last executing test programs: 4.163948972s ago: executing program 2 (id=10439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x56}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) 4.106619529s ago: executing program 2 (id=10440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x20000000, 0xfffffffc}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 4.013251339s ago: executing program 2 (id=10443): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffca7, 0x1, 0x4, 0x4fff, 0x6, 0x2, 0x4, 0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.703475061s ago: executing program 0 (id=10465): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.520914439s ago: executing program 0 (id=10470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.142399016s ago: executing program 0 (id=10478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x180, 0x22, 0x200, 0x70bd29, 0x25dfdbfe, {0xd}, [@nested={0x16c, 0x2d, 0x0, 0x1, [@nested={0x15c, 0x109, 0x0, 0x1, [@nested={0x158, 0xad, 0x0, 0x1, [@nested={0x151, 0x22, 0x0, 0x1, [@nested={0x34, 0xd9, 0x0, 0x1, [@nested={0x2d, 0x62, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @uid}, @generic="897c745520d9647943d8b27fd70dc991363f1cd864fffcbee3e2752c94ed6039d3"]}]}, @nested={0xd5, 0xcf, 0x0, 0x1, [@generic="a0356d3c8747a87afafdc9d91377ec09c910d0074f9ffb9acac333dbe3cfa9", @generic="c777210b0078fc01df8a5fd3a6dd3083c04eed80115274e7d70b9e2c7ee5f3b4dcaa22ec719f3910af68e86b62f970c044eacfbd84bdf222b71fb36905ae846b1a4c9d13c7e584a01f91417e0d6fd6896dbde0d08b94f7c27921c3235277cab1783b5a5eb03c25d2d42ad42c039e3a72309e95d9105db6e9f82bd4d6bdb535c060105f9ba964549635480b415b17ea054204b1e1e3988abc2fc75a70bbfc3402141e4b6a7f992f0a0d86", @typed={0x8, 0x5f, 0x0, 0x0, @uid}]}, @generic="c78a094284b8e817c4fedbc21bbb104dab0c1bc6cdaeca1e3c871f94d907071b81f260820f2a67d6cc6054df68e1036aeceeae8afaa058b58ae79b3ab7a781f54b"]}]}]}, @generic, @typed={0x9, 0x18, 0x0, 0x0, @binary="a568355932"}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40800}, 0x40086) 811.227378ms ago: executing program 4 (id=10486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xc, 0xc, 0x3, 0x7, 0xa, 0xd, 0x5, 0x3, 0x2, 0x3, 0x2, 0x4, 0x7, 0xc, 0xe, 0x1], 0x0, [0x40, 0x1, 0x0, 0x9, 0x5, 0x3, 0x401, 0x81, 0x1000, 0x152, 0x400, 0x7, 0x2, 0x7151, 0xc409, 0x9], [0x8, 0x5, 0x0, 0x2, 0x8, 0x6, 0xf, 0x9, 0x200, 0x81, 0x9, 0x1, 0xe8, 0xabd8, 0x401, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 810.607398ms ago: executing program 1 (id=10487): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) write(r3, &(0x7f00000001c0)="b4", 0x1) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 696.234144ms ago: executing program 4 (id=10489): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 655.867063ms ago: executing program 1 (id=10490): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 589.888779ms ago: executing program 2 (id=10491): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x808000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 588.532386ms ago: executing program 3 (id=10492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4048004}, 0x20000090) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) 549.693097ms ago: executing program 4 (id=10493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901"}, 0x38) sendto$inet6(r0, &(0x7f0000000000)="c3c1fb4953776d60ea72eeab013f3495", 0x10, 0x80, 0x0, 0x0) 535.284054ms ago: executing program 2 (id=10494): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 528.833515ms ago: executing program 1 (id=10495): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 490.739058ms ago: executing program 3 (id=10496): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x3b, {0x73}}}], 0x18}, 0x440e0) 403.136409ms ago: executing program 4 (id=10497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 392.653212ms ago: executing program 1 (id=10498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) 385.982029ms ago: executing program 3 (id=10499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000) 309.565477ms ago: executing program 3 (id=10500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 232.571406ms ago: executing program 4 (id=10501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0xc008888}, 0x4000800) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "887d3b010000006d00dbe4712c3c1cb88f9180cfbe5e9c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 217.996782ms ago: executing program 0 (id=10502): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) 194.440024ms ago: executing program 3 (id=10503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 145.60987ms ago: executing program 0 (id=10504): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) 135.91379ms ago: executing program 2 (id=10505): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) 101.246827ms ago: executing program 1 (id=10506): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x6, 0x0, &(0x7f0000000080)) 93.882103ms ago: executing program 4 (id=10507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r1, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 56.025228ms ago: executing program 0 (id=10508): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 177.535µs ago: executing program 3 (id=10509): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 0s ago: executing program 1 (id=10510): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf252500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4008000) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.2.4439'. [ 220.401084][T15156] x_tables: unsorted underflow at hook 3 [ 220.527667][T15164] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.574150][T15168] netlink: 'syz.0.4452': attribute type 1 has an invalid length. [ 220.677419][T15176] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.777976][ T153] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.815117][T15188] openvswitch: netlink: EtherType 50a is less than min 600 [ 220.846265][T15190] netlink: 'syz.0.4464': attribute type 3 has an invalid length. [ 220.872055][T15190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4464'. [ 221.008149][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4470'. [ 221.149421][T15211] : entered promiscuous mode [ 221.375590][T15231] IPVS: Error connecting to the multicast addr [ 221.512354][T15241] openvswitch: netlink: IPv4 tun info is not correct [ 221.754790][T15261] delete_channel: no stack [ 221.974879][T15279] netlink: 'syz.3.4507': attribute type 1 has an invalid length. [ 222.003160][T15279] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4507'. [ 222.506185][T15316] __nla_validate_parse: 2 callbacks suppressed [ 222.506204][T15316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4525'. [ 222.582560][T15323] netlink: 'syz.2.4528': attribute type 1 has an invalid length. [ 222.612180][T15323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4528'. [ 222.636582][T15323] NCSI netlink: No device for ifindex 0 [ 222.922225][T15351] netlink: 'syz.2.4541': attribute type 1 has an invalid length. [ 222.926103][T15352] x_tables: duplicate underflow at hook 3 [ 222.942281][T15351] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4541'. [ 223.027077][T15358] netlink: 'syz.4.4546': attribute type 2 has an invalid length. [ 223.078590][T15362] netlink: 'syz.3.4548': attribute type 10 has an invalid length. [ 223.370268][T15382] bond5 (unregistering): Released all slaves [ 223.583541][T15398] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4563'. [ 223.585679][T15396] netlink: 'syz.2.4564': attribute type 11 has an invalid length. [ 223.606361][T15398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4563'. [ 223.631024][T15398] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4563'. [ 223.662771][T15398] netlink: 'syz.4.4563': attribute type 2 has an invalid length. [ 223.713500][T15398] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4563'. [ 224.114929][T15440] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4584'. [ 224.228300][T15449] openvswitch: netlink: Missing key (keys=40, expected=80) [ 224.800438][T15493] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 224.825899][T15493] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 224.852304][T15493] netlink: 'syz.2.4611': attribute type 1 has an invalid length. [ 224.860040][T15493] netlink: 'syz.2.4611': attribute type 2 has an invalid length. [ 224.865236][T15498] ipt_rpfilter: unknown options [ 224.880346][T15493] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4611'. [ 225.369161][T15536] pim6reg: entered allmulticast mode [ 225.382801][T15539] netlink: 'syz.4.4632': attribute type 1 has an invalid length. [ 225.412951][T15542] openvswitch: netlink: IP tunnel dst address not specified [ 225.932645][T15583] netlink: 'syz.2.4656': attribute type 1 has an invalid length. [ 225.941236][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4656'. [ 226.059985][T15593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.199550][T15605] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.539087][T15630] openvswitch: netlink: IP tunnel dst address not specified [ 226.920035][T15663] netlink: 'syz.3.4697': attribute type 2 has an invalid length. [ 227.840287][T15724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.180159][T15736] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 228.196043][T15736] bond2 (unregistering): Released all slaves [ 228.341807][T15748] openvswitch: netlink: IP tunnel dst address not specified [ 228.415190][T15755] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 228.538794][T15764] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 228.675989][T15775] __nla_validate_parse: 6 callbacks suppressed [ 228.676008][T15775] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4752'. [ 228.700910][T15778] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4753'. [ 228.919892][T15793] netlink: 'syz.2.4761': attribute type 1 has an invalid length. [ 229.082327][T15807] netlink: 'syz.2.4766': attribute type 61 has an invalid length. [ 229.090168][T15807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4766'. [ 229.333332][T15827] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.684062][T15851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4789'. [ 230.328649][T15905] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4816'. [ 230.395207][T15910] netlink: 'syz.4.4818': attribute type 2 has an invalid length. [ 230.450529][T15910] 9: entered promiscuous mode [ 230.818376][T15938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4833'. [ 230.930358][T15947] netlink: 'syz.2.4837': attribute type 1 has an invalid length. [ 230.952789][T15947] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.4837'. [ 231.150896][T15968] openvswitch: netlink: Flow key attr not present in new flow. [ 231.383480][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4854'. [ 231.720611][T16009] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 231.752434][T16012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.879638][T16021] netlink: 'syz.3.4872': attribute type 3 has an invalid length. [ 232.009077][T16034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.501955][T16072] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4898'. [ 232.561989][T16078] delete_channel: no stack [ 232.866021][T16101] xt_hashlimit: size too large, truncated to 1048576 [ 233.044641][T16110] veth1_macvtap: left promiscuous mode [ 233.050146][T16110] macsec0: entered promiscuous mode [ 233.064714][T16110] macsec0: entered allmulticast mode [ 233.109297][T16114] veth1_macvtap: entered promiscuous mode [ 233.159553][T16114] veth1_macvtap: entered allmulticast mode [ 233.182707][T16114] macsec0: left promiscuous mode [ 233.187964][T16114] macsec0: left allmulticast mode [ 233.193376][T16114] veth1_macvtap: left allmulticast mode [ 233.479980][T16136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.945544][T16178] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 234.139813][T16194] Bluetooth: MGMT ver 1.23 [ 234.391565][T16215] pim6reg527: entered allmulticast mode [ 234.407692][ T153] tipc: Subscription rejected, illegal request [ 234.550428][T16227] netlink: 'syz.0.4971': attribute type 29 has an invalid length. [ 234.560474][T16227] netlink: 'syz.0.4971': attribute type 29 has an invalid length. [ 234.566157][T16224] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.4970'. [ 234.601860][T16224] openvswitch: netlink: Message has 6 unknown bytes. [ 234.973033][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4984'. [ 235.237447][T16278] Zero length message leads to an empty skb [ 235.289530][T16284] tipc: Started in network mode [ 235.313505][T16284] tipc: Node identity 7f000001, cluster identity 4711 [ 235.321359][T16284] tipc: Enabling of bearer rejected, failed to enable media [ 235.361450][T16289] netlink: 'syz.4.4998': attribute type 1 has an invalid length. [ 236.284385][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5027'. [ 236.319937][T16348] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5027'. [ 236.344047][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5027'. [ 236.371550][T16354] netlink: 'syz.3.5029': attribute type 11 has an invalid length. [ 236.394669][T16354] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5029'. [ 236.467021][T16360] netlink: 'syz.4.5034': attribute type 1 has an invalid length. [ 236.486741][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'. [ 236.849152][T16390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5049'. [ 236.879969][T16392] netlink: 'syz.2.5048': attribute type 25 has an invalid length. [ 236.890275][T16390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5049'. [ 236.890441][T16388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5047'. [ 237.138071][T16408] vcan2: entered promiscuous mode [ 237.157799][T16408] vcan2: entered allmulticast mode [ 237.376214][T16422] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 237.733150][T16449] netlink: 'syz.0.5074': attribute type 2 has an invalid length. [ 238.505957][ T1152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.524387][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.532524][ T1152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.074598][T16536] netlink: 'syz.1.5115': attribute type 3 has an invalid length. [ 239.191048][T16547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.272707][T16551] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 239.457725][T16567] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.482507][T16570] netlink: zone id is out of range [ 239.487733][T16570] netlink: zone id is out of range [ 239.495466][T16570] netlink: zone id is out of range [ 239.501170][T16570] netlink: zone id is out of range [ 239.509741][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.520610][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.540128][T16570] netlink: zone id is out of range [ 239.551967][T16570] netlink: zone id is out of range [ 239.623250][T16570] net_ratelimit: 47 callbacks suppressed [ 239.623268][T16570] netlink: set zone limit has 4 unknown bytes [ 240.473206][T16621] bridge0: port 1(bond0) entered blocking state [ 240.501182][T16621] bridge0: port 1(bond0) entered disabled state [ 241.025314][T16666] __nla_validate_parse: 8 callbacks suppressed [ 241.025332][T16666] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5178'. [ 241.273589][T16689] xt_l2tp: wrong L2TP version: 0 [ 241.435291][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5194'. [ 241.444691][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5194'. [ 241.874474][T16733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5211'. [ 242.033533][T16751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5220'. [ 242.051253][T16751] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5220'. [ 242.068965][T16751] netlink: 'syz.1.5220': attribute type 5 has an invalid length. [ 242.102432][T16751] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5220'. [ 242.116873][T16755] xt_limit: Overflow, try lower: 271964/0 [ 242.302271][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.324580][T16769] vcan0: entered allmulticast mode [ 242.367612][T16772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5230'. [ 242.487719][T16782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.181759][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5263'. [ 243.521260][T16864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.034421][T16903] xt_hashlimit: size too large, truncated to 1048576 [ 244.085066][T16909] netlink: 'syz.2.5297': attribute type 11 has an invalid length. [ 244.101215][T16909] netlink: 'syz.2.5297': attribute type 4 has an invalid length. [ 244.109564][T16909] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.5297'. [ 244.429422][T16931] IPVS: Error connecting to the multicast addr [ 244.545851][T16940] netlink: 'syz.4.5311': attribute type 3 has an invalid length. [ 244.574838][T16942] netlink: 'syz.0.5313': attribute type 2 has an invalid length. [ 244.827517][T16958] Bluetooth: MGMT ver 1.23 [ 245.230706][T16983] netlink: 'syz.4.5333': attribute type 5 has an invalid length. [ 245.716899][T17017] netlink: 'syz.4.5350': attribute type 10 has an invalid length. [ 245.756583][T17017] team0: Device vxcan1 is of different type [ 245.840959][T17024] netlink: 'syz.0.5353': attribute type 3 has an invalid length. [ 246.429201][T17048] block nbd4: not configured, cannot reconfigure [ 246.821847][T17035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.852939][T17035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.432521][ T236] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.441449][ T236] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.517281][ T236] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.546594][ T236] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.674890][T17101] tipc: Started in network mode [ 247.679790][T17101] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 247.718595][T17101] tipc: Enabled bearer , priority 10 [ 247.734581][T17106] __nla_validate_parse: 6 callbacks suppressed [ 247.734595][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5385'. [ 247.757987][T17110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5387'. [ 247.767872][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5385'. [ 247.805682][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5389'. [ 247.845890][T17114] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 248.014424][T17127] xt_limit: Overflow, try lower: 604147548/4200216962 [ 248.341590][T17154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5409'. [ 248.363652][T17153] delete_channel: no stack [ 248.713813][T17080] tipc: Node number set to 4269801492 [ 248.723186][T17185] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5422'. [ 249.166544][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5437'. [ 249.178569][T17219] xt_socket: unknown flags 0xe4 [ 249.332335][T17228] netlink: 'syz.4.5443': attribute type 1 has an invalid length. [ 249.345872][T17229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5444'. [ 249.361225][T17228] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5443'. [ 249.380879][T17228] netlink: 'syz.4.5443': attribute type 1 has an invalid length. [ 249.398952][T17228] netlink: 'syz.4.5443': attribute type 8 has an invalid length. [ 249.411642][T17230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5444'. [ 250.007820][T17272] pim6reg: entered allmulticast mode [ 252.372949][T17431] netlink: 'syz.1.5537': attribute type 178 has an invalid length. [ 252.775491][T17463] __nla_validate_parse: 8 callbacks suppressed [ 252.775511][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5552'. [ 253.117300][T17487] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.5563'. [ 253.514259][T17516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5578'. [ 253.934037][T17545] IPVS: stopping backup sync thread 16009 ... [ 254.607270][T17598] netlink: 'syz.3.5617': attribute type 2 has an invalid length. [ 254.705542][T17605] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 254.733064][T17605] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.795377][T17610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5623'. [ 254.914011][T17618] pim6reg: entered allmulticast mode [ 254.941387][T17618] pim6reg: left allmulticast mode [ 255.086403][T17632] netlink: 'syz.0.5635': attribute type 62 has an invalid length. [ 256.604854][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5687'. [ 256.619934][T17746] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5687'. [ 256.647621][T17746] netlink: 'syz.3.5687': attribute type 5 has an invalid length. [ 256.864982][T17765] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 257.076651][T17778] netlink: 'syz.4.5704': attribute type 1 has an invalid length. [ 257.091142][T17782] netlink: 'syz.2.5706': attribute type 1 has an invalid length. [ 257.201658][T17791] netlink: 'syz.4.5710': attribute type 1 has an invalid length. [ 257.209826][T17791] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5710'. [ 257.219743][T17791] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5710'. [ 257.230548][T17791] netlink: 'syz.4.5710': attribute type 1 has an invalid length. [ 257.252399][T17791] netlink: 'syz.4.5710': attribute type 8 has an invalid length. [ 257.274173][T17791] netlink: 606 bytes leftover after parsing attributes in process `syz.4.5710'. [ 257.426187][T17807] netlink: 'syz.2.5717': attribute type 1 has an invalid length. [ 257.613152][T17822] netlink: 'syz.2.5725': attribute type 1 has an invalid length. [ 257.992660][T17851] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5739'. [ 258.143665][T17862] tipc: Failed to obtain node identity [ 258.149181][T17862] tipc: Enabling of bearer rejected, failed to enable media [ 258.443651][T17882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.942490][ T5839] Bluetooth: hci4: command tx timeout [ 259.122044][T17932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5775'. [ 259.253592][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5780'. [ 259.685724][T17963] udevd[17963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 259.732020][T17963] udevd[17963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.029177][T17998] team0: Device gtp0 is up. Set it down before adding it as a team port [ 260.193757][T18014] validate_nla: 2 callbacks suppressed [ 260.193775][T18014] netlink: 'syz.1.5809': attribute type 4 has an invalid length. [ 260.213496][T18014] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5809'. [ 260.475020][T18036] netlink: 'syz.3.5818': attribute type 1 has an invalid length. [ 260.514316][T18036] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5818'. [ 260.530387][T18036] netlink: 'syz.3.5818': attribute type 1 has an invalid length. [ 260.557119][T18036] netlink: 'syz.3.5818': attribute type 8 has an invalid length. [ 260.576185][T18036] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5818'. [ 260.617536][T18036] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5818'. [ 260.642869][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5826'. [ 260.649051][T18047] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5825'. [ 260.684114][T18047] netlink: 'syz.0.5825': attribute type 1 has an invalid length. [ 260.691863][T18047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5825'. [ 260.733657][T18053] netlink: 'syz.4.5828': attribute type 1 has an invalid length. [ 260.752853][T18053] netlink: 'syz.4.5828': attribute type 2 has an invalid length. [ 260.775658][T18053] netlink: 'syz.4.5828': attribute type 1 has an invalid length. [ 260.778347][T18057] netlink: 'syz.2.5830': attribute type 142 has an invalid length. [ 261.484151][T18110] Bluetooth: MGMT ver 1.23 [ 261.511077][T18113] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.650549][T18124] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 262.441283][T18186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.782705][T18213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.127274][T18243] __nla_validate_parse: 7 callbacks suppressed [ 263.127293][T18243] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5920'. [ 263.155823][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5920'. [ 263.167685][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5920'. [ 263.241403][T18250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5924'. [ 263.415325][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5930'. [ 264.104803][T18313] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5956'. [ 264.202819][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'. [ 264.734206][T18362] netlink: 'syz.2.5981': attribute type 4 has an invalid length. [ 264.752167][T18362] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5981'. [ 265.054754][T18388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5991'. [ 265.194337][T18398] sctp: [Deprecated]: syz.1.5998 (pid 18398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.194337][T18398] Use struct sctp_sack_info instead [ 265.248140][T18405] sctp: [Deprecated]: syz.1.5998 (pid 18405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.248140][T18405] Use struct sctp_sack_info instead [ 265.414999][T18414] netlink: 'syz.0.6005': attribute type 1 has an invalid length. [ 265.434160][T18414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.650121][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'. [ 265.904724][T18446] : entered promiscuous mode [ 267.265532][T18544] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 268.289846][T18619] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 269.527647][T18682] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.291029][T18734] netlink: 'syz.0.6162': attribute type 2 has an invalid length. [ 270.539292][T18752] netlink: 'syz.4.6171': attribute type 1 has an invalid length. [ 270.838998][ T5839] Bluetooth: hci4: link tx timeout [ 270.847805][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 270.859579][T18762] syz.3.6176 (18762) used greatest stack depth: 17472 bytes left [ 271.466803][T18823] tipc: Enabling of bearer rejected, failed to enable media [ 271.526736][T18825] __nla_validate_parse: 3 callbacks suppressed [ 271.526755][T18825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6206'. [ 271.696151][T18841] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 271.709777][ T5973] IPVS: starting estimator thread 0... [ 271.808926][T18848] vlan0: entered promiscuous mode [ 271.820430][T18848] bridge0: entered promiscuous mode [ 271.822171][T18842] IPVS: using max 30 ests per chain, 72000 per kthread [ 272.140049][T18868] lo: entered allmulticast mode [ 272.170236][T18868] lo: left allmulticast mode [ 272.323884][T18882] IPVS: Error connecting to the multicast addr [ 272.335398][T18885] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6234'. [ 272.863026][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 273.471926][T18933] bridge0: Device is already in use. [ 273.613154][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6261'. [ 273.689436][T18952] raw_sendmsg: syz.0.6266 forgot to set AF_INET. Fix it! [ 274.265087][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'. [ 274.296459][T18999] netlink: 'syz.1.6290': attribute type 3 has an invalid length. [ 274.313280][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6288'. [ 274.566530][T19017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6298'. [ 274.591486][T19018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6299'. [ 274.636531][T19017] team0: Port device team_slave_0 removed [ 274.776811][T19032] netlink: 'syz.1.6306': attribute type 3 has an invalid length. [ 274.902466][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6311'. [ 275.018539][T19050] tipc: Started in network mode [ 275.027243][T19050] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 275.054741][T19050] tipc: Enabled bearer , priority 24 [ 275.636448][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6339'. [ 275.648382][T19102] wireguard1: entered promiscuous mode [ 275.655248][T19102] wireguard1: entered allmulticast mode [ 275.667043][T19102] team0: Device wireguard1 is of different type [ 275.911369][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 275.923875][T19116] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 276.172296][T17084] tipc: Node number set to 10005162 [ 276.310739][T19087] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.601195][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6366'. [ 276.871390][T19168] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6371'. [ 277.682858][T19225] netlink: 'syz.1.6398': attribute type 3 has an invalid length. [ 277.702716][T19225] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 277.711187][T19225] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6398'. [ 278.062721][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6412'. [ 278.123127][T19260] bridge0: port 3(veth0_to_bridge) entered blocking state [ 278.141635][T19260] bridge0: port 3(veth0_to_bridge) entered disabled state [ 278.160941][T19260] veth0_to_bridge: entered allmulticast mode [ 278.194173][T19260] veth0_to_bridge: entered promiscuous mode [ 278.220694][T19260] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.239897][T19260] bridge0: port 3(veth0_to_bridge) entered blocking state [ 278.247422][T19260] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 278.304175][T19269] netlink: zone id is out of range [ 278.309318][T19269] netlink: zone id is out of range [ 278.318436][T19269] netlink: zone id is out of range [ 278.342780][T19269] netlink: zone id is out of range [ 278.347918][T19269] netlink: zone id is out of range [ 278.354149][T19269] netlink: zone id is out of range [ 278.359339][T19269] netlink: zone id is out of range [ 278.381323][T19269] netlink: zone id is out of range [ 278.402878][T19269] netlink: zone id is out of range [ 278.408094][T19269] netlink: zone id is out of range [ 278.876124][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6439'. [ 279.615729][T19371] netlink: 'syz.4.6469': attribute type 1 has an invalid length. [ 279.634106][T19371] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6469'. [ 279.651675][T19371] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6469'. [ 279.667899][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6470'. [ 280.445676][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6501'. [ 280.517223][T19446] netlink: 'syz.1.6505': attribute type 11 has an invalid length. [ 280.542626][T19446] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.6505'. [ 280.816751][T19468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.834290][T19468] team0: Device macvlan2 is already an upper device of the team interface [ 281.606840][ T9] IPVS: starting estimator thread 0... [ 281.712803][T19531] IPVS: using max 32 ests per chain, 76800 per kthread [ 281.763390][T19542] __nla_validate_parse: 3 callbacks suppressed [ 281.763407][T19542] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6549'. [ 282.249220][T19580] tipc: Enabling of bearer rejected, failed to enable media [ 282.717664][T19615] netlink: 'syz.4.6585': attribute type 58 has an invalid length. [ 282.734731][T19615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6585'. [ 282.793851][T19617] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.233394][T19649] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6600'. [ 283.317398][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6604'. [ 283.615725][T19677] net_ratelimit: 134 callbacks suppressed [ 283.615743][T19677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.649616][T19681] netlink: 'syz.2.6614': attribute type 11 has an invalid length. [ 283.665716][T19681] netlink: 'syz.2.6614': attribute type 11 has an invalid length. [ 283.688449][T19681] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6614'. [ 283.760233][T19687] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6617'. [ 283.957631][T19699] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6623'. [ 284.240886][T19721] xt_time: unknown flags 0xf4 [ 284.867969][T19764] netlink: 'syz.3.6655': attribute type 1 has an invalid length. [ 284.902951][T19764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.490537][T19799] netlink: 'syz.4.6672': attribute type 2 has an invalid length. [ 285.607713][T19805] smc: net device team0 applied user defined pnetid SYZ2 [ 286.237446][T19855] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 286.244278][T19851] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6697'. [ 286.265258][T19854] tipc: Enabling of bearer rejected, media not registered [ 286.542440][T19874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6710'. [ 286.894241][T19898] netlink: 'syz.3.6719': attribute type 33 has an invalid length. [ 286.899288][T19903] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6722'. [ 286.955555][T19903] nbd: illegal input index -8454144 [ 287.487852][T19945] : entered promiscuous mode [ 287.668094][T19962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6752'. [ 287.813071][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6757'. [ 287.846508][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6757'. [ 288.470584][T20024] tipc: Enabling of bearer rejected, failed to enable media [ 288.708935][T20037] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6788'. [ 288.986705][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6799'. [ 289.519427][T20097] nbd: must specify an index to disconnect [ 289.691135][T20109] netlink: 'syz.0.6823': attribute type 10 has an invalid length. [ 290.685574][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6855'. [ 290.708778][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6855'. [ 290.732700][T20172] netlink: 'syz.4.6855': attribute type 14 has an invalid length. [ 290.740532][T20172] netlink: 'syz.4.6855': attribute type 13 has an invalid length. [ 290.901000][T20177] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.034876][T20177] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 291.534913][T20233] IPVS: ip_vs_edit_dest(): server weight less than zero [ 291.759739][T20247] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 291.782793][T20239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6886'. [ 291.791764][T20239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6886'. [ 291.953962][T20263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.027996][T20265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6900'. [ 292.046938][T20265] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6900'. [ 292.072251][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6900'. [ 292.192527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.205352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.217816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.230253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.242676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.255102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.267519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 292.279945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 293.368403][T20308] netlink: 'syz.1.6920': attribute type 1 has an invalid length. [ 293.541401][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6924'. [ 293.838241][T20320] netlink: 'syz.0.6925': attribute type 1 has an invalid length. [ 293.880773][T20320] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6925'. [ 294.455825][ T30] audit: type=1107 audit(1773834916.603:3): pid=20349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 296.042337][ C1] net_ratelimit: 10177 callbacks suppressed [ 296.042356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.060741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.073196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.085648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.098104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.110547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.123075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.135559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.148050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 296.160570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 299.077765][T20516] team0: Device ip6gre2 is of different type [ 300.429125][T20558] netlink: 'syz.2.7039': attribute type 19 has an invalid length. [ 300.759541][T20567] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7042'. [ 300.821561][T20567] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7042'. [ 301.052445][ C1] net_ratelimit: 13552 callbacks suppressed [ 301.052463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.057070][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7046'. [ 301.058787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.091676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.104135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.105053][T20574] : renamed from bond0 (while UP) [ 301.116568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.116955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.146479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.158965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.171401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.183822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:20:25:21:57:b6, vlan:0) [ 301.429451][T20579] batadv_slave_1: default FDB implementation only supports local addresses [ 303.124715][T20633] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.164665][ T153] bridge0: port 3(veth0_to_bridge) entered disabled state [ 304.235035][T20714] veth0: entered promiscuous mode [ 304.279853][T20711] veth0: left promiscuous mode [ 304.566399][T20744] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7123'. [ 304.881269][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'. [ 305.350752][T20800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7147'. [ 305.645361][T20820] netem: unknown loss type 0 [ 305.650435][T20820] netem: change failed [ 306.441084][T20887] tap0: tun_chr_ioctl cmd 2148553947 [ 306.646181][T20905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7195'. [ 306.708843][T20908] netlink: 'syz.2.7198': attribute type 2 has an invalid length. [ 306.760746][T20913] netlink: 'syz.3.7199': attribute type 1 has an invalid length. [ 306.783057][T20913] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7199'. [ 306.802357][T20913] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7199'. [ 306.821450][T20913] netlink: 'syz.3.7199': attribute type 1 has an invalid length. [ 306.843537][T20913] netlink: 'syz.3.7199': attribute type 8 has an invalid length. [ 306.854301][T20913] netlink: 582 bytes leftover after parsing attributes in process `syz.3.7199'. [ 307.330687][T20950] bridge0: port 1(1x9) entered disabled state [ 307.344601][T20950] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.374078][T20956] netlink: 'syz.3.7219': attribute type 16 has an invalid length. [ 307.381912][T20956] netlink: 'syz.3.7219': attribute type 17 has an invalid length. [ 307.413489][T20956] lo: left promiscuous mode [ 307.423739][T20956] tunl0: left promiscuous mode [ 307.440378][T20956] gre0: left promiscuous mode [ 307.497271][T20956] gretap0: left promiscuous mode [ 307.530515][T20956] ip_vti0: left promiscuous mode [ 307.563836][T20956] bridge0: port 1(1x9) entered blocking state [ 307.570308][T20956] bridge0: port 1(1x9) entered forwarding state [ 307.580412][T20956] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.587604][T20956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.648490][T20956] batman_adv: batadv0: Interface activated:  [ 307.673635][T20956] bond1: left promiscuous mode [ 307.678413][T20956] bond1: left allmulticast mode [ 307.691653][T20956] gretap1: left promiscuous mode [ 307.698361][T20956] gretap1: left allmulticast mode [ 307.704852][T20956] xfrm1: left allmulticast mode [ 307.717282][T20956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.729645][T20956] bridge5: left promiscuous mode [ 307.736447][T20956] bridge5: left allmulticast mode [ 307.770564][ T153] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 307.779632][ T153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.813924][ T153] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.833625][ T153] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.079016][T21070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7273'. [ 309.251346][T21078] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.311907][T21081] netlink: 'syz.0.7276': attribute type 16 has an invalid length. [ 309.399058][T21081] netlink: 'syz.0.7276': attribute type 17 has an invalid length. [ 309.405856][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7284'. [ 309.477885][T21094] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.479974][T21095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7285'. [ 309.500246][T21081] net_ratelimit: 5238 callbacks suppressed [ 309.500257][T21081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.678540][T21106] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7290'. [ 309.793057][T21112] netlink: 'syz.0.7293': attribute type 1 has an invalid length. [ 309.819243][T21112] netlink: 'syz.0.7293': attribute type 2 has an invalid length. [ 309.828387][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7293'. [ 309.865392][T21116] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7295'. [ 310.675339][T21173] block nbd0: Unsupported socket: should be TCP or UNIX. [ 310.843887][T21187] IPv6: Can't replace route, no match found [ 310.859436][T21188] tipc: New replicast peer: 255.255.255.255 [ 310.861438][T21187] IPv6: Can't replace route, no match found [ 310.884555][T21188] tipc: Enabled bearer , priority 10 [ 311.992209][ T29] tipc: Node number set to 2130706433 [ 312.024251][T21275] __nla_validate_parse: 7 callbacks suppressed [ 312.024269][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7372'. [ 313.308707][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7411'. [ 313.317764][T21361] bridge_slave_1: entered allmulticast mode [ 313.476237][T21371] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7416'. [ 313.811509][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7426'. [ 314.370842][T21437] netlink: zone id is out of range [ 314.389478][T21432] netlink: set zone limit has 4 unknown bytes [ 314.402387][T21437] netlink: zone id is out of range [ 314.421649][T21440] veth0: entered promiscuous mode [ 314.440351][T21439] veth0: left promiscuous mode [ 314.586280][T21450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7450'. [ 314.822918][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7455'. [ 314.880066][T21466] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 315.035356][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7465'. [ 315.148450][T21493] validate_nla: 2 callbacks suppressed [ 315.148468][T21493] netlink: 'syz.4.7469': attribute type 4 has an invalid length. [ 315.222476][T21497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7471'. [ 315.274256][T21502] Bluetooth: hci1: too big key_count value 32778 [ 315.327846][T21504] netlink: 'syz.3.7475': attribute type 2 has an invalid length. [ 315.636302][T21530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7487'. [ 316.004568][T21558] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7501'. [ 316.020036][T21558] netlink: 'syz.3.7501': attribute type 1 has an invalid length. [ 316.683886][T21607] bridge0: port 2(syz_tun) entered blocking state [ 316.711007][T21607] bridge0: port 2(syz_tun) entered disabled state [ 316.725592][T21607] syz_tun: entered allmulticast mode [ 316.767174][T21607] syz_tun: entered promiscuous mode [ 316.961520][T21621] pim6reg: entered allmulticast mode [ 316.991268][T21621] pim6reg: left allmulticast mode [ 317.000430][T21621] vcan0: left allmulticast mode [ 317.090855][T21635] netlink: 'syz.3.7535': attribute type 21 has an invalid length. [ 317.098858][T21635] __nla_validate_parse: 1 callbacks suppressed [ 317.098873][T21635] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7535'. [ 317.260279][T21646] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7541'. [ 317.398181][T21657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7548'. [ 317.954643][T21690] netlink: 'syz.2.7562': attribute type 28 has an invalid length. [ 317.972214][T21690] netlink: 'syz.2.7562': attribute type 3 has an invalid length. [ 317.980106][T21690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7562'. [ 318.700223][T21720] team_slave_0: entered allmulticast mode [ 318.742997][T21720] team_slave_0: entered promiscuous mode [ 318.784309][ T5830] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 318.853145][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 318.853174][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.853191][ T5830] Call Trace: [ 318.853198][ T5830] [ 318.853207][ T5830] dump_stack_lvl+0xe8/0x150 [ 318.853236][ T5830] dump_header+0xd3/0x4c0 [ 318.853260][ T5830] oom_kill_process+0x3ab/0x970 [ 318.853284][ T5830] out_of_memory+0x106c/0x1410 [ 318.853307][ T5830] ? __pfx___mutex_lock+0x10/0x10 [ 318.853333][ T5830] ? __pfx_out_of_memory+0x10/0x10 [ 318.853349][ T5830] ? do_raw_spin_unlock+0xf5/0x210 [ 318.853379][ T5830] try_charge_memcg+0xc53/0x1560 [ 318.853409][ T5830] ? __lock_acquire+0x6b5/0x2cf0 [ 318.853445][ T5830] ? __pfx_try_charge_memcg+0x10/0x10 [ 318.853463][ T5830] ? xa_load+0x60/0x210 [ 318.853490][ T5830] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 318.853517][ T5830] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 318.853540][ T5830] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 318.853563][ T5830] __swap_cache_prepare_and_add+0x52a/0x700 [ 318.853607][ T5830] swap_cache_alloc_folio+0xf1/0x240 [ 318.853636][ T5830] swap_cluster_readahead+0x369/0x690 [ 318.853669][ T5830] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 318.853708][ T5830] ? get_vma_policy+0x27b/0x3c0 [ 318.853733][ T5830] swapin_readahead+0x196/0xc50 [ 318.853770][ T5830] ? __pfx_swapin_readahead+0x10/0x10 [ 318.853798][ T5830] ? swap_table_get+0x1e/0x260 [ 318.853822][ T5830] ? swap_table_get+0x1e/0x260 [ 318.853843][ T5830] ? swap_table_get+0x1e/0x260 [ 318.853867][ T5830] ? swap_table_get+0x216/0x260 [ 318.853892][ T5830] ? swap_cache_get_folio+0x513/0x520 [ 318.853923][ T5830] do_swap_page+0x56f/0x5a20 [ 318.853970][ T5830] ? do_swap_page+0x127/0x5a20 [ 318.853992][ T5830] ? __pfx_do_swap_page+0x10/0x10 [ 318.854014][ T5830] ? __pte_offset_map+0x1ae/0x240 [ 318.854044][ T5830] ? pte_offset_map_rw_nolock+0xea/0x160 [ 318.854076][ T5830] handle_mm_fault+0x12d2/0x3310 [ 318.854115][ T5830] ? handle_mm_fault+0xee/0x3310 [ 318.854149][ T5830] ? __pfx_handle_mm_fault+0x10/0x10 [ 318.854172][ T5830] ? lock_vma_under_rcu+0x45a/0x500 [ 318.854216][ T5830] do_user_addr_fault+0xa73/0x1340 [ 318.854246][ T5830] ? rcu_is_watching+0x15/0xb0 [ 318.854270][ T5830] ? trace_page_fault_user+0x84/0x210 [ 318.854294][ T5830] exc_page_fault+0x6a/0xc0 [ 318.854321][ T5830] asm_exc_page_fault+0x26/0x30 [ 318.854337][ T5830] RIP: 0033:0x7f36fcd5cfce [ 318.854363][ T5830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.854377][ T5830] RSP: 002b:00007fff9bcc1428 EFLAGS: 00010246 [ 318.854399][ T5830] RAX: 0000000000000000 RBX: 0000555594587500 RCX: 00007f36fcd5cfce [ 318.854416][ T5830] RDX: 00007fff9bcc1480 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.854427][ T5830] RBP: 00007fff9bcc14ec R08: 0000000000000000 R09: 0000000000000000 [ 318.854438][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 318.854448][ T5830] R13: 00000000000927c0 R14: 000000000004dacd R15: 00007fff9bcc1540 [ 318.854479][ T5830] [ 318.860200][ T5830] memory: usage 307200kB, limit 307200kB, failcnt 492 [ 319.351276][ T5830] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 319.389990][ T5830] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 319.423799][T21748] netlink: 'syz.2.7590': attribute type 1 has an invalid length. [ 319.432338][ T5830] Memory cgroup stats for /syz3: [ 319.432620][ T5830] cache 0 [ 319.440476][ T5830] rss 0 [ 319.463701][T21748] netlink: 'syz.2.7590': attribute type 7 has an invalid length. [ 319.471437][T21748] netlink: 'syz.2.7590': attribute type 8 has an invalid length. [ 319.479497][ T5830] rss_huge 0 [ 319.518656][T21748] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7590'. [ 319.527771][ T5830] shmem 0 [ 319.527784][ T5830] mapped_file 0 [ 319.527791][ T5830] dirty 0 [ 319.527797][ T5830] writeback 0 [ 319.527804][ T5830] workingset_refault_anon 1 [ 319.527812][ T5830] workingset_refault_file 0 [ 319.527819][ T5830] swap 196608 [ 319.527826][ T5830] swapcached 200704 [ 319.527834][ T5830] pgpgin 67957 [ 319.527841][ T5830] pgpgout 67956 [ 319.527856][ T5830] pgfault 183129 [ 319.527863][ T5830] pgmajfault 3 [ 319.527870][ T5830] inactive_anon 0 [ 319.527877][ T5830] active_anon 4096 [ 319.527885][ T5830] inactive_file 0 [ 319.527892][ T5830] active_file 0 [ 319.527900][ T5830] unevictable 0 [ 319.527907][ T5830] hierarchical_memory_limit 314572800 [ 319.527916][ T5830] hierarchical_memsw_limit 9223372036854771712 [ 319.527924][ T5830] total_cache 0 [ 319.527932][ T5830] total_rss 0 [ 319.527939][ T5830] total_rss_huge 0 [ 319.527947][ T5830] total_shmem 0 [ 319.527954][ T5830] total_mapped_file 0 [ 319.527962][ T5830] total_dirty 0 [ 319.527970][ T5830] total_writeback 0 [ 319.527977][ T5830] total_workingset_refault_anon 1 [ 319.527985][ T5830] total_workingset_refault_file 0 [ 319.527994][ T5830] total_swap 196608 [ 319.528001][ T5830] total_swapcached 200704 [ 319.528010][ T5830] total_pgpgin 67957 [ 319.528017][ T5830] total_pgpgout 67956 [ 319.528025][ T5830] total_pgfault 183129 [ 319.528033][ T5830] total_pgmajfault 3 [ 319.528041][ T5830] total_inactive_anon 0 [ 319.528048][ T5830] total_active_anon 4096 [ 319.528057][ T5830] total_inactive_file 0 [ 319.528064][ T5830] total_active_file 0 [ 319.528072][ T5830] total_unevictable 0 [ 319.528079][ T5830] anon_cost 0 [ 319.589470][T21748] NCSI netlink: No device for ifindex 65584 [ 319.722096][ T5830] file_cost 0 [ 319.725415][ T5830] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7546,pid=21651,uid=0 [ 319.812890][ T5830] Memory cgroup out of memory: Killed process 21651 (syz.3.7546) total-vm:102288kB, anon-rss:1240kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 320.731030][T21810] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7617'. [ 320.746537][T21807] xt_hashlimit: size too large, truncated to 1048576 [ 320.919470][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7622'. [ 321.213030][T21838] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.432002][T21851] tipc: New replicast peer: 255.255.255.255 [ 321.459456][T21851] tipc: Enabled bearer , priority 10 [ 321.485194][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7638'. [ 321.533748][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7638'. [ 321.576446][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7638'. [ 321.712551][T21868] netem: incorrect gi model size [ 321.742289][T21868] netem: change failed [ 322.105504][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7653'. [ 322.125715][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7653'. [ 322.175819][T21891] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7653'. [ 322.203812][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7653'. [ 322.229763][T21891] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7653'. [ 322.240075][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7658'. [ 322.264795][T21900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7658'. [ 322.512248][ T5839] block nbd0: Receive control failed (result -32) [ 322.769226][T17080] hid-generic 0005:07C0:0000.0001: item fetching failed at offset 0/1 [ 322.794272][T17080] hid-generic 0005:07C0:0000.0001: probe with driver hid-generic failed with error -22 [ 322.831928][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7673'. [ 323.011038][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7681'. [ 323.123448][T21961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7686'. [ 323.130855][T21962] blkio.reset_stats is deprecated [ 323.408391][T21983] netlink: 'syz.4.7694': attribute type 9 has an invalid length. [ 324.157960][T22034] hsr0: entered promiscuous mode [ 324.166875][T22034] macvlan0: entered allmulticast mode [ 324.176855][T22034] hsr0: entered allmulticast mode [ 324.181899][T22034] hsr_slave_0: entered allmulticast mode [ 324.188230][T22034] hsr_slave_1: entered allmulticast mode [ 324.208637][T22035] vlan2: entered allmulticast mode [ 324.223090][T22035] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 325.358836][T22122] hsr_slave_0: left promiscuous mode [ 325.392526][T22122] hsr_slave_1: left promiscuous mode [ 325.626059][T22139] netem: incorrect ge model size [ 325.631325][T22139] netem: change failed [ 326.588326][T22205] sctp: [Deprecated]: syz.4.7800 (pid 22205) Use of int in maxseg socket option. [ 326.588326][T22205] Use struct sctp_assoc_value instead [ 326.617702][T22206] bond2: entered promiscuous mode [ 326.699025][T22212] netlink: 'syz.4.7801': attribute type 6 has an invalid length. [ 327.137421][T22242] __nla_validate_parse: 12 callbacks suppressed [ 327.137441][T22242] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7817'. [ 327.168402][T22244] veth0: entered promiscuous mode [ 327.225709][T22244] veth0: left promiscuous mode [ 327.497699][T22259] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.865992][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7833'. [ 327.882190][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7836'. [ 327.912505][T22283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7836'. [ 327.988205][T22281] macvtap1: entered promiscuous mode [ 327.993821][T22281] vlan0: entered promiscuous mode [ 328.005331][T22281] macvtap1: entered allmulticast mode [ 328.015101][T22281] vlan0: entered allmulticast mode [ 328.024539][T22281] veth0_vlan: entered allmulticast mode [ 328.181466][T22301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7844'. [ 328.371627][T22319] netlink: 'syz.1.7851': attribute type 83 has an invalid length. [ 328.474331][T22322] netlink: 'syz.3.7855': attribute type 1 has an invalid length. [ 328.487900][T22325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7856'. [ 328.489391][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7855'. [ 329.190797][T22372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7879'. [ 329.207924][T22372] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7879'. [ 329.521790][T22389] netlink: 'syz.0.7886': attribute type 5 has an invalid length. [ 329.774981][T22406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7893'. [ 330.095171][T22431] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 330.105996][T22425] sctp: [Deprecated]: syz.3.7903 (pid 22425) Use of int in max_burst socket option deprecated. [ 330.105996][T22425] Use struct sctp_assoc_value instead [ 331.182416][T22509] netlink: 'syz.4.7942': attribute type 1 has an invalid length. [ 331.212957][T22509] netlink: 'syz.4.7942': attribute type 1 has an invalid length. [ 331.220699][T22509] netlink: 'syz.4.7942': attribute type 8 has an invalid length. [ 331.320323][T22513] tap0: tun_chr_ioctl cmd 1074025676 [ 331.331149][T22513] tap0: owner set to 0 [ 332.037053][T22568] bond0: entered promiscuous mode [ 332.042948][T22568] bond_slave_0: entered promiscuous mode [ 332.048803][T22568] bond_slave_1: entered promiscuous mode [ 332.061940][T22568] batadv0: entered promiscuous mode [ 332.079579][T22568] debugfs: 'hsr0' already exists in 'hsr' [ 332.091250][T22568] Cannot create hsr debugfs directory [ 332.097373][T22568] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 332.108102][T22568] hsr0: entered promiscuous mode [ 332.113466][T22568] hsr0: entered allmulticast mode [ 332.118659][T22568] bond0: entered allmulticast mode [ 332.133262][T22568] bond_slave_0: entered allmulticast mode [ 332.139162][T22568] bond_slave_1: entered allmulticast mode [ 332.145510][T22568] batadv0: entered allmulticast mode [ 332.151381][T22568] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 332.159973][T22568] bond0: left promiscuous mode [ 332.165744][T22568] bond_slave_0: left promiscuous mode [ 332.171372][T22568] bond_slave_1: left promiscuous mode [ 332.177809][T22568] batadv0: left promiscuous mode [ 332.200459][T22569] __nla_validate_parse: 13 callbacks suppressed [ 332.200475][T22569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7971'. [ 332.331211][T22582] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 332.975960][T22630] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8000'. [ 333.703412][T22676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8021'. [ 333.934117][T22685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8025'. [ 333.950019][T22688] xt_hashlimit: size too large, truncated to 1048576 [ 333.957939][T22689] veth1_macvtap: left promiscuous mode [ 334.035968][T22695] netlink: 'syz.3.8029': attribute type 2 has an invalid length. [ 334.044139][T22695] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8029'. [ 334.346167][T22712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8037'. [ 334.562460][T22728] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8045'. [ 334.809538][T22747] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8054'. [ 334.818821][T22747] netem: invalid attributes len -24 [ 334.824490][T22747] netem: change failed [ 334.966595][T22757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8060'. [ 335.280934][T22780] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8069'. [ 336.156357][T22850] vcan0: tx address claim with dlc 0 [ 336.350599][T22858] tun0: tun_chr_ioctl cmd 1074025675 [ 336.360490][T22858] tun0: persist disabled [ 337.013795][T22912] netlink: 'syz.0.8130': attribute type 11 has an invalid length. [ 337.594144][T22943] netlink: 'syz.0.8143': attribute type 3 has an invalid length. [ 337.601904][T22943] netlink: 'syz.0.8143': attribute type 1 has an invalid length. [ 337.653756][T22943] __nla_validate_parse: 2 callbacks suppressed [ 337.653774][T22943] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8143'. [ 337.682106][T22943] NCSI netlink: No device for ifindex 813332851 [ 338.359946][T22980] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8162'. [ 339.314853][ T5839] block nbd1: Receive control failed (result -32) [ 339.474195][T23064] block nbd0: Unsupported socket: should be TCP or UNIX. [ 339.669972][T23076] team0: Cannot enslave team device to itself [ 339.924680][T23096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8216'. [ 340.413935][T23092] nbd2: detected capacity change from 0 to 63 [ 340.452256][ T5831] block nbd2: Receive control failed (result -32) [ 340.453832][T23049] block nbd2: Send control failed (result -32) [ 340.463333][ T5839] block nbd2: Receive control failed (result -32) [ 340.490037][T23049] block nbd2: Request send failed, requeueing [ 340.500080][ T1768] block nbd2: Dead connection, failed to find a fallback [ 340.507905][ T1768] block nbd2: shutting down sockets [ 340.513754][ T1768] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.524187][ T1768] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.532272][T23049] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.542237][T23049] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.550108][T23049] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.559690][T23049] Buffer I/O error on dev nbd2, logical block 2, async page read [ 340.567505][T23049] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.577076][T23049] Buffer I/O error on dev nbd2, logical block 3, async page read [ 340.585609][T23049] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.595170][T23049] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.602968][T23049] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.612514][T23049] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.620277][T23049] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.630235][T23049] Buffer I/O error on dev nbd2, logical block 2, async page read [ 340.638069][T23049] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.651894][T23049] Buffer I/O error on dev nbd2, logical block 3, async page read [ 340.659807][T23049] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.676715][T23049] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.702798][T23049] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.714461][T23049] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.731951][T23049] ldm_validate_partition_table(): Disk read failed. [ 340.755191][T23049] Dev nbd2: unable to read RDB block 0 [ 340.762466][T23049] nbd2: unable to read partition table [ 340.768608][T23132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8233'. [ 340.782598][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8232'. [ 340.795910][T23049] ldm_validate_partition_table(): Disk read failed. [ 340.802986][T23049] Dev nbd2: unable to read RDB block 0 [ 340.808970][T23049] nbd2: unable to read partition table [ 340.860154][T23136] netem: change failed [ 341.713971][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8262'. [ 341.985333][T23228] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8275'. [ 342.013721][T23228] erspan0: entered promiscuous mode [ 342.183486][T23242] netlink: 'syz.2.8283': attribute type 1 has an invalid length. [ 342.195939][T23242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8283'. [ 342.753039][T23271] netlink: 'syz.1.8296': attribute type 4 has an invalid length. [ 343.513365][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8325'. [ 343.531342][T23333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8326'. [ 343.665189][T23341] tipc: Enabled bearer , priority 0 [ 343.777693][T23347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8334'. [ 343.866928][T23353] netlink: 'syz.2.8337': attribute type 1 has an invalid length. [ 343.880552][T23353] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8337'. [ 343.894293][T23353] netlink: 'syz.2.8337': attribute type 1 has an invalid length. [ 343.903351][T23353] netlink: 'syz.2.8337': attribute type 8 has an invalid length. [ 343.911200][T23353] netlink: 582 bytes leftover after parsing attributes in process `syz.2.8337'. [ 343.923430][T23353] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8337'. [ 344.150991][T23375] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8346'. [ 344.425243][T23392] syz.1.8354: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.442833][T23392] CPU: 0 UID: 0 PID: 23392 Comm: syz.1.8354 Not tainted syzkaller #0 PREEMPT(full) [ 344.442860][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.442874][T23392] Call Trace: [ 344.442881][T23392] [ 344.442890][T23392] dump_stack_lvl+0xe8/0x150 [ 344.442923][T23392] warn_alloc+0x249/0x340 [ 344.442947][T23392] ? stack_trace_save+0xa9/0x100 [ 344.442973][T23392] ? __pfx_warn_alloc+0x10/0x10 [ 344.443003][T23392] ? kasan_save_track+0x4f/0x80 [ 344.443022][T23392] ? kasan_save_track+0x3e/0x80 [ 344.443041][T23392] ? __kasan_kmalloc+0x93/0xb0 [ 344.443060][T23392] ? __kmalloc_cache_noprof+0x31c/0x660 [ 344.443081][T23392] ? xskq_create+0x56/0x170 [ 344.443109][T23392] ? xsk_setsockopt+0x54c/0x990 [ 344.443133][T23392] ? do_sock_setsockopt+0x17c/0x1b0 [ 344.443161][T23392] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 344.443189][T23392] ? do_syscall_64+0x14d/0xf80 [ 344.443211][T23392] __vmalloc_node_range_noprof+0x132/0x1730 [ 344.443260][T23392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.443287][T23392] ? __kasan_kmalloc+0x93/0xb0 [ 344.443315][T23392] vmalloc_user_noprof+0xad/0xe0 [ 344.443335][T23392] ? xskq_create+0xbf/0x170 [ 344.443363][T23392] xskq_create+0xbf/0x170 [ 344.443392][T23392] xsk_init_queue+0x8a/0xe0 [ 344.443419][T23392] xsk_setsockopt+0x54c/0x990 [ 344.443447][T23392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.443473][T23392] ? __pfx_aa_sk_perm+0x10/0x10 [ 344.443500][T23392] ? aa_sock_opt_perm+0xff/0x1a0 [ 344.443533][T23392] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 344.443564][T23392] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.443594][T23392] do_sock_setsockopt+0x17c/0x1b0 [ 344.443632][T23392] __x64_sys_setsockopt+0x13d/0x1b0 [ 344.443670][T23392] do_syscall_64+0x14d/0xf80 [ 344.443688][T23392] ? trace_irq_disable+0x3b/0x150 [ 344.443718][T23392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.443740][T23392] ? clear_bhb_loop+0x40/0x90 [ 344.443765][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.443786][T23392] RIP: 0033:0x7f70d019c799 [ 344.443805][T23392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.443823][T23392] RSP: 002b:00007f70d0fa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.443844][T23392] RAX: ffffffffffffffda RBX: 00007f70d0415fa0 RCX: 00007f70d019c799 [ 344.443859][T23392] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 344.443871][T23392] RBP: 00007f70d0232c99 R08: 0000000000000004 R09: 0000000000000000 [ 344.443884][T23392] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.443898][T23392] R13: 00007f70d0416038 R14: 00007f70d0415fa0 R15: 00007fff4038e578 [ 344.443932][T23392] [ 344.444335][T23392] Mem-Info: [ 344.731909][T23392] active_anon:5635 inactive_anon:0 isolated_anon:0 [ 344.731909][T23392] active_file:3149 inactive_file:40039 isolated_file:0 [ 344.731909][T23392] unevictable:768 dirty:339 writeback:0 [ 344.731909][T23392] slab_reclaimable:11965 slab_unreclaimable:102978 [ 344.731909][T23392] mapped:29185 shmem:1352 pagetables:3429 [ 344.731909][T23392] sec_pagetables:0 bounce:0 [ 344.731909][T23392] kernel_misc_reclaimable:0 [ 344.731909][T23392] free:1318364 free_pcp:9977 free_cma:0 [ 344.777474][T23392] Node 0 active_anon:22540kB inactive_anon:0kB active_file:12596kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116740kB dirty:1352kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:13544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.834235][T23392] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.879408][T23400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8357'. [ 344.889484][T23400] netlink: 'syz.4.8357': attribute type 1 has an invalid length. [ 344.903019][T23400] netlink: 'syz.4.8357': attribute type 2 has an invalid length. [ 344.912129][T23392] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.980958][T23392] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 344.988908][T23392] Node 0 DMA32 free:1316492kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22340kB inactive_anon:0kB active_file:12596kB inactive_file:159960kB unevictable:1536kB writepending:1352kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:39616kB local_pcp:19072kB free_cma:0kB [ 345.036722][T23392] lowmem_reserve[]: 0 0 0 0 0 [ 345.041534][T23392] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 345.072679][T23392] lowmem_reserve[]: 0 0 0 0 0 [ 345.080247][T23392] Node 1 Normal free:3941604kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.174755][T23392] lowmem_reserve[]: 0 0 0 0 0 [ 345.179512][T23392] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.193350][T23392] Node 0 DMA32: 4929*4kB (UME) 3513*8kB (UME) 2028*16kB (UME) 394*32kB (UME) 811*64kB (UM) 742*128kB (UME) 620*256kB (UM) 431*512kB (UM) 211*1024kB (UME) 47*2048kB (UME) 94*4096kB (UM) = 1316492kB [ 345.212870][T23392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.224795][T23392] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 15*16kB (UM) 8*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941604kB [ 345.295321][T23392] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.327284][T23392] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.358051][T23392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.371353][T23392] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.384814][T23392] 44538 total pagecache pages [ 345.389786][T23392] 2 pages in swap cache [ 345.395078][T23392] Free swap = 124988kB [ 345.412081][T23392] Total swap = 124996kB [ 345.416611][T23392] 2097051 pages RAM [ 345.420419][T23392] 0 pages HighMem/MovableOnly [ 345.452106][T23392] 427026 pages reserved [ 345.456357][T23392] 0 pages cma reserved [ 346.089007][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8388'. [ 346.186290][T23471] netlink: 'syz.4.8392': attribute type 5 has an invalid length. [ 346.295917][T23477] tipc: Started in network mode [ 346.304666][T23477] tipc: Node identity ac14140f, cluster identity 4711 [ 346.316943][T23477] tipc: New replicast peer: 255.255.255.255 [ 346.328174][T23477] tipc: Enabled bearer , priority 10 [ 346.346618][T23481] netlink: 'syz.0.8396': attribute type 1 has an invalid length. [ 346.393640][T23481] netlink: 'syz.0.8396': attribute type 2 has an invalid length. [ 346.535132][T23494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8404'. [ 346.778538][T23513] ip6gre0: Master is either lo or non-ether device [ 347.370101][T23555] sctp: [Deprecated]: syz.0.8428 (pid 23555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.370101][T23555] Use struct sctp_sack_info instead [ 347.442764][T17084] tipc: Node number set to 2886997007 [ 347.964491][T23603] validate_nla: 7 callbacks suppressed [ 347.964509][T23603] netlink: 'syz.2.8450': attribute type 10 has an invalid length. [ 347.978463][T23603] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 347.990980][T23603] team0: Port device netdevsim0 added [ 348.135807][T23613] netlink: 'syz.0.8454': attribute type 30 has an invalid length. [ 348.212998][T23618] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 348.443899][T23633] netlink: 'syz.3.8464': attribute type 29 has an invalid length. [ 348.494447][T23633] netlink: 'syz.3.8464': attribute type 29 has an invalid length. [ 348.506125][T23633] netlink: 'syz.3.8464': attribute type 29 has an invalid length. [ 348.520497][T23633] netlink: 'syz.3.8464': attribute type 29 has an invalid length. [ 348.533193][T23633] netlink: 'syz.3.8464': attribute type 29 has an invalid length. [ 348.665089][T23645] __nla_validate_parse: 12 callbacks suppressed [ 348.665108][T23645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8470'. [ 348.722614][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8470'. [ 348.888084][T23660] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.8477'. [ 349.023828][T23666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8480'. [ 349.098064][T23670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8479'. [ 349.189095][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8485'. [ 349.316610][T23684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8488'. [ 349.345158][T23684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8488'. [ 349.369082][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8491'. [ 349.717396][T23719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8504'. [ 350.540485][T23780] netlink: 'syz.3.8533': attribute type 2 has an invalid length. [ 350.801263][T23797] netem: change failed [ 351.090639][T23821] netlink: 'syz.3.8552': attribute type 83 has an invalid length. [ 352.113148][T23890] syzkaller1: entered promiscuous mode [ 352.118829][T23890] syzkaller1: entered allmulticast mode [ 352.922620][T23937] geneve2: entered promiscuous mode [ 352.945616][ T236] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 35891 - 0 [ 352.966923][ T236] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 35891 - 0 [ 352.985008][ T236] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 35891 - 0 [ 352.994599][ T236] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 35891 - 0 [ 353.487735][T23976] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 353.865379][T23999] __nla_validate_parse: 5 callbacks suppressed [ 353.865397][T23999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8637'. [ 353.940567][T24006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8641'. [ 353.965891][T24006] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.670662][T24049] lo speed is unknown, defaulting to 1000 [ 354.859157][T24057] netlink: 'syz.1.8662': attribute type 1 has an invalid length. [ 354.869316][T24057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8662'. [ 354.890982][T24049] wg1 speed is unknown, defaulting to 1000 [ 355.433658][T24084] sctp: [Deprecated]: syz.2.8672 (pid 24084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.433658][T24084] Use struct sctp_sack_info instead [ 356.124255][ T30] audit: type=1800 audit(1773834978.273:4): pid=24115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8689" name="memory.events" dev="tmpfs" ino=8709 res=0 errno=0 [ 356.845514][T24171] sctp: [Deprecated]: syz.3.8712 (pid 24171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.845514][T24171] Use struct sctp_sack_info instead [ 357.668952][T24230] netlink: 'syz.1.8740': attribute type 1 has an invalid length. [ 358.106967][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8756'. [ 358.226852][T24267] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8759'. [ 358.405689][T24281] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8766'. [ 358.529637][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8769'. [ 358.815511][T24306] macvlan0: entered promiscuous mode [ 359.687669][T24368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8804'. [ 359.749894][T24368] bond2: Invalid ad_actor_system MAC address. [ 359.756684][T24368] bond2: option ad_actor_system: invalid value (1) [ 359.764904][T24372] netlink: 'syz.4.8806': attribute type 63 has an invalid length. [ 359.765250][T24368] bond2 (unregistering): Released all slaves [ 359.817687][T24372] netlink: 'syz.4.8806': attribute type 63 has an invalid length. [ 359.856604][T24373] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 360.715237][T24432] syzkaller1: entered promiscuous mode [ 360.720859][T24432] syzkaller1: entered allmulticast mode [ 360.885257][T24439] syzkaller1: entered promiscuous mode [ 360.890821][T24439] syzkaller1: entered allmulticast mode [ 361.088673][T24450] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8842'. [ 361.190042][T24459] netlink: 'syz.4.8845': attribute type 4 has an invalid length. [ 361.230605][ T9] lo speed is unknown, defaulting to 1000 [ 361.262137][ T9] syz0: Port: 1 Link DOWN [ 361.273452][T17080] lo speed is unknown, defaulting to 1000 [ 361.844670][T24489] syzkaller1: entered promiscuous mode [ 361.850176][T24489] syzkaller1: entered allmulticast mode [ 362.372911][T24530] netlink: 'syz.2.8878': attribute type 1 has an invalid length. [ 362.402639][T24530] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8878'. [ 362.411696][T24530] netlink: 'syz.2.8878': attribute type 1 has an invalid length. [ 362.432137][T24530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8878'. [ 362.495384][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8881'. [ 362.518301][T24536] gtp0: entered promiscuous mode [ 362.523737][T24536] gtp0: entered allmulticast mode [ 362.530934][T24542] veth0: entered promiscuous mode [ 362.557200][T24539] veth0: left promiscuous mode [ 363.498945][T24609] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8916'. [ 363.510257][T24609] netlink: 'syz.0.8916': attribute type 2 has an invalid length. [ 363.550667][T24611] syzkaller1: entered promiscuous mode [ 363.556922][T24611] syzkaller1: entered allmulticast mode [ 363.824999][T24624] syzkaller1: entered promiscuous mode [ 363.850471][T24624] syzkaller1: entered allmulticast mode [ 363.876173][T24624] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 363.930972][T24634] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8928'. [ 364.967641][T24708] netlink: 'syz.1.8963': attribute type 1 has an invalid length. [ 365.086061][T24712] syzkaller1: entered promiscuous mode [ 365.103385][T24712] syzkaller1: entered allmulticast mode [ 366.140013][T24788] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9000'. [ 366.607541][T24819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9015'. [ 366.916110][T24834] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9021'. [ 367.045040][T24839] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9008'. [ 367.087191][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9025'. [ 367.116723][T24805] lo speed is unknown, defaulting to 1000 [ 367.124710][T24843] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9026'. [ 367.353178][T24853] sock: sock_set_timeout: `syz.2.9031' (pid 24853) tries to set negative timeout [ 367.565528][T24805] wg1 speed is unknown, defaulting to 1000 [ 367.610182][T24865] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.156057][T24899] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9050'. [ 368.213768][T24899] netlink: ct family unspecified [ 368.994008][T24950] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9075'. [ 369.128361][T24958] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.9078'. [ 369.467433][T24987] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9091'. [ 369.645417][T24996] nbd: device at index 64 is going down [ 369.775068][T24455] udevd[24455]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 369.804243][T24453] udevd[24453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 369.878596][T25008] syzkaller1: entered promiscuous mode [ 369.885134][T25008] syzkaller1: entered allmulticast mode [ 370.244593][T25033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.255001][T25033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.334353][T25036] netlink: 'syz.2.9111': attribute type 11 has an invalid length. [ 371.273803][T25098] netlink: 'syz.1.9131': attribute type 17 has an invalid length. [ 371.300650][T25098] __nla_validate_parse: 3 callbacks suppressed [ 371.300668][T25098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9131'. [ 371.328381][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9131'. [ 371.370466][T25098] gretap0: entered promiscuous mode [ 371.383427][T25098] gretap0: left promiscuous mode [ 371.480506][T25115] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9139'. [ 371.502570][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 371.545568][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9141'. [ 371.574278][T25120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9141'. [ 371.584021][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9141'. [ 371.593940][T25120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9141'. [ 371.704754][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9143'. [ 372.208844][T25163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9161'. [ 372.642402][T25190] block nbd3: server does not support multiple connections per device. [ 372.668633][T25195] syzkaller1: entered promiscuous mode [ 372.676141][T25195] syzkaller1: entered allmulticast mode [ 372.683670][T25190] block nbd3: shutting down sockets [ 372.937532][T25212] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9181'. [ 373.361790][T25246] netlink: 'syz.0.9197': attribute type 1 has an invalid length. [ 373.384032][T25246] netlink: 'syz.0.9197': attribute type 1 has an invalid length. [ 373.413652][T25248] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 373.426762][T25248] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.435486][T25248] gretap2: entered promiscuous mode [ 373.446405][T25248] gretap2: entered allmulticast mode [ 373.674037][T25264] netlink: 'syz.4.9206': attribute type 39 has an invalid length. [ 373.848410][T25272] pim6reg1: entered promiscuous mode [ 373.854466][T25272] pim6reg1: entered allmulticast mode [ 374.524608][T25313] syzkaller1: entered promiscuous mode [ 374.530110][T25313] syzkaller1: entered allmulticast mode [ 374.837181][T25336] syzkaller1: entered promiscuous mode [ 374.843726][T25336] syzkaller1: entered allmulticast mode [ 375.137291][T25356] netlink: 'syz.1.9243': attribute type 2 has an invalid length. [ 375.303617][T25365] netlink: 'syz.1.9246': attribute type 7 has an invalid length. [ 375.330651][T25365] gretap0: entered promiscuous mode [ 375.377368][T25365] gretap0: left promiscuous mode [ 375.747264][T25395] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 375.758308][T25397] gre0: entered promiscuous mode [ 375.771179][T25397] gre0: entered allmulticast mode [ 376.471929][T25449] netlink: 'syz.4.9286': attribute type 17 has an invalid length. [ 376.485565][T25449] __nla_validate_parse: 10 callbacks suppressed [ 376.485580][T25449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9286'. [ 376.504771][T25449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9286'. [ 376.645100][T25457] netlink: 'syz.4.9288': attribute type 4 has an invalid length. [ 377.083646][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9303'. [ 377.101212][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9303'. [ 377.371268][T25508] xt_hashlimit: size too large, truncated to 1048576 [ 377.652989][T25521] tipc: Enabling of bearer rejected, already enabled [ 377.951648][T25542] syzkaller1: entered promiscuous mode [ 377.972152][T25542] syzkaller1: entered allmulticast mode [ 378.245746][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9341'. [ 378.272371][T25563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.349375][T25563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.378480][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9344'. [ 378.410501][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9344'. [ 378.515847][T25575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.531561][T25575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35891 - 0 [ 378.691959][T25575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.721747][T25575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35891 - 0 [ 378.857138][T25575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.892547][T25575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35891 - 0 [ 378.934951][T25590] netlink: 'syz.1.9353': attribute type 2 has an invalid length. [ 378.943344][T25590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9353'. [ 378.970507][T25608] syzkaller1: entered promiscuous mode [ 378.991348][T25608] syzkaller1: entered allmulticast mode [ 379.053164][T25575] team0: Port device netdevsim0 removed [ 379.064378][T25575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.087870][T25575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35891 - 0 [ 379.309434][ T1164] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 35891 - 0 [ 379.332535][ T1164] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.399180][ T1164] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 35891 - 0 [ 379.415494][ T1164] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.433071][T25629] syzkaller1: entered promiscuous mode [ 379.438557][T25629] syzkaller1: entered allmulticast mode [ 379.467341][ T1164] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 35891 - 0 [ 379.485521][ T1164] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.509410][ T1164] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 35891 - 0 [ 379.519873][ T1164] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 379.582550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.591384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.825314][T25658] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9384'. [ 380.050617][T25674] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9390'. [ 380.241495][T25685] netlink: 'syz.2.9395': attribute type 11 has an invalid length. [ 380.288857][T25677] vlan0 (unregistering): left allmulticast mode [ 380.295996][T25677] veth0_vlan (unregistering): left allmulticast mode [ 380.305053][T25677] vlan0 (unregistering): left promiscuous mode [ 380.316881][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.728086][T25702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.737218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.894157][T25710] syzkaller1: entered promiscuous mode [ 380.899734][T25710] syzkaller1: entered allmulticast mode [ 381.200283][T25732] xt_hashlimit: size too large, truncated to 1048576 [ 381.278240][T25735] tipc: Started in network mode [ 381.284785][T25735] tipc: Node identity ac14142f, cluster identity 4711 [ 381.297380][T25735] tipc: New replicast peer: 0.0.0.0 [ 381.306461][T25735] tipc: Enabled bearer , priority 10 [ 381.316249][T25735] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 381.701265][T25760] __nla_validate_parse: 3 callbacks suppressed [ 381.701284][T25760] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9427'. [ 381.971654][T25778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9436'. [ 382.191726][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9442'. [ 382.206818][T25793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9442'. [ 382.223354][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.295280][T25799] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.9447'. [ 382.353076][T25801] Bluetooth: MGMT ver 1.23 [ 382.397772][T25803] syzkaller1: entered promiscuous mode [ 382.413217][T25803] syzkaller1: entered allmulticast mode [ 382.426907][T17080] tipc: Node number set to 2886997039 [ 382.545990][T25813] batadv_slave_1: entered promiscuous mode [ 382.553591][T25812] batadv_slave_1: left promiscuous mode [ 382.889479][T25840] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9465'. [ 383.075310][T25850] netlink: 'syz.2.9469': attribute type 2 has an invalid length. [ 383.097140][T25850] netlink: 'syz.2.9469': attribute type 2 has an invalid length. [ 383.183689][T25859] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9473'. [ 383.561882][T25888] sctp: [Deprecated]: syz.2.9485 (pid 25888) Use of int in max_burst socket option. [ 383.561882][T25888] Use struct sctp_assoc_value instead [ 383.802652][T25899] macvtap0: entered promiscuous mode [ 383.820598][T25899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9491'. [ 383.853595][T25899] veth0_macvtap: left promiscuous mode [ 383.913470][T25899] macvtap0 (unregistering): left promiscuous mode [ 384.091421][T25911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9497'. [ 384.118691][T25911] veth0_to_team: entered promiscuous mode [ 384.163058][T25911] veth0_to_team: left promiscuous mode [ 384.225138][T25920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9500'. [ 384.236948][T25920] netlink: 'syz.2.9500': attribute type 7 has an invalid length. [ 384.248226][T25920] netlink: 'syz.2.9500': attribute type 8 has an invalid length. [ 384.382821][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 384.388973][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 384.438967][T25929] netlink: 'syz.3.9505': attribute type 10 has an invalid length. [ 384.471959][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.507178][T25929] bridge_slave_1: left allmulticast mode [ 384.517022][T25929] bridge_slave_1: left promiscuous mode [ 384.531769][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.622418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.428767][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.613969][T26008] syzkaller1: entered promiscuous mode [ 385.619532][T26008] syzkaller1: entered allmulticast mode [ 385.742558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.817419][T26022] netlink: 'syz.2.9546': attribute type 7 has an invalid length. [ 385.851352][T26022] netlink: 'syz.2.9546': attribute type 4 has an invalid length. [ 386.081626][T26042] syzkaller1: entered promiscuous mode [ 386.094144][T26042] syzkaller1: entered allmulticast mode [ 386.101803][T26044] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.782109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.875458][T26095] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.986362][T26108] __nla_validate_parse: 9 callbacks suppressed [ 386.986381][T26108] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9585'. [ 387.822576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.880516][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9615'. [ 387.890338][T26177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9615'. [ 387.983529][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.223318][T26199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9625'. [ 388.498401][T26219] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9634'. [ 388.510185][T26219] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9634'. [ 388.683110][T26231] bridge0: port 2(gretap0) entered blocking state [ 388.712218][T26231] bridge0: port 2(gretap0) entered disabled state [ 388.718812][T26231] gretap0: entered allmulticast mode [ 388.725961][T26234] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.9640'. [ 388.747876][T26231] gretap0: entered promiscuous mode [ 388.772643][T26231] bridge0: port 2(gretap0) entered blocking state [ 388.779229][T26231] bridge0: port 2(gretap0) entered forwarding state [ 388.999406][T26250] sctp: [Deprecated]: syz.4.9645 (pid 26250) Use of int in max_burst socket option deprecated. [ 388.999406][T26250] Use struct sctp_assoc_value instead [ 389.005097][T26252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.025119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.516724][T26276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9659'. [ 389.837423][T26295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.926823][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9672'. [ 390.157241][T26317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9680'. [ 390.456636][T26339] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 390.472579][ C0] net_ratelimit: 1 callbacks suppressed [ 390.472598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.193503][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.201971][T17080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.662442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.121036][T26451] syzkaller1: entered promiscuous mode [ 392.134004][T26451] syzkaller1: entered allmulticast mode [ 392.417959][T26472] __nla_validate_parse: 3 callbacks suppressed [ 392.417979][T26472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9755'. [ 392.454931][T26472] netlink: 'syz.0.9755': attribute type 7 has an invalid length. [ 392.475493][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.478562][T26472] netlink: 'syz.0.9755': attribute type 8 has an invalid length. [ 392.484813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.492957][T26472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9755'. [ 392.613644][T26486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9757'. [ 392.623996][T26486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9757'. [ 392.702190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.770703][T26492] veth0: entered promiscuous mode [ 392.839223][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9766'. [ 392.842442][T26501] veth0: left promiscuous mode [ 392.853432][T26498] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 393.170835][T26522] bridge_slave_0: left allmulticast mode [ 393.197054][T26522] bridge_slave_0: left promiscuous mode [ 393.207696][T26522] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.220446][T26522] bridge_slave_1: left allmulticast mode [ 393.226345][T26522] bridge_slave_1: left promiscuous mode [ 393.232335][T26522] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.246073][T26522] bond0: (slave bond_slave_0): Releasing backup interface [ 393.265797][T26522] bond_slave_0: left allmulticast mode [ 393.291661][T26522] bond0: (slave bond_slave_1): Releasing backup interface [ 393.303703][T26522] bond_slave_1: left allmulticast mode [ 393.337399][T26522] team0: Port device team_slave_0 removed [ 393.370110][T26522] team0: Port device 26 removed [ 393.395960][T26522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.404397][T26522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.729056][T26556] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9791'. [ 393.742486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.023172][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9800'. [ 394.070592][T26575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9800'. [ 394.249556][T26591] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 394.383085][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.450900][T26604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.568611][T26613] syzkaller1: entered promiscuous mode [ 394.576246][T26613] syzkaller1: entered allmulticast mode [ 394.631691][T26615] syzkaller1: entered promiscuous mode [ 394.637973][T26615] syzkaller1: entered allmulticast mode [ 394.825656][T26626] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.9826'. [ 394.987729][T26637] nbd: nbd0 already in use [ 394.995623][T26637] block nbd0: NBD_DISCONNECT [ 395.000255][T26637] block nbd0: Send disconnect failed -32 [ 395.007789][T26637] block nbd0: shutting down sockets [ 395.183223][T26650] macvtap0: entered promiscuous mode [ 395.188871][T26650] macvtap0: entered allmulticast mode [ 395.247843][T26650] macvtap1: entered promiscuous mode [ 395.265341][T26650] macvtap1: entered allmulticast mode [ 395.373528][T26661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9841'. [ 395.450570][T26667] netlink: 'syz.4.9843': attribute type 7 has an invalid length. [ 395.822469][ C0] net_ratelimit: 1 callbacks suppressed [ 395.822487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.062425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.070826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.079185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.087568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.095913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.104266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.112620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.120950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.129296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.915137][T26769] block nbd0: Unsupported socket: should be TCP or UNIX. [ 397.629912][T26816] __nla_validate_parse: 4 callbacks suppressed [ 397.629933][T26816] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.9911'. [ 398.001201][T26842] tipc: Resetting bearer [ 398.393614][T26872] syzkaller1: entered promiscuous mode [ 398.410866][T26872] syzkaller1: entered allmulticast mode [ 398.441794][T26875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9939'. [ 398.523681][T26879] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 398.717880][T26892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9947'. [ 398.893830][T26909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9951'. [ 398.922770][T26909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9951'. [ 399.636175][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9974'. [ 399.794709][T26970] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.9980'. [ 399.816258][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9981'. [ 399.827693][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9981'. [ 400.030872][T26984] netlink: 'syz.1.9987': attribute type 9 has an invalid length. [ 400.046368][T26984] netlink: 'syz.1.9987': attribute type 11 has an invalid length. [ 400.071434][T26984] netlink: 'syz.1.9987': attribute type 12 has an invalid length. [ 400.082881][T26984] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.9987'. [ 400.278184][T27000] netlink: 'syz.3.9996': attribute type 3 has an invalid length. [ 400.310816][T27000] netlink: 'syz.3.9996': attribute type 3 has an invalid length. [ 401.022101][ C0] net_ratelimit: 59 callbacks suppressed [ 401.022122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.048669][T27052] team0: Mode changed to "broadcast" [ 401.229623][T27066] netlink: 'syz.4.10024': attribute type 9 has an invalid length. [ 401.239761][T27066] netlink: 'syz.4.10024': attribute type 11 has an invalid length. [ 401.249685][T27066] netlink: 'syz.4.10024': attribute type 12 has an invalid length. [ 401.805665][T27094] bond0: (slave vlan0): Enslaving as a backup interface with an up link [ 401.878619][T27099] netlink: 'syz.4.10039': attribute type 4 has an invalid length. [ 401.982447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.990989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.014625][T27107] netlink: 'syz.4.10042': attribute type 21 has an invalid length. [ 402.025200][T27106] netlink: 'syz.0.10043': attribute type 11 has an invalid length. [ 402.062261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.256254][ T5973] IPVS: starting estimator thread 0... [ 402.352455][T27120] IPVS: using max 34 ests per chain, 81600 per kthread [ 402.915031][T27156] __nla_validate_parse: 8 callbacks suppressed [ 402.915049][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10061'. [ 403.102111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.344542][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.353446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.047229][T27224] veth0: entered promiscuous mode [ 404.076340][T27221] veth0: left promiscuous mode [ 404.142170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.292731][T27239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10093'. [ 404.329754][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10093'. [ 404.759252][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10103'. [ 404.774461][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10103'. [ 404.791723][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10103'. [ 404.804490][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10103'. [ 404.866871][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10105'. [ 404.940425][T27285] siw: device registration error -23 [ 404.951244][T27285] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 404.951323][T27287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10109'. [ 404.966197][T27285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.971517][T27287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10109'. [ 405.567292][T27326] xt_hashlimit: size too large, truncated to 1048576 [ 405.962303][T27350] hsr_slave_0 (unregistering): left promiscuous mode [ 406.088616][T27360] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 406.102156][T27360] syzkaller1: Linktype set failed because interface is up [ 406.102556][T17083] syzkaller1: tun_net_xmit 90 [ 406.222184][ C0] net_ratelimit: 4 callbacks suppressed [ 406.222223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.649761][T27385] pim6reg1: entered promiscuous mode [ 406.662787][T27385] pim6reg1: entered allmulticast mode [ 406.795942][T27389] validate_nla: 4 callbacks suppressed [ 406.795961][T27389] netlink: 'syz.0.10155': attribute type 7 has an invalid length. [ 406.815094][T27389] netlink: 'syz.0.10155': attribute type 8 has an invalid length. [ 407.018320][T27396] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 407.042622][T27396] bond3: (slave lo): Enslaving as an active interface with an up link [ 407.051420][T27396] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 407.102449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.130294][T27400] bridge_slave_0: invalid flags given to default FDB implementation [ 407.262174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.326293][T27408] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 407.450559][T27413] syzkaller1: entered promiscuous mode [ 407.460356][T27413] syzkaller1: entered allmulticast mode [ 408.153150][T27451] __nla_validate_parse: 13 callbacks suppressed [ 408.153168][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10182'. [ 408.312184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.354705][T27456] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 408.381535][T27456] bond3: (slave lo): Enslaving as an active interface with an up link [ 408.410564][T27456] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 408.460259][T17080] lo speed is unknown, defaulting to 1000 [ 408.467373][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.475938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.532937][T17080] syz0: Port: 1 Link ACTIVE [ 408.538134][T27432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 408.551849][T27432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 408.572482][T17080] lo speed is unknown, defaulting to 1000 [ 408.871587][T27489] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10201'. [ 409.057056][T27507] netlink: 'syz.3.10206': attribute type 9 has an invalid length. [ 409.067281][T27507] netlink: 'syz.3.10206': attribute type 11 has an invalid length. [ 409.078462][T27507] netlink: 'syz.3.10206': attribute type 12 has an invalid length. [ 409.091257][T27507] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.10206'. [ 409.112088][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10206'. [ 409.342151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.472906][T27534] netlink: 'syz.2.10217': attribute type 11 has an invalid length. [ 409.480959][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10217'. [ 409.493444][T27534] netlink: 'syz.2.10217': attribute type 11 has an invalid length. [ 409.502490][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10217'. [ 409.519641][T27536] netlink: 'syz.4.10218': attribute type 1 has an invalid length. [ 409.557517][T27536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.568338][T27539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10219'. [ 409.585023][T27536] bond4: (slave geneve3): making interface the new active one [ 409.595451][T27536] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 409.637840][T27539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 409.729226][T27547] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10222'. [ 409.756296][T27549] netlink: 'syz.4.10223': attribute type 8 has an invalid length. [ 409.767086][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10223'. [ 409.783266][T27549] bond0: entered promiscuous mode [ 409.788422][T27549] vlan0: entered promiscuous mode [ 409.796992][T27549] gretap0: entered promiscuous mode [ 409.805196][T27549] gretap0: left promiscuous mode [ 409.811374][T27549] bond0: left promiscuous mode [ 409.816501][T27549] vlan0: left promiscuous mode [ 409.854495][T27553] netlink: 'syz.2.10225': attribute type 19 has an invalid length. [ 409.862570][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10225'. [ 410.393844][T27585] veth0: entered promiscuous mode [ 411.165960][T27632] nbd0: detected capacity change from 0 to 63 [ 411.173274][T27643] block nbd0: NBD_DISCONNECT [ 411.187041][T27643] block nbd0: Disconnected due to user request. [ 411.211116][T27643] block nbd0: shutting down sockets [ 411.232522][ C1] blk_print_req_error: 138 callbacks suppressed [ 411.232538][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.248340][ C1] buffer_io_error: 138 callbacks suppressed [ 411.248355][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 411.277826][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.278457][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.287376][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 411.296827][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 411.298664][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.321749][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 411.329804][T27157] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.363197][T27157] Buffer I/O error on dev nbd0, logical block 0, async page read [ 411.371471][T27157] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.381377][T27157] Buffer I/O error on dev nbd0, logical block 1, async page read [ 411.395346][T27157] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.404892][T27157] Buffer I/O error on dev nbd0, logical block 2, async page read [ 411.419436][T27157] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.432141][ C0] net_ratelimit: 4 callbacks suppressed [ 411.432155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.433674][T27157] Buffer I/O error on dev nbd0, logical block 3, async page read [ 411.482270][T27157] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.494510][T27157] Buffer I/O error on dev nbd0, logical block 0, async page read [ 411.532493][T27157] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 411.541974][T27157] Buffer I/O error on dev nbd0, logical block 1, async page read [ 411.582850][T27157] ldm_validate_partition_table(): Disk read failed. [ 411.589784][T27157] Dev nbd0: unable to read RDB block 0 [ 411.621465][T27157] nbd0: unable to read partition table [ 411.641284][T27157] ldm_validate_partition_table(): Disk read failed. [ 411.659352][T27157] Dev nbd0: unable to read RDB block 0 [ 411.670175][T27157] nbd0: unable to read partition table [ 411.882541][T27675] validate_nla: 2 callbacks suppressed [ 411.882559][T27675] netlink: 'syz.3.10272': attribute type 20 has an invalid length. [ 412.222392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.462193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.871196][T27716] netlink: Conntrack attr has 4 unknown bytes [ 413.034517][T27728] netlink: 'syz.1.10295': attribute type 10 has an invalid length. [ 413.187274][T27733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.196610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.235026][T27737] syzkaller1: entered promiscuous mode [ 413.264006][T27737] syzkaller1: entered allmulticast mode [ 413.445207][T27747] syzkaller1: entered promiscuous mode [ 413.464449][T27747] syzkaller1: entered allmulticast mode [ 413.502146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.584860][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.593225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.833692][T27774] netlink: 'syz.1.10320': attribute type 9 has an invalid length. [ 413.841644][T27774] netlink: 'syz.1.10320': attribute type 11 has an invalid length. [ 413.850652][T27774] netlink: 'syz.1.10320': attribute type 12 has an invalid length. [ 413.859476][T27774] __nla_validate_parse: 9 callbacks suppressed [ 413.859491][T27774] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.10320'. [ 413.860691][T27776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10312'. [ 413.866813][T27774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10320'. [ 413.955474][T27781] netlink: 'syz.1.10314': attribute type 1 has an invalid length. [ 413.988269][T27781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.139172][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10319'. [ 414.149474][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10319'. [ 414.542231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.803868][T27834] syzkaller1: entered promiscuous mode [ 414.823225][T27834] syzkaller1: entered allmulticast mode [ 414.967691][T27845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10345'. [ 415.089887][T27856] netlink: 'syz.0.10348': attribute type 1 has an invalid length. [ 415.130294][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10349'. [ 415.286430][T27856] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.578094][T27870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10353'. [ 416.302917][T27902] tipc: Enabled bearer , priority 0 [ 416.349924][T27902] tipc: Disabling bearer [ 416.366304][T27906] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.10369'. [ 416.622263][ C0] net_ratelimit: 2 callbacks suppressed [ 416.622280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.643559][T27920] netlink: 'syz.4.10376': attribute type 1 has an invalid length. [ 416.694815][T27920] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.702243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.784782][ T1152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.992439][T27935] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 417.027776][T27935] bond4: (slave lo): Enslaving as an active interface with an up link [ 417.095776][T27935] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 417.210140][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10385'. [ 417.262393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.271004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.416636][T27955] syzkaller1: entered promiscuous mode [ 417.424476][T27955] syzkaller1: entered allmulticast mode [ 417.662339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.670763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.796285][ T1152] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.838225][ T1152] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.857777][ T1152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.876273][T27979] trusted_key: syz.4.10402 sent an empty control message without MSG_MORE. [ 417.876852][ T1152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.005283][T27987] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 418.037106][T27989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.210560][T27999] netlink: 'syz.1.10414': attribute type 10 has an invalid length. [ 418.228433][T27999] syz_tun: entered promiscuous mode [ 418.237700][T27999] syz_tun: entered allmulticast mode [ 418.243727][T27999] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 418.827626][T28042] netlink: 'syz.0.10429': attribute type 6 has an invalid length. [ 418.960015][T28042] __nla_validate_parse: 9 callbacks suppressed [ 418.960033][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10429'. [ 418.993120][T28042] netlink: 'syz.0.10429': attribute type 6 has an invalid length. [ 419.001005][T28042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10429'. [ 420.543725][T28104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10450'. [ 420.751246][ T5831] block nbd0: Receive control failed (result -107) [ 420.772217][T28109] nbd0: detected capacity change from 0 to 127 [ 420.900383][T28121] block nbd0: Dead connection, failed to find a fallback [ 420.960310][T28121] block nbd0: shutting down sockets [ 420.994503][T28121] blk_print_req_error: 138 callbacks suppressed [ 420.994520][T28121] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.057511][T28121] buffer_io_error: 138 callbacks suppressed [ 421.057527][T28121] Buffer I/O error on dev nbd0, logical block 0, async page read [ 421.092416][T28121] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.113084][T28121] Buffer I/O error on dev nbd0, logical block 1, async page read [ 421.120880][T28121] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.162786][T28121] Buffer I/O error on dev nbd0, logical block 2, async page read [ 421.177883][T28129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10457'. [ 421.197893][T28121] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.222446][T28121] Buffer I/O error on dev nbd0, logical block 3, async page read [ 421.254856][T28121] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.288425][T28121] Buffer I/O error on dev nbd0, logical block 0, async page read [ 421.296773][T28121] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.306993][T28121] Buffer I/O error on dev nbd0, logical block 1, async page read [ 421.315343][T28121] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.325733][T28121] Buffer I/O error on dev nbd0, logical block 2, async page read [ 421.334053][T28121] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.346842][T28133] bond3: (slave lo): Releasing backup interface [ 421.372918][T28121] Buffer I/O error on dev nbd0, logical block 3, async page read [ 421.394022][T28133] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 421.403711][T28121] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.424334][T28121] Buffer I/O error on dev nbd0, logical block 0, async page read [ 421.432870][T28121] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 421.454763][T28121] Buffer I/O error on dev nbd0, logical block 1, async page read [ 421.464060][T28133] : (slave bridge0): Releasing backup interface [ 421.469616][T28121] ldm_validate_partition_table(): Disk read failed. [ 421.494761][T28121] Dev nbd0: unable to read RDB block 0 [ 421.506973][T28133] veth0_to_bridge: left allmulticast mode [ 421.507299][T28121] nbd0: unable to read partition table [ 421.536581][T28121] ldm_validate_partition_table(): Disk read failed. [ 421.538426][T28133] veth0_to_bridge: left promiscuous mode [ 421.554104][T28121] Dev nbd0: unable to read RDB block 0 [ 421.565312][T28121] nbd0: unable to read partition table [ 421.578192][T28133] bridge0: port 3(veth0_to_bridge) entered disabled state [ 421.598619][T28133] bridge_slave_0: left allmulticast mode [ 421.614855][T28133] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.636359][T28133] bridge_slave_1: left allmulticast mode [ 421.649395][T28133] bridge_slave_1: left promiscuous mode [ 421.655847][T28133] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.670591][T28133] : (slave bond_slave_0): Releasing backup interface [ 421.693943][T28133] : (slave bond_slave_1): Releasing backup interface [ 421.721860][T28133] team0: Port device team_slave_0 removed [ 421.746239][T28133] team0: Port device team_slave_1 removed [ 421.763308][T28133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.770756][T28133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.781106][T28133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.791803][T28133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.801199][T28133] net_ratelimit: 7 callbacks suppressed [ 421.801213][T28133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.823505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.823774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.874203][T28134] team0: Mode changed to "loadbalance" [ 421.880920][T17084] lo speed is unknown, defaulting to 1000 [ 421.896483][T17084] syz0: Port: 1 Link DOWN [ 421.916307][T17084] lo speed is unknown, defaulting to 1000 [ 422.252528][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10470'. [ 422.271713][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10470'. [ 422.327864][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10470'. [ 422.327915][ T1152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.343379][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10470'. [ 422.370525][ T1152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.455738][ T1152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.515567][ T1152] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.862248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.870562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.907127][ T30] audit: type=1800 audit(1773835045.053:5): pid=28194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10485" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=10250 res=0 errno=0 [ 423.102427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.707655][T28244] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10509'. [ 423.709360][ T236] [ 423.719035][ T236] ====================================================== [ 423.726038][ T236] WARNING: possible circular locking dependency detected [ 423.733057][ T236] syzkaller #0 Not tainted [ 423.737471][ T236] ------------------------------------------------------ [ 423.744475][ T236] kworker/u8:6/236 is trying to acquire lock: [ 423.750519][ T236] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 423.761029][ T236] [ 423.761029][ T236] but task is already holding lock: [ 423.762631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.768368][ T236] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 423.786665][ T236] [ 423.786665][ T236] which lock already depends on the new lock. [ 423.786665][ T236] [ 423.797047][ T236] [ 423.797047][ T236] the existing dependency chain (in reverse order) is: [ 423.806038][ T236] [ 423.806038][ T236] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 423.814106][ T236] down_write+0x96/0x200 [ 423.818868][ T236] kernfs_add_one+0x41/0x5c0 [ 423.823974][ T236] kernfs_create_dir_ns+0xde/0x130 [ 423.829586][ T236] internal_create_group+0x425/0x1180 [ 423.835469][ T236] cpuhp_invoke_callback+0x445/0x860 [ 423.841267][ T236] cpuhp_issue_call+0x430/0x7a0 [ 423.846627][ T236] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 423.853204][ T236] __cpuhp_setup_state+0x3f/0x60 [ 423.858659][ T236] do_one_initcall+0x250/0x8d0 [ 423.863942][ T236] do_initcall_level+0x104/0x190 [ 423.869395][ T236] do_initcalls+0x59/0xa0 [ 423.874232][ T236] kernel_init_freeable+0x2a6/0x3e0 [ 423.879939][ T236] kernel_init+0x1d/0x1d0 [ 423.884773][ T236] ret_from_fork+0x51e/0xb90 [ 423.889870][ T236] ret_from_fork_asm+0x1a/0x30 [ 423.895141][ T236] [ 423.895141][ T236] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 423.902942][ T236] [ 423.902942][ T236] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 423.910655][ T236] cpus_read_lock+0x42/0x160 [ 423.912413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.915747][ T236] static_key_disable+0x12/0x20 [ 423.923934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.929134][ T236] __inet_hash_connect+0x2430/0x2440 [ 423.942950][ T236] tcp_v4_connect+0xd5f/0x19b0 [ 423.948228][ T236] __inet_stream_connect+0x25a/0xdd0 [ 423.954024][ T236] inet_stream_connect+0x66/0xa0 [ 423.959465][ T236] __sys_connect+0x312/0x450 [ 423.964563][ T236] __x64_sys_connect+0x7a/0x90 [ 423.969837][ T236] do_syscall_64+0x14d/0xf80 [ 423.974929][ T236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.981324][ T236] [ 423.981324][ T236] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 423.988951][ T236] lock_sock_nested+0x48/0x100 [ 423.994224][ T236] inet_shutdown+0x6a/0x390 [ 423.999227][ T236] nbd_mark_nsock_dead+0x2e9/0x560 [ 424.004848][ T236] recv_work+0x1c7f/0x1d90 [ 424.009771][ T236] process_scheduled_works+0xb02/0x1830 [ 424.015830][ T236] worker_thread+0xa50/0xfc0 [ 424.020932][ T236] kthread+0x388/0x470 [ 424.025500][ T236] ret_from_fork+0x51e/0xb90 [ 424.030595][ T236] ret_from_fork_asm+0x1a/0x30 [ 424.035869][ T236] [ 424.035869][ T236] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 424.043496][ T236] __mutex_lock+0x19f/0x1300 [ 424.048591][ T236] nbd_queue_rq+0x37b/0x1100 [ 424.053690][ T236] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 424.059743][ T236] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 424.066574][ T236] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 424.073057][ T236] blk_mq_run_hw_queue+0x348/0x4f0 [ 424.078675][ T236] blk_mq_dispatch_list+0xd16/0xe10 [ 424.084379][ T236] blk_mq_flush_plug_list+0x48d/0x570 [ 424.090250][ T236] __blk_flush_plug+0x3ed/0x4d0 [ 424.095603][ T236] __submit_bio+0x28d/0x580 [ 424.100606][ T236] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 424.106737][ T236] block_read_full_folio+0x599/0x830 [ 424.112525][ T236] filemap_read_folio+0x137/0x3b0 [ 424.118056][ T236] do_read_cache_folio+0x358/0x590 [ 424.123668][ T236] read_part_sector+0xb6/0x2b0 [ 424.128935][ T236] adfspart_check_ICS+0xa5/0xa40 [ 424.134384][ T236] bdev_disk_changed+0x7ba/0x1550 [ 424.139926][ T236] blkdev_get_whole+0x380/0x510 [ 424.145291][ T236] bdev_open+0x31e/0xd30 [ 424.150040][ T236] blkdev_open+0x470/0x610 [ 424.154968][ T236] do_dentry_open+0x785/0x14e0 [ 424.160247][ T236] vfs_open+0x3b/0x340 [ 424.164823][ T236] path_openat+0x2e08/0x3860 [ 424.169921][ T236] do_file_open+0x23e/0x4a0 [ 424.174928][ T236] do_sys_openat2+0x113/0x200 [ 424.180121][ T236] __x64_sys_openat+0x138/0x170 [ 424.185477][ T236] do_syscall_64+0x14d/0xf80 [ 424.190568][ T236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.196970][ T236] [ 424.196970][ T236] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 424.204180][ T236] __mutex_lock+0x19f/0x1300 [ 424.209287][ T236] nbd_queue_rq+0xc6/0x1100 [ 424.214312][ T236] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 424.220369][ T236] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 424.227206][ T236] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 424.233691][ T236] blk_mq_run_hw_queue+0x348/0x4f0 [ 424.239310][ T236] blk_mq_dispatch_list+0xd16/0xe10 [ 424.245011][ T236] blk_mq_flush_plug_list+0x48d/0x570 [ 424.250887][ T236] __blk_flush_plug+0x3ed/0x4d0 [ 424.256239][ T236] __submit_bio+0x28d/0x580 [ 424.261245][ T236] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 424.267378][ T236] block_read_full_folio+0x599/0x830 [ 424.273167][ T236] filemap_read_folio+0x137/0x3b0 [ 424.278696][ T236] do_read_cache_folio+0x358/0x590 [ 424.284312][ T236] read_part_sector+0xb6/0x2b0 [ 424.289580][ T236] adfspart_check_ICS+0xa5/0xa40 [ 424.295019][ T236] bdev_disk_changed+0x7ba/0x1550 [ 424.300543][ T236] blkdev_get_whole+0x380/0x510 [ 424.305896][ T236] bdev_open+0x31e/0xd30 [ 424.310642][ T236] blkdev_open+0x470/0x610 [ 424.315567][ T236] do_dentry_open+0x785/0x14e0 [ 424.320844][ T236] vfs_open+0x3b/0x340 [ 424.325419][ T236] path_openat+0x2e08/0x3860 [ 424.330511][ T236] do_file_open+0x23e/0x4a0 [ 424.335519][ T236] do_sys_openat2+0x113/0x200 [ 424.340706][ T236] __x64_sys_openat+0x138/0x170 [ 424.346063][ T236] do_syscall_64+0x14d/0xf80 [ 424.351159][ T236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.357560][ T236] [ 424.357560][ T236] -> #4 (set->srcu){.+.+}-{0:0}: [ 424.364668][ T236] __synchronize_srcu+0xca/0x3e0 [ 424.370112][ T236] elevator_switch+0x1e8/0x7a0 [ 424.375377][ T236] elevator_change+0x2cc/0x450 [ 424.380640][ T236] elevator_set_default+0x36c/0x430 [ 424.386340][ T236] blk_register_queue+0x366/0x430 [ 424.391868][ T236] __add_disk+0x677/0xd50 [ 424.396701][ T236] add_disk_fwnode+0xfb/0x480 [ 424.401882][ T236] nbd_dev_add+0x72c/0xb50 [ 424.406808][ T236] nbd_init+0x168/0x1f0 [ 424.411481][ T236] do_one_initcall+0x250/0x8d0 [ 424.416754][ T236] do_initcall_level+0x104/0x190 [ 424.422201][ T236] do_initcalls+0x59/0xa0 [ 424.427034][ T236] kernel_init_freeable+0x2a6/0x3e0 [ 424.432738][ T236] kernel_init+0x1d/0x1d0 [ 424.437571][ T236] ret_from_fork+0x51e/0xb90 [ 424.442663][ T236] ret_from_fork_asm+0x1a/0x30 [ 424.447937][ T236] [ 424.447937][ T236] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 424.455739][ T236] __mutex_lock+0x19f/0x1300 [ 424.460833][ T236] elevator_change+0x1b3/0x450 [ 424.466100][ T236] elevator_set_none+0xb5/0x140 [ 424.471456][ T236] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 424.477770][ T236] nbd_start_device+0x17f/0xb10 [ 424.483129][ T236] nbd_genl_connect+0x165b/0x1cf0 [ 424.488658][ T236] genl_family_rcv_msg_doit+0x22a/0x330 [ 424.494704][ T236] genl_rcv_msg+0x61c/0x7a0 [ 424.499709][ T236] netlink_rcv_skb+0x232/0x4b0 [ 424.504977][ T236] genl_rcv+0x28/0x40 [ 424.509457][ T236] netlink_unicast+0x80f/0x9b0 [ 424.514725][ T236] netlink_sendmsg+0x813/0xb40 [ 424.519994][ T236] ____sys_sendmsg+0x972/0x9f0 [ 424.525258][ T236] ___sys_sendmsg+0x2a5/0x360 [ 424.530438][ T236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 424.535874][ T236] do_syscall_64+0x14d/0xf80 [ 424.540962][ T236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.547357][ T236] [ 424.547357][ T236] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 424.555951][ T236] blk_alloc_queue+0x546/0x680 [ 424.561235][ T236] __blk_mq_alloc_disk+0x197/0x390 [ 424.566850][ T236] nbd_dev_add+0x499/0xb50 [ 424.571778][ T236] nbd_init+0x168/0x1f0 [ 424.576444][ T236] do_one_initcall+0x250/0x8d0 [ 424.581727][ T236] do_initcall_level+0x104/0x190 [ 424.587174][ T236] do_initcalls+0x59/0xa0 [ 424.592015][ T236] kernel_init_freeable+0x2a6/0x3e0 [ 424.597721][ T236] kernel_init+0x1d/0x1d0 [ 424.602553][ T236] ret_from_fork+0x51e/0xb90 [ 424.607648][ T236] ret_from_fork_asm+0x1a/0x30 [ 424.612927][ T236] [ 424.612927][ T236] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 424.620122][ T236] fs_reclaim_acquire+0x71/0x100 [ 424.625563][ T236] kmem_cache_alloc_noprof+0x40/0x650 [ 424.631444][ T236] __kernfs_iattrs+0xdf/0x340 [ 424.636630][ T236] kernfs_iop_setattr+0xea/0x3f0 [ 424.642076][ T236] notify_change+0xc1a/0xf40 [ 424.647170][ T236] do_truncate+0x1c2/0x250 [ 424.652090][ T236] path_openat+0x2f89/0x3860 [ 424.657185][ T236] do_file_open+0x23e/0x4a0 [ 424.662194][ T236] do_sys_openat2+0x113/0x200 [ 424.667386][ T236] __x64_sys_openat+0x138/0x170 [ 424.672745][ T236] do_syscall_64+0x14d/0xf80 [ 424.677834][ T236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.684229][ T236] [ 424.684229][ T236] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 424.692725][ T236] __lock_acquire+0x15a5/0x2cf0 [ 424.698081][ T236] lock_acquire+0xf0/0x2e0 [ 424.703003][ T236] down_write+0x96/0x200 [ 424.707746][ T236] kernfs_unlink_sibling+0x71/0x180 [ 424.713444][ T236] __kernfs_remove+0x3e7/0x660 [ 424.718710][ T236] kernfs_remove_by_name_ns+0xaf/0x130 [ 424.724666][ T236] sysfs_remove_group+0xfc/0x2e0 [ 424.730107][ T236] sysfs_remove_groups+0x54/0xb0 [ 424.735548][ T236] net_rx_queue_update_kobjects+0x68d/0x740 [ 424.741942][ T236] netdev_unregister_kobject+0x113/0x450 [ 424.748075][ T236] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 424.754995][ T236] unregister_netdevice_queue+0x31f/0x360 [ 424.761216][ T236] l2tp_eth_delete+0xdc/0x100 [ 424.766397][ T236] l2tp_session_del_work+0x724/0x860 [ 424.772189][ T236] process_scheduled_works+0xb02/0x1830 [ 424.778238][ T236] worker_thread+0xa50/0xfc0 [ 424.783334][ T236] kthread+0x388/0x470 [ 424.787901][ T236] ret_from_fork+0x51e/0xb90 [ 424.792996][ T236] ret_from_fork_asm+0x1a/0x30 [ 424.798264][ T236] [ 424.798264][ T236] other info that might help us debug this: [ 424.798264][ T236] [ 424.808467][ T236] Chain exists of: [ 424.808467][ T236] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 424.808467][ T236] [ 424.822874][ T236] Possible unsafe locking scenario: [ 424.822874][ T236] [ 424.830303][ T236] CPU0 CPU1 [ 424.835649][ T236] ---- ---- [ 424.841001][ T236] lock(&root->kernfs_rwsem); [ 424.845757][ T236] lock(cpuhp_state_mutex); [ 424.852855][ T236] lock(&root->kernfs_rwsem); [ 424.860387][ T236] lock(&root->kernfs_iattr_rwsem); [ 424.865658][ T236] [ 424.865658][ T236] *** DEADLOCK *** [ 424.865658][ T236] [ 424.873785][ T236] 4 locks held by kworker/u8:6/236: [ 424.878965][ T236] #0: ffff888031a9b148 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 424.889747][ T236] #1: ffffc90003147c40 ((work_completion)(&session->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 424.902081][ T236] #2: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_delete+0x1f/0x100 [ 424.911201][ T236] #3: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 424.921883][ T236] [ 424.921883][ T236] stack backtrace: [ 424.927763][ T236] CPU: 1 UID: 0 PID: 236 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 424.927779][ T236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.927790][ T236] Workqueue: l2tp l2tp_session_del_work [ 424.927816][ T236] Call Trace: [ 424.927822][ T236] [ 424.927829][ T236] dump_stack_lvl+0xe8/0x150 [ 424.927848][ T236] print_circular_bug+0x2e1/0x300 [ 424.927870][ T236] check_noncircular+0x12e/0x150 [ 424.927892][ T236] __lock_acquire+0x15a5/0x2cf0 [ 424.927911][ T236] ? __lock_acquire+0x6b5/0x2cf0 [ 424.927933][ T236] lock_acquire+0xf0/0x2e0 [ 424.927948][ T236] ? kernfs_unlink_sibling+0x71/0x180 [ 424.927966][ T236] down_write+0x96/0x200 [ 424.927981][ T236] ? kernfs_unlink_sibling+0x71/0x180 [ 424.927993][ T236] ? __pfx_down_write+0x10/0x10 [ 424.928007][ T236] ? kernfs_root+0x1c/0x230 [ 424.928024][ T236] ? kernfs_root+0x1c/0x230 [ 424.928040][ T236] ? kernfs_root+0x1c/0x230 [ 424.928058][ T236] ? kernfs_root+0x1ea/0x230 [ 424.928076][ T236] kernfs_unlink_sibling+0x71/0x180 [ 424.928091][ T236] __kernfs_remove+0x3e7/0x660 [ 424.928105][ T236] kernfs_remove_by_name_ns+0xaf/0x130 [ 424.928120][ T236] sysfs_remove_group+0xfc/0x2e0 [ 424.928140][ T236] sysfs_remove_groups+0x54/0xb0 [ 424.928159][ T236] net_rx_queue_update_kobjects+0x68d/0x740 [ 424.928180][ T236] netdev_unregister_kobject+0x113/0x450 [ 424.928197][ T236] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 424.928218][ T236] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 424.928236][ T236] ? register_lock_class+0x31/0x2e0 [ 424.928256][ T236] unregister_netdevice_queue+0x31f/0x360 [ 424.928272][ T236] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 424.928291][ T236] l2tp_eth_delete+0xdc/0x100 [ 424.928312][ T236] ? __pfx_l2tp_eth_delete+0x10/0x10 [ 424.928328][ T236] l2tp_session_del_work+0x724/0x860 [ 424.928349][ T236] ? process_scheduled_works+0xa25/0x1830 [ 424.928367][ T236] process_scheduled_works+0xb02/0x1830 [ 424.928393][ T236] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.928412][ T236] ? assign_work+0x3d5/0x5e0 [ 424.928430][ T236] worker_thread+0xa50/0xfc0 [ 424.928456][ T236] kthread+0x388/0x470 [ 424.928469][ T236] ? __pfx_worker_thread+0x10/0x10 [ 424.928485][ T236] ? __pfx_kthread+0x10/0x10 [ 424.928498][ T236] ret_from_fork+0x51e/0xb90 [ 424.928515][ T236] ? __pfx_ret_from_fork+0x10/0x10 [ 424.928531][ T236] ? __switch_to+0xc7d/0x1450 [ 424.928547][ T236] ? __pfx_kthread+0x10/0x10 [ 424.928559][ T236] ret_from_fork_asm+0x1a/0x30 [ 424.928584][ T236] [ 424.982105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.102388][ C0] net_ratelimit: 3 callbacks suppressed [ 427.102408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.116155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.142114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.150236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.152319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.166466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.862339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.182196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.190357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.222105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.302193][ C0] net_ratelimit: 3 callbacks suppressed [ 432.302211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.315978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.342343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.342347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.342415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.350578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog