.476081][T23681] oom_kill_process+0x3ab/0x970 [ 360.476106][T23681] out_of_memory+0x106c/0x1410 [ 360.476125][T23681] ? percpu_ref_put+0x19/0x180 [ 360.476149][T23681] ? __pfx___mutex_lock+0x10/0x10 [ 360.476182][T23681] ? __pfx_out_of_memory+0x10/0x10 [ 360.476199][T23681] ? do_raw_spin_unlock+0xf5/0x210 [ 360.476229][T23681] try_charge_memcg+0xc53/0x1560 [ 360.476266][T23681] ? __pfx_try_charge_memcg+0x10/0x10 [ 360.476296][T23681] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 360.476322][T23681] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 360.476348][T23681] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 360.476374][T23681] __swap_cache_prepare_and_add+0xe8/0x760 [ 360.476408][T23681] ? page_rmappable_folio+0x9a/0x170 [ 360.476439][T23681] swap_cache_alloc_folio+0xf1/0x240 [ 360.476469][T23681] swap_cluster_readahead+0x53a/0x690 [ 360.476494][T23681] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 360.476526][T23681] ? get_vma_policy+0x27b/0x3c0 [ 360.476552][T23681] swapin_readahead+0x196/0xc50 [ 360.476582][T23681] ? __pfx_swapin_readahead+0x10/0x10 [ 360.476608][T23681] ? swap_table_get+0x1e/0x260 [ 360.476632][T23681] ? swap_table_get+0x1e/0x260 [ 360.476653][T23681] ? swap_table_get+0x1e/0x260 [ 360.476678][T23681] ? swap_table_get+0x216/0x260 [ 360.476704][T23681] ? swap_cache_get_folio+0x513/0x520 [ 360.476736][T23681] do_swap_page+0x56f/0x5a20 [ 360.476785][T23681] ? do_swap_page+0x127/0x5a20 [ 360.476807][T23681] ? __pfx_do_swap_page+0x10/0x10 [ 360.476830][T23681] ? __pte_offset_map+0x1ae/0x240 [ 360.476852][T23681] ? pte_offset_map_rw_nolock+0xea/0x160 [ 360.476874][T23681] handle_mm_fault+0x12d2/0x3310 [ 360.476914][T23681] ? handle_mm_fault+0xee/0x3310 [ 360.476948][T23681] ? __pfx_handle_mm_fault+0x10/0x10 [ 360.476972][T23681] ? lock_vma_under_rcu+0x45a/0x500 [ 360.477019][T23681] do_user_addr_fault+0xa73/0x1340 [ 360.477049][T23681] ? rcu_is_watching+0x15/0xb0 [ 360.477073][T23681] ? trace_page_fault_user+0x84/0x210 [ 360.477099][T23681] exc_page_fault+0x6a/0xc0 [ 360.477124][T23681] asm_exc_page_fault+0x26/0x30 [ 360.477141][T23681] RIP: 0033:0x7f223a4507f6 [ 360.477160][T23681] Code: 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b <41> 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 [ 360.477175][T23681] RSP: 002b:00007fff9d0f35c8 EFLAGS: 00010246 [ 360.477192][T23681] RAX: 000000008460f536 RBX: ffffffff8460f536 RCX: 0000000000000000 [ 360.477205][T23681] RDX: 0000000000001536 RSI: ffffffff8460f536 RDI: 0000000000000000 [ 360.477216][T23681] RBP: 0000000000000000 R08: 00007f223a800000 R09: 00007f223a802000 [ 360.477227][T23681] R10: 000000008460f53a R11: 0000000000000000 R12: 00007f223a816038 [ 360.477237][T23681] R13: 000000000000000b R14: ffffffff8460f536 R15: 00007f223b345720 [ 360.477249][T23681] ? security_bpf+0x276/0x2d0 [ 360.477274][T23681] ? security_bpf+0x276/0x2d0 [ 360.477300][T23681] ? security_bpf+0x276/0x2d0 [ 360.477329][T23681] [ 360.477336][T23681] memory: usage 307200kB, limit 307200kB, failcnt 651 [ 360.814736][T23681] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 360.822912][T23681] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 360.883318][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8447'. [ 360.905343][T23681] Memory cgroup stats for /syz2: [ 360.905564][T23681] cache 0 [ 360.914364][T23681] rss 0 [ 360.933430][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8447'. [ 360.945338][T23681] rss_huge 0 [ 360.948585][T23681] shmem 0 [ 360.951704][T23681] mapped_file 0 [ 360.957233][T23681] dirty 0 [ 360.960413][T23681] writeback 0 [ 360.963720][T23681] workingset_refault_anon 51 [ 360.969205][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8447'. [ 360.985341][T23681] workingset_refault_file 12 [ 360.995540][T23681] swap 143360 [ 360.998862][T23681] swapcached 405504 [ 361.008463][T23681] pgpgin 71116 [ 361.035456][T23681] pgpgout 71103 [ 361.038976][T23681] pgfault 185834 [ 361.042626][T23681] pgmajfault 37 [ 361.067075][T23681] inactive_anon 49152 [ 361.071110][T23681] active_anon 4096 [ 361.074842][T23681] inactive_file 0 [ 361.108292][T23681] active_file 0 [ 361.115070][T23681] unevictable 0 [ 361.126406][T23681] hierarchical_memory_limit 314572800 [ 361.145379][T23681] hierarchical_memsw_limit 9223372036854771712 [ 361.165844][T23681] total_cache 0 [ 361.169436][T23681] total_rss 0 [ 361.185568][T23681] total_rss_huge 0 [ 361.194588][T23681] total_shmem 0 [ 361.215404][T23681] total_mapped_file 0 [ 361.219445][T23681] total_dirty 0 [ 361.222914][T23681] total_writeback 0 [ 361.271529][T23681] total_workingset_refault_anon 51 [ 361.295471][T23681] total_workingset_refault_file 12 [ 361.300714][T23681] total_swap 143360 [ 361.321664][T23681] total_swapcached 405504 [ 361.335431][T23681] total_pgpgin 71116 [ 361.344328][T23681] total_pgpgout 71103 [ 361.365340][T23681] total_pgfault 185834 [ 361.379378][T23681] total_pgmajfault 37 [ 361.392232][T23681] total_inactive_anon 49152 [ 361.407060][T23681] total_active_anon 4096 [ 361.420396][T23681] total_inactive_file 0 [ 361.456227][T23681] total_active_file 0 [ 361.460520][T23681] total_unevictable 0 [ 361.464509][T23681] anon_cost 0 [ 361.499728][T23681] file_cost 0 [ 361.516067][T23681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8421,pid=23681,uid=0 [ 361.576639][T23681] Memory cgroup out of memory: Killed process 23681 (syz.2.8421) total-vm:102288kB, anon-rss:1236kB, file-rss:22532kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 362.447993][T23816] block nbd2: Unsupported socket: should be TCP or UNIX. [ 363.028926][T23845] __nla_validate_parse: 1 callbacks suppressed [ 363.028946][T23845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8486'. [ 363.165178][T23851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8489'. [ 363.213622][T23851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8489'. [ 363.715120][T23883] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8505'. [ 363.907419][T23889] netlink: 'syz.1.8508': attribute type 21 has an invalid length. [ 363.937421][T23889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8508'. [ 365.063421][T23960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8539'. [ 365.407756][T23983] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.427461][T23983] team0: Cannot enslave team device to itself [ 365.833991][T24016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8567'. [ 366.018864][T24030] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8574'. [ 366.259405][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8583'. [ 366.562622][T24070] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8592'. [ 366.834615][ T5826] block nbd2: Receive control failed (result -32) [ 367.569775][T24136] macvtap1: entered allmulticast mode [ 367.575498][T24136] veth0_macvtap: entered allmulticast mode [ 368.721255][T24190] __nla_validate_parse: 3 callbacks suppressed [ 368.721282][T24190] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8649'. [ 368.895109][T24192] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 369.022221][T24200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8653'. [ 369.053325][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8656'. [ 369.063608][T24203] bridge0: port 3(batadv0) entered disabled state [ 369.084010][T24203] bridge_slave_1: left allmulticast mode [ 369.090943][T24203] bridge_slave_1: left promiscuous mode [ 369.097459][T24203] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.108837][T24203] bridge_slave_0: left allmulticast mode [ 369.114647][T24203] bridge_slave_0: left promiscuous mode [ 369.167810][T24203] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.611450][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8673'. [ 369.654296][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8673'. [ 369.753052][T24252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8677'. [ 369.770577][T24252] netlink: 'syz.3.8677': attribute type 1 has an invalid length. [ 369.785357][T24252] netlink: 'syz.3.8677': attribute type 2 has an invalid length. [ 370.053992][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8680'. [ 370.527248][T24279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8689'. [ 370.558181][T24279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8689'. [ 370.631624][T24281] netlink: 'syz.1.8690': attribute type 9 has an invalid length. [ 370.837940][T24288] tipc: Enabling of bearer rejected, already enabled [ 370.953067][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8696'. [ 371.492321][T24332] netlink: 'syz.0.8713': attribute type 1 has an invalid length. [ 371.505185][T24332] netlink: 'syz.0.8713': attribute type 2 has an invalid length. [ 371.514499][T24332] netlink: 'syz.0.8713': attribute type 1 has an invalid length. [ 374.116648][T24519] netlink: 'syz.2.8801': attribute type 11 has an invalid length. [ 374.682758][T24563] __nla_validate_parse: 7 callbacks suppressed [ 374.682779][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8818'. [ 374.853002][T24577] netlink: 'syz.0.8824': attribute type 83 has an invalid length. [ 375.080778][T24592] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8832'. [ 375.568698][T24620] netlink: 'syz.4.8845': attribute type 4 has an invalid length. [ 375.801908][T24634] team0: Mode changed to "random" [ 375.924239][T24643] block nbd3: Unsupported socket: should be TCP or UNIX. [ 376.133282][T24655] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8861'. [ 376.268254][T24666] netlink: 'syz.1.8867': attribute type 25 has an invalid length. [ 376.278240][T24666] netlink: 'syz.1.8867': attribute type 28 has an invalid length. [ 376.422920][T24677] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8871'. [ 376.939392][T24717] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 377.555916][T24759] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8908'. [ 378.032997][T24788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8921'. [ 378.400584][T24819] netem: incorrect gi model size [ 378.410546][T24819] netem: change failed [ 378.569759][T24831] netlink: 'syz.2.8940': attribute type 5 has an invalid length. [ 378.640211][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.755044][T24842] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.8944'. [ 379.098801][T24862] netlink: 'syz.2.8957': attribute type 4 has an invalid length. [ 379.386498][T24884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8966'. [ 380.646671][T24976] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9008'. [ 380.802377][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9013'. [ 381.191118][T25018] sctp: [Deprecated]: syz.3.9025 (pid 25018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.191118][T25018] Use struct sctp_sack_info instead [ 381.495933][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9036'. [ 382.266851][T25094] netlink: 'syz.1.9064': attribute type 2 has an invalid length. [ 382.354579][T25099] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9066'. [ 382.471277][T25109] batman_adv: batadv0: Adding interface: dummy0 [ 382.478486][T25109] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.511105][T25109] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 382.708806][T25123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9074'. [ 382.849563][T25131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9080'. [ 383.002805][T25143] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9086'. [ 383.033138][T25143] netlink: 'syz.0.9086': attribute type 1 has an invalid length. [ 383.125749][T25152] netlink: 'syz.2.9089': attribute type 3 has an invalid length. [ 383.382075][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9099'. [ 384.053517][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9118'. [ 384.098452][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9118'. [ 384.159785][T25225] netlink: 'syz.0.9122': attribute type 6 has an invalid length. [ 384.336126][T25236] veth0_to_bridge: entered promiscuous mode [ 384.361818][T25235] veth0_to_bridge: left promiscuous mode [ 384.880904][T25274] h: entered promiscuous mode [ 384.915379][T25279] veth0: entered promiscuous mode [ 384.928702][T25279] veth0: left promiscuous mode [ 385.039964][T25285] netlink: 'syz.1.9152': attribute type 4 has an invalid length. [ 385.424469][T25314] netlink: 'syz.3.9166': attribute type 10 has an invalid length. [ 385.447127][T25314] batadv0: left promiscuous mode [ 385.465519][T25314] batadv0: left allmulticast mode [ 385.881278][T25351] __nla_validate_parse: 6 callbacks suppressed [ 385.881297][T25351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9181'. [ 386.067058][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9186'. [ 386.094486][T25364] netlink: 'syz.0.9187': attribute type 5 has an invalid length. [ 386.191389][T25372] netlink: 'syz.1.9189': attribute type 28 has an invalid length. [ 386.223048][T25372] netlink: 'syz.1.9189': attribute type 3 has an invalid length. [ 386.257695][T25372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9189'. [ 386.714879][T25407] netem: unknown loss type 0 [ 386.721869][T25407] netem: change failed [ 386.924559][T25417] syzkaller1: entered promiscuous mode [ 386.949107][T25417] syzkaller1: entered allmulticast mode [ 387.470062][T25458] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.619130][T25465] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.626496][T25465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.634142][T25465] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.641517][T25465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.714933][T25465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.741297][T25465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.857027][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9242'. [ 387.881720][T25485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.901505][T25485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.999706][T25492] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9245'. [ 389.117015][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 389.125399][ T5826] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 389.238824][T25560] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 389.363844][T25568] netlink: 'syz.0.9280': attribute type 9 has an invalid length. [ 389.585854][T25583] netlink: 'syz.2.9285': attribute type 1 has an invalid length. [ 389.656553][T25587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9288'. [ 389.815039][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9292'. [ 389.828229][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9292'. [ 390.075138][T25611] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 390.102497][T25618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9303'. [ 390.114153][T25618] netlink: 'syz.2.9303': attribute type 7 has an invalid length. [ 390.127720][T25618] netlink: 'syz.2.9303': attribute type 8 has an invalid length. [ 390.148204][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9303'. [ 390.424678][T25640] netlink: 'syz.2.9314': attribute type 1 has an invalid length. [ 390.534189][T25643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.684485][T25658] syzkaller1: entered promiscuous mode [ 390.690920][T25658] syzkaller1: entered allmulticast mode [ 390.702446][T25658] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 390.974862][T25675] __nla_validate_parse: 3 callbacks suppressed [ 390.974882][T25675] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.9331'. [ 391.079127][T25684] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9334'. [ 391.176977][T25690] gre0: entered promiscuous mode [ 391.182118][T25690] gre0: entered allmulticast mode [ 391.443957][T25706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9346'. [ 391.459484][T25706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9346'. [ 391.885384][T25736] sctp: [Deprecated]: syz.2.9357 (pid 25736) Use of int in max_burst socket option. [ 391.885384][T25736] Use struct sctp_assoc_value instead [ 391.956719][T25741] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9361'. [ 392.638035][T25783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9380'. [ 392.681246][T25783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9380'. [ 392.812832][T25794] syzkaller1: entered promiscuous mode [ 392.818770][T25794] syzkaller1: entered allmulticast mode [ 393.009673][T25807] xt_hashlimit: size too large, truncated to 1048576 [ 393.091234][T25815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.261563][T25825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9400'. [ 393.288020][T25825] bond0: ARP target 8.4.0.0 is already present [ 393.305381][T25825] bond0: option arp_ip_target: invalid value (1032) [ 394.644171][T25910] team0: Port device gretap1 added [ 394.987111][T25934] netlink: 'syz.1.9452': attribute type 17 has an invalid length. [ 394.995117][T25934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9452'. [ 395.007848][T25934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9452'. [ 395.382940][T25961] syzkaller1: entered promiscuous mode [ 395.403941][T25961] syzkaller1: entered allmulticast mode [ 395.636574][T25974] syzkaller1: entered promiscuous mode [ 395.642360][T25974] syzkaller1: entered allmulticast mode [ 395.828355][T25982] syzkaller1: entered promiscuous mode [ 395.833981][T25982] syzkaller1: entered allmulticast mode [ 396.187610][T26007] __nla_validate_parse: 1 callbacks suppressed [ 396.187633][T26007] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.9485'. [ 396.237114][T26007] netlink: ct family unspecified [ 396.558135][T26033] syzkaller1: entered promiscuous mode [ 396.581157][T26033] syzkaller1: entered allmulticast mode [ 396.840312][T26050] syzkaller1: entered promiscuous mode [ 396.855376][T26050] syzkaller1: entered allmulticast mode [ 396.892701][T26054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9507'. [ 396.908992][T26054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9507'. [ 397.255535][T26082] syzkaller1: entered promiscuous mode [ 397.261046][T26082] syzkaller1: entered allmulticast mode [ 397.852211][T26115] syzkaller1: entered promiscuous mode [ 397.871124][T26115] syzkaller1: entered allmulticast mode [ 398.267862][T26139] netlink: 'syz.0.9546': attribute type 2 has an invalid length. [ 398.480425][T26152] netlink: 'syz.3.9552': attribute type 1 has an invalid length. [ 398.497679][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9552'. [ 398.844187][T26176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.874942][T26176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.904732][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9566'. [ 398.914701][T26176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.923525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.932750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.941111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.522878][T26207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.873227][T26228] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 400.023625][T26244] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9594'. [ 400.060516][T26244] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9594'. [ 400.352757][T26262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9602'. [ 400.390824][T26262] netlink: 'syz.1.9602': attribute type 7 has an invalid length. [ 400.405712][T26262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9602'. [ 400.465029][T26266] gretap0: left allmulticast mode [ 400.470928][T26266] gretap0: left promiscuous mode [ 400.480129][T26266] bridge0: port 3(gretap0) entered disabled state [ 400.508536][T26266] batman_adv: batadv0: Removing interface: dummy0 [ 400.519273][T26266] bridge_slave_0: left allmulticast mode [ 400.537256][T26266] bridge_slave_0: left promiscuous mode [ 400.551358][T26266] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.565937][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9607'. [ 400.581536][T26266] bridge_slave_1: left allmulticast mode [ 400.589782][T26266] bridge_slave_1: left promiscuous mode [ 400.600202][T26266] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.619511][T26266] .`: (slave bond_slave_0): Releasing backup interface [ 400.639483][T26266] .`: (slave bond_slave_1): Releasing backup interface [ 400.666711][T26266] team0: Port device team_slave_0 removed [ 400.678616][T26266] team0: Port device team_slave_1 removed [ 400.686614][T26266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.694340][T26266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.704526][T26266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.712723][T26266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.722185][T26266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.037030][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.195388][T26310] veth0: entered promiscuous mode [ 401.226190][T26306] veth0: left promiscuous mode [ 401.578535][T26334] syzkaller1: entered promiscuous mode [ 401.584194][T26334] syzkaller1: entered allmulticast mode [ 401.608016][T26337] netlink: 'syz.1.9634': attribute type 2 has an invalid length. [ 401.627840][T26337] netlink: 'syz.1.9634': attribute type 2 has an invalid length. [ 401.811616][T26350] __nla_validate_parse: 2 callbacks suppressed [ 401.811637][T26350] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.9639'. [ 401.998642][T26366] xt_hashlimit: size too large, truncated to 1048576 [ 402.044690][T26369] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9646'. [ 402.332559][T26380] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 402.372546][T26380] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 402.382737][T26380] gretap2: entered promiscuous mode [ 402.388540][T26380] gretap2: entered allmulticast mode [ 402.999843][T26419] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9670'. [ 403.062247][T26425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9672'. [ 403.096404][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9672'. [ 403.432062][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9684'. [ 403.444031][T26451] block nbd3: Unsupported socket: should be TCP or UNIX. [ 404.546635][T26530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9719'. [ 404.557803][T26530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9719'. [ 404.568273][T26530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9719'. [ 404.577541][T26530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9719'. [ 404.764597][ T29] C speed is unknown, defaulting to 1000 [ 405.873248][T26605] sctp: [Deprecated]: syz.3.9745 (pid 26605) Use of int in max_burst socket option deprecated. [ 405.873248][T26605] Use struct sctp_assoc_value instead [ 406.032624][T26611] syzkaller1: entered promiscuous mode [ 406.057313][T26611] syzkaller1: entered allmulticast mode [ 406.595586][T26651] netlink: 'syz.2.9765': attribute type 63 has an invalid length. [ 406.622012][T26651] netlink: 'syz.2.9765': attribute type 63 has an invalid length. [ 406.709570][T26655] block nbd3: NBD_DISCONNECT [ 406.797005][T26607] net_ratelimit: 4 callbacks suppressed [ 406.797023][T26607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.810915][T26607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.820768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.945789][T26672] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 407.163334][T26683] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9776'. [ 407.474246][T26696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.485439][T26696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.502975][T26696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.522077][T26696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.545207][T26696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.563739][T26696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.798506][T26719] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9793'. [ 408.007160][T26730] syzkaller1: entered promiscuous mode [ 408.012681][T26730] syzkaller1: entered allmulticast mode [ 408.267557][T26749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9807'. [ 408.973359][T26800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9831'. [ 409.014291][T26803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9832'. [ 409.420459][T26828] syzkaller1: entered promiscuous mode [ 409.427369][T26828] syzkaller1: entered allmulticast mode [ 410.155321][T26884] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9870'. [ 410.426802][T26899] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9875'. [ 410.517194][T26903] syzkaller1: entered promiscuous mode [ 410.522710][T26903] syzkaller1: entered allmulticast mode [ 410.585694][T26908] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9881'. [ 411.076304][T26937] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 411.098260][T26940] syzkaller1: entered promiscuous mode [ 411.229142][T26946] syzkaller1: entered promiscuous mode [ 411.234663][T26946] syzkaller1: entered allmulticast mode [ 411.300485][T26949] netlink: 'syz.1.9899': attribute type 4 has an invalid length. [ 411.327558][T26952] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9900'. [ 411.589660][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9908'. [ 412.201972][T27012] syzkaller1: entered promiscuous mode [ 412.224318][T27012] syzkaller1: entered allmulticast mode [ 412.559137][ T1033] net_ratelimit: 8 callbacks suppressed [ 412.559156][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.573282][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.582781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.844369][T27053] syzkaller1: entered promiscuous mode [ 412.873512][T27053] syzkaller1: entered allmulticast mode [ 412.876239][T27057] netlink: 'syz.3.9951': attribute type 1 has an invalid length. [ 412.889722][T27057] __nla_validate_parse: 1 callbacks suppressed [ 412.889791][T27057] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9951'. [ 412.908096][T27057] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9951'. [ 412.917763][T27057] netlink: 'syz.3.9951': attribute type 1 has an invalid length. [ 412.925938][T27057] netlink: 634 bytes leftover after parsing attributes in process `syz.3.9951'. [ 413.227331][T27074] sock: sock_set_timeout: `syz.4.9958' (pid 27074) tries to set negative timeout [ 413.304672][T27078] erspan0: entered promiscuous mode [ 413.311025][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9960'. [ 413.436713][T27085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9962'. [ 414.282209][T27143] batadv_slave_1: entered promiscuous mode [ 414.310854][T27140] batadv_slave_1: left promiscuous mode [ 414.749110][T27173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10005'. [ 414.763593][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.789608][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.799262][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.809685][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.821412][T27171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.856182][T27171] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 414.970376][T27184] tipc: Started in network mode [ 414.975873][T27184] tipc: Node identity e0000001, cluster identity 4711 [ 414.983360][T27184] tipc: Enabling of bearer rejected, failed to enable media [ 415.052445][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10012'. [ 415.064350][T27189] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 415.066746][T27188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10012'. [ 415.103789][T27188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10012'. [ 415.126640][T27188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10012'. [ 417.811844][T27360] syzkaller1: entered promiscuous mode [ 417.821586][T27360] syzkaller1: entered allmulticast mode [ 417.935870][T27369] __nla_validate_parse: 7 callbacks suppressed [ 417.935896][T27369] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10090'. [ 417.947478][T27371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10091'. [ 418.146158][T27379] netlink: 27 bytes leftover after parsing attributes in process `syz.0.10097'. [ 418.317176][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.325653][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.334367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.692482][T27414] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 419.058573][T27435] netlink: 'syz.4.10123': attribute type 21 has an invalid length. [ 419.066973][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10123'. [ 419.078256][T27435] netlink: 'syz.4.10123': attribute type 21 has an invalid length. [ 419.090169][T27435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10123'. [ 419.151947][T27439] wg1 speed is unknown, defaulting to 1000 [ 419.162130][T27439] C speed is unknown, defaulting to 1000 [ 419.606768][T27439] dvmrp8: entered allmulticast mode [ 419.695199][T27462] netlink: 'syz.2.10134': attribute type 1 has an invalid length. [ 419.800942][T27468] netlink: 512 bytes leftover after parsing attributes in process `syz.1.10136'. [ 419.850266][ T1033] dvmrp8 (unregistering): left allmulticast mode [ 419.923187][T27462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.988082][T27465] bond5: (slave geneve2): making interface the new active one [ 420.039627][T27465] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 420.078301][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.109036][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.177844][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.208436][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.634386][T27506] bond5: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 420.657575][T27506] bond5: (slave C): Enslaving as an active interface with an up link [ 420.701037][T27506] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 420.719481][ T9] C speed is unknown, defaulting to 1000 [ 420.728701][ T1211] C speed is unknown, defaulting to 1000 [ 420.734519][ T980] C speed is unknown, defaulting to 1000 [ 420.875770][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.184973][T27537] pim6reg1: entered promiscuous mode [ 421.201103][T27537] pim6reg1: entered allmulticast mode [ 421.297211][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.314170][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.335546][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.354724][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.369887][T27549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.613242][T27562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10176'. [ 421.665165][T27562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10176'. [ 422.016521][ T30] audit: type=1800 audit(1776273201.800:8): pid=27578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10182" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=10005 res=0 errno=0 [ 422.096243][T27583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10185'. [ 422.146924][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069a65c00: rx timeout, send abort [ 422.157841][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069a65c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 422.595551][T27612] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.10196'. [ 422.755010][T27620] syzkaller1: entered promiscuous mode [ 422.760927][T27620] syzkaller1: entered allmulticast mode [ 423.202870][T27646] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10213'. [ 423.327666][T27655] net_ratelimit: 1019 callbacks suppressed [ 423.327685][T27655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.453352][T27662] netlink: 'syz.4.10219': attribute type 20 has an invalid length. [ 423.462166][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10219'. [ 423.500309][T27662] netlink: 'syz.4.10219': attribute type 20 has an invalid length. [ 423.504041][T26607] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.509664][T27662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10219'. [ 423.527103][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.565951][T27665] netlink: 'syz.1.10224': attribute type 11 has an invalid length. [ 423.566174][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.583556][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10224'. [ 423.607973][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.648078][T27668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 423.702404][T27665] netlink: 'syz.1.10224': attribute type 11 has an invalid length. [ 423.725033][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10224'. [ 423.771822][T27668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 423.861576][T27668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 423.900975][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10230'. [ 423.977740][T27668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 424.081812][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.090062][ T1033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.098826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.147009][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 424.169763][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 424.200345][ T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 424.238678][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 424.311902][T27698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10238'. [ 424.391899][T27700] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10239'. [ 424.565268][T27703] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.572691][T27703] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.958416][T27727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10247'. [ 425.017525][T27703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.484547][ T24] wg1 speed is unknown, defaulting to 1000 [ 425.484635][T27724] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 425.497610][ T24] syz2: Port: 1 Link DOWN [ 425.515014][T27724] syzkaller1: linktype set to 823 [ 425.554762][T26606] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.564514][T26606] netdevsim netdevsim0 : unset [1, 1] type 2 family 0 port 256 - 0 [ 425.572999][T26606] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.605131][T26606] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 425.743728][T26606] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.767304][T26606] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 425.798492][T26606] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.826376][T26606] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 426.096724][T27764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10258'. [ 426.262736][T27776] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.329326][T27776] bond2: (slave lo): Enslaving as an active interface with an up link [ 426.352556][T27776] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 428.079643][T27890] netlink: 'syz.2.10290': attribute type 1 has an invalid length. [ 428.260772][T27901] __nla_validate_parse: 7 callbacks suppressed [ 428.260791][T27901] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10293'. [ 428.472433][T27911] netlink: 'syz.1.10297': attribute type 22 has an invalid length. [ 428.498175][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10297'. [ 428.510776][T27911] netlink: 'syz.1.10297': attribute type 22 has an invalid length. [ 428.520945][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10297'. [ 428.920918][T27938] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 428.939660][T27938] bond3: (slave lo): Enslaving as an active interface with an up link [ 428.952307][T27938] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 429.268617][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10314'. [ 429.448326][T27959] trusted_key: syz.3.10318 sent an empty control message without MSG_MORE. [ 429.671906][ T5146] block nbd4: Receive control failed (result -107) [ 429.707228][T27966] nbd4: detected capacity change from 0 to 127 [ 429.734844][T27803] block nbd4: Dead connection, failed to find a fallback [ 429.754964][T27803] block nbd4: shutting down sockets [ 429.761282][T27803] blk_print_req_error: 138 callbacks suppressed [ 429.761299][T27803] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.778433][T27803] buffer_io_error: 138 callbacks suppressed [ 429.778452][T27803] Buffer I/O error on dev nbd4, logical block 0, async page read [ 429.799869][T27803] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.809561][T27803] Buffer I/O error on dev nbd4, logical block 1, async page read [ 429.818508][T27803] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.836291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.860310][T27803] Buffer I/O error on dev nbd4, logical block 2, async page read [ 429.868687][T27803] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.887328][T27803] Buffer I/O error on dev nbd4, logical block 3, async page read [ 429.900012][T27803] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.911050][T27803] Buffer I/O error on dev nbd4, logical block 0, async page read [ 429.947040][T27803] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 429.991096][T27803] Buffer I/O error on dev nbd4, logical block 1, async page read [ 430.010326][T27803] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.028382][T27803] Buffer I/O error on dev nbd4, logical block 2, async page read [ 430.045531][T27803] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.065458][T27803] Buffer I/O error on dev nbd4, logical block 3, async page read [ 430.073497][T27803] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.119251][T27803] Buffer I/O error on dev nbd4, logical block 0, async page read [ 430.127473][T27803] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.177268][T27983] veth0: entered promiscuous mode [ 430.185890][T27803] Buffer I/O error on dev nbd4, logical block 1, async page read [ 430.188624][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10324'. [ 430.194470][T27803] ldm_validate_partition_table(): Disk read failed. [ 430.221650][T27983] veth0 (unregistering): left promiscuous mode [ 430.244981][T27803] Dev nbd4: unable to read RDB block 0 [ 430.272694][T27803] nbd4: unable to read partition table [ 430.306797][T27803] ldm_validate_partition_table(): Disk read failed. [ 430.329534][T27803] Dev nbd4: unable to read RDB block 0 [ 430.353241][T27803] nbd4: unable to read partition table [ 430.397617][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10333'. [ 430.421650][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10333'. [ 430.429154][T27995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10334'. [ 430.517428][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10336'. [ 430.539641][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10336'. [ 430.753836][T28019] vlan1: left allmulticast mode [ 430.760074][T28019] veth0_vlan: left allmulticast mode [ 431.437134][ T1033] [ 431.439505][ T1033] ====================================================== [ 431.446806][ T1033] WARNING: possible circular locking dependency detected [ 431.453849][ T1033] syzkaller #0 Not tainted [ 431.458355][ T1033] ------------------------------------------------------ [ 431.465585][ T1033] kworker/u8:7/1033 is trying to acquire lock: [ 431.471827][ T1033] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 431.482452][ T1033] [ 431.482452][ T1033] but task is already holding lock: [ 431.489979][ T1033] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 431.500360][ T1033] [ 431.500360][ T1033] which lock already depends on the new lock. [ 431.500360][ T1033] [ 431.510777][ T1033] [ 431.510777][ T1033] the existing dependency chain (in reverse order) is: [ 431.519955][ T1033] [ 431.519955][ T1033] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 431.528225][ T1033] down_write+0x96/0x200 [ 431.532994][ T1033] kernfs_add_one+0x41/0x5c0 [ 431.538186][ T1033] kernfs_create_dir_ns+0xde/0x130 [ 431.543816][ T1033] internal_create_group+0x425/0x1180 [ 431.549875][ T1033] cpuhp_invoke_callback+0x445/0x860 [ 431.555684][ T1033] cpuhp_issue_call+0x430/0x7a0 [ 431.561054][ T1033] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 431.567814][ T1033] __cpuhp_setup_state+0x3f/0x60 [ 431.573446][ T1033] do_one_initcall+0x250/0x8d0 [ 431.578813][ T1033] do_initcall_level+0x104/0x190 [ 431.584521][ T1033] do_initcalls+0x59/0xa0 [ 431.589357][ T1033] kernel_init_freeable+0x2a6/0x3e0 [ 431.595157][ T1033] kernel_init+0x1d/0x1d0 [ 431.600080][ T1033] ret_from_fork+0x51e/0xb90 [ 431.605183][ T1033] ret_from_fork_asm+0x1a/0x30 [ 431.610470][ T1033] [ 431.610470][ T1033] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 431.618379][ T1033] [ 431.618379][ T1033] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 431.626369][ T1033] cpus_read_lock+0x42/0x160 [ 431.631910][ T1033] static_key_disable+0x12/0x20 [ 431.637449][ T1033] __inet_hash_connect+0x2430/0x2440 [ 431.643333][ T1033] tcp_v4_connect+0xd5f/0x19b0 [ 431.648614][ T1033] __inet_stream_connect+0x25a/0xdd0 [ 431.654594][ T1033] inet_stream_connect+0x66/0xa0 [ 431.660130][ T1033] __sys_connect+0x312/0x450 [ 431.665228][ T1033] __x64_sys_connect+0x7a/0x90 [ 431.670595][ T1033] do_syscall_64+0x14d/0xf80 [ 431.675886][ T1033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.682391][ T1033] [ 431.682391][ T1033] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 431.690384][ T1033] lock_sock_nested+0x48/0x100 [ 431.695686][ T1033] inet_shutdown+0x6a/0x390 [ 431.700797][ T1033] nbd_mark_nsock_dead+0x2e9/0x560 [ 431.706509][ T1033] recv_work+0x1c7f/0x1d90 [ 431.711529][ T1033] process_scheduled_works+0xb6e/0x18c0 [ 431.717852][ T1033] worker_thread+0xa53/0xfc0 [ 431.722956][ T1033] kthread+0x388/0x470 [ 431.727531][ T1033] ret_from_fork+0x51e/0xb90 [ 431.732634][ T1033] ret_from_fork_asm+0x1a/0x30 [ 431.737910][ T1033] [ 431.737910][ T1033] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 431.745542][ T1033] __mutex_lock+0x19f/0x1300 [ 431.750646][ T1033] nbd_queue_rq+0x37b/0x1100 [ 431.755931][ T1033] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 431.762066][ T1033] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 431.769084][ T1033] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 431.775797][ T1033] blk_mq_run_hw_queue+0x348/0x4f0 [ 431.781542][ T1033] blk_mq_dispatch_list+0xd16/0xe10 [ 431.787427][ T1033] blk_mq_flush_plug_list+0x48d/0x570 [ 431.793309][ T1033] __blk_flush_plug+0x3ed/0x4d0 [ 431.798762][ T1033] __submit_bio+0x28d/0x580 [ 431.803786][ T1033] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 431.809940][ T1033] block_read_full_folio+0x599/0x830 [ 431.815829][ T1033] filemap_read_folio+0x137/0x3b0 [ 431.821639][ T1033] do_read_cache_folio+0x358/0x590 [ 431.827359][ T1033] read_part_sector+0xb6/0x2b0 [ 431.832729][ T1033] adfspart_check_ICS+0xa5/0xa40 [ 431.838230][ T1033] bdev_disk_changed+0x7ba/0x1550 [ 431.843853][ T1033] blkdev_get_whole+0x380/0x510 [ 431.849213][ T1033] bdev_open+0x31e/0xd30 [ 431.854226][ T1033] blkdev_open+0x470/0x610 [ 431.859151][ T1033] do_dentry_open+0x785/0x14e0 [ 431.864436][ T1033] vfs_open+0x3b/0x340 [ 431.869184][ T1033] path_openat+0x2e08/0x3860 [ 431.874479][ T1033] do_file_open+0x23e/0x4a0 [ 431.879489][ T1033] do_sys_openat2+0x113/0x200 [ 431.884777][ T1033] __x64_sys_openat+0x138/0x170 [ 431.890155][ T1033] do_syscall_64+0x14d/0xf80 [ 431.895441][ T1033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.901934][ T1033] [ 431.901934][ T1033] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 431.909229][ T1033] __mutex_lock+0x19f/0x1300 [ 431.914443][ T1033] nbd_queue_rq+0xc6/0x1100 [ 431.919556][ T1033] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 431.925716][ T1033] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 431.932560][ T1033] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 431.939152][ T1033] blk_mq_run_hw_queue+0x348/0x4f0 [ 431.944955][ T1033] blk_mq_dispatch_list+0xd16/0xe10 [ 431.950927][ T1033] blk_mq_flush_plug_list+0x48d/0x570 [ 431.956824][ T1033] __blk_flush_plug+0x3ed/0x4d0 [ 431.962292][ T1033] __submit_bio+0x28d/0x580 [ 431.967331][ T1033] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 431.973572][ T1033] block_read_full_folio+0x599/0x830 [ 431.979382][ T1033] filemap_read_folio+0x137/0x3b0 [ 431.985014][ T1033] do_read_cache_folio+0x358/0x590 [ 431.990665][ T1033] read_part_sector+0xb6/0x2b0 [ 431.996036][ T1033] adfspart_check_ICS+0xa5/0xa40 [ 432.001497][ T1033] bdev_disk_changed+0x7ba/0x1550 [ 432.007219][ T1033] blkdev_get_whole+0x380/0x510 [ 432.012597][ T1033] bdev_open+0x31e/0xd30 [ 432.017524][ T1033] blkdev_open+0x470/0x610 [ 432.022632][ T1033] do_dentry_open+0x785/0x14e0 [ 432.028182][ T1033] vfs_open+0x3b/0x340 [ 432.032852][ T1033] path_openat+0x2e08/0x3860 [ 432.038075][ T1033] do_file_open+0x23e/0x4a0 [ 432.043183][ T1033] do_sys_openat2+0x113/0x200 [ 432.048546][ T1033] __x64_sys_openat+0x138/0x170 [ 432.053981][ T1033] do_syscall_64+0x14d/0xf80 [ 432.059184][ T1033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.065683][ T1033] [ 432.065683][ T1033] -> #4 (set->srcu){.+.+}-{0:0}: [ 432.072970][ T1033] __synchronize_srcu+0xca/0x300 [ 432.078434][ T1033] elevator_switch+0x1e8/0x7a0 [ 432.083715][ T1033] elevator_change+0x2cc/0x450 [ 432.089176][ T1033] elevator_set_default+0x36c/0x430 [ 432.094992][ T1033] blk_register_queue+0x366/0x430 [ 432.100618][ T1033] __add_disk+0x677/0xd50 [ 432.105641][ T1033] add_disk_fwnode+0xfb/0x480 [ 432.111181][ T1033] nbd_dev_add+0x72c/0xb50 [ 432.116114][ T1033] nbd_init+0x168/0x1f0 [ 432.120788][ T1033] do_one_initcall+0x250/0x8d0 [ 432.126068][ T1033] do_initcall_level+0x104/0x190 [ 432.131522][ T1033] do_initcalls+0x59/0xa0 [ 432.136448][ T1033] kernel_init_freeable+0x2a6/0x3e0 [ 432.142154][ T1033] kernel_init+0x1d/0x1d0 [ 432.147078][ T1033] ret_from_fork+0x51e/0xb90 [ 432.152187][ T1033] ret_from_fork_asm+0x1a/0x30 [ 432.157551][ T1033] [ 432.157551][ T1033] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 432.165531][ T1033] __mutex_lock+0x19f/0x1300 [ 432.170737][ T1033] elevator_change+0x1b3/0x450 [ 432.176100][ T1033] elevator_set_none+0xb5/0x140 [ 432.181474][ T1033] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 432.188061][ T1033] nbd_start_device+0x17f/0xb10 [ 432.193788][ T1033] nbd_genl_connect+0x165b/0x1cf0 [ 432.199342][ T1033] genl_family_rcv_msg_doit+0x22a/0x330 [ 432.205416][ T1033] genl_rcv_msg+0x61c/0x7a0 [ 432.210447][ T1033] netlink_rcv_skb+0x232/0x4b0 [ 432.215727][ T1033] genl_rcv+0x28/0x40 [ 432.220263][ T1033] netlink_unicast+0x80f/0x9b0 [ 432.225536][ T1033] netlink_sendmsg+0x813/0xb40 [ 432.230809][ T1033] ____sys_sendmsg+0x972/0x9f0 [ 432.236090][ T1033] ___sys_sendmsg+0x2a5/0x360 [ 432.241278][ T1033] __x64_sys_sendmsg+0x1bd/0x2a0 [ 432.246724][ T1033] do_syscall_64+0x14d/0xf80 [ 432.251965][ T1033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.258365][ T1033] [ 432.258365][ T1033] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 432.266958][ T1033] blk_alloc_queue+0x546/0x680 [ 432.272233][ T1033] __blk_mq_alloc_disk+0x197/0x390 [ 432.277939][ T1033] nbd_dev_add+0x499/0xb50 [ 432.282865][ T1033] nbd_init+0x168/0x1f0 [ 432.287730][ T1033] do_one_initcall+0x250/0x8d0 [ 432.293183][ T1033] do_initcall_level+0x104/0x190 [ 432.298638][ T1033] do_initcalls+0x59/0xa0 [ 432.303574][ T1033] kernel_init_freeable+0x2a6/0x3e0 [ 432.309455][ T1033] kernel_init+0x1d/0x1d0 [ 432.314379][ T1033] ret_from_fork+0x51e/0xb90 [ 432.319570][ T1033] ret_from_fork_asm+0x1a/0x30 [ 432.325020][ T1033] [ 432.325020][ T1033] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 432.332456][ T1033] fs_reclaim_acquire+0x71/0x100 [ 432.337907][ T1033] kmem_cache_alloc_noprof+0x40/0x650 [ 432.343791][ T1033] __kernfs_iattrs+0xdf/0x340 [ 432.348985][ T1033] kernfs_iop_setattr+0xea/0x3f0 [ 432.354436][ T1033] notify_change+0xc1a/0xf40 [ 432.359545][ T1033] do_truncate+0x1c2/0x250 [ 432.364484][ T1033] path_openat+0x2f89/0x3860 [ 432.369603][ T1033] do_file_open+0x23e/0x4a0 [ 432.374806][ T1033] do_sys_openat2+0x113/0x200 [ 432.380002][ T1033] __x64_sys_openat+0x138/0x170 [ 432.385369][ T1033] do_syscall_64+0x14d/0xf80 [ 432.390684][ T1033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.397185][ T1033] [ 432.397185][ T1033] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 432.405691][ T1033] __lock_acquire+0x15a5/0x2cf0 [ 432.411064][ T1033] lock_acquire+0xf0/0x2e0 [ 432.415997][ T1033] down_write+0x96/0x200 [ 432.420757][ T1033] kernfs_unlink_sibling+0x71/0x180 [ 432.426467][ T1033] __kernfs_remove+0x3e7/0x660 [ 432.431741][ T1033] kernfs_remove_by_name_ns+0xaf/0x130 [ 432.437705][ T1033] sysfs_remove_group+0xfc/0x2e0 [ 432.443333][ T1033] sysfs_remove_groups+0x54/0xb0 [ 432.448989][ T1033] net_rx_queue_update_kobjects+0x68d/0x740 [ 432.455502][ T1033] netdev_unregister_kobject+0x113/0x450 [ 432.461664][ T1033] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 432.468634][ T1033] unregister_netdevice_queue+0x31f/0x360 [ 432.474958][ T1033] l2tp_eth_delete+0xdc/0x100 [ 432.480145][ T1033] l2tp_session_del_work+0x724/0x860 [ 432.486035][ T1033] process_scheduled_works+0xb6e/0x18c0 [ 432.492116][ T1033] worker_thread+0xa53/0xfc0 [ 432.497219][ T1033] kthread+0x388/0x470 [ 432.501885][ T1033] ret_from_fork+0x51e/0xb90 [ 432.506985][ T1033] ret_from_fork_asm+0x1a/0x30 [ 432.512265][ T1033] [ 432.512265][ T1033] other info that might help us debug this: [ 432.512265][ T1033] [ 432.522653][ T1033] Chain exists of: [ 432.522653][ T1033] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 432.522653][ T1033] [ 432.537168][ T1033] Possible unsafe locking scenario: [ 432.537168][ T1033] [ 432.544611][ T1033] CPU0 CPU1 [ 432.549963][ T1033] ---- ---- [ 432.555571][ T1033] lock(&root->kernfs_rwsem); [ 432.560325][ T1033] lock(cpuhp_state_mutex); [ 432.567510][ T1033] lock(&root->kernfs_rwsem); [ 432.575043][ T1033] lock(&root->kernfs_iattr_rwsem); [ 432.580664][ T1033] [ 432.580664][ T1033] *** DEADLOCK *** [ 432.580664][ T1033] [ 432.588930][ T1033] 4 locks held by kworker/u8:7/1033: [ 432.594481][ T1033] #0: ffff88803193a948 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 432.605278][ T1033] #1: ffffc900049ffc40 ((work_completion)(&session->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 432.617829][ T1033] #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_delete+0x1f/0x100 [ 432.627155][ T1033] #3: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 432.637867][ T1033] [ 432.637867][ T1033] stack backtrace: [ 432.643851][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 432.643879][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 432.643897][ T1033] Workqueue: l2tp l2tp_session_del_work [ 432.643941][ T1033] Call Trace: [ 432.643947][ T1033] [ 432.643954][ T1033] dump_stack_lvl+0xe8/0x150 [ 432.643979][ T1033] print_circular_bug+0x2e1/0x300 [ 432.644000][ T1033] check_noncircular+0x12e/0x150 [ 432.644022][ T1033] __lock_acquire+0x15a5/0x2cf0 [ 432.644041][ T1033] ? __lock_acquire+0x6b5/0x2cf0 [ 432.644061][ T1033] lock_acquire+0xf0/0x2e0 [ 432.644076][ T1033] ? kernfs_unlink_sibling+0x71/0x180 [ 432.644094][ T1033] down_write+0x96/0x200 [ 432.644107][ T1033] ? kernfs_unlink_sibling+0x71/0x180 [ 432.644120][ T1033] ? __pfx_down_write+0x10/0x10 [ 432.644132][ T1033] ? kernfs_root+0x1c/0x230 [ 432.644150][ T1033] ? kernfs_root+0x1c/0x230 [ 432.644167][ T1033] ? kernfs_root+0x1c/0x230 [ 432.644185][ T1033] ? kernfs_root+0x1ea/0x230 [ 432.644203][ T1033] kernfs_unlink_sibling+0x71/0x180 [ 432.644218][ T1033] __kernfs_remove+0x3e7/0x660 [ 432.644233][ T1033] kernfs_remove_by_name_ns+0xaf/0x130 [ 432.644248][ T1033] sysfs_remove_group+0xfc/0x2e0 [ 432.644268][ T1033] sysfs_remove_groups+0x54/0xb0 [ 432.644287][ T1033] net_rx_queue_update_kobjects+0x68d/0x740 [ 432.644311][ T1033] netdev_unregister_kobject+0x113/0x450 [ 432.644332][ T1033] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 432.644358][ T1033] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 432.644379][ T1033] ? call_rcu+0x644/0x890 [ 432.644397][ T1033] ? lockdep_hardirqs_on+0x7a/0x110 [ 432.644418][ T1033] unregister_netdevice_queue+0x31f/0x360 [ 432.644438][ T1033] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 432.644460][ T1033] l2tp_eth_delete+0xdc/0x100 [ 432.644474][ T1033] ? __pfx_l2tp_eth_delete+0x10/0x10 [ 432.644488][ T1033] l2tp_session_del_work+0x724/0x860 [ 432.644506][ T1033] ? process_scheduled_works+0xa8d/0x18c0 [ 432.644524][ T1033] process_scheduled_works+0xb6e/0x18c0 [ 432.644549][ T1033] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.644567][ T1033] ? assign_work+0x3d5/0x5e0 [ 432.644584][ T1033] worker_thread+0xa53/0xfc0 [ 432.644609][ T1033] kthread+0x388/0x470 [ 432.644622][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 432.644638][ T1033] ? __pfx_kthread+0x10/0x10 [ 432.644651][ T1033] ret_from_fork+0x51e/0xb90 [ 432.644668][ T1033] ? __pfx_ret_from_fork+0x10/0x10 [ 432.644684][ T1033] ? __switch_to+0xc7d/0x1450 [ 432.644700][ T1033] ? __pfx_kthread+0x10/0x10 [ 432.644712][ T1033] ret_from_fork_asm+0x1a/0x30 [ 432.644735][ T1033] SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 433.491675][T26607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.502222][T26607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.529975][T26607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.541307][T26607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.591046][T26607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.602704][T26607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.639515][T26607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.650221][T26607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.710129][T26607] bond1: left allmulticast mode [ 433.715124][T26607] bond1: left promiscuous mode [ 433.723220][T26607] bridge0: port 4(bond1) entered disabled state [ 433.793196][T26607] team0: Port device gretap1 removed [ 434.157754][T26607] .` (unregistering): Released all slaves [ 434.167115][T26607] bond0 (unregistering): Released all slaves [ 434.176002][T26607] bond1 (unregistering): Released all slaves [ 434.184982][T26607] bond2 (unregistering): (slave lo): Releasing backup interface [ 434.193395][T26607] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 434.209773][T26607] bond2 (unregistering): Released all slaves [ 434.281175][T26607] : left promiscuous mode [ 434.348885][T26607] tipc: Disabling bearer [ 434.365601][T26607] tipc: Left network mode [ 434.458637][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 434.529088][T26607] hsr_slave_0: left promiscuous mode [ 434.534902][T26607] hsr_slave_1: left promiscuous mode [ 434.548876][T26607] veth1_macvtap: left promiscuous mode [ 434.554464][T26607] veth0_macvtap: left promiscuous mode [ 434.788560][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 435.031796][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 435.089058][T26607] IPVS: stop unused estimator thread 0... [ 435.239175][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4 [ 440.076889][ T1302] ieee802154 phy1 wpan1: encryption failed: -22