last executing test programs: 1.805109833s ago: executing program 3 (id=9891): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.802298877s ago: executing program 1 (id=9892): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000000006"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.721142759s ago: executing program 3 (id=9895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f00000001c0)=""/64, 0xfdef) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.63612658s ago: executing program 1 (id=9898): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.541227731s ago: executing program 3 (id=9899): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.487516095s ago: executing program 1 (id=9901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="288a0efd6dc4f915260f30", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5bdbd57a0e656889", 0x8}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000540)=""/100, 0x64}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) 1.411116916s ago: executing program 3 (id=9903): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e2138", 0x2b}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x1f}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) 1.287014482s ago: executing program 3 (id=9907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) sendmsg$alg(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652caf5", 0x12}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8890}, 0x1) 1.109072581s ago: executing program 0 (id=9913): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 973.396619ms ago: executing program 2 (id=9914): r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x7, r0}, 0x10) 902.425406ms ago: executing program 2 (id=9916): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 856.445021ms ago: executing program 0 (id=9917): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 843.156015ms ago: executing program 4 (id=9918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0xa00, 0x0, 0x0) 733.006756ms ago: executing program 2 (id=9919): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xd9}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_TOS={0x5, 0x9, 0xb5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 723.972798ms ago: executing program 4 (id=9920): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) recvmsg$qrtr(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) 668.179144ms ago: executing program 2 (id=9921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000003", @ANYRES32=r2, @ANYBLOB="0c00018008000100000003000c0001"], 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 634.636045ms ago: executing program 4 (id=9922): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 627.306143ms ago: executing program 0 (id=9923): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$netlink(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)={0x2c8, 0x2d, 0x20, 0x70bd26, 0x25dfdbfd, "", [@nested={0xed, 0x153, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @generic="5880f99bd1cad6b2644d2d5c13f1189f07a308b9079169ec5a99c5f8568c055839421be1980d4181d0045a51789fa718631b3efca253a72d3bdc983748b74bab93f3c9069fa7bbc018c801898b8947fe40cc4791bf93a85fbd141b5438b8f8f46b3b30e68a555f0a608c9332f47fb26c49d99ab38c3ab7022c5cdb73516c37ea01a95d230f510eeef733bda862defa9e773e0e2758764044c2840e3542ff00ab944e26b4841a990fd70dc217eb5a61f091589fbac6fa999e709ebf13090975b2ba", @typed={0x8, 0x13a, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x13}]}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r1}, @generic="cfac59c431012902cc88b8ef957075fb2ad1c5e3940e88012a8df97f0b329b14cbce7070b8c691471e70d91b20c06541b9d1e448e424cb23530fa79b008f2dfbd5270db2d1cb7f0a208b96d3d9ca3d5b95bd207d16bcb8a52c48e554595bcd8f4d04e27449823b6cf2", @typed={0x4, 0x152}, @generic="85e5cb70b7cc941e03b4c030ab3e526abd70e37785fe27fd65b53939575ce17754169b9120b8c1fc2c9fab9a78f754029a6d291578aca8cd1162da05d15c4c94f61727c14be962b249735a77802cfe7b4482a163eb1b19ae85309d65d6eb626119106f9b69ab4d84f66873b4e6bef5d9df94ca370b17318d3d3cfd0fbaf92f32155067e85df752dc4c1886d6c579e7aebba7172c56e7ecc27a329eddb5c5e7e68778163a0d773ba1", @nested={0xa5, 0x83, 0x0, 0x1, [@generic="850350eb4fc2470f007e9ff305c4fded15bc97de214a4324d51ab6e3d1c561bdfbe1325aac0333ef0f8218e8f2301924cc9b773a0889b37d1a3abc57664cd5666149d04b8ddd9ff01fa5683c5ef5b964f589bb49b8d259df31d5461c4c374503210adffc17431d0b4b61ee56e692b79c76bee78da1c629e6e6907bf708893428b996760e7cd4f75d715d08710b7e9d2e33a38d1bad37570937", @nested={0x4, 0xfe}, @nested={0x4, 0x153}]}]}, 0x2c8}, {&(0x7f0000003980)={0xf0, 0x1e, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="57d052cb8b62b78c947f6a4a44ed981bb86090304eb6c59fc2e04516fcc23beb7367ecf65346a19375c9ce2d29d8c8", @generic="4ec2bc2c0fa538eb5f5f2411c89cf47e2f9a33a5caf1bb2a83ec0a0a0b51ef9f75970f569b1b9ba45bc4dd6bcdbca56c9b89fe79a809205730a6d6aabee9e3cc58e28f41c20d002484b42be7eb435c942c579099a9332322be9f", @typed={0x21, 0x132, 0x0, 0x0, @binary="7fadf946fb6387b73dbf3dce84ac56edf90783df1ffb8d8714095714ed"}, @nested={0x2d, 0x34, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="fc14272bd63ca0ca0615edb69936c9927dfbd8b8f56a7663e65fcd53d18d13ab6e346f99b3"]}]}, 0xf0}, {&(0x7f0000003a80)={0x48, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private2}, @nested={0x21, 0x7b, 0x0, 0x1, [@generic="f587245362da89f9d0f8acb9dc1248b3a87e32fa63ce2813a066421dc4"]}]}, 0x48}], 0x3, 0x0, 0x0, 0x4c0d1}, 0x404c014) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 549.141677ms ago: executing program 1 (id=9924): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 481.173411ms ago: executing program 0 (id=9925): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xdb50, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) 425.637206ms ago: executing program 0 (id=9926): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 357.180076ms ago: executing program 2 (id=9927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 330.675897ms ago: executing program 3 (id=9928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "617e5edb37ef999f", "8b3de2aabceef22f419e59f3000000000400", '\x00!\x00S'}, 0x38) 269.470191ms ago: executing program 4 (id=9929): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 256.547247ms ago: executing program 1 (id=9930): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 186.408565ms ago: executing program 2 (id=9931): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 94.035313ms ago: executing program 4 (id=9932): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(r1, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) 91.027997ms ago: executing program 0 (id=9933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="016000000000000c240012800900010069706970000000001400028008000100", @ANYRES32=r2, @ANYBLOB="08000300ac1e00"], 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) 26.4865ms ago: executing program 4 (id=9934): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820f0000f4ff0e0000000000a059bfda8fec4fbb", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/106, 0x6a}], 0x1}, 0x40) 0s ago: executing program 1 (id=9935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x400c000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) kernel console output (not intermixed with test programs): 628] netlink: 'syz.0.3177': attribute type 1 has an invalid length. [ 225.434542][T12639] netlink: zone id is out of range [ 225.448736][T12639] netlink: del zone limit has 4 unknown bytes [ 225.490413][T12645] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 225.502530][T12645] netlink: 'syz.1.3186': attribute type 2 has an invalid length. [ 225.678198][T12655] netlink: 'syz.2.3191': attribute type 21 has an invalid length. [ 225.736796][T12659] netlink: 'syz.3.3192': attribute type 10 has an invalid length. [ 225.801988][T12659] veth0_macvtap: left promiscuous mode [ 226.151880][T12681] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3204'. [ 226.352503][T12695] netlink: 'syz.1.3211': attribute type 21 has an invalid length. [ 226.373479][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 226.903197][T12730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.384087][T12756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.486390][T12765] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 228.038885][T12799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.442262][T12819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.662524][T12835] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3281'. [ 228.694738][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 228.717172][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 229.244440][T12872] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3298'. [ 229.411408][T12886] validate_nla: 1 callbacks suppressed [ 229.411430][T12886] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 229.547071][T12890] bridge4: entered promiscuous mode [ 229.552364][T12890] bridge4: entered allmulticast mode [ 229.610782][T12894] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 230.149588][T12928] Cannot find del_set index 4 as target [ 230.709358][T12961] netlink: 'syz.0.3340': attribute type 2 has an invalid length. [ 230.770813][T12961] 9: entered promiscuous mode [ 230.858115][T12969] xt_policy: output policy not valid in PREROUTING and INPUT [ 231.317593][T12995] openvswitch: netlink: Multiple metadata blocks provided [ 231.741143][T13025] erspan0: entered allmulticast mode [ 232.113458][T13051] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3386'. [ 232.280300][T13062] netlink: 'syz.3.3391': attribute type 10 has an invalid length. [ 232.308083][T13066] netlink: 'syz.0.3392': attribute type 21 has an invalid length. [ 232.340047][T13062] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 232.461292][T13072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.779138][T13095] : renamed from team_slave_1 (while UP) [ 232.880836][T13102] netlink: 'syz.3.3411': attribute type 29 has an invalid length. [ 232.902774][T13104] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 232.907427][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 232.935964][T13104] netlink: 'syz.1.3412': attribute type 2 has an invalid length. [ 233.097549][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 233.179152][T13114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.284684][T13125] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 233.548968][T13143] nbd: must specify at least one socket [ 233.703234][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3437'. [ 233.985977][T13173] ipt_ECN: cannot use operation on non-tcp rule [ 234.379898][T13194] netlink: 'syz.3.3456': attribute type 2 has an invalid length. [ 234.402465][T13194] v: entered promiscuous mode [ 234.749616][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'. [ 234.897535][T13223] netlink: 'syz.1.3469': attribute type 2 has an invalid length. [ 234.908118][T13224] ipt_REJECT: TCP_RESET invalid for non-tcp [ 234.924063][T13223] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3469'. [ 235.004303][T13226] netlink: 'syz.0.3472': attribute type 2 has an invalid length. [ 235.031966][T13226] netlink: 'syz.0.3472': attribute type 1 has an invalid length. [ 235.606191][T13257] xt_l2tp: missing protocol rule (udp|l2tpip) [ 236.109469][T13296] netlink: 'syz.0.3506': attribute type 21 has an invalid length. [ 236.155401][T13296] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.174684][T13296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.181968][T13296] IPv6: NLM_F_CREATE should be set when creating new route [ 236.189367][T13296] IPv6: NLM_F_CREATE should be set when creating new route [ 236.196663][T13296] IPv6: NLM_F_CREATE should be set when creating new route [ 236.366425][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'. [ 236.479366][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3515'. [ 236.632056][T13326] openvswitch: netlink: Key 32 has unexpected len 260 expected 2 [ 236.646997][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3522'. [ 236.820920][T13342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 236.935567][T13344] gtp0: entered promiscuous mode [ 236.940787][T13344] gtp0: entered allmulticast mode [ 237.017992][T13352] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 237.038934][T13352] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3534'. [ 237.600787][T13389] netlink: 'syz.0.3552': attribute type 21 has an invalid length. [ 237.650634][T13389] netlink: 'syz.0.3552': attribute type 6 has an invalid length. [ 237.701374][T13389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3552'. [ 237.860804][T13408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3562'. [ 237.883230][T13408] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3562'. [ 237.975645][T13415] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3564'. [ 238.164310][T13432] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3573'. [ 238.279965][T13437] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3575'. [ 238.607541][T13458] netlink: 'syz.1.3585': attribute type 32 has an invalid length. [ 238.801117][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3591'. [ 238.840511][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3591'. [ 238.855449][T13473] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3592'. [ 238.872506][T13473] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3592'. [ 240.052186][T13552] netlink: 'syz.4.3630': attribute type 2 has an invalid length. [ 240.264133][T13565] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 240.283964][T13565] netlink: 'syz.1.3635': attribute type 2 has an invalid length. [ 240.310307][T13565] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 241.027333][T13614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.922868][T13673] netlink: 'syz.1.3687': attribute type 3 has an invalid length. [ 242.427158][T13709] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 242.474426][T13713] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 242.636779][T13722] netlink: 'syz.1.3711': attribute type 1 has an invalid length. [ 242.869579][T13733] veth3: entered promiscuous mode [ 242.884779][T13733] veth3: entered allmulticast mode [ 243.095981][T13751] netlink: 'syz.3.3727': attribute type 2 has an invalid length. [ 243.109977][T13750] __nla_validate_parse: 8 callbacks suppressed [ 243.109999][T13750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3726'. [ 243.270411][T13760] netlink: 'syz.3.3734': attribute type 21 has an invalid length. [ 243.278548][T13760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3734'. [ 243.989941][T13810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.268028][T13829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.382351][T13838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.660055][T13855] netlink: 'syz.2.3777': attribute type 10 has an invalid length. [ 244.695016][T13855] batman_adv: batadv0: Adding interface: netdevsim0 [ 244.724307][T13855] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.799379][T13855] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 244.898270][T13868] netlink: 'syz.1.3784': attribute type 1 has an invalid length. [ 245.267539][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 245.307782][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3795'. [ 245.358276][T13892] geneve2: entered promiscuous mode [ 245.388796][T13892] geneve2: entered allmulticast mode [ 245.406392][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.713983][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.722764][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.755007][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.922056][T13919] validate_nla: 1 callbacks suppressed [ 245.922077][T13919] netlink: 'syz.3.3808': attribute type 10 has an invalid length. [ 245.936830][T13917] netlink: 'syz.2.3807': attribute type 3 has an invalid length. [ 245.956263][T13917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3807'. [ 245.984068][T13919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3808'. [ 246.013940][T13919] dummy0: entered promiscuous mode [ 246.033410][T13919] bridge0: port 3(dummy0) entered blocking state [ 246.042890][T13919] bridge0: port 3(dummy0) entered disabled state [ 246.083056][T13919] dummy0: entered allmulticast mode [ 246.140759][T13921] netlink: 'syz.1.3810': attribute type 16 has an invalid length. [ 246.175760][T13921] netlink: 'syz.1.3810': attribute type 17 has an invalid length. [ 246.247698][T13928] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 246.343689][T13921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.768288][T13956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.448535][T14005] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3851'. [ 247.773585][T14026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 247.816560][T14029] netlink: 'syz.1.3863': attribute type 32 has an invalid length. [ 247.817577][T14026] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.845627][T14026] gretap1: entered promiscuous mode [ 247.865703][T14026] gretap1: entered allmulticast mode [ 248.109633][T14043] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3867'. [ 248.334865][T14054] Cannot find add_set index 65532 as target [ 248.596990][T14073] netlink: 'syz.3.3885': attribute type 10 has an invalid length. [ 248.616362][T14073] team0: Device ipvlan1 failed to register rx_handler [ 248.630238][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3884'. [ 248.640148][T14076] netlink: 'syz.0.3883': attribute type 10 has an invalid length. [ 248.683116][T14078] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3886'. [ 249.303181][T14076] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 249.468217][T14094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3893'. [ 250.045579][T14132] netlink: 'syz.2.3913': attribute type 1 has an invalid length. [ 250.073940][T14132] netlink: 'syz.2.3913': attribute type 2 has an invalid length. [ 250.237597][T14146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.274908][T14146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.295032][T14146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.327762][T14146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.704841][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 250.743951][T14175] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 250.751519][T14175] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3935'. [ 251.012845][T14195] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 251.218460][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 251.239631][T14210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3950'. [ 251.254877][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3950'. [ 251.266702][T14210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3950'. [ 251.276279][T14210] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3950'. [ 251.654319][T14235] netlink: 'syz.3.3963': attribute type 7 has an invalid length. [ 252.386426][T14287] netlink: 'syz.1.3988': attribute type 5 has an invalid length. [ 252.443075][T14286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.498410][T14293] netlink: 'syz.3.3993': attribute type 2 has an invalid length. [ 252.499764][T14286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.523156][T14286] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 252.580673][T14286] bond0 (unregistering): Released all slaves [ 252.738234][T14305] netlink: 'syz.1.3998': attribute type 11 has an invalid length. [ 252.746471][T14306] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 253.700381][T14371] openvswitch: netlink: Duplicate or invalid key (type 0). [ 253.710207][T14371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.935122][T14383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.984548][T14388] netlink: 'syz.0.4036': attribute type 3 has an invalid length. [ 254.162207][T14399] netlink: 'syz.3.4041': attribute type 21 has an invalid length. [ 254.180566][T14399] __nla_validate_parse: 4 callbacks suppressed [ 254.180588][T14399] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4041'. [ 254.260066][T14407] : renamed from hsr0 [ 254.415738][T14417] xt_bpf: check failed: parse error [ 254.585500][T14427] xt_TCPMSS: Only works on TCP SYN packets [ 254.755963][ T29] audit: type=1107 audit(1775011896.482:2): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 255.157587][T14464] netlink: 'syz.3.4072': attribute type 1 has an invalid length. [ 255.171799][T14463] bond1: option lp_interval: invalid value (0) [ 255.264554][T14463] bond1: option lp_interval: allowed values 1 - 2147483647 [ 255.274708][T14464] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4072'. [ 255.284476][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 255.297887][T14463] bond1 (unregistering): Released all slaves [ 255.526715][T14481] netlink: 'syz.3.4081': attribute type 4 has an invalid length. [ 255.532110][T14483] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 255.544865][T14437] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 255.899389][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.907641][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.171350][T14520] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 256.357689][T14533] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4108'. [ 256.379909][T14533] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 256.540426][T14547] netlink: 'syz.3.4114': attribute type 1 has an invalid length. [ 256.555327][T14547] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4114'. [ 256.578736][T14547] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4114'. [ 256.611450][T14547] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4114'. [ 256.696982][T14554] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.807737][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 256.821837][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 256.942823][T14569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4125'. [ 257.158241][T14587] Cannot find set identified by id 65534 to match [ 257.330530][T14598] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 257.552342][T14613] openvswitch: netlink: EtherType 0 is less than min 600 [ 257.938900][T14639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.724058][T14691] netlink: 'syz.1.4185': attribute type 21 has an invalid length. [ 258.738478][T14691] netlink: 'syz.1.4185': attribute type 1 has an invalid length. [ 258.837539][T14698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.018523][T14712] xt_socket: unknown flags 0x50 [ 259.295110][T14725] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 259.302920][T14725] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 259.330561][T14725] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.4202'. [ 260.202871][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4233'. [ 260.440182][T14803] xt_recent: Unsupported userspace flags (000000b1) [ 260.672346][T14820] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4250'. [ 260.709052][T14825] xt_l2tp: v2 doesn't support IP mode [ 261.151967][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4263'. [ 261.211154][T14857] Cannot find del_set index 4 as target [ 261.218640][T14854] bond0 (unregistering): Released all slaves [ 262.091410][T14913] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 262.117588][T14916] netlink: 'syz.4.4296': attribute type 8 has an invalid length. [ 262.414349][T14933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4305'. [ 262.511044][T14940] xt_socket: unknown flags 0x50 [ 262.640518][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4311'. [ 262.838079][T14955] netlink: 'syz.3.4315': attribute type 1 has an invalid length. [ 262.865612][T14955] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4315'. [ 263.076141][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4324'. [ 263.668180][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4343'. [ 263.931948][T15028] gre1: entered promiscuous mode [ 263.937366][T15028] gre1: entered allmulticast mode [ 264.121424][T15040] netlink: 'syz.3.4357': attribute type 1 has an invalid length. [ 264.137529][T15042] netlink: 'syz.0.4359': attribute type 1 has an invalid length. [ 264.168745][T15040] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4357'. [ 264.394212][T15056] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.556481][T15069] netlink: 'syz.4.4372': attribute type 2 has an invalid length. [ 264.811581][T15085] netlink: 'syz.1.4379': attribute type 1 has an invalid length. [ 265.414053][T15123] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 265.427102][T15130] netlink: 'syz.3.4402': attribute type 2 has an invalid length. [ 265.437588][T15123] bond1 (unregistering): Released all slaves [ 265.529392][T15132] geneve2: entered promiscuous mode [ 265.537163][T15132] geneve2: entered allmulticast mode [ 265.544819][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.574889][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.595243][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.619102][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.729086][T15145] __nla_validate_parse: 1 callbacks suppressed [ 265.729107][T15145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4409'. [ 265.817174][T15148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4410'. [ 265.855268][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4410'. [ 265.856835][T15153] netlink: 'syz.3.4412': attribute type 2 has an invalid length. [ 265.873327][T15148] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4410'. [ 265.906489][T15153] netlink: 'syz.3.4412': attribute type 8 has an invalid length. [ 265.906535][T15148] netlink: 'syz.2.4410': attribute type 3 has an invalid length. [ 265.933146][T15148] netlink: 'syz.2.4410': attribute type 2 has an invalid length. [ 265.936449][T15153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4412'. [ 265.941937][T15148] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4410'. [ 265.996864][T15159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4416'. [ 266.026422][T15159] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4416'. [ 266.544475][T15193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.660351][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4437'. [ 266.807030][T15211] netlink: 'syz.3.4442': attribute type 3 has an invalid length. [ 266.858691][T15211] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4442'. [ 267.031975][T15225] ip6tnl3: entered allmulticast mode [ 268.533389][T15328] netdevsim netdevsim1 : renamed from netdevsim0 [ 268.558670][T15329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.751069][T15343] openvswitch: netlink: Missing key (keys=40, expected=80) [ 269.531942][T15396] validate_nla: 4 callbacks suppressed [ 269.531964][T15396] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 269.541187][T15395] openvswitch: netlink: IP tunnel dst address not specified [ 269.563160][T15396] netlink: 'syz.3.4531': attribute type 1 has an invalid length. [ 269.581362][T15398] openvswitch: netlink: EtherType 50a is less than min 600 [ 270.999937][T15495] __nla_validate_parse: 8 callbacks suppressed [ 270.999957][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4580'. [ 271.150972][T15503] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4586'. [ 271.486026][T15524] xt_hashlimit: invalid rate [ 271.653992][T15533] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4600'. [ 271.731789][T15537] netlink: 'syz.2.4602': attribute type 1 has an invalid length. [ 271.818190][T15539] x_tables: unsorted underflow at hook 4 [ 272.248864][T15567] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 272.979521][T15617] xt_cgroup: xt_cgroup: no path or classid specified [ 273.137225][T15628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.144610][T15628] IPv6: NLM_F_CREATE should be set when creating new route [ 273.351052][T15643] netlink: 'syz.1.4655': attribute type 5 has an invalid length. [ 273.843713][T15674] netlink: 'syz.4.4671': attribute type 1 has an invalid length. [ 273.914472][T15680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4673'. [ 273.916380][T15681] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 274.226362][T15702] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 274.869793][T15742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.194247][T15762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.349640][T15771] bond3: option min_links: invalid value (18446744073709551614) [ 275.357866][T15771] bond3: option min_links: allowed values 0 - 2147483647 [ 275.368403][T15771] bond3 (unregistering): Released all slaves [ 275.614029][T15786] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4725'. [ 275.874129][T15806] netlink: 'syz.0.4736': attribute type 1 has an invalid length. [ 275.891949][T15806] netlink: 'syz.0.4736': attribute type 1 has an invalid length. [ 276.043352][T15816] netlink: 412 bytes leftover after parsing attributes in process `syz.1.4740'. [ 276.104118][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 276.134206][T15820] netlink: 'syz.3.4743': attribute type 3 has an invalid length. [ 276.156835][T15824] netlink: 'syz.4.4744': attribute type 23 has an invalid length. [ 276.194357][T15826] SET target dimension over the limit! [ 276.506703][T15848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4756'. [ 276.630067][T15856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'. [ 276.825253][T15868] netlink: 'syz.3.4766': attribute type 1 has an invalid length. [ 276.974161][T15877] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4768'. [ 277.111140][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 277.499943][T15904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4783'. [ 277.666114][T15907] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 277.708794][T15907] bond0 (unregistering): Released all slaves [ 277.896308][T15926] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4794'. [ 278.191085][T15945] bond1: Removing last arp target with arp_interval on [ 278.416961][T15962] netlink: 'syz.3.4811': attribute type 2 has an invalid length. [ 278.573184][T15972] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 278.724123][T15983] openvswitch: netlink: Flow key attribute not present in set flow. [ 279.267379][T16019] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 279.296005][T16022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.310305][T16019] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4839'. [ 279.628633][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4850'. [ 279.889659][T16059] netlink: 'syz.1.4859': attribute type 4 has an invalid length. [ 280.848430][T16121] No such timeout policy "syz0" [ 282.124639][T16187] __nla_validate_parse: 3 callbacks suppressed [ 282.124664][T16187] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4920'. [ 282.464535][T16211] openvswitch: netlink: Message has 4 unknown bytes. [ 282.608490][T16221] netlink: 'syz.4.4937': attribute type 4 has an invalid length. [ 282.835457][T16239] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 283.039238][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4944'. [ 283.114707][T16247] vxcan2: entered allmulticast mode [ 283.220078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.228346][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.241531][T16258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.304690][T16261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.782656][T16295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.552373][T16346] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4991'. [ 285.360979][T16393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.433668][T16395] Bluetooth: MGMT ver 1.23 [ 285.614855][T16407] Zero length message leads to an empty skb [ 285.976185][T16432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5031'. [ 286.175670][T16444] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5038'. [ 286.787096][T16477] pim6reg: entered allmulticast mode [ 286.920717][T16485] raw_sendmsg: syz.2.5058 forgot to set AF_INET. Fix it! [ 287.198308][T16502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5066'. [ 288.356018][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'. [ 288.377572][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5102'. [ 289.049185][T16619] tipc: Started in network mode [ 289.061689][T16619] tipc: Node identity , cluster identity 4711 [ 289.078276][T16619] tipc: Failed to set node id, please configure manually [ 289.089224][T16619] tipc: Enabling of bearer rejected, failed to enable media [ 289.204776][T16628] Bluetooth: MGMT ver 1.23 [ 289.438764][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5136'. [ 289.876198][T16671] tipc: MTU too low for tipc bearer [ 291.072345][T16753] netlink: 'syz.4.5187': attribute type 4 has an invalid length. [ 291.254215][T16762] tipc: Enabling of bearer rejected, failed to enable media [ 291.299320][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5191'. [ 291.313970][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5191'. [ 291.831021][T16801] netlink: 'syz.1.5212': attribute type 1 has an invalid length. [ 292.014485][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5217'. [ 292.050154][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5219'. [ 293.114370][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5252'. [ 293.450952][T16908] netlink: 'syz.4.5264': attribute type 2 has an invalid length. [ 293.685587][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5273'. [ 293.709174][T16927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5272'. [ 294.170790][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 294.282211][T16962] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5290'. [ 294.335884][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5290'. [ 294.364201][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5290'. [ 294.783170][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5306'. [ 294.806445][T16995] veth0_virt_wifi: entered promiscuous mode [ 295.215334][T17023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5319'. [ 295.391751][T17036] netlink: 'syz.3.5326': attribute type 29 has an invalid length. [ 295.568896][T17047] tipc: Started in network mode [ 295.581752][T17047] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 295.590729][T17047] tipc: Enabled bearer , priority 24 [ 295.714330][T17056] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 295.971292][T17070] tipc: Started in network mode [ 295.976430][T17070] tipc: Node identity 4ebadf74c613, cluster identity 4711 [ 295.994894][T17070] tipc: Enabled bearer , priority 11 [ 296.167093][T17084] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5349'. [ 296.705754][ T5923] tipc: Node number set to 10005162 [ 296.768877][T17120] xt_l2tp: missing protocol rule (udp|l2tpip) [ 297.025872][T17137] netlink: 'syz.0.5375': attribute type 3 has an invalid length. [ 297.080285][T17142] rdma_op ffff88807859c9f0 conn xmit_rdma 0000000000000000 [ 297.146406][ T6031] tipc: Node number set to 2292834164 [ 297.327744][T17158] atomic_op ffff888029f82998 conn xmit_atomic 0000000000000000 [ 297.776792][T17184] tipc: Invalid UDP bearer configuration [ 297.776855][T17184] tipc: Enabling of bearer rejected, failed to enable media [ 298.283256][T17220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.568220][T17237] __nla_validate_parse: 2 callbacks suppressed [ 298.568242][T17237] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5425'. [ 298.589868][T17237] netlink: 'syz.3.5425': attribute type 1 has an invalid length. [ 298.598033][T17237] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5425'. [ 298.742529][T17247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5430'. [ 298.867729][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'. [ 298.940522][T17263] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.5439'. [ 299.105951][T17274] tipc: Invalid UDP bearer configuration [ 299.106012][T17274] tipc: Enabling of bearer rejected, failed to enable media [ 299.562376][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5457'. [ 299.587167][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5457'. [ 299.888861][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5468'. [ 300.013556][T17335] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5472'. [ 300.049145][T17335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5472'. [ 300.358298][T17355] netlink: 'syz.2.5482': attribute type 1 has an invalid length. [ 300.940399][T17389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.947772][T17389] IPv6: NLM_F_CREATE should be set when creating new route [ 300.955114][T17389] IPv6: NLM_F_CREATE should be set when creating new route [ 300.962373][T17389] IPv6: NLM_F_CREATE should be set when creating new route [ 300.975663][T17389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.124470][T17466] tipc: Enabling of bearer rejected, media not registered [ 302.138984][T17467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.221116][T17535] vlan3: entered allmulticast mode [ 303.279535][T17541] netlink: 'syz.1.5572': attribute type 18 has an invalid length. [ 303.329538][ T143] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 303.349098][ T143] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.404814][ T143] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.429971][ T143] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.607769][T17561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.977868][T17583] __nla_validate_parse: 5 callbacks suppressed [ 303.977890][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5591'. [ 304.199276][T17596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5599'. [ 304.786233][T17632] netlink: 'syz.2.5616': attribute type 178 has an invalid length. [ 305.254668][T17662] macvlan0: entered promiscuous mode [ 305.444965][T17672] xt_limit: Overflow, try lower: 271964/0 [ 305.555694][T17680] netlink: 'syz.2.5641': attribute type 25 has an invalid length. [ 305.785394][T17696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5649'. [ 306.034346][T17712] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5657'. [ 306.166980][T17718] netlink: 'syz.4.5661': attribute type 1 has an invalid length. [ 306.175272][T17718] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5661'. [ 306.214541][T17718] netlink: 'syz.4.5661': attribute type 1 has an invalid length. [ 306.222345][T17718] netlink: 'syz.4.5661': attribute type 8 has an invalid length. [ 306.254696][T17718] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5661'. [ 306.775465][T17758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.090711][T17782] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5690'. [ 307.119720][T17782] netlink: 'syz.3.5690': attribute type 2 has an invalid length. [ 307.366710][T17801] netlink: 'syz.0.5699': attribute type 3 has an invalid length. [ 307.493584][T17810] netlink: 'syz.4.5703': attribute type 2 has an invalid length. [ 307.924470][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5714'. [ 307.944179][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5714'. [ 307.980106][T17838] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5715'. [ 308.071713][T17844] netlink: 'syz.3.5720': attribute type 29 has an invalid length. [ 308.324193][ T143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.338560][ T143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.364692][ T143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.373507][ T143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.011261][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5747'. [ 309.043676][T17901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5746'. [ 309.424623][T17920] validate_nla: 1 callbacks suppressed [ 309.424646][T17920] netlink: 'syz.3.5756': attribute type 3 has an invalid length. [ 309.453298][T17920] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5756'. [ 309.613171][T17930] nbd: must specify a size in bytes for the device [ 309.675718][T17935] nbd: socks must be embedded in a SOCK_ITEM attr [ 310.109224][T17960] : entered promiscuous mode [ 310.206983][T17971] netlink: 'syz.0.5781': attribute type 1 has an invalid length. [ 310.227419][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5782'. [ 311.234552][T18034] netlink: 'syz.1.5812': attribute type 10 has an invalid length. [ 311.261318][T18037] sctp: [Deprecated]: syz.4.5814 (pid 18037) Use of int in max_burst socket option. [ 311.261318][T18037] Use struct sctp_assoc_value instead [ 311.904682][T18069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5830'. [ 312.047627][T18077] : entered promiscuous mode [ 312.220657][T18091] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5842'. [ 312.239988][T18091] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5842'. [ 314.015228][T18198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.118869][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5896'. [ 314.142289][T18203] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 314.275959][T18213] netlink: 'syz.0.5900': attribute type 142 has an invalid length. [ 314.614542][ T5948] Bluetooth: hci4: command 0x0405 tx timeout [ 315.042542][T18256] xt_l2tp: v2 sid > 0xffff: 1114112 [ 315.917650][T18310] netlink: 'syz.4.5947': attribute type 1 has an invalid length. [ 316.065175][T18320] netlink: 'syz.2.5952': attribute type 10 has an invalid length. [ 316.326540][T18334] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5960'. [ 316.387828][T18339] team0: Device gtp1 is up. Set it down before adding it as a team port [ 316.613607][T18355] nftables ruleset with unbound set [ 317.291561][T18397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.340078][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.392025][T18404] netlink: 'syz.2.5994': attribute type 29 has an invalid length. [ 317.443924][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'. [ 317.462025][T18408] netlink: 'syz.2.5994': attribute type 29 has an invalid length. [ 317.470426][T18408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'. [ 317.949881][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6011'. [ 318.012134][T18440] netlink: 'syz.3.6012': attribute type 1 has an invalid length. [ 318.020339][T18440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.077617][T18428] syz.4.6006 (18428) used greatest stack depth: 16776 bytes left [ 318.100481][T18442] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 318.134437][T18442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.200552][T18448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6016'. [ 318.390843][T18457] netlink: 'syz.2.6021': attribute type 32 has an invalid length. [ 318.413260][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6021'. [ 318.509489][T18457] bond1: Setting coupled_control to off (0) [ 318.517755][T18468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6025'. [ 318.797283][T18482] netlink: 'syz.2.6031': attribute type 1 has an invalid length. [ 318.902211][T18488] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 318.916952][T18488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 319.798832][T18534] nbd: must specify a device to reconfigure [ 319.824298][T18532] tipc: Enabling of bearer rejected, failed to enable media [ 319.950655][ T5923] IPVS: starting estimator thread 0... [ 320.073897][T18545] IPVS: using max 27 ests per chain, 64800 per kthread [ 320.171329][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6068'. [ 320.180496][T18551] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 320.495726][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6073'. [ 320.520021][T18580] netlink: 'syz.4.6077': attribute type 10 has an invalid length. [ 320.562141][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6078'. [ 320.569003][T18580] team0: Device vxcan1 is of different type [ 321.446934][T18637] tipc: Started in network mode [ 321.451906][T18637] tipc: Node identity ac141441, cluster identity 4711 [ 321.488798][T18637] tipc: Enabled bearer , priority 10 [ 322.617626][ T6031] tipc: Node number set to 2886997057 [ 322.756547][T18717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6143'. [ 323.193027][T18745] netlink: 'syz.3.6155': attribute type 3 has an invalid length. [ 323.333957][ T5948] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 323.651523][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6170'. [ 323.703526][T18779] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6172'. [ 324.444933][T18817] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 324.458424][T18817] tipc: Enabled bearer , priority 10 [ 326.009840][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6216'. [ 326.136821][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6220'. [ 326.866060][T18933] netlink: 'syz.0.6243': attribute type 3 has an invalid length. [ 326.883108][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 327.207795][T18957] netlink: 'syz.1.6253': attribute type 1 has an invalid length. [ 327.228544][T18957] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6253'. [ 327.253013][T18957] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6253'. [ 327.322007][T18963] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 327.365626][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6257'. [ 327.844719][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6269'. [ 327.866867][T18997] netlink: 'syz.3.6271': attribute type 1 has an invalid length. [ 328.005251][T19003] sit2: entered promiscuous mode [ 328.010283][T19003] sit2: entered allmulticast mode [ 328.756929][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6295'. [ 328.851297][T19047] bond6: Invalid ad_actor_system MAC address. [ 328.884548][T19047] bond6: option ad_actor_system: invalid value (1) [ 328.932982][T19047] bond6 (unregistering): Released all slaves [ 329.261861][T19073] IPVS: ip_vs_edit_dest(): server weight less than zero [ 329.430330][T19084] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6312'. [ 329.484134][T19088] sctp: [Deprecated]: syz.2.6314 (pid 19088) Use of int in maxseg socket option. [ 329.484134][T19088] Use struct sctp_assoc_value instead [ 330.016762][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6331'. [ 331.290302][T19198] sock: sock_timestamping_bind_phc: sock not bind to device [ 331.726995][T19224] __nla_validate_parse: 5 callbacks suppressed [ 331.727017][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 331.778063][T19228] veth0_to_bond: entered allmulticast mode [ 332.126838][T19249] : entered promiscuous mode [ 333.070379][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 333.100549][T19295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6414'. [ 333.127735][T19295] netlink: 'syz.1.6414': attribute type 12 has an invalid length. [ 333.140426][T19295] netlink: 'syz.1.6414': attribute type 11 has an invalid length. [ 333.337029][T19305] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6419'. [ 333.745817][T19325] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6429'. [ 334.273623][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6447'. [ 334.317512][T19356] IPVS: Scheduler module ip_vs_sip not found [ 334.492484][T19372] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6452'. [ 334.775771][T19385] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6458'. [ 334.833923][T19389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6460'. [ 335.766310][T19447] sctp: [Deprecated]: syz.0.6486 (pid 19447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.766310][T19447] Use struct sctp_sack_info instead [ 335.811749][T19447] sctp: [Deprecated]: syz.0.6486 (pid 19447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.811749][T19447] Use struct sctp_sack_info instead [ 336.866211][T19495] netlink: 'syz.2.6508': attribute type 1 has an invalid length. [ 336.895706][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6508'. [ 336.931819][T19495] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6508'. [ 336.955120][T19495] netlink: 'syz.2.6508': attribute type 1 has an invalid length. [ 337.464939][T19518] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6518'. [ 338.115163][T19559] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.222810][T19566] Bluetooth: MGMT ver 1.23 [ 339.594551][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6574'. [ 339.799625][T19646] netlink: 'syz.1.6579': attribute type 1 has an invalid length. [ 339.836188][T19646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.065086][T19661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6587'. [ 340.450660][T19680] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6595'. [ 340.981810][T19709] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6610'. [ 341.894059][ T5945] Bluetooth: hci4: command 0x0405 tx timeout [ 342.057237][ T143] wlan1: Trigger new scan to find an IBSS to join [ 342.083068][T19769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.428852][T19793] block nbd0: not configured, cannot reconfigure [ 342.878616][T19819] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 342.947275][T19824] sctp: [Deprecated]: syz.2.6666 (pid 19824) Use of int in max_burst socket option deprecated. [ 342.947275][T19824] Use struct sctp_assoc_value instead [ 343.310153][T19842] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 344.365620][T19892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6699'. [ 344.500550][T19896] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6703'. [ 344.991993][T19929] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6717'. [ 345.014021][ T35] wlan1: Trigger new scan to find an IBSS to join [ 345.737849][T19970] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6735'. [ 345.774637][T19970] xt_policy: neither incoming nor outgoing policy selected [ 345.945401][ T143] wlan1: Creating new IBSS network, BSSID 5a:c8:c7:80:55:98 [ 346.076585][T19992] netlink: 'syz.4.6746': attribute type 1 has an invalid length. [ 346.098387][T19992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.205773][T19999] netlink: 'syz.2.6750': attribute type 11 has an invalid length. [ 346.215060][T19999] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.6750'. [ 346.225358][T20000] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 346.560073][T20020] netlink: 'syz.3.6762': attribute type 1 has an invalid length. [ 346.617552][T20024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6763'. [ 347.145574][T20056] veth5: entered allmulticast mode [ 347.301602][T20070] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6787'. [ 347.321430][T20070] netlink: 'syz.4.6787': attribute type 2 has an invalid length. [ 347.410633][T20074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6788'. [ 347.758489][T20097] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6800'. [ 347.914820][T20104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6803'. [ 347.956686][T20111] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 347.988229][T20113] netlink: 'syz.1.6806': attribute type 2 has an invalid length. [ 348.119424][T20117] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 348.129898][ T29] audit: type=1107 audit(1775011989.862:3): pid=20118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 348.147075][T20117] team0: Device macvlan0 is already an upper device of the team interface [ 349.104209][T20180] netlink: 'syz.1.6840': attribute type 4 has an invalid length. [ 349.669930][T20218] __nla_validate_parse: 2 callbacks suppressed [ 349.669952][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6859'. [ 349.779676][ T6031] IPVS: starting estimator thread 0... [ 349.787245][T20227] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 349.895617][T20228] IPVS: using max 25 ests per chain, 60000 per kthread [ 350.301673][ T5979] IPVS: starting estimator thread 0... [ 350.405763][T20263] IPVS: using max 26 ests per chain, 62400 per kthread [ 350.550594][T20271] netlink: 'syz.0.6882': attribute type 11 has an invalid length. [ 350.700439][T20278] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6886'. [ 350.969733][T20293] xt_l2tp: v2 tid > 0xffff: 1114244 [ 351.190272][T20308] sock: sock_set_timeout: `syz.3.6899' (pid 20308) tries to set negative timeout [ 351.803600][T20344] nbd: couldn't find device at index 242 [ 351.977120][T20358] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6926'. [ 352.470479][T20383] netlink: 'syz.0.6940': attribute type 2 has an invalid length. [ 352.813428][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6947'. [ 352.881483][T20405] lo: entered allmulticast mode [ 352.909049][T20405] lo: left allmulticast mode [ 353.289836][T20423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.431798][T20434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6964'. [ 353.452136][T20434] F: renamed from gre0 (while UP) [ 353.483158][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6964'. [ 353.486106][T20434] F: entered allmulticast mode [ 353.919258][T20460] netlink: 'syz.4.6974': attribute type 1 has an invalid length. [ 353.939213][T20460] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6974'. [ 354.078400][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6979'. [ 354.513149][T20492] netlink: 'syz.2.6991': attribute type 1 has an invalid length. [ 354.532766][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6991'. [ 354.564004][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6991'. [ 354.592890][T20492] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 354.611304][T20492] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 354.623986][T20492] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 354.946620][T20522] netlink: 'syz.2.7005': attribute type 1 has an invalid length. [ 354.963942][T20522] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7005'. [ 354.994880][T20522] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7005'. [ 355.017006][T20522] netlink: 'syz.2.7005': attribute type 1 has an invalid length. [ 355.032993][T20522] netlink: 618 bytes leftover after parsing attributes in process `syz.2.7005'. [ 355.094807][T20530] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.124753][T20530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7009'. [ 355.315492][T20543] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7015'. [ 355.345695][T20544] syz.1.7016 (20544) used obsolete PPPIOCDETACH ioctl [ 355.468711][T20553] tipc: Enabling of bearer rejected, media not registered [ 355.599518][T20561] netlink: 'syz.4.7025': attribute type 29 has an invalid length. [ 356.191263][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7044'. [ 356.245637][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7044'. [ 356.869786][T20637] netlink: 'syz.3.7062': attribute type 1 has an invalid length. [ 357.500978][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7074'. [ 357.510294][T20661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7074'. [ 357.709110][ T5948] Bluetooth: hci4: link tx timeout [ 357.715596][ T5948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 358.276896][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7095'. [ 359.289088][T20769] netlink: 'syz.3.7124': attribute type 62 has an invalid length. [ 359.736283][ T5948] Bluetooth: hci4: command 0x0405 tx timeout [ 359.917930][T20812] netlink: 'syz.2.7145': attribute type 9 has an invalid length. [ 359.928193][T20809] block nbd0: not configured, cannot reconfigure [ 360.786999][T20870] vlan3: entered promiscuous mode [ 360.792189][T20870] geneve1: entered promiscuous mode [ 360.808025][T20870] vlan3: entered allmulticast mode [ 360.813927][T20870] geneve1: entered allmulticast mode [ 361.433223][T20914] __nla_validate_parse: 4 callbacks suppressed [ 361.433245][T20914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7194'. [ 361.454056][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7196'. [ 361.494616][T20915] netlink: 'syz.3.7196': attribute type 3 has an invalid length. [ 361.809199][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7205'. [ 361.843920][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7205'. [ 361.865532][T20935] netlink: 'syz.3.7205': attribute type 14 has an invalid length. [ 361.885098][T20935] netlink: 'syz.3.7205': attribute type 13 has an invalid length. [ 362.064039][T20951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7214'. [ 362.081200][T20951] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7214'. [ 362.105191][T20951] netlink: 'syz.1.7214': attribute type 6 has an invalid length. [ 362.121950][T20951] netlink: 'syz.1.7214': attribute type 5 has an invalid length. [ 362.133374][T20951] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7214'. [ 362.774215][T20994] netlink: 'syz.2.7234': attribute type 1 has an invalid length. [ 362.800256][T20994] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7234'. [ 362.822687][T20994] netlink: 'syz.2.7234': attribute type 1 has an invalid length. [ 362.831795][T20994] netlink: 'syz.2.7234': attribute type 8 has an invalid length. [ 362.852054][T20994] netlink: 606 bytes leftover after parsing attributes in process `syz.2.7234'. [ 362.872332][T20994] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7234'. [ 365.351125][T21149] syz.2.7308: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 365.372800][T21149] CPU: 0 UID: 0 PID: 21149 Comm: syz.2.7308 Not tainted syzkaller #0 PREEMPT(full) [ 365.372831][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 365.372844][T21149] Call Trace: [ 365.372853][T21149] [ 365.372862][T21149] dump_stack_lvl+0xe8/0x150 [ 365.372899][T21149] warn_alloc+0x249/0x340 [ 365.372926][T21149] ? stack_trace_save+0xa9/0x100 [ 365.372953][T21149] ? __pfx_warn_alloc+0x10/0x10 [ 365.372986][T21149] ? kasan_save_track+0x4f/0x80 [ 365.373007][T21149] ? kasan_save_track+0x3e/0x80 [ 365.373027][T21149] ? __kasan_kmalloc+0x93/0xb0 [ 365.373050][T21149] ? __kmalloc_cache_noprof+0x31c/0x660 [ 365.373072][T21149] ? xskq_create+0x56/0x170 [ 365.373094][T21149] ? xsk_setsockopt+0x54c/0x990 [ 365.373123][T21149] ? do_sock_setsockopt+0x17c/0x1b0 [ 365.373146][T21149] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 365.373168][T21149] ? do_syscall_64+0x14d/0xf80 [ 365.373197][T21149] __vmalloc_node_range_noprof+0x132/0x1730 [ 365.373257][T21149] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 365.373290][T21149] ? __kasan_kmalloc+0x93/0xb0 [ 365.373319][T21149] vmalloc_user_noprof+0xad/0xe0 [ 365.373342][T21149] ? xskq_create+0xbf/0x170 [ 365.373364][T21149] xskq_create+0xbf/0x170 [ 365.373388][T21149] xsk_init_queue+0x8a/0xe0 [ 365.373412][T21149] xsk_setsockopt+0x54c/0x990 [ 365.373445][T21149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.373489][T21149] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.373523][T21149] ? aa_sock_opt_perm+0xff/0x1a0 [ 365.373557][T21149] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 365.373579][T21149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 365.373612][T21149] do_sock_setsockopt+0x17c/0x1b0 [ 365.373640][T21149] __x64_sys_setsockopt+0x13d/0x1b0 [ 365.373671][T21149] do_syscall_64+0x14d/0xf80 [ 365.373693][T21149] ? trace_irq_disable+0x3b/0x150 [ 365.373710][T21149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.373731][T21149] ? clear_bhb_loop+0x40/0x90 [ 365.373761][T21149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.373782][T21149] RIP: 0033:0x7fc99139c819 [ 365.373803][T21149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.373820][T21149] RSP: 002b:00007fc992296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.373844][T21149] RAX: ffffffffffffffda RBX: 00007fc991615fa0 RCX: 00007fc99139c819 [ 365.373859][T21149] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 365.373872][T21149] RBP: 00007fc991432c91 R08: 0000000000000004 R09: 0000000000000000 [ 365.373885][T21149] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.373898][T21149] R13: 00007fc991616038 R14: 00007fc991615fa0 R15: 00007fff62e2ed28 [ 365.373936][T21149] [ 365.648277][T21149] Mem-Info: [ 365.652642][T21149] active_anon:5323 inactive_anon:6 isolated_anon:0 [ 365.652642][T21149] active_file:3007 inactive_file:40154 isolated_file:0 [ 365.652642][T21149] unevictable:768 dirty:262 writeback:0 [ 365.652642][T21149] slab_reclaimable:12104 slab_unreclaimable:100917 [ 365.652642][T21149] mapped:29097 shmem:1354 pagetables:1174 [ 365.652642][T21149] sec_pagetables:0 bounce:0 [ 365.652642][T21149] kernel_misc_reclaimable:0 [ 365.652642][T21149] free:1316935 free_pcp:21041 free_cma:0 [ 365.708706][T21149] Node 0 active_anon:21592kB inactive_anon:24kB active_file:12028kB inactive_file:160416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116488kB dirty:1048kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12168kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.770026][T21149] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 365.847635][T21149] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.878306][T21149] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 365.884165][T21149] Node 0 DMA32 free:1304972kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21392kB inactive_anon:24kB active_file:12028kB inactive_file:160416kB unevictable:1536kB writepending:1048kB zspages:0kB present:3129332kB managed:2552660kB mlocked:0kB bounce:0kB free_pcp:84580kB local_pcp:24520kB free_cma:0kB [ 365.918870][T21149] lowmem_reserve[]: 0 0 0 0 0 [ 365.923702][T21149] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.954148][T21149] lowmem_reserve[]: 0 0 0 0 0 [ 365.958949][T21149] Node 1 Normal free:3947408kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.994620][T21149] lowmem_reserve[]: 0 0 0 0 0 [ 365.999579][T21149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.013190][T21149] Node 0 DMA32: 2891*4kB (UME) 3182*8kB (UME) 1546*16kB (UME) 464*32kB (UME) 119*64kB (UME) 93*128kB (UME) 90*256kB (UME) 124*512kB (UME) 126*1024kB (UME) 57*2048kB (UME) 214*4096kB (UM) = 1304956kB [ 366.078473][T21149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 366.126163][T21149] Node 1 Normal: 6*4kB (U) 5*8kB (UM) 15*16kB (UM) 13*32kB (UM) 7*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947408kB [ 366.154940][T21149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.174026][T21149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.203177][T21149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.239589][T21149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.251515][T21178] tipc: Started in network mode [ 366.260992][T21149] 44513 total pagecache pages [ 366.264418][T21178] tipc: Node identity ac14140f, cluster identity 4711 [ 366.267193][T21149] 0 pages in swap cache [ 366.277751][T21149] Free swap = 124996kB [ 366.293169][T21149] Total swap = 124996kB [ 366.294630][T21178] tipc: New replicast peer: 255.255.255.255 [ 366.303834][T21149] 2097051 pages RAM [ 366.312234][T21149] 0 pages HighMem/MovableOnly [ 366.320657][T21178] tipc: Enabled bearer , priority 10 [ 366.327594][T21149] 427051 pages reserved [ 366.332038][T21149] 0 pages cma reserved [ 366.479045][T21189] netlink: 'syz.4.7322': attribute type 4 has an invalid length. [ 366.663069][T21200] __nla_validate_parse: 10 callbacks suppressed [ 366.663091][T21200] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7326'. [ 366.770909][T21207] netlink: 'syz.3.7329': attribute type 10 has an invalid length. [ 366.803015][T21207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.847200][T21207] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 366.904847][T21167] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.915141][T21167] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 366.964809][T21167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.970791][T21167] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 367.046323][T21167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 367.055426][T21167] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 367.101086][T21167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.113484][T21167] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 367.136070][T21167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.154667][T21167] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 367.419300][T21235] vcan0: tx address claim with dlc 0 [ 367.487272][ T6154] tipc: Node number set to 2886997007 [ 367.649521][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7343'. [ 367.692354][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7344'. [ 367.738842][T21252] bond0: entered promiscuous mode [ 367.756273][T21252] bond_slave_0: entered promiscuous mode [ 367.784734][T21252] bond_slave_1: entered promiscuous mode [ 367.820458][T21252] bond0: left promiscuous mode [ 367.825842][T21252] bond_slave_0: left promiscuous mode [ 367.831543][T21252] bond_slave_1: left promiscuous mode [ 368.464112][T21293] netlink: 'syz.4.7362': attribute type 83 has an invalid length. [ 368.619836][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7365'. [ 368.674388][T21297] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.682244][T21297] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.914330][T21297] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 369.127038][T21329] netlink: 'syz.2.7376': attribute type 83 has an invalid length. [ 369.657603][T21358] netlink: 54 bytes leftover after parsing attributes in process `syz.4.7387'. [ 369.683055][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7387'. [ 369.838413][T21368] netlink: 'syz.4.7392': attribute type 4 has an invalid length. [ 369.857986][T21368] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7392'. [ 369.910455][T21371] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.7392'. [ 370.282399][T21381] netlink: 'syz.1.7396': attribute type 1 has an invalid length. [ 370.294471][T21381] netlink: 'syz.1.7396': attribute type 7 has an invalid length. [ 370.332744][T21381] netlink: 'syz.1.7396': attribute type 8 has an invalid length. [ 370.346736][T21381] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7396'. [ 370.404895][T21381] NCSI netlink: No device for ifindex 65584 [ 370.838365][T21400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7406'. [ 371.445196][ T5947] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 371.540181][ T5947] CPU: 0 UID: 0 PID: 5947 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 371.540213][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 371.540225][ T5947] Call Trace: [ 371.540233][ T5947] [ 371.540242][ T5947] dump_stack_lvl+0xe8/0x150 [ 371.540275][ T5947] dump_header+0xd3/0x4c0 [ 371.540302][ T5947] oom_kill_process+0x3ab/0x970 [ 371.540330][ T5947] out_of_memory+0x106c/0x1410 [ 371.540355][ T5947] ? __pfx___mutex_lock+0x10/0x10 [ 371.540390][ T5947] ? __pfx_out_of_memory+0x10/0x10 [ 371.540409][ T5947] ? do_raw_spin_unlock+0xf5/0x210 [ 371.540444][ T5947] try_charge_memcg+0xc53/0x1560 [ 371.540482][ T5947] ? __lock_acquire+0x6b5/0x2cf0 [ 371.540525][ T5947] ? __pfx_try_charge_memcg+0x10/0x10 [ 371.540546][ T5947] ? xa_load+0x60/0x210 [ 371.540582][ T5947] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 371.540613][ T5947] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 371.540642][ T5947] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 371.540671][ T5947] __swap_cache_prepare_and_add+0x52a/0x700 [ 371.540725][ T5947] swap_cache_alloc_folio+0xf1/0x240 [ 371.540760][ T5947] swap_cluster_readahead+0x53a/0x690 [ 371.540800][ T5947] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 371.540847][ T5947] ? get_vma_policy+0x27b/0x3c0 [ 371.540878][ T5947] swapin_readahead+0x196/0xc50 [ 371.540925][ T5947] ? __pfx_swapin_readahead+0x10/0x10 [ 371.540958][ T5947] ? swap_table_get+0x1e/0x260 [ 371.540986][ T5947] ? swap_table_get+0x1e/0x260 [ 371.541011][ T5947] ? swap_table_get+0x1e/0x260 [ 371.541041][ T5947] ? swap_table_get+0x216/0x260 [ 371.541071][ T5947] ? swap_cache_get_folio+0x513/0x520 [ 371.541109][ T5947] do_swap_page+0x56f/0x5a20 [ 371.541164][ T5947] ? do_swap_page+0x127/0x5a20 [ 371.541192][ T5947] ? __pfx_do_swap_page+0x10/0x10 [ 371.541218][ T5947] ? __pte_offset_map+0x1ae/0x240 [ 371.541243][ T5947] ? pte_offset_map_rw_nolock+0xea/0x160 [ 371.541268][ T5947] handle_mm_fault+0x12d2/0x3310 [ 371.541312][ T5947] ? handle_mm_fault+0xee/0x3310 [ 371.541352][ T5947] ? __pfx_handle_mm_fault+0x10/0x10 [ 371.541380][ T5947] ? lock_vma_under_rcu+0x45a/0x500 [ 371.541434][ T5947] do_user_addr_fault+0xa73/0x1340 [ 371.541471][ T5947] ? rcu_is_watching+0x15/0xb0 [ 371.541507][ T5947] ? trace_page_fault_user+0x84/0x210 [ 371.541537][ T5947] exc_page_fault+0x6a/0xc0 [ 371.541564][ T5947] asm_exc_page_fault+0x26/0x30 [ 371.541583][ T5947] RIP: 0033:0x7fc99135d04e [ 371.541604][ T5947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.541622][ T5947] RSP: 002b:00007fff62e2f008 EFLAGS: 00010246 [ 371.541641][ T5947] RAX: 0000000000000000 RBX: 0000555589919500 RCX: 00007fc99135d04e [ 371.541655][ T5947] RDX: 00007fff62e2f060 RSI: 0000000000000000 RDI: 0000000000000000 [ 371.541668][ T5947] RBP: 00007fff62e2f0cc R08: 0000000000000000 R09: 0000000000000000 [ 371.541680][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 371.541693][ T5947] R13: 00000000000927c0 R14: 000000000005a872 R15: 00007fff62e2f120 [ 371.541728][ T5947] [ 371.541736][ T5947] memory: usage 307200kB, limit 307200kB, failcnt 454 [ 371.948224][ T5947] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 372.013936][ T5947] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 372.021444][ T5947] Memory cgroup stats for /syz2: [ 372.021689][ T5947] cache 0 [ 372.068519][ T5947] rss 0 [ 372.071438][ T5947] rss_huge 0 [ 372.115669][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7429'. [ 372.136148][ T5947] shmem 0 [ 372.139212][ T5947] mapped_file 0 [ 372.142732][ T5947] dirty 0 [ 372.143980][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7429'. [ 372.216233][ T5947] writeback 0 [ 372.219599][ T5947] workingset_refault_anon 4 [ 372.276190][ T5947] workingset_refault_file 0 [ 372.280776][ T5947] swap 196608 [ 372.323926][ T5947] swapcached 200704 [ 372.328121][ T5947] pgpgin 68624 [ 372.331525][ T5947] pgpgout 68623 [ 372.374065][ T5947] pgfault 175953 [ 372.377680][ T5947] pgmajfault 5 [ 372.381179][ T5947] inactive_anon 0 [ 372.441091][ T5947] active_anon 4096 [ 372.483882][ T5947] inactive_file 0 [ 372.487590][ T5947] active_file 0 [ 372.491242][ T5947] unevictable 0 [ 372.550449][ T5947] hierarchical_memory_limit 314572800 [ 372.577008][ T5947] hierarchical_memsw_limit 9223372036854771712 [ 372.603669][ T5947] total_cache 0 [ 372.617543][ T5947] total_rss 0 [ 372.634773][ T5947] total_rss_huge 0 [ 372.649393][ T5947] total_shmem 0 [ 372.663176][ T5947] total_mapped_file 0 [ 372.688751][ T5947] total_dirty 0 [ 372.741358][ T5947] total_writeback 0 [ 372.751456][ T5947] total_workingset_refault_anon 4 [ 372.767661][ T5947] total_workingset_refault_file 0 [ 372.787908][ T5947] total_swap 196608 [ 372.791771][ T5947] total_swapcached 200704 [ 372.855741][ T5947] total_pgpgin 68624 [ 372.859711][ T5947] total_pgpgout 68623 [ 372.871564][T21472] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7437'. [ 372.882999][ T5947] total_pgfault 175953 [ 372.888531][T21476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7438'. [ 372.888990][ T5947] total_pgmajfault 5 [ 372.914529][T21472] netem: invalid attributes len -24 [ 372.919817][T21472] netem: change failed [ 372.937699][ T5947] total_inactive_anon 0 [ 372.941918][ T5947] total_active_anon 4096 [ 372.947705][ T5947] total_inactive_file 0 [ 372.951900][ T5947] total_active_file 0 [ 373.004250][ T5947] total_unevictable 0 [ 373.032983][ T5947] anon_cost 0 [ 373.055935][ T5947] file_cost 0 [ 373.059374][ T5947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7395,pid=21372,uid=0 [ 373.114764][ T5947] Memory cgroup out of memory: OOM victim 21372 (syz.2.7395) is already exiting. Skip killing the task [ 373.511894][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7447'. [ 373.621038][T21506] tipc: Enabled bearer , priority 0 [ 373.892546][T21517] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7456'. [ 373.944206][T21517] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7456'. [ 374.046215][T21527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7462'. [ 374.759498][ T5948] block nbd0: Receive control failed (result -32) [ 375.202549][T21583] block nbd1: Unsupported socket: should be TCP or UNIX. [ 375.428592][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7495'. [ 375.474306][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7495'. [ 377.114348][T21685] nbd1: detected capacity change from 0 to 63 [ 377.126966][ T5945] block nbd1: Receive control failed (result -32) [ 377.127149][ T5948] block nbd1: Receive control failed (result -32) [ 377.136783][T21461] block nbd1: Send control failed (result -32) [ 377.161865][T21461] block nbd1: Request send failed, requeueing [ 377.182519][ T1195] block nbd1: Dead connection, failed to find a fallback [ 377.194369][ T1195] block nbd1: shutting down sockets [ 377.200435][ T1195] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.212188][ T1195] Buffer I/O error on dev nbd1, logical block 0, async page read [ 377.221066][T21461] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.231601][T21461] Buffer I/O error on dev nbd1, logical block 1, async page read [ 377.240085][T21461] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.249847][T21461] Buffer I/O error on dev nbd1, logical block 2, async page read [ 377.258770][T21461] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.268670][T21461] Buffer I/O error on dev nbd1, logical block 3, async page read [ 377.276900][T21461] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.286787][T21461] Buffer I/O error on dev nbd1, logical block 0, async page read [ 377.294920][T21461] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.304754][T21461] Buffer I/O error on dev nbd1, logical block 1, async page read [ 377.312577][T21461] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.322699][T21461] Buffer I/O error on dev nbd1, logical block 2, async page read [ 377.330952][T21461] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.340949][T21461] Buffer I/O error on dev nbd1, logical block 3, async page read [ 377.357744][T21461] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.377607][T21461] Buffer I/O error on dev nbd1, logical block 0, async page read [ 377.390960][T21707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 377.402611][T21461] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 377.428754][T21461] Buffer I/O error on dev nbd1, logical block 1, async page read [ 377.460309][T21461] ldm_validate_partition_table(): Disk read failed. [ 377.474946][T21461] Dev nbd1: unable to read RDB block 0 [ 377.494988][T21461] nbd1: unable to read partition table [ 377.528821][T21461] ldm_validate_partition_table(): Disk read failed. [ 377.558736][T21461] Dev nbd1: unable to read RDB block 0 [ 377.575087][T21461] nbd1: unable to read partition table [ 378.225058][T21738] nbd2: detected capacity change from 0 to 127 [ 378.263923][ T5948] block nbd2: Receive control failed (result -32) [ 378.374665][T21461] block nbd2: Dead connection, failed to find a fallback [ 378.384806][T21461] block nbd2: shutting down sockets [ 378.391676][T21461] ldm_validate_partition_table(): Disk read failed. [ 378.414671][T21461] Dev nbd2: unable to read RDB block 0 [ 378.431583][T21461] nbd2: unable to read partition table [ 378.458055][T21743] __nla_validate_parse: 5 callbacks suppressed [ 378.458076][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7563'. [ 378.465551][T21461] ldm_validate_partition_table(): Disk read failed. [ 378.511398][T21461] Dev nbd2: unable to read RDB block 0 [ 378.525159][T21461] nbd2: unable to read partition table [ 378.618437][T21751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7567'. [ 378.719847][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7571'. [ 378.770074][T21759] xfrm1: entered promiscuous mode [ 378.783989][T21759] xfrm1: entered allmulticast mode [ 378.787241][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.821683][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7571'. [ 379.035414][T21775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7579'. [ 379.070999][T21775] hsr_slave_0: left promiscuous mode [ 379.082846][T21775] hsr_slave_1: left promiscuous mode [ 379.837130][T21823] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7599'. [ 379.876180][T21828] netlink: 'syz.2.7600': attribute type 1 has an invalid length. [ 379.903551][T21828] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7600'. [ 379.926492][T21828] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7600'. [ 379.958863][T21828] netlink: 'syz.2.7600': attribute type 1 has an invalid length. [ 379.978951][T21828] netlink: 'syz.2.7600': attribute type 8 has an invalid length. [ 380.000662][T21828] netlink: 582 bytes leftover after parsing attributes in process `syz.2.7600'. [ 380.028605][T21832] netlink: 284 bytes leftover after parsing attributes in process `syz.3.7602'. [ 380.876758][T21881] tipc: Enabling of bearer rejected, already enabled [ 381.090819][T21895] tipc: Enabled bearer , priority 11 [ 381.328314][T21908] netlink: 'syz.1.7639': attribute type 12 has an invalid length. [ 381.606348][T21923] tipc: New replicast peer: 255.255.255.255 [ 381.613009][T21923] tipc: Enabled bearer , priority 10 [ 383.092103][T22021] netlink: 'syz.0.7692': attribute type 33 has an invalid length. [ 383.208715][T22021] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 383.255230][T22021] bond2 (unregistering): Released all slaves [ 383.331034][T22036] tap0: tun_chr_ioctl cmd 2148553947 [ 383.726858][T22060] __nla_validate_parse: 13 callbacks suppressed [ 383.726882][T22060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7710'. [ 384.471095][T22100] bond2: ARP target 1.0.0.0 is already present [ 384.499918][T22100] bond2: option arp_ip_target: invalid value (1) [ 384.529897][T22100] bond2 (unregistering): Released all slaves [ 385.060780][T22133] tap0: tun_chr_ioctl cmd 1074025672 [ 385.073491][T22133] tap0: ignored: set checksum disabled [ 385.196586][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7751'. [ 385.885853][T22187] netlink: 'syz.1.7770': attribute type 2 has an invalid length. [ 386.268975][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7784'. [ 386.300702][T22214] veth0: entered promiscuous mode [ 386.336559][T22211] veth0: left promiscuous mode [ 386.900329][T22250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7803'. [ 387.000541][T22257] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.7806'. [ 387.636189][T22301] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7827'. [ 387.743397][T22307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7829'. [ 388.109203][T22329] netlink: 'syz.4.7839': attribute type 1 has an invalid length. [ 388.120330][T22329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7839'. [ 388.139951][T22329] netlink: 'syz.4.7839': attribute type 1 has an invalid length. [ 388.148931][T22329] netlink: 'syz.4.7839': attribute type 8 has an invalid length. [ 388.157889][T22329] netlink: 582 bytes leftover after parsing attributes in process `syz.4.7839'. [ 388.168608][T22329] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7839'. [ 388.305508][T22338] netlink: 'syz.0.7845': attribute type 3 has an invalid length. [ 389.182688][T22400] netlink: 27 bytes leftover after parsing attributes in process `syz.3.7872'. [ 389.217926][T22404] xt_hashlimit: size too large, truncated to 1048576 [ 389.275071][T22407] : renamed from vxcan1 [ 389.969631][T22442] xt_hashlimit: size too large, truncated to 1048576 [ 390.171278][T22458] netlink: 'syz.0.7896': attribute type 83 has an invalid length. [ 390.540450][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7906'. [ 390.557850][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7908'. [ 390.798634][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7913'. [ 390.824902][T22493] vlan1: entered allmulticast mode [ 390.830110][T22493] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 391.277592][T22523] netlink: 'syz.0.7928': attribute type 3 has an invalid length. [ 391.295724][T22523] netlink: 'syz.0.7928': attribute type 1 has an invalid length. [ 391.304743][T22523] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7928'. [ 391.315504][T22523] NCSI netlink: No device for ifindex 813332851 [ 391.492079][T22537] netlink: zone id is out of range [ 391.504440][T22537] netlink: zone id is out of range [ 391.531482][T22534] netlink: set zone limit has 4 unknown bytes [ 391.735245][T22549] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7940'. [ 391.904727][T22559] netlink: 'syz.0.7945': attribute type 8 has an invalid length. [ 391.912875][T22559] sch_fq: defrate 0 ignored. [ 392.255212][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7957'. [ 392.501106][T22598] blkio.reset_stats is deprecated [ 392.594623][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7966'. [ 392.625399][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7966'. [ 392.759760][T22616] netem: incorrect gi model size [ 392.783599][T22616] netem: change failed [ 393.288183][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7987'. [ 393.502707][T22663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 393.748515][T22679] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.756718][T22679] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.506510][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8022'. [ 394.650529][T22727] ip6erspan0: entered allmulticast mode [ 394.729254][T22731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8027'. [ 394.949226][T22742] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8032'. [ 395.052075][T22750] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8035'. [ 395.062542][T22750] netlink: 'syz.0.8035': attribute type 1 has an invalid length. [ 395.256030][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8042'. [ 395.298119][T22767] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8044'. [ 396.725955][T22829] netem: change failed [ 396.879492][T22835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8073'. [ 397.120561][T22847] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.131648][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8080'. [ 398.037129][T22899] netlink: 'syz.0.8105': attribute type 5 has an invalid length. [ 398.103382][T22897] lo speed is unknown, defaulting to 1000 [ 398.189303][T22909] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8109'. [ 398.663568][T22929] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8119'. [ 399.827778][T22984] batadv_slave_1: default FDB implementation only supports local addresses [ 400.169512][T23003] __nla_validate_parse: 2 callbacks suppressed [ 400.169534][T23003] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8155'. [ 400.440659][T23023] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8163'. [ 400.546944][T23030] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8165'. [ 400.678407][T23038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8168'. [ 401.192097][T23068] sctp: [Deprecated]: syz.3.8183 (pid 23068) Use of int in maxseg socket option. [ 401.192097][T23068] Use struct sctp_assoc_value instead [ 401.447714][T23078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8188'. [ 401.609242][T23088] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8193'. [ 401.786802][T23098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8197'. [ 401.933145][T23104] ipvlan3: entered allmulticast mode [ 401.944362][T23104] batadv_slave_1: entered allmulticast mode [ 401.958238][T23104] batman_adv: batadv0: Adding interface: ipvlan3 [ 401.965271][T23104] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.992967][T23104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.012225][T23104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.045976][T23104] batman_adv: batadv0: Interface activated: ipvlan3 [ 402.087884][T23114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8206'. [ 402.480967][T23138] netlink: 'syz.4.8217': attribute type 1 has an invalid length. [ 402.510463][T23138] netlink: 'syz.4.8217': attribute type 2 has an invalid length. [ 402.533936][T23138] netlink: 'syz.4.8217': attribute type 1 has an invalid length. [ 402.563956][T23138] netlink: 'syz.4.8217': attribute type 3 has an invalid length. [ 402.571811][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8217'. [ 402.831980][T23156] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.8225'. [ 403.654504][T23202] bridge0: port 4(syz_tun) entered blocking state [ 403.662088][T23202] bridge0: port 4(syz_tun) entered disabled state [ 403.671079][T23202] syz_tun: entered allmulticast mode [ 403.679114][T23202] syz_tun: entered promiscuous mode [ 404.974637][T23280] netlink: 'syz.1.8283': attribute type 4 has an invalid length. [ 405.301753][T23296] IPVS: persistence engine module ip_vs_pe_ not found [ 405.494834][T23307] netlink: 'syz.0.8296': attribute type 83 has an invalid length. [ 405.954215][T23337] __nla_validate_parse: 2 callbacks suppressed [ 405.954239][T23337] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8310'. [ 406.296704][T23360] netlink: 'syz.4.8320': attribute type 5 has an invalid length. [ 406.691249][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8333'. [ 406.711776][T23386] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8332'. [ 406.857025][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8333'. [ 407.504074][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8349'. [ 407.899526][T23437] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 408.044370][T23443] netlink: 'syz.2.8357': attribute type 1 has an invalid length. [ 408.074380][T23443] netlink: 'syz.2.8357': attribute type 2 has an invalid length. [ 408.097020][T23443] netlink: 'syz.2.8357': attribute type 1 has an invalid length. [ 408.218861][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8362'. [ 408.263233][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8363'. [ 409.230523][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8379'. [ 409.936328][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8399'. [ 410.139829][T23551] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8406'. [ 410.397311][T23571] netlink: 'syz.1.8415': attribute type 30 has an invalid length. [ 411.144836][T23590] lo: left promiscuous mode [ 411.172183][T23590] F: left allmulticast mode [ 411.688987][T23590] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.696341][T23590] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.896600][T23590] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 412.106195][T23624] __nla_validate_parse: 2 callbacks suppressed [ 412.106217][T23624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8434'. [ 412.172002][T23624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8434'. [ 412.270986][T23631] bond0: entered promiscuous mode [ 412.286819][T23631] bond_slave_0: entered promiscuous mode [ 412.319402][T23631] bond_slave_1: entered promiscuous mode [ 412.337150][T23631] batadv0: entered promiscuous mode [ 412.368246][T23631] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 412.402617][T23631] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 412.429035][T23631] hsr0: entered promiscuous mode [ 412.470067][T23631] hsr0: entered allmulticast mode [ 412.480472][T23631] bond0: entered allmulticast mode [ 412.490294][T23631] bond_slave_0: entered allmulticast mode [ 412.504137][T23631] bond_slave_1: entered allmulticast mode [ 412.509935][T23631] batadv0: entered allmulticast mode [ 412.531766][T23631] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 412.564128][T23631] bond0: left promiscuous mode [ 412.569151][T23631] bond_slave_0: left promiscuous mode [ 412.576556][T23631] bond_slave_1: left promiscuous mode [ 412.594532][T23631] batadv0: left promiscuous mode [ 413.006426][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8460'. [ 413.031977][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8460'. [ 413.192805][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8467'. [ 413.573848][T23711] netlink: 'syz.3.8477': attribute type 1 has an invalid length. [ 413.581955][T23711] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8477'. [ 413.654321][T23711] netlink: 'syz.3.8477': attribute type 1 has an invalid length. [ 413.664299][T23711] netlink: 'syz.3.8477': attribute type 8 has an invalid length. [ 413.672081][T23711] netlink: 582 bytes leftover after parsing attributes in process `syz.3.8477'. [ 414.228585][T23740] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8492'. [ 414.388245][T23750] netlink: 'syz.4.8496': attribute type 4 has an invalid length. [ 414.452623][T23754] netlink: 248 bytes leftover after parsing attributes in process `syz.1.8498'. [ 414.523517][T23758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8500'. [ 415.044545][T23790] tap0: tun_chr_ioctl cmd 1074025676 [ 415.050008][T23790] tap0: owner set to 0 [ 415.772093][T23834] netlink: 'syz.3.8536': attribute type 30 has an invalid length. [ 415.868071][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 415.896746][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 415.916104][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 415.947450][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 415.957279][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 415.984522][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 415.993048][T23838] netlink: 'syz.0.8538': attribute type 29 has an invalid length. [ 416.016869][T23844] netlink: 'syz.1.8542': attribute type 10 has an invalid length. [ 416.036849][T23844] team0: Device dummy0 failed to register rx_handler [ 416.764638][T23892] netlink: 'syz.1.8563': attribute type 9 has an invalid length. [ 418.462683][T23979] __nla_validate_parse: 4 callbacks suppressed [ 418.462708][T23979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8605'. [ 418.917452][T23999] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8616'. [ 418.939528][T23999] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8616'. [ 418.970286][T23999] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8616'. [ 418.983274][T23999] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8616'. [ 419.184661][T24013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8621'. [ 419.237742][T24015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8623'. [ 420.155514][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8645'. [ 420.521643][T24084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8656'. [ 420.743340][T24099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8663'. [ 422.086296][ T12] tipc: Subscription rejected, illegal request [ 422.826446][T24231] validate_nla: 12 callbacks suppressed [ 422.826467][T24231] netlink: 'syz.0.8722': attribute type 1 has an invalid length. [ 422.877941][T24231] netlink: 'syz.0.8722': attribute type 7 has an invalid length. [ 422.922579][T24231] netlink: 'syz.0.8722': attribute type 8 has an invalid length. [ 423.296869][T24259] netlink: 'syz.0.8737': attribute type 1 has an invalid length. [ 423.331531][T24259] netlink: 'syz.0.8737': attribute type 3 has an invalid length. [ 423.353141][T24259] netlink: 'syz.0.8737': attribute type 7 has an invalid length. [ 423.376483][T24259] netlink: 'syz.0.8737': attribute type 8 has an invalid length. [ 423.396166][T24259] NCSI netlink: No device for ifindex 131092 [ 423.493550][T24274] __nla_validate_parse: 7 callbacks suppressed [ 423.493572][T24274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8744'. [ 423.837932][T24296] Bluetooth: MGMT ver 1.23 [ 423.960135][T24306] Bluetooth: hci1: too big key_count value 32778 [ 425.136158][T24371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8790'. [ 425.140977][T24378] syzkaller1: entered promiscuous mode [ 425.153252][T24378] syzkaller1: entered allmulticast mode [ 425.175569][T24371] netlink: 'syz.3.8790': attribute type 7 has an invalid length. [ 425.190278][T24371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8790'. [ 425.590461][T24401] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 426.075443][T24419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8811'. [ 426.227480][T24424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8813'. [ 426.306571][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8814'. [ 426.667900][T24446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8822'. [ 427.231188][T24484] sctp: [Deprecated]: syz.0.8841 (pid 24484) Use of int in max_burst socket option. [ 427.231188][T24484] Use struct sctp_assoc_value instead [ 427.474906][T24497] syzkaller1: entered promiscuous mode [ 427.480583][T24497] syzkaller1: entered allmulticast mode [ 427.948003][T24526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8861'. [ 427.956507][T24525] syzkaller1: entered promiscuous mode [ 427.963262][T24525] syzkaller1: entered allmulticast mode [ 428.008667][T24526] veth0_to_team: entered promiscuous mode [ 428.031328][T24526] veth0_to_team: left promiscuous mode [ 428.402506][T24546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8873'. [ 428.703413][T24563] syzkaller1: entered promiscuous mode [ 428.717241][T24563] syzkaller1: entered allmulticast mode [ 428.932391][T24574] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8885'. [ 429.050924][T24582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8889'. [ 429.083915][T24582] block nbd3: Unsupported socket: should be TCP or UNIX. [ 429.282193][T24595] syzkaller1: entered promiscuous mode [ 429.289301][T24595] syzkaller1: entered allmulticast mode [ 429.720006][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8907'. [ 429.746116][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8907'. [ 430.111854][T24646] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8920'. [ 430.140483][T24647] sctp: [Deprecated]: syz.2.8918 (pid 24647) Use of int in max_burst socket option deprecated. [ 430.140483][T24647] Use struct sctp_assoc_value instead [ 430.667318][T24676] syzkaller1: entered promiscuous mode [ 430.673450][T24676] syzkaller1: entered allmulticast mode [ 431.418774][T24713] veth0: entered promiscuous mode [ 431.458255][T24711] veth0: left promiscuous mode [ 431.501002][T24719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8953'. [ 431.531302][T24719] netlink: 'syz.3.8953': attribute type 7 has an invalid length. [ 431.553508][T24719] netlink: 'syz.3.8953': attribute type 8 has an invalid length. [ 431.571724][T24719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8953'. [ 431.594897][T24727] macvlan0: entered promiscuous mode [ 431.871448][T24737] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.936949][T24746] netlink: 'syz.4.8966': attribute type 2 has an invalid length. [ 431.939059][T24743] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 431.964257][T24746] netlink: 'syz.4.8966': attribute type 2 has an invalid length. [ 432.077453][T24751] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8967'. [ 432.396149][T24769] syzkaller1: entered promiscuous mode [ 432.401883][T24769] syzkaller1: entered allmulticast mode [ 432.679884][T24788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8986'. [ 432.705658][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8986'. [ 432.773923][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.256020][T24819] syzkaller1: entered promiscuous mode [ 433.269129][T24819] syzkaller1: entered allmulticast mode [ 433.522438][T24837] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 433.677330][T24847] netlink: 'syz.3.9010': attribute type 1 has an invalid length. [ 433.690272][T24847] netlink: 'syz.3.9010': attribute type 1 has an invalid length. [ 433.813986][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.247210][T24877] __nla_validate_parse: 3 callbacks suppressed [ 434.247235][T24877] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.9027'. [ 434.343481][T24879] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 434.500214][T24884] tipc: Resetting bearer [ 434.509086][T24884] tipc: Resetting bearer [ 434.515872][T24884] tipc: Resetting bearer [ 434.526384][T24884] tipc: Resetting bearer [ 434.816121][T24906] netlink: 'syz.2.9037': attribute type 4 has an invalid length. [ 434.863918][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 434.986534][T24919] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 435.058136][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9041'. [ 435.287898][T24931] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 435.313371][T24935] nbd: nbd1 already in use [ 435.489380][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9054'. [ 435.567926][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9055'. [ 435.599468][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9055'. [ 435.894010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 436.164391][T24975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9070'. [ 436.175366][T24975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9070'. [ 436.278711][T24979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9072'. [ 436.298716][T24979] netlink: 'syz.2.9072': attribute type 7 has an invalid length. [ 436.322941][T24979] netlink: 'syz.2.9072': attribute type 8 has an invalid length. [ 436.335532][T24979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9072'. [ 436.934324][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 437.413008][T25046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9103'. [ 437.652633][T25061] syzkaller1: entered promiscuous mode [ 437.660699][T25061] syzkaller1: entered allmulticast mode [ 437.728410][T25067] syzkaller1: entered promiscuous mode [ 437.734640][T25067] syzkaller1: entered allmulticast mode [ 437.746092][T25070] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 437.974027][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.013940][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 439.039632][T25144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 439.232709][T25156] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.053987][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.125463][T25210] __nla_validate_parse: 5 callbacks suppressed [ 440.125486][T25210] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9177'. [ 440.224453][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.590564][T25236] netlink: 'syz.0.9188': attribute type 2 has an invalid length. [ 441.103915][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.269126][T25275] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9203'. [ 441.649006][T25292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9211'. [ 441.972044][ T5488] veth1_macvtap: left promiscuous mode [ 442.133951][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.296727][T25328] syzkaller1: entered promiscuous mode [ 442.312682][T25328] syzkaller1: entered allmulticast mode [ 442.701664][T25352] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9234'. [ 443.183808][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.636217][T25405] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9254'. [ 443.667571][T25407] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.9256'. [ 443.849220][T25414] syzkaller1: entered promiscuous mode [ 443.855490][T25414] syzkaller1: entered allmulticast mode [ 444.213941][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 444.236929][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9270'. [ 444.262704][T25438] =a: renamed from lo [ 444.393988][T25445] team0 (unregistering): Port device team_slave_0 removed [ 444.438730][T25445] team0 (unregistering): Port device team_slave_1 removed [ 444.861705][T25470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9281'. [ 444.893491][T25470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.221922][T25489] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.9289'. [ 445.263957][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.417321][T25500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9295'. [ 445.460862][T25500] macvlan0: left promiscuous mode [ 445.485120][T25500] netlink: 'syz.1.9295': attribute type 1 has an invalid length. [ 445.493101][T25500] netlink: 'syz.1.9295': attribute type 2 has an invalid length. [ 445.547092][T25507] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9296'. [ 445.620557][T25510] syzkaller1: entered promiscuous mode [ 445.648333][T25510] syzkaller1: entered allmulticast mode [ 445.757490][T25518] tipc: Started in network mode [ 445.774961][T25518] tipc: Node identity e0000001, cluster identity 4711 [ 445.781938][T25518] tipc: Enabling of bearer rejected, failed to enable media [ 445.810699][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9305'. [ 446.166836][T25544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9315'. [ 446.293944][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 446.431994][T25559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9320'. [ 446.822182][T25585] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9331'. [ 446.982323][T25596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9332'. [ 447.095107][T25596] team0: Port device team_slave_0 removed [ 447.333919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 447.471138][T25616] netlink: 43 bytes leftover after parsing attributes in process `syz.0.9345'. [ 447.759758][T25634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9355'. [ 448.374084][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.214212][T25711] block nbd3: server does not support multiple connections per device. [ 449.228456][T25711] block nbd3: shutting down sockets [ 449.413875][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.757284][T25742] nbd: nbd64 already in use [ 450.027030][T25758] geneve4: entered promiscuous mode [ 450.051872][ T49] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 43943 - 0 [ 450.087101][ T49] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 43943 - 0 [ 450.121978][ T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 43943 - 0 [ 450.125652][T25548] udevd[25548]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 450.145695][ T49] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 43943 - 0 [ 450.463835][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.283279][T25819] tipc: Enabling of bearer rejected, failed to enable media [ 451.419649][T25823] tipc: Resetting bearer [ 451.493927][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.629953][T25823] tipc: Disabling bearer [ 451.651552][T25823] tipc: Disabling bearer [ 452.449757][T25879] netlink: 'syz.1.9459': attribute type 1 has an invalid length. [ 452.472375][T25879] __nla_validate_parse: 10 callbacks suppressed [ 452.472396][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9459'. [ 452.534003][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 452.621171][ T6041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.915810][T25905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9471'. [ 453.103833][T25915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9475'. [ 453.583811][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.817868][T25958] xt_hashlimit: size too large, truncated to 1048576 [ 454.613936][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.439605][T26052] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.9530'. [ 455.611072][T26061] netlink: 'syz.1.9533': attribute type 16 has an invalid length. [ 455.620885][T26061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9533'. [ 455.653812][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.874589][T26070] netlink: 'syz.1.9536': attribute type 63 has an invalid length. [ 455.896171][T26070] netlink: 'syz.1.9536': attribute type 63 has an invalid length. [ 456.082743][T26082] netlink: 'syz.0.9542': attribute type 9 has an invalid length. [ 456.090917][T26082] netlink: 'syz.0.9542': attribute type 11 has an invalid length. [ 456.103120][T26082] netlink: 'syz.0.9542': attribute type 12 has an invalid length. [ 456.111495][T26082] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.9542'. [ 456.137828][T26082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9542'. [ 456.470632][T26098] syzkaller1: entered promiscuous mode [ 456.479826][T26100] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9550'. [ 456.484113][T26098] syzkaller1: entered allmulticast mode [ 456.613493][T26104] lo speed is unknown, defaulting to 1000 [ 456.693835][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.947201][T26119] netlink: 'syz.3.9557': attribute type 1 has an invalid length. [ 456.956606][T26118] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.9559'. [ 457.036415][T26119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.044307][T26120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9558'. [ 457.160853][T26124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.197196][T26124] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 457.218931][T26124] bond6: (slave vcan1): Error -95 calling set_mac_address [ 457.734299][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.249047][T26155] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9570'. [ 458.315779][T26155] netlink: Conntrack attr has 3 unknown bytes [ 458.479574][T26163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9575'. [ 458.773903][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 458.806178][T26174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.839357][T26174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.886108][T26186] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9582'. [ 458.900359][T26186] netlink: Conntrack attr has 4 unknown bytes [ 458.990351][T26174] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 459.016753][ T143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.027320][ T143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.130670][ T143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.160198][ T143] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.312139][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9588'. [ 459.445591][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9594'. [ 459.624883][T26223] netlink: 'syz.3.9597': attribute type 10 has an invalid length. [ 459.641970][T26223] team0: Device vxcan1 is of different type [ 459.813929][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.822905][T26236] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9604'. [ 460.137430][T26251] netlink: 'syz.3.9610': attribute type 21 has an invalid length. [ 460.158024][T26251] netlink: 'syz.3.9610': attribute type 22 has an invalid length. [ 460.166767][T26251] netlink: 'syz.3.9610': attribute type 23 has an invalid length. [ 460.176082][T26251] netlink: 'syz.3.9610': attribute type 25 has an invalid length. [ 460.186079][T26251] netlink: 'syz.3.9610': attribute type 26 has an invalid length. [ 460.195025][T26251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9610'. [ 460.550234][T26262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9615'. [ 460.863833][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 460.873413][T26275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9621'. [ 460.937296][T26276] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.024957][T26276] bond2: (slave lo): Enslaving as an active interface with an up link [ 461.073682][T26276] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.131067][T26281] syzkaller1: entered promiscuous mode [ 461.153519][T26281] syzkaller1: entered allmulticast mode [ 461.893984][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.024603][T26325] netlink: 51 bytes leftover after parsing attributes in process `syz.0.9639'. [ 462.165646][T26331] veth0: entered promiscuous mode [ 462.188387][T26331] veth0 (unregistering): left promiscuous mode [ 462.933953][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 463.147692][T26374] chnl_net:caif_netlink_parms(): no params data found [ 463.219368][T26378] netlink: 'syz.2.9665': attribute type 4 has an invalid length. [ 463.241215][T26378] netlink: 'syz.2.9665': attribute type 4 has an invalid length. [ 463.262821][ T6041] lo speed is unknown, defaulting to 1000 [ 463.274342][ T6041] syz2: Port: 1 Link ACTIVE [ 463.292774][T23614] lo speed is unknown, defaulting to 1000 [ 463.357136][T26384] trusted_key: syz.2.9669 sent an empty control message without MSG_MORE. [ 463.523547][T26394] ip6gre1: entered promiscuous mode [ 463.530039][T26394] ip6gre1: entered allmulticast mode [ 463.920851][T26411] netlink: 'syz.4.9681': attribute type 12 has an invalid length. [ 463.929075][T26411] netlink: 'syz.4.9681': attribute type 29 has an invalid length. [ 463.943141][T26411] __nla_validate_parse: 8 callbacks suppressed [ 463.943162][T26411] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9681'. [ 463.973912][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.331944][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9690'. [ 464.352172][T26435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9690'. [ 464.425191][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9690'. [ 464.440599][T26435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9690'. [ 464.545842][T26442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.579407][T26442] batman_adv: batadv0: Removing interface: netdevsim0 [ 464.741824][T26452] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9698'. [ 464.895856][T26460] validate_nla: 2 callbacks suppressed [ 464.895876][T26460] netlink: 'syz.3.9702': attribute type 3 has an invalid length. [ 464.912973][T26460] netlink: 'syz.3.9702': attribute type 3 has an invalid length. [ 465.013820][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.126027][T26475] netlink: 'syz.4.9708': attribute type 12 has an invalid length. [ 465.135686][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9708'. [ 465.156361][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.156422][T26475] netlink: 'syz.4.9708': attribute type 12 has an invalid length. [ 465.156445][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9708'. [ 465.184317][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.193539][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.239140][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.466467][T26484] netlink: 'syz.3.9712': attribute type 1 has an invalid length. [ 465.529175][T26484] 8021q: adding VLAN 0 to HW filter on device bond8 [ 465.548958][T26490] bond8: (slave geneve3): making interface the new active one [ 465.580082][T26490] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 465.631993][ T49] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 465.641760][ T49] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 465.664911][ T996] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 465.684112][ T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 465.839308][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9718'. [ 466.054048][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.156655][T26520] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9727'. [ 466.263402][T26512] netlink: 'syz.1.9722': attribute type 14 has an invalid length. [ 466.323674][T26512] netlink: 'syz.1.9722': attribute type 14 has an invalid length. [ 466.879610][T23613] lo speed is unknown, defaulting to 1000 [ 466.893805][T23613] syz2: Port: 1 Link DOWN [ 466.906861][T23613] lo speed is unknown, defaulting to 1000 [ 467.093977][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 467.857523][T26582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.133951][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.197343][T26589] hsr_slave_0 (unregistering): left promiscuous mode [ 469.173831][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.534811][T26628] veth0: entered promiscuous mode [ 469.545107][T26626] veth0: left promiscuous mode [ 469.675995][T26630] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 469.862875][T26636] gretap3: entered promiscuous mode [ 469.881974][T26636] batman_adv: batadv0: Adding interface: gretap3 [ 469.899434][T26636] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 469.943985][T26636] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 469.983431][T26640] netlink: 'syz.4.9778': attribute type 13 has an invalid length. [ 469.995706][T26640] __nla_validate_parse: 6 callbacks suppressed [ 469.995725][T26640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9778'. [ 470.037913][T26640] netlink: 'syz.4.9778': attribute type 13 has an invalid length. [ 470.062679][T26640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9778'. [ 470.108955][T26645] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.9782'. [ 470.213797][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.356922][T26657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9787'. [ 470.404090][T26661] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9786'. [ 470.870110][T26686] syzkaller1: entered promiscuous mode [ 470.875949][T26686] syzkaller1: entered allmulticast mode [ 470.883445][T26687] syzkaller1: entered promiscuous mode [ 470.891292][T26687] syzkaller1: entered allmulticast mode [ 471.007051][T26694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9801'. [ 471.055428][T26650] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 471.065034][T26650] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 471.263986][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.494852][T26708] "syz.2.9806" (26708) uses obsolete ecb(arc4) skcipher [ 471.647193][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9818'. [ 471.658249][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9816'. [ 472.100292][T26750] xt_hashlimit: size too large, truncated to 1048576 [ 472.293798][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.048628][T26789] atomic_op ffff88806d132998 conn xmit_atomic 0000000000000000 [ 473.343871][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.352002][T26800] syzkaller1: entered promiscuous mode [ 473.358233][T26800] syzkaller1: entered allmulticast mode [ 473.624053][T26803] syzkaller1: entered promiscuous mode [ 473.629606][T26803] syzkaller1: entered allmulticast mode [ 474.354723][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9868'. [ 474.373978][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.496396][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9871'. [ 474.557545][T26851] block nbd0: reconnected socket [ 474.557854][ T5948] block nbd0: Receive control failed (result -107) [ 474.681511][T26861] vlan3: entered allmulticast mode [ 474.692738][T26861] bridge0: entered allmulticast mode [ 474.698719][T26861] bridge0: port 3(vlan3) entered blocking state [ 474.705446][T26861] bridge0: port 3(vlan3) entered disabled state [ 475.009973][ T29] audit: type=1800 audit(1775012116.742:4): pid=26877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9881" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9888 res=0 errno=0 [ 475.084063][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9884'. [ 475.093208][T26881] bridge: RTM_NEWNEIGH with invalid ether address [ 475.414027][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 475.457099][T26903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9894'. [ 475.546436][T26911] netlink: 'syz.4.9897': attribute type 1 has an invalid length. [ 475.566117][T26911] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9897'. [ 475.598455][T26911] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9897'. [ 475.717726][T26921] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.9902'. [ 476.038901][T26941] netlink: 'syz.4.9911': attribute type 1 has an invalid length. [ 476.118098][T26941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.141897][T26948] bond4: (slave geneve3): making interface the new active one [ 476.152076][T26948] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 476.171391][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.189725][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.227734][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.270029][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.367952][T26959] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 476.463886][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.536856][T26965] netlink: 'syz.2.9921': attribute type 10 has an invalid length. [ 476.568008][T26965] bridge0: entered allmulticast mode [ 476.596712][T26965] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 476.731914][T26971] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 476.878194][T26979] tls_set_device_offload_rx: netdev not found [ 476.922655][T26982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9929'. [ 476.956798][T26984] netlink: 'syz.1.9930': attribute type 11 has an invalid length. [ 477.058154][T26979] [ 477.060568][T26979] ====================================================== [ 477.067617][T26979] WARNING: possible circular locking dependency detected [ 477.074683][T26979] syzkaller #0 Not tainted [ 477.079126][T26979] ------------------------------------------------------ [ 477.086169][T26979] syz.3.9928/26979 is trying to acquire lock: [ 477.092275][T26979] ffffffff8ee9de90 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x211/0x5f0 [ 477.102085][T26979] [ 477.102085][T26979] but task is already holding lock: [ 477.109740][T26979] ffff8880554edf20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 477.119255][T26979] [ 477.119255][T26979] which lock already depends on the new lock. [ 477.119255][T26979] [ 477.129863][T26979] [ 477.129863][T26979] the existing dependency chain (in reverse order) is: [ 477.139442][T26979] [ 477.139442][T26979] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 477.147201][T26979] lock_sock_nested+0x48/0x100 [ 477.153118][T26979] inet_shutdown+0x6a/0x390 [ 477.158238][T26979] nbd_mark_nsock_dead+0x2e9/0x560 [ 477.163976][T26979] recv_work+0x1c7f/0x1d90 [ 477.169131][T26979] process_scheduled_works+0xb6e/0x18c0 [ 477.175234][T26979] worker_thread+0xa53/0xfc0 [ 477.180450][T26979] kthread+0x388/0x470 [ 477.185066][T26979] ret_from_fork+0x51e/0xb90 [ 477.190281][T26979] ret_from_fork_asm+0x1a/0x30 [ 477.195717][T26979] [ 477.195717][T26979] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 477.203400][T26979] __mutex_lock+0x19f/0x1300 [ 477.208763][T26979] nbd_queue_rq+0x37b/0x1100 [ 477.213974][T26979] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 477.220071][T26979] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 477.227038][T26979] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 477.233575][T26979] blk_mq_run_hw_queue+0x348/0x4f0 [ 477.239242][T26979] blk_mq_dispatch_list+0xd16/0xe10 [ 477.245513][T26979] blk_mq_flush_plug_list+0x48d/0x570 [ 477.251528][T26979] __blk_flush_plug+0x3ed/0x4d0 [ 477.257194][T26979] __submit_bio+0x28d/0x580 [ 477.262246][T26979] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 477.268411][T26979] block_read_full_folio+0x599/0x830 [ 477.274359][T26979] filemap_read_folio+0x137/0x3b0 [ 477.280010][T26979] do_read_cache_folio+0x358/0x590 [ 477.285654][T26979] read_part_sector+0xb6/0x2b0 [ 477.291034][T26979] adfspart_check_ICS+0xa5/0xa40 [ 477.296516][T26979] bdev_disk_changed+0x7ba/0x1550 [ 477.302100][T26979] blkdev_get_whole+0x380/0x510 [ 477.307498][T26979] bdev_open+0x31e/0xd30 [ 477.312277][T26979] blkdev_open+0x470/0x610 [ 477.317227][T26979] do_dentry_open+0x785/0x14e0 [ 477.322525][T26979] vfs_open+0x3b/0x340 [ 477.327212][T26979] path_openat+0x2e08/0x3860 [ 477.332542][T26979] do_file_open+0x23e/0x4a0 [ 477.337760][T26979] do_sys_openat2+0x113/0x200 [ 477.342987][T26979] __x64_sys_openat+0x138/0x170 [ 477.348398][T26979] do_syscall_64+0x14d/0xf80 [ 477.353625][T26979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.360148][T26979] [ 477.360148][T26979] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 477.367464][T26979] __mutex_lock+0x19f/0x1300 [ 477.372672][T26979] nbd_queue_rq+0xc6/0x1100 [ 477.377702][T26979] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 477.383777][T26979] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 477.390723][T26979] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 477.397230][T26979] blk_mq_run_hw_queue+0x348/0x4f0 [ 477.402876][T26979] blk_mq_dispatch_list+0xd16/0xe10 [ 477.408658][T26979] blk_mq_flush_plug_list+0x48d/0x570 [ 477.414560][T26979] __blk_flush_plug+0x3ed/0x4d0 [ 477.419943][T26979] __submit_bio+0x28d/0x580 [ 477.425442][T26979] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 477.431781][T26979] block_read_full_folio+0x599/0x830 [ 477.437774][T26979] filemap_read_folio+0x137/0x3b0 [ 477.443331][T26979] do_read_cache_folio+0x358/0x590 [ 477.448974][T26979] read_part_sector+0xb6/0x2b0 [ 477.454280][T26979] adfspart_check_ICS+0xa5/0xa40 [ 477.460171][T26979] bdev_disk_changed+0x7ba/0x1550 [ 477.465733][T26979] blkdev_get_whole+0x380/0x510 [ 477.471183][T26979] bdev_open+0x31e/0xd30 [ 477.475983][T26979] blkdev_open+0x470/0x610 [ 477.480951][T26979] do_dentry_open+0x785/0x14e0 [ 477.486253][T26979] vfs_open+0x3b/0x340 [ 477.491155][T26979] path_openat+0x2e08/0x3860 [ 477.496313][T26979] do_file_open+0x23e/0x4a0 [ 477.501381][T26979] do_sys_openat2+0x113/0x200 [ 477.506629][T26979] __x64_sys_openat+0x138/0x170 [ 477.512126][T26979] do_syscall_64+0x14d/0xf80 [ 477.517252][T26979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.523765][T26979] [ 477.523765][T26979] -> #5 (set->srcu){.+.+}-{0:0}: [ 477.530916][T26979] __synchronize_srcu+0xca/0x300 [ 477.536394][T26979] elevator_switch+0x1e8/0x7a0 [ 477.541683][T26979] elevator_change+0x2cc/0x450 [ 477.547151][T26979] elevator_set_default+0x36c/0x430 [ 477.552973][T26979] blk_register_queue+0x366/0x430 [ 477.558615][T26979] __add_disk+0x677/0xd50 [ 477.563485][T26979] add_disk_fwnode+0xfb/0x480 [ 477.568788][T26979] nbd_dev_add+0x72c/0xb50 [ 477.573738][T26979] nbd_init+0x168/0x1f0 [ 477.578439][T26979] do_one_initcall+0x250/0x8d0 [ 477.583738][T26979] do_initcall_level+0x104/0x190 [ 477.589216][T26979] do_initcalls+0x59/0xa0 [ 477.594078][T26979] kernel_init_freeable+0x2a6/0x3e0 [ 477.599981][T26979] kernel_init+0x1d/0x1d0 [ 477.604847][T26979] ret_from_fork+0x51e/0xb90 [ 477.609967][T26979] ret_from_fork_asm+0x1a/0x30 [ 477.615264][T26979] [ 477.615264][T26979] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 477.623093][T26979] __mutex_lock+0x19f/0x1300 [ 477.628225][T26979] elevator_change+0x1b3/0x450 [ 477.633691][T26979] elevator_set_none+0xb5/0x140 [ 477.639166][T26979] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 477.645592][T26979] nbd_start_device+0x17f/0xb10 [ 477.651154][T26979] nbd_genl_connect+0x165b/0x1cf0 [ 477.656705][T26979] genl_family_rcv_msg_doit+0x22a/0x330 [ 477.662813][T26979] genl_rcv_msg+0x61c/0x7a0 [ 477.667932][T26979] netlink_rcv_skb+0x232/0x4b0 [ 477.673232][T26979] genl_rcv+0x28/0x40 [ 477.677830][T26979] netlink_unicast+0x80f/0x9b0 [ 477.683139][T26979] netlink_sendmsg+0x813/0xb40 [ 477.688574][T26979] ____sys_sendmsg+0x972/0x9f0 [ 477.693994][T26979] ___sys_sendmsg+0x2a5/0x360 [ 477.699200][T26979] __x64_sys_sendmsg+0x1bd/0x2a0 [ 477.704676][T26979] do_syscall_64+0x14d/0xf80 [ 477.709902][T26979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.716340][T26979] [ 477.716340][T26979] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 477.724972][T26979] blk_alloc_queue+0x546/0x680 [ 477.730271][T26979] __blk_mq_alloc_disk+0x197/0x390 [ 477.735918][T26979] nbd_dev_add+0x499/0xb50 [ 477.740875][T26979] nbd_init+0x168/0x1f0 [ 477.745592][T26979] do_one_initcall+0x250/0x8d0 [ 477.750922][T26979] do_initcall_level+0x104/0x190 [ 477.756402][T26979] do_initcalls+0x59/0xa0 [ 477.761278][T26979] kernel_init_freeable+0x2a6/0x3e0 [ 477.767095][T26979] kernel_init+0x1d/0x1d0 [ 477.771958][T26979] ret_from_fork+0x51e/0xb90 [ 477.777090][T26979] ret_from_fork_asm+0x1a/0x30 [ 477.782395][T26979] [ 477.782395][T26979] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 477.789706][T26979] fs_reclaim_acquire+0x71/0x100 [ 477.795183][T26979] __kmalloc_cache_noprof+0x40/0x660 [ 477.800998][T26979] cryptomgr_notify+0x85/0x930 [ 477.806302][T26979] notifier_call_chain+0x1be/0x400 [ 477.812239][T26979] blocking_notifier_call_chain+0x6a/0x90 [ 477.818572][T26979] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 477.824480][T26979] crypto_alloc_tfm_node+0x13e/0x3f0 [ 477.830430][T26979] crypto_alloc_sync_skcipher+0x39/0xd0 [ 477.836685][T26979] rxkad_init+0x20/0xe0 [ 477.841369][T26979] rxrpc_init_security+0x72/0x120 [ 477.847007][T26979] af_rxrpc_init+0x13d/0x2e0 [ 477.852128][T26979] do_one_initcall+0x250/0x8d0 [ 477.857425][T26979] do_initcall_level+0x104/0x190 [ 477.862900][T26979] do_initcalls+0x59/0xa0 [ 477.867873][T26979] kernel_init_freeable+0x2a6/0x3e0 [ 477.873607][T26979] kernel_init+0x1d/0x1d0 [ 477.878476][T26979] ret_from_fork+0x51e/0xb90 [ 477.883609][T26979] ret_from_fork_asm+0x1a/0x30 [ 477.888908][T26979] [ 477.888908][T26979] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 477.897002][T26979] down_read+0x47/0x2e0 [ 477.901694][T26979] blocking_notifier_call_chain+0x54/0x90 [ 477.908023][T26979] __crypto_register_alg+0x32b/0x3c0 [ 477.913836][T26979] crypto_register_alg+0x447/0x810 [ 477.919491][T26979] do_one_initcall+0x250/0x8d0 [ 477.924789][T26979] do_initcall_level+0x104/0x190 [ 477.930259][T26979] do_initcalls+0x59/0xa0 [ 477.935123][T26979] kernel_init_freeable+0x2a6/0x3e0 [ 477.940854][T26979] kernel_init+0x1d/0x1d0 [ 477.945719][T26979] ret_from_fork+0x51e/0xb90 [ 477.951111][T26979] ret_from_fork_asm+0x1a/0x30 [ 477.956409][T26979] [ 477.956409][T26979] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 477.963980][T26979] __lock_acquire+0x15a5/0x2cf0 [ 477.969461][T26979] lock_acquire+0xf0/0x2e0 [ 477.974417][T26979] down_write+0x96/0x200 [ 477.979193][T26979] crypto_alg_mod_lookup+0x211/0x5f0 [ 477.985096][T26979] crypto_alloc_tfm_node+0x13e/0x3f0 [ 477.990907][T26979] tls_set_sw_offload+0xa33/0x1780 [ 477.996638][T26979] tls_setsockopt+0xf3e/0x15c0 [ 478.001943][T26979] do_sock_setsockopt+0x17c/0x1b0 [ 478.007613][T26979] __x64_sys_setsockopt+0x13d/0x1b0 [ 478.013353][T26979] do_syscall_64+0x14d/0xf80 [ 478.018483][T26979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.024907][T26979] [ 478.024907][T26979] other info that might help us debug this: [ 478.024907][T26979] [ 478.035310][T26979] Chain exists of: [ 478.035310][T26979] crypto_alg_sem --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 478.035310][T26979] [ 478.048630][T26979] Possible unsafe locking scenario: [ 478.048630][T26979] [ 478.056172][T26979] CPU0 CPU1 [ 478.061569][T26979] ---- ---- [ 478.067122][T26979] lock(sk_lock-AF_INET6); [ 478.071720][T26979] lock(&nsock->tx_lock); [ 478.078665][T26979] lock(sk_lock-AF_INET6); [ 478.085889][T26979] lock(crypto_alg_sem); [ 478.090404][T26979] [ 478.090404][T26979] *** DEADLOCK *** [ 478.090404][T26979] [ 478.098640][T26979] 1 lock held by syz.3.9928/26979: [ 478.103764][T26979] #0: ffff8880554edf20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x39a/0x15c0 [ 478.113706][T26979] [ 478.113706][T26979] stack backtrace: [ 478.119711][T26979] CPU: 0 UID: 0 PID: 26979 Comm: syz.3.9928 Not tainted syzkaller #0 PREEMPT(full) [ 478.119731][T26979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.119741][T26979] Call Trace: [ 478.119749][T26979] [ 478.119757][T26979] dump_stack_lvl+0xe8/0x150 [ 478.119781][T26979] print_circular_bug+0x2e1/0x300 [ 478.119808][T26979] check_noncircular+0x12e/0x150 [ 478.119834][T26979] __lock_acquire+0x15a5/0x2cf0 [ 478.119864][T26979] lock_acquire+0xf0/0x2e0 [ 478.119883][T26979] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 478.119909][T26979] down_write+0x96/0x200 [ 478.119930][T26979] ? crypto_alg_mod_lookup+0x211/0x5f0 [ 478.119950][T26979] ? __pfx_down_write+0x10/0x10 [ 478.119972][T26979] ? crypto_larval_alloc+0x1bf/0x290 [ 478.119993][T26979] crypto_alg_mod_lookup+0x211/0x5f0 [ 478.120015][T26979] crypto_alloc_tfm_node+0x13e/0x3f0 [ 478.120039][T26979] tls_set_sw_offload+0xa33/0x1780 [ 478.120066][T26979] tls_setsockopt+0xf3e/0x15c0 [ 478.120086][T26979] ? __pfx_tls_setsockopt+0x10/0x10 [ 478.120106][T26979] ? __fget_files+0x2a/0x420 [ 478.120128][T26979] ? aa_sock_opt_perm+0xff/0x1a0 [ 478.120152][T26979] ? sock_common_setsockopt+0x36/0xc0 [ 478.120176][T26979] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 478.120201][T26979] do_sock_setsockopt+0x17c/0x1b0 [ 478.120229][T26979] __x64_sys_setsockopt+0x13d/0x1b0 [ 478.120250][T26979] do_syscall_64+0x14d/0xf80 [ 478.120268][T26979] ? trace_irq_disable+0x3b/0x150 [ 478.120281][T26979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.120297][T26979] ? clear_bhb_loop+0x40/0x90 [ 478.120315][T26979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.120330][T26979] RIP: 0033:0x7fd6d279c819 [ 478.120346][T26979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.120361][T26979] RSP: 002b:00007fd6d3737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 478.120379][T26979] RAX: ffffffffffffffda RBX: 00007fd6d2a15fa0 RCX: 00007fd6d279c819 [ 478.120391][T26979] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 478.120402][T26979] RBP: 00007fd6d2832c91 R08: 0000000000000038 R09: 0000000000000000 [ 478.120412][T26979] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 478.120422][T26979] R13: 00007fd6d2a16038 R14: 00007fd6d2a15fa0 R15: 00007ffd790595a8 [ 478.120440][T26979] [ 478.357058][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.428984][T26998] netlink: 'syz.1.9935': attribute type 1 has an invalid length. [ 478.451453][T26998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.466402][T26998] bond3: (slave ip6erspan1): making interface the new active one [ 478.475449][T26998] bond3: (slave ip6erspan1): Enslaving as an active interface with an up link [ 479.414022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.454370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 481.493965][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.534356][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.573919][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.614298][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.653903][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.694396][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available