last executing test programs: 1.214467191s ago: executing program 4 (id=14517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x9, 0x12) sendfile(r1, r1, 0x0, 0x7ff) 1.106152775s ago: executing program 4 (id=14521): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 930.471718ms ago: executing program 4 (id=14527): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x8) 884.083457ms ago: executing program 1 (id=14528): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) 853.671927ms ago: executing program 0 (id=14529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000007f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000088000000000000001701000002000000730020"], 0x118, 0x40880}], 0x1, 0x40c5) 845.337299ms ago: executing program 2 (id=14530): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 790.653488ms ago: executing program 4 (id=14531): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x3) ppoll(&(0x7f0000000280)=[{r0, 0xc0}], 0x1, &(0x7f0000000440), 0x0, 0x0) 790.173106ms ago: executing program 3 (id=14532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x18, 0x0, @void}, 0x10) 782.269305ms ago: executing program 1 (id=14533): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xb4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0xfffffffffffffe53, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x5, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) 716.174781ms ago: executing program 0 (id=14534): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 707.040855ms ago: executing program 4 (id=14535): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(0x3) 640.158547ms ago: executing program 2 (id=14536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 608.283308ms ago: executing program 3 (id=14537): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0xc063, {}, {}, {}, 0x1, @can={{0x2}, 0x23, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) 600.837224ms ago: executing program 1 (id=14538): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) 548.623006ms ago: executing program 4 (id=14539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 530.956419ms ago: executing program 0 (id=14540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) 459.017463ms ago: executing program 1 (id=14541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 410.564811ms ago: executing program 3 (id=14542): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) 410.302674ms ago: executing program 2 (id=14543): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 283.434876ms ago: executing program 0 (id=14544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 280.602355ms ago: executing program 2 (id=14545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001300)={r2, 0x6e2}, &(0x7f0000001340)=0x8) 224.652571ms ago: executing program 3 (id=14546): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x200}, 0x8) 196.16708ms ago: executing program 1 (id=14547): unshare(0x6020400) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(0x3) 192.816852ms ago: executing program 3 (id=14548): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 174.182397ms ago: executing program 0 (id=14549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1}}], 0x2, 0x142, 0x0) 145.325876ms ago: executing program 2 (id=14550): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 47.926835ms ago: executing program 0 (id=14551): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 41.463712ms ago: executing program 1 (id=14552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 35.283338ms ago: executing program 2 (id=14553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 3 (id=14554): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0xf, r2, 0x0, r0}, 0x10) kernel console output (not intermixed with test programs): qdisc (pfifo_fast) fail, fallback to noqueue [ 303.996512][T19315] gretap1: entered promiscuous mode [ 304.022171][T19315] gretap1: entered allmulticast mode [ 304.582485][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6477'. [ 304.596824][T19354] bond5: entered promiscuous mode [ 304.610753][T19354] bond5: entered allmulticast mode [ 304.631191][T19354] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.189346][T19386] netlink: 'syz.3.6488': attribute type 24 has an invalid length. [ 305.471827][T19403] lo: entered allmulticast mode [ 305.497246][T19403] tunl0: entered allmulticast mode [ 305.527516][T19403] gre0: entered allmulticast mode [ 305.600500][T19403] gretap0: entered allmulticast mode [ 305.708555][T19403] erspan0: entered allmulticast mode [ 305.763841][T19403] ip_vti0: entered allmulticast mode [ 305.796879][T19403] ip6_vti0: entered allmulticast mode [ 305.820379][T19403] sit0: entered allmulticast mode [ 305.851059][T19403] ip6tnl0: entered allmulticast mode [ 305.906613][T19403] ip6gre0: entered allmulticast mode [ 305.929546][T19432] netlink: 'syz.4.6512': attribute type 1 has an invalid length. [ 305.940525][T19403] syz_tun: entered allmulticast mode [ 306.855429][T19497] netlink: 'syz.2.6544': attribute type 64 has an invalid length. [ 306.891382][T19497] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6544'. [ 307.175943][T19519] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 307.239078][T19524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 307.366338][T19531] ipt_ECN: cannot use operation on non-tcp rule [ 307.417115][T19535] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 307.550352][T19545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6567'. [ 307.560623][T19545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6567'. [ 307.879185][T19569] netlink: 'syz.0.6579': attribute type 2 has an invalid length. [ 308.544130][T19615] lo: entered promiscuous mode [ 308.549697][T19615] tunl0: entered promiscuous mode [ 308.555829][T19615] gre0: entered promiscuous mode [ 308.567012][T19615] gretap0: entered promiscuous mode [ 308.581277][T19615] erspan0: entered promiscuous mode [ 308.595476][T19615] ip_vti0: entered promiscuous mode [ 308.981852][T19646] netlink: 'syz.4.6618': attribute type 3 has an invalid length. [ 309.091394][T19655] set match dimension is over the limit! [ 309.226919][T19663] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 310.352209][T19750] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 310.419165][T19753] bridge_slave_0: left allmulticast mode [ 310.441948][T19753] bridge_slave_0: left promiscuous mode [ 310.466595][T19753] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.491954][T19753] bridge_slave_1: left allmulticast mode [ 310.516271][T19753] bridge_slave_1: left promiscuous mode [ 310.530314][T19753] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.542727][T19761] netlink: 'syz.2.6676': attribute type 12 has an invalid length. [ 310.559959][T19753] bond0: (slave bond_slave_0): Releasing backup interface [ 310.576906][T19753] bond0: (slave bond_slave_1): Releasing backup interface [ 310.579796][T19767] openvswitch: netlink: Message has 12 unknown bytes. [ 310.602444][T19753] team0: Port device team_slave_0 removed [ 310.602891][T19767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.630261][T19753] team0: Port device team_slave_1 removed [ 310.639735][T19753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.648058][T19753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.660323][T19753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.680533][T19753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.706326][T19753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.739662][T19771] : renamed from virt_wifi0 [ 310.922286][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6687'. [ 310.928336][T19785] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 311.057612][T19793] netlink: 'syz.4.6690': attribute type 4 has an invalid length. [ 311.262017][T19807] SET target dimension over the limit! [ 311.267794][T19808] xt_TCPMSS: Only works on TCP SYN packets [ 311.438509][T19820] netlink: 'syz.1.6704': attribute type 1 has an invalid length. [ 311.483711][T19820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6704'. [ 311.580998][T19832] xt_socket: unknown flags 0x50 [ 311.838816][T19852] openvswitch: netlink: IP tunnel dst address not specified [ 312.268512][T19884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6735'. [ 312.279752][T19883] netlink: 'syz.3.6737': attribute type 1 has an invalid length. [ 312.313660][T19884] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6735'. [ 312.964149][T19933] xt_CT: No such helper "pptp" [ 313.372451][T19968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.648741][T19991] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6786'. [ 313.673919][T19992] netlink: 'syz.3.6788': attribute type 20 has an invalid length. [ 313.689120][T19992] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.733319][T19997] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6789'. [ 313.820748][T19999] bond6: Unable to set up delay as MII monitoring is disabled [ 313.859748][T19999] bond6 (unregistering): Released all slaves [ 314.155261][T20024] netlink: 'syz.3.6802': attribute type 11 has an invalid length. [ 314.183789][T20024] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6802'. [ 314.330832][T20036] netlink: 'syz.4.6808': attribute type 11 has an invalid length. [ 314.348958][T20036] netlink: 'syz.4.6808': attribute type 4 has an invalid length. [ 314.363785][T20036] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6808'. [ 314.593775][T20057] bond0: option ad_select: unable to set because the bond device is up [ 314.875375][T20077] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 314.886951][T20077] bond6 (unregistering): Released all slaves [ 315.249401][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6841'. [ 315.304646][T20108] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6843'. [ 315.431893][T20117] netlink: 'syz.4.6849': attribute type 21 has an invalid length. [ 315.446971][T20117] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6849'. [ 315.465775][T20117] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6849'. [ 315.542961][T20125] netlink: 'syz.2.6851': attribute type 12 has an invalid length. [ 315.626948][T20131] netlink: 'syz.3.6855': attribute type 1 has an invalid length. [ 315.816608][T20146] bridge0: port 3(gretap0) entered blocking state [ 315.841999][T20146] bridge0: port 3(gretap0) entered disabled state [ 315.868266][T20146] gretap0: entered allmulticast mode [ 316.037143][T20163] openvswitch: netlink: IP tunnel dst address not specified [ 316.281048][ T29] audit: type=1107 audit(1784744613.262:2): pid=20176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 316.476949][T20193] nftables ruleset with unbound chain [ 316.587699][T20199] netlink: 'syz.3.6890': attribute type 1 has an invalid length. [ 316.648876][T20204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.903155][T20223] ipt_ECN: cannot use operation on non-tcp rule [ 317.204767][T20247] netlink: 'syz.1.6913': attribute type 15 has an invalid length. [ 317.304887][T20254] __nla_validate_parse: 4 callbacks suppressed [ 317.304907][T20254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6916'. [ 317.559609][T20270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6925'. [ 317.585449][T20274] x_tables: unsorted entry at hook 3 [ 317.595316][T20270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6925'. [ 317.653108][T20270] gretap1: entered promiscuous mode [ 317.668441][T20270] gretap1: entered allmulticast mode [ 317.717572][T20281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.051866][T20303] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 318.571993][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6955'. [ 318.591323][T20343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6955'. [ 319.060908][ T5289] veth1_vlan: left promiscuous mode [ 319.225126][T20386] netlink: 'syz.1.6972': attribute type 1 has an invalid length. [ 319.563646][T20404] netlink: 'syz.3.6979': attribute type 13 has an invalid length. [ 319.958896][T20435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.057702][T20441] netlink: 'syz.1.6995': attribute type 4 has an invalid length. [ 320.444977][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7007'. [ 320.587987][T20477] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7010'. [ 320.740921][T20477] bond6 (unregistering): Released all slaves [ 320.849328][T20497] raw_sendmsg: syz.2.7017 forgot to set AF_INET. Fix it! [ 321.012161][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7019'. [ 321.498457][T20537] netlink: 'syz.1.7030': attribute type 9 has an invalid length. [ 321.613775][T20547] xt_TCPMSS: Only works on TCP SYN packets [ 321.648282][T20549] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7037'. [ 322.033456][T20573] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.7048'. [ 323.849499][T20695] netlink: 'syz.2.7108': attribute type 4 has an invalid length. [ 323.866408][T20697] sctp: [Deprecated]: syz.3.7109 (pid 20697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.866408][T20697] Use struct sctp_sack_info instead [ 323.991636][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7114'. [ 324.155363][T20722] netlink: zone id is out of range [ 324.287006][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7122'. [ 324.306277][T20727] netlink: 'syz.4.7122': attribute type 1 has an invalid length. [ 324.314763][T20727] netlink: 'syz.4.7122': attribute type 1 has an invalid length. [ 324.323020][T20727] netlink: 'syz.4.7122': attribute type 2 has an invalid length. [ 324.331820][T20727] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7122'. [ 324.587408][T20749] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 325.159699][T20791] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 325.197889][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7154'. [ 325.264165][T20795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7155'. [ 325.366956][T20799] Cannot find add_set index 65532 as target [ 325.425642][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7160'. [ 325.729653][T20819] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 325.775218][T20819] bond5 (unregistering): Released all slaves [ 325.775685][T20830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7174'. [ 325.905776][T20834] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 325.939407][T20834] bond6 (unregistering): Released all slaves [ 326.947299][T20919] xt_hl: Unknown Hop Limit match mode: 206 [ 326.993322][T20912] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 327.049501][T20912] bond6 (unregistering): Released all slaves [ 327.129623][T20929] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 327.290676][T20941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 327.341955][T20943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7222'. [ 327.523540][T20960] netlink: 'syz.2.7231': attribute type 5 has an invalid length. [ 327.578777][T20953] erspan0: entered promiscuous mode [ 327.593148][T20953] erspan0: entered allmulticast mode [ 327.671093][T20968] netlink: 'syz.2.7233': attribute type 2 has an invalid length. [ 327.869965][T20979] xt_TCPMSS: Only works on TCP SYN packets [ 327.977622][T20987] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 328.386631][T21021] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 328.396240][T21020] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7260'. [ 328.510409][T21030] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 328.528040][T21030] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 329.009768][T21071] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 329.094455][T21079] netlink: 'syz.3.7289': attribute type 4 has an invalid length. [ 329.210227][T21086] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 329.336653][T21094] 8021q: VLANs not supported on lo [ 329.361533][T21097] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.458299][T21144] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 330.616118][T21158] openvswitch: netlink: Multiple metadata blocks provided [ 330.647172][T21160] SET target dimension over the limit! [ 330.703214][T21164] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 331.061636][T21189] __nla_validate_parse: 4 callbacks suppressed [ 331.061655][T21189] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7342'. [ 331.123657][T21189] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7342'. [ 331.210856][T21198] xt_connbytes: Forcing CT accounting to be enabled [ 331.236227][T21198] Cannot find set identified by id 65534 to match [ 331.282633][ T3350] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.302007][ T3350] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.323365][ T3350] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.353802][ T3350] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.526145][T21220] netlink: 'syz.1.7358': attribute type 15 has an invalid length. [ 331.551504][T21220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7358'. [ 331.565413][T21225] netlink: 420 bytes leftover after parsing attributes in process `syz.3.7361'. [ 331.813239][T21242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7372'. [ 332.168119][T21271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.315715][T21284] tipc: Can't bind to reserved service type 1 [ 332.622712][T21306] netlink: 'syz.2.7397': attribute type 21 has an invalid length. [ 332.942768][T21326] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 333.456855][T21354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.490353][ T5819] lo speed is unknown, defaulting to 1000 [ 334.153804][T21399] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.7434'. [ 334.288766][T21406] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7437'. [ 334.328602][T21409] xfrm1: entered allmulticast mode [ 334.397267][T21417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.499406][T21423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7446'. [ 334.820006][T21447] openvswitch: netlink: Actions may not be safe on all matching packets [ 334.954898][T21455] netlink: 'syz.0.7460': attribute type 21 has an invalid length. [ 334.978561][T21455] netlink: 'syz.0.7460': attribute type 1 has an invalid length. [ 335.280468][T21481] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7474'. [ 335.453734][T21494] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7479'. [ 335.664475][T21502] veth0_macvtap: entered allmulticast mode [ 335.682353][T21502] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 336.326527][T21555] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7513'. [ 336.351444][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7513'. [ 336.373804][T21555] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7513'. [ 336.394992][T21555] netlink: 'syz.3.7513': attribute type 3 has an invalid length. [ 336.413831][T21555] netlink: 'syz.3.7513': attribute type 2 has an invalid length. [ 336.435375][T21555] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7513'. [ 336.443914][T21564] netlink: 'syz.0.7515': attribute type 1 has an invalid length. [ 336.464721][T21564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7515'. [ 336.575246][T21572] netlink: 'syz.4.7519': attribute type 8 has an invalid length. [ 336.592049][T21574] netlink: zone id is out of range [ 336.613127][T21574] netlink: set zone limit has 4 unknown bytes [ 336.749654][T21584] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7524'. [ 336.871028][T21588] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 337.011620][T21592] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 337.049236][T21592] bond5 (unregistering): Released all slaves [ 337.194463][T21603] netlink: 'syz.4.7534': attribute type 13 has an invalid length. [ 337.202728][T21603] netlink: 'syz.4.7534': attribute type 58 has an invalid length. [ 337.211134][T21603] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7534'. [ 337.367671][T21611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7537'. [ 337.587000][T21626] netlink: 'syz.2.7546': attribute type 1 has an invalid length. [ 337.613741][T21626] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7546'. [ 337.703887][T21635] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 338.042191][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7563'. [ 338.728346][T21717] x_tables: unsorted underflow at hook 3 [ 339.091812][T21743] xt_cgroup: invalid path, errno=-2 [ 339.833143][T21802] validate_nla: 1 callbacks suppressed [ 339.833170][T21802] netlink: 'syz.1.7633': attribute type 16 has an invalid length. [ 339.867620][T21802] netlink: 'syz.1.7633': attribute type 17 has an invalid length. [ 339.883919][T21802] lo: left allmulticast mode [ 339.903857][T21802] tunl0: left allmulticast mode [ 339.926273][T21802] gre0: left allmulticast mode [ 339.984402][T21802] gretap0: left allmulticast mode [ 339.992189][T21802] erspan0: left allmulticast mode [ 340.002508][T21802] ip_vti0: left allmulticast mode [ 340.018841][T21802] ip6_vti0: left allmulticast mode [ 340.029067][T21802] sit0: left allmulticast mode [ 340.079595][T21802] ip6tnl0: left allmulticast mode [ 340.093410][T21802] ip6gre0: left allmulticast mode [ 340.104496][T21802] syz_tun: left allmulticast mode [ 340.170753][T21802] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.352220][T21834] 0: renamed from hsr0 (while UP) [ 340.382432][T21834] 0: entered allmulticast mode [ 340.400508][T21834] hsr_slave_0: entered allmulticast mode [ 340.415917][T21834] hsr_slave_1: entered allmulticast mode [ 340.438490][T21834] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 340.594424][T21850] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 340.802856][T21868] netlink: 'syz.4.7665': attribute type 3 has an invalid length. [ 341.578973][T21925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.972934][T21953] netlink: 'syz.3.7707': attribute type 1 has an invalid length. [ 341.991800][T21953] __nla_validate_parse: 7 callbacks suppressed [ 341.991816][T21953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7707'. [ 342.192560][T21965] nftables ruleset with unbound set [ 342.472468][T21987] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7726'. [ 342.852244][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7737'. [ 343.019513][T22027] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7742'. [ 343.050984][T22027] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.7742'. [ 343.227762][T22040] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.7750'. [ 343.237656][T22040] netlink: 'syz.1.7750': attribute type 1 has an invalid length. [ 343.411860][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7756'. [ 344.091686][T22092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7776'. [ 344.115661][T22092] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7776'. [ 344.125113][T22092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7776'. [ 344.216463][T22084] syz.0.7772 (22084) used greatest stack depth: 18312 bytes left [ 344.732537][T22121] tipc: Started in network mode [ 344.755396][T22121] tipc: Node identity 2ede2fad7c13, cluster identity 4711 [ 344.766502][T22121] tipc: Enabled bearer , priority 11 [ 345.380372][T22164] netlink: 'syz.2.7811': attribute type 1 has an invalid length. [ 345.405860][T22164] netlink: 'syz.2.7811': attribute type 1 has an invalid length. [ 345.458169][ T29] audit: type=1107 audit(1784744642.452:3): pid=22169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 345.507524][T22172] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 345.896132][ T5758] tipc: Node number set to 1389178797 [ 346.131657][T22216] gretap0: entered promiscuous mode [ 346.144885][T22216] vlan2: entered promiscuous mode [ 346.455089][T22237] nbd: must specify a size in bytes for the device [ 346.589411][T22249] Bluetooth: MGMT ver 1.23 [ 347.241223][T22289] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 347.259457][T22287] nbd: must specify a device to reconfigure [ 347.874636][T22334] __nla_validate_parse: 5 callbacks suppressed [ 347.874663][T22334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7894'. [ 348.198977][T22354] netlink: 'syz.0.7904': attribute type 2 has an invalid length. [ 348.226320][T22357] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7905'. [ 348.446004][T22372] veth1_macvtap: left promiscuous mode [ 348.459120][T22372] macsec0: entered promiscuous mode [ 348.466643][T22372] macsec0: entered allmulticast mode [ 348.481775][T22372] veth1_macvtap: entered promiscuous mode [ 348.488726][T22372] veth1_macvtap: entered allmulticast mode [ 348.515551][T22372] macsec0: left promiscuous mode [ 348.527618][T22372] macsec0: left allmulticast mode [ 348.540914][T22372] veth1_macvtap: left allmulticast mode [ 348.926637][T22398] bond2: (slave bond_slave_1): Device is not our slave [ 348.934502][T22398] bond2: option active_slave: invalid value (bond_slave_1) [ 348.945321][T22398] bond2 (unregistering): Released all slaves [ 349.514167][T22443] Bluetooth: MGMT ver 1.23 [ 349.864623][T22468] netlink: 'syz.3.7960': attribute type 10 has an invalid length. [ 349.898627][T22468] dummy0: entered promiscuous mode [ 349.919494][T22472] netlink: 'syz.3.7960': attribute type 10 has an invalid length. [ 349.939343][T22468] dummy0: entered allmulticast mode [ 349.948957][T22468] team0: Port device dummy0 added [ 349.966892][T22472] dummy0 (unregistering): left promiscuous mode [ 349.979841][T22472] dummy0 (unregistering): left allmulticast mode [ 349.988874][T22472] team0: Port device dummy0 removed [ 350.017242][T22478] netlink: 'syz.0.7963': attribute type 62 has an invalid length. [ 350.084746][T22481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7965'. [ 350.285569][T22493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.341153][T22497] Zero length message leads to an empty skb [ 351.067874][T22552] xt_limit: Overflow, try lower: 271964/0 [ 351.230338][T22563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8003'. [ 351.506480][T22582] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 351.506480][T22582] Please contact the netfilter-devel mailing list or update your nftables rules. [ 351.527655][T22579] tipc: Started in network mode [ 351.532798][T22579] tipc: Node identity e0000001, cluster identity 4711 [ 351.540668][T22579] tipc: Enabling of bearer rejected, failed to enable media [ 351.792817][T22602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.089198][T22622] netlink: 'syz.4.8034': attribute type 178 has an invalid length. [ 352.117138][T22628] netlink: 'syz.0.8037': attribute type 2 has an invalid length. [ 352.164104][T22630] lo: entered allmulticast mode [ 352.179267][T22630] lo: left allmulticast mode [ 352.449438][T22649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8047'. [ 352.709278][T22663] netlink: 'syz.0.8054': attribute type 58 has an invalid length. [ 352.725262][T22663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8054'. [ 352.875000][T22674] xt_hashlimit: size too large, truncated to 1048576 [ 353.339305][T22700] sit1: entered promiscuous mode [ 353.345551][T22700] sit1: entered allmulticast mode [ 353.621847][T22721] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8081'. [ 353.998724][T22747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.319141][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8105'. [ 354.959524][T22812] netlink: 'syz.1.8126': attribute type 1 has an invalid length. [ 354.984558][T22812] nbd: error processing sock list [ 355.116996][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8131'. [ 355.428593][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8143'. [ 355.438648][T22845] netlink: 'syz.2.8143': attribute type 5 has an invalid length. [ 355.455490][T22845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8143'. [ 355.554916][T22853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.888476][T22876] tipc: Started in network mode [ 355.893803][T22876] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 355.901219][T22876] tipc: Enabled bearer , priority 10 [ 356.039485][T22886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8164'. [ 357.018475][ T5792] tipc: Node number set to 9480874 [ 357.172195][T22970] netlink: 'syz.0.8205': attribute type 1 has an invalid length. [ 357.608590][T23001] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 357.629559][ T47] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.646269][ T47] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.663119][ T47] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.683503][ T47] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.765394][T23012] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.781882][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8225'. [ 358.109045][T23037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8240'. [ 358.337261][T23055] netlink: 'syz.4.8246': attribute type 11 has an invalid length. [ 358.469351][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8251'. [ 358.822479][T23091] smc: net device team0 applied user defined pnetid SYZ2 [ 358.951403][T23104] netlink: 'syz.1.8269': attribute type 1 has an invalid length. [ 358.959798][T23104] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8269'. [ 358.969313][T23104] netlink: 'syz.1.8269': attribute type 1 has an invalid length. [ 359.090766][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8274'. [ 359.540152][T23143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8288'. [ 359.556261][T23147] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8290'. [ 359.752473][T23156] netlink: 'syz.0.8295': attribute type 11 has an invalid length. [ 359.778610][T23160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8297'. [ 359.944654][T23170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 359.979944][T23170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8301'. [ 360.084684][T23185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.335893][T23195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8308'. [ 360.935357][T23236] sock: sock_set_timeout: `syz.0.8330' (pid 23236) tries to set negative timeout [ 361.183529][T23253] vcan1: entered promiscuous mode [ 361.202025][T23253] vcan1: entered allmulticast mode [ 361.207681][T23255] openvswitch: netlink: Missing valid actions attribute. [ 361.226384][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8340'. [ 361.235781][T23255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.463186][T23273] xt_l2tp: wrong L2TP version: 0 [ 361.532706][T23279] netlink: 'syz.3.8351': attribute type 32 has an invalid length. [ 361.561644][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8351'. [ 361.602762][T23279] bond5: option coupled_control: invalid value (192) [ 361.643208][T23279] bond5 (unregistering): Released all slaves [ 363.010217][T23386] xt_policy: neither incoming nor outgoing policy selected [ 364.199325][T23462] __nla_validate_parse: 6 callbacks suppressed [ 364.199379][T23462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8442'. [ 364.216952][T23472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8447'. [ 364.231493][T23472] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8447'. [ 364.241856][T23462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8442'. [ 364.245377][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8447'. [ 364.356560][T23482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8452'. [ 364.423155][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8453'. [ 364.624456][T23500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8462'. [ 364.765683][T23512] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8467'. [ 364.857571][T23518] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 365.782773][T23588] xt_limit: Overflow, try lower: 604147548/4200216962 [ 365.878867][T23594] netlink: 'syz.0.8506': attribute type 1 has an invalid length. [ 365.904888][T23596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8505'. [ 366.197190][T23620] netlink: 'syz.2.8517': attribute type 1 has an invalid length. [ 366.348486][T23628] pim6reg: entered allmulticast mode [ 366.368469][T23628] pim6reg: left allmulticast mode [ 367.638450][T23725] netlink: 'syz.2.8568': attribute type 3 has an invalid length. [ 367.655408][T23728] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 368.671693][T23799] netlink: 'syz.1.8603': attribute type 1 has an invalid length. [ 368.690238][T23799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.697586][T23799] IPv6: NLM_F_CREATE should be set when creating new route [ 368.704959][T23799] IPv6: NLM_F_CREATE should be set when creating new route [ 369.162455][T23833] netlink: 'syz.3.8621': attribute type 83 has an invalid length. [ 369.318182][T23846] netlink: 'syz.3.8626': attribute type 1 has an invalid length. [ 370.681250][T23945] openvswitch: netlink: Message has 12 unknown bytes. [ 370.697691][T23945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.852729][T23955] netlink: 'syz.3.8677': attribute type 3 has an invalid length. [ 370.903479][T23960] __nla_validate_parse: 14 callbacks suppressed [ 370.903501][T23960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8680'. [ 371.347940][T23990] openvswitch: netlink: Unknown key attributes 20 [ 371.530190][T24003] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8701'. [ 371.543267][T24003] netlink: 'syz.1.8701': attribute type 9 has an invalid length. [ 371.971904][T24027] netlink: 170676 bytes leftover after parsing attributes in process `syz.3.8712'. [ 371.989076][T24027] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 372.008831][T24027] openvswitch: netlink: Message has 512 unknown bytes. [ 372.643443][T24079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8736'. [ 372.755736][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8739'. [ 372.948510][T24098] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 373.418905][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8754'. [ 373.707980][T24143] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 374.012933][T24168] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 374.424094][T24197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8791'. [ 374.814678][T24225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.562491][T24274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.850744][T24290] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 376.221002][T24307] pim6reg527: entered allmulticast mode [ 376.665276][T24336] tipc: Enabling of bearer rejected, failed to enable media [ 376.715860][T24341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8861'. [ 377.150760][T24370] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8875'. [ 377.603037][T24401] Cannot find add_set index 46338 as target [ 378.183506][T24445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.190846][T24445] IPv6: NLM_F_CREATE should be set when creating new route [ 378.198162][T24445] IPv6: NLM_F_CREATE should be set when creating new route [ 378.205545][T24445] IPv6: NLM_F_CREATE should be set when creating new route [ 378.227796][T24445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.426965][T24459] bridge0: port 4(ipvlan2) entered blocking state [ 378.503935][T24459] bridge0: port 4(ipvlan2) entered disabled state [ 378.515946][T24459] ipvlan2: entered allmulticast mode [ 378.532484][T24459] bridge0: entered allmulticast mode [ 378.557122][T24459] ipvlan2: left allmulticast mode [ 378.562300][T24459] bridge0: left allmulticast mode [ 379.269475][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8947'. [ 379.484814][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8955'. [ 380.030684][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8975'. [ 380.173081][T24585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8980'. [ 380.352270][T24597] xt_HMARK: proto mask must be zero with L3 mode [ 381.093786][T24641] vlan2: entered allmulticast mode [ 381.099497][T24641] bond0: entered allmulticast mode [ 381.105323][T24641] bond_slave_0: entered allmulticast mode [ 381.117832][T24641] bond_slave_1: entered allmulticast mode [ 381.603127][T24678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9026'. [ 381.830744][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9032'. [ 382.651343][T24750] sit0: left promiscuous mode [ 382.740453][T24750] bridge0: port 3(team0) entered disabled state [ 382.907577][T24750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.974081][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9070'. [ 382.994205][T24768] netlink: 'syz.2.9070': attribute type 3 has an invalid length. [ 383.004087][T24771] netlink: 'syz.1.9069': attribute type 4 has an invalid length. [ 383.030275][T24771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9069'. [ 383.250444][T24786] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9077'. [ 383.641831][T24815] netlink: 344 bytes leftover after parsing attributes in process `syz.1.9091'. [ 383.643351][T24816] netlink: 'syz.0.9092': attribute type 10 has an invalid length. [ 383.692427][T24818] Driver unsupported XDP return value 0 on prog (id 650) dev N/A, expect packet loss! [ 383.939272][T24835] netlink: 'syz.1.9101': attribute type 11 has an invalid length. [ 383.951834][T24837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9102'. [ 384.382735][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9117'. [ 384.405862][T24867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9117'. [ 384.589126][T24883] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 385.145816][ T24] IPVS: starting estimator thread 0... [ 385.155783][T24917] IPVS: ip_vs_add_dest(): server weight less than zero [ 385.263663][T24919] IPVS: using max 34 ests per chain, 81600 per kthread [ 385.620310][T24945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.668674][T24949] netlink: 288 bytes leftover after parsing attributes in process `syz.2.9155'. [ 385.990243][T24972] batadv0: entered promiscuous mode [ 386.010538][T24972] macsec1: entered promiscuous mode [ 386.018982][T24972] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 386.029394][T24972] batadv0: left promiscuous mode [ 386.445398][T25006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9183'. [ 386.836161][T25000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.123079][T25000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.841982][T25072] tipc: Started in network mode [ 387.851448][T25072] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 387.859219][T25072] tipc: Enabled bearer , priority 10 [ 388.207893][T25096] __nla_validate_parse: 2 callbacks suppressed [ 388.207913][T25096] netlink: 13 bytes leftover after parsing attributes in process `syz.1.9218'. [ 388.265901][T25100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9219'. [ 388.858479][T25139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9234'. [ 388.983848][ T5819] tipc: Node number set to 43690 [ 389.033994][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 389.180298][T25161] netlink: 'syz.4.9245': attribute type 17 has an invalid length. [ 390.199654][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 390.989397][T25278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9290'. [ 391.372606][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9297'. [ 391.466400][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 391.482339][T25304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.651695][T25314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9304'. [ 392.051998][T25343] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9314'. [ 392.086262][T25343] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9314'. [ 392.110410][T25343] netlink: 'syz.3.9314': attribute type 6 has an invalid length. [ 392.128600][T25343] netlink: 'syz.3.9314': attribute type 5 has an invalid length. [ 392.161580][T25343] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9314'. [ 392.574965][T25375] macvlan0: entered promiscuous mode [ 392.615197][T25378] xt_socket: unknown flags 0xe4 [ 392.851870][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 393.164012][T25411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9342'. [ 393.371951][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9346'. [ 393.651726][T25440] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9354'. [ 393.917251][T25457] tipc: Enabling not permitted [ 393.936595][T25457] tipc: Enabling of bearer rejected, failed to enable media [ 394.860205][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9382'. [ 395.910911][T25581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9413'. [ 396.332122][T25613] netlink: 'syz.1.9425': attribute type 1 has an invalid length. [ 396.355443][T25613] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.9425'. [ 396.488790][T25623] Bluetooth: MGMT ver 1.23 [ 396.877279][T25650] netlink: 252 bytes leftover after parsing attributes in process `syz.0.9442'. [ 397.026063][T25658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9443'. [ 397.168379][T25668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9448'. [ 397.197329][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9448'. [ 397.279437][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9451'. [ 397.646943][T25699] vlan3: entered allmulticast mode [ 397.907514][T25711] bond2: Invalid ad_actor_system MAC address. [ 397.938635][T25711] bond2: option ad_actor_system: invalid value (1) [ 397.979290][T25711] bond2 (unregistering): Released all slaves [ 398.540150][T25759] __nla_validate_parse: 2 callbacks suppressed [ 398.540171][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9481'. [ 399.972643][T25853] tipc: Enabling of bearer rejected, failed to enable media [ 400.032170][T25861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9521'. [ 400.145607][T25867] netlink: 'syz.4.9525': attribute type 2 has an invalid length. [ 400.221003][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9526'. [ 400.543947][T25897] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9538'. [ 400.557334][T25897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9538'. [ 400.567688][T25897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9538'. [ 401.023004][T25931] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 401.035021][T25931] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 401.890401][T25982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9580'. [ 401.912272][T25982] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9580'. [ 401.936432][T25982] netlink: 'syz.2.9580': attribute type 5 has an invalid length. [ 401.960753][T25982] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9580'. [ 402.096473][T25996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9584'. [ 402.943431][T26047] netlink: 'syz.1.9609': attribute type 2 has an invalid length. [ 403.701303][T26087] xt_policy: too many policy elements [ 403.865726][T26098] xt_l2tp: unknown flags: 10 [ 404.093887][T26115] team0: Device gtp0 is up. Set it down before adding it as a team port [ 405.456275][T26212] __nla_validate_parse: 4 callbacks suppressed [ 405.456293][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.496639][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.512407][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.539564][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.554205][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.594450][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.608311][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.625658][T26222] netlink: 'syz.4.9690': attribute type 1 has an invalid length. [ 405.630153][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.658600][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.671236][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9685'. [ 405.914207][T26241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.082119][T26381] pimreg3: entered allmulticast mode [ 408.155948][T26389] openvswitch: netlink: Message has 1 unknown bytes. [ 408.162775][T26389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.196305][ T47] tipc: Subscription rejected, illegal request [ 408.816074][T26431] nbd: couldn't find device at index 134217728 [ 409.236102][T26458] tipc: Enabling of bearer rejected, media not registered [ 410.342116][T26534] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 410.818713][T26568] netlink: 'syz.2.9841': attribute type 1 has an invalid length. [ 410.839916][T26568] __nla_validate_parse: 49 callbacks suppressed [ 410.839938][T26568] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9841'. [ 410.889841][T26573] netlink: 'syz.4.9843': attribute type 2 has an invalid length. [ 410.936819][T26573] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9843'. [ 411.140966][T26585] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 411.221246][T26591] netlink: 'syz.3.9853': attribute type 1 has an invalid length. [ 411.226574][T26590] tipc: Enabling of bearer rejected, failed to enable media [ 411.240792][T26591] netlink: 'syz.3.9853': attribute type 2 has an invalid length. [ 411.671478][T26621] netlink: 'syz.2.9868': attribute type 1 has an invalid length. [ 411.685462][T26621] netlink: 'syz.2.9868': attribute type 3 has an invalid length. [ 411.697286][T26621] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9868'. [ 411.707018][T26621] NCSI netlink: No device for ifindex 813332851 [ 412.039616][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9881'. [ 412.254620][T26662] netlink: zone id is out of range [ 412.270320][T26662] netlink: zone id is out of range [ 412.286938][T26662] netlink: zone id is out of range [ 412.536977][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9897'. [ 412.555897][T26685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9897'. [ 412.586187][T26685] netlink: 'syz.0.9897': attribute type 12 has an invalid length. [ 412.621542][T26685] netlink: 'syz.0.9897': attribute type 11 has an invalid length. [ 412.831158][T26704] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9905'. [ 412.852807][T26704] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9905'. [ 412.925347][T26710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.252478][T26727] netlink: 'syz.4.9913': attribute type 1 has an invalid length. [ 413.271474][T26727] netlink: 500 bytes leftover after parsing attributes in process `syz.4.9913'. [ 413.669227][T26750] netlink: 'syz.0.9923': attribute type 2 has an invalid length. [ 413.692636][T26754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9924'. [ 413.723837][T26754] unsupported nla_type 7424 [ 414.046107][T26776] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 415.097940][T26840] geneve3: entered promiscuous mode [ 416.332864][T26938] __nla_validate_parse: 4 callbacks suppressed [ 416.332882][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10005'. [ 416.362279][ T187] IPVS: starting estimator thread 0... [ 416.466140][T26941] IPVS: using max 36 ests per chain, 86400 per kthread [ 416.527704][T26951] ip6erspan1: entered allmulticast mode [ 416.732306][T26967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10019'. [ 416.744721][T26969] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 416.749889][T26967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10019'. [ 417.142239][T26997] IPVS: Error connecting to the multicast addr [ 417.429769][T27020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10046'. [ 418.584846][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10086'. [ 418.632665][T27108] netlink: 'syz.4.10089': attribute type 1 has an invalid length. [ 418.741237][T27116] netlink: 'syz.2.10091': attribute type 1 has an invalid length. [ 418.866538][T27125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10098'. [ 419.413354][T27157] sock: sock_timestamping_bind_phc: sock not bind to device [ 419.518540][T27162] netlink: 'syz.3.10115': attribute type 2 has an invalid length. [ 419.639603][T27168] netlink: 'syz.4.10118': attribute type 23 has an invalid length. [ 419.987440][T27190] netlink: 'syz.1.10128': attribute type 13 has an invalid length. [ 419.996990][T27190] macsec0: entered allmulticast mode [ 420.978157][T27260] veth7: entered allmulticast mode [ 421.078211][T27268] netlink: 'syz.2.10167': attribute type 29 has an invalid length. [ 421.260409][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10173'. [ 421.554796][T27302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10184'. [ 421.578200][T27302] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10184'. [ 421.723144][T27314] netlink: 'syz.1.10191': attribute type 3 has an invalid length. [ 421.852556][T27325] netlink: 'syz.1.10196': attribute type 32 has an invalid length. [ 421.875783][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10196'. [ 421.907091][T27327] Bluetooth: MGMT ver 1.23 [ 421.934768][T27325] bond7: Setting coupled_control to off (0) [ 421.997570][T27333] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 422.088419][T27338] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10203'. [ 422.613991][T27379] openvswitch: netlink: Missing key (keys=40, expected=100) [ 422.848489][T27394] IPVS: length: 8 != 1152 [ 422.899201][T27398] netlink: 'syz.1.10230': attribute type 3 has an invalid length. [ 422.986269][T27405] tipc: MTU too low for tipc bearer [ 423.040829][T27409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10236'. [ 423.345440][T27428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10245'. [ 423.558519][T27448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10254'. [ 423.610298][T27452] netlink: 'syz.4.10257': attribute type 10 has an invalid length. [ 423.651091][T27455] tipc: Enabling of bearer rejected, failed to enable media [ 423.779820][T27464] netlink: 165 bytes leftover after parsing attributes in process `syz.3.10263'. [ 423.922885][T27474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10268'. [ 424.006404][T27480] netlink: 'syz.4.10270': attribute type 1 has an invalid length. [ 424.043109][T27480] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10270'. [ 424.062381][T27484] netlink: 'syz.3.10273': attribute type 1 has an invalid length. [ 424.217045][T27495] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.345772][T27507] netlink: 'syz.3.10282': attribute type 3 has an invalid length. [ 424.382938][T27507] netlink: 'syz.3.10282': attribute type 1 has an invalid length. [ 424.588586][T27524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.612689][T27527] nbd: illegal input index 65508 [ 425.348777][T27581] lo: left promiscuous mode [ 425.367480][T27581] tunl0: left promiscuous mode [ 425.377257][T27581] gre0: left promiscuous mode [ 425.389086][T27581] erspan0: left promiscuous mode [ 425.401171][T27581] ip_vti0: left promiscuous mode [ 425.423379][T27581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 425.855442][T27622] netlink: 'syz.4.10335': attribute type 2 has an invalid length. [ 426.235246][T27650] openvswitch: netlink: Missing key (keys=40, expected=80) [ 426.397330][T27660] netlink: 'syz.4.10355': attribute type 1 has an invalid length. [ 426.911700][T27697] __nla_validate_parse: 6 callbacks suppressed [ 426.911720][T27697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10372'. [ 427.247791][T27723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10385'. [ 427.270394][T27723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10385'. [ 427.293640][T27723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10385'. [ 427.314218][T27723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10385'. [ 427.333298][T27723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10385'. [ 427.347828][T27729] netlink: 'syz.3.10388': attribute type 3 has an invalid length. [ 427.410200][T27733] netlink: 'syz.4.10390': attribute type 23 has an invalid length. [ 427.476608][T27735] openvswitch: netlink: Message has 4 unknown bytes. [ 427.495837][T27735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.510459][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10392'. [ 427.706882][T27751] netlink: 216 bytes leftover after parsing attributes in process `syz.4.10398'. [ 427.717478][T27751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10398'. [ 427.892278][T27761] tipc: Enabling of bearer rejected, failed to enable media [ 427.971683][T27758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.294967][T27792] nbd: must specify an index to disconnect [ 428.770979][T27822] vlan2: entered promiscuous mode [ 429.107898][T27849] xt_l2tp: v2 sid > 0xffff: 1114112 [ 429.879743][T27894] netlink: 'syz.2.10466': attribute type 7 has an invalid length. [ 430.123766][T27908] vcan0: entered allmulticast mode [ 430.249477][T27914] tipc: Enabling of bearer rejected, failed to enable media [ 430.267100][T27918] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 430.419866][T27929] netlink: 'syz.3.10484': attribute type 11 has an invalid length. [ 430.615007][T27941] nbd: socks must be embedded in a SOCK_ITEM attr [ 430.795457][T27957] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10495'. [ 431.443199][T28005] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 431.831646][T28031] block nbd0: not configured, cannot reconfigure [ 432.635922][T28084] __nla_validate_parse: 3 callbacks suppressed [ 432.635941][T28084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10554'. [ 432.673135][T28087] tipc: Enabling of bearer rejected, failed to enable media [ 433.146978][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10573'. [ 433.660533][T28158] vlan2: entered promiscuous mode [ 433.670720][T28158] bridge0: entered promiscuous mode [ 433.734478][T28163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10593'. [ 433.827919][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10596'. [ 434.359832][T28208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10615'. [ 434.711585][T28229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10625'. [ 435.049352][T28247] openvswitch: netlink: Unknown nsh attribute 0 [ 435.216664][T28261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.653453][T28294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10656'. [ 435.796225][T28301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10661'. [ 436.148799][T28329] netlink: 277 bytes leftover after parsing attributes in process `syz.0.10674'. [ 436.208424][T28332] tipc: Enabling of bearer rejected, media not registered [ 436.268816][T28343] ipvlan2: entered promiscuous mode [ 436.913128][T28382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10697'. [ 436.927837][T28382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.146008][T28394] netlink: 'syz.0.10701': attribute type 3 has an invalid length. [ 437.284816][T28403] netlink: 'syz.2.10707': attribute type 25 has an invalid length. [ 437.779636][T28436] tipc: Enabling of bearer rejected, failed to enable media [ 437.999616][T28453] netlink: 'syz.3.10731': attribute type 2 has an invalid length. [ 438.023129][T28453] __nla_validate_parse: 1 callbacks suppressed [ 438.023147][T28453] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10731'. [ 438.028779][T28456] netlink: 'syz.2.10733': attribute type 1 has an invalid length. [ 438.079450][T28456] netlink: 240 bytes leftover after parsing attributes in process `syz.2.10733'. [ 438.100339][T28456] netlink: 'syz.2.10733': attribute type 1 has an invalid length. [ 438.405619][T28480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10744'. [ 438.919913][T28504] xt_l2tp: invalid flags combination: 0 [ 439.065816][T28510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10759'. [ 439.870059][T28561] netlink: 'syz.2.10786': attribute type 4 has an invalid length. [ 440.478122][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10806'. [ 440.772209][T28627] xt_l2tp: missing protocol rule (udp|l2tpip) [ 441.001047][T28648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10826'. [ 441.232074][T28660] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 441.482939][T28674] macsec1: entered promiscuous mode [ 441.936462][T28702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10853'. [ 441.977687][T28702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10853'. [ 442.282581][T28720] xt_hashlimit: size too large, truncated to 1048576 [ 442.325404][T28728] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10865'. [ 442.747760][T28754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10878'. [ 445.024115][T28916] macsec0: entered promiscuous mode [ 445.035691][T28916] macsec0: left allmulticast mode [ 445.135603][T28925] __nla_validate_parse: 1 callbacks suppressed [ 445.135620][T28925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10960'. [ 445.152694][T28925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10960'. [ 445.237724][T28929] netlink: 'syz.3.10963': attribute type 3 has an invalid length. [ 445.261115][T28931] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10962'. [ 445.452591][T28945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10970'. [ 445.852303][T28970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.012875][T28974] "syz.0.10984" (28974) uses obsolete ecb(arc4) skcipher [ 446.313094][T29003] netlink: 'syz.3.10997': attribute type 29 has an invalid length. [ 446.322211][T29003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10997'. [ 446.339157][T29003] netlink: 'syz.3.10997': attribute type 29 has an invalid length. [ 446.347789][T29003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10997'. [ 446.559291][T29021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11004'. [ 446.652709][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11007'. [ 447.204264][T29066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.332077][T29072] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11029'. [ 447.365358][T29076] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11032'. [ 447.509145][T29089] netlink: 'syz.1.11037': attribute type 33 has an invalid length. [ 447.811006][T29107] netlink: 'syz.3.11046': attribute type 142 has an invalid length. [ 448.791983][T29174] netlink: 'syz.4.11077': attribute type 5 has an invalid length. [ 449.721225][T29238] vlan2: entered allmulticast mode [ 449.729741][T29238] bond0: entered allmulticast mode [ 449.745576][T29238] bond_slave_0: entered allmulticast mode [ 449.755423][T29238] bond_slave_1: entered allmulticast mode [ 449.769420][T29238] batadv0: entered allmulticast mode [ 449.782896][T29238] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 450.409340][T29288] netlink: 'syz.0.11132': attribute type 1 has an invalid length. [ 450.443840][T29288] netlink: 'syz.0.11132': attribute type 3 has an invalid length. [ 450.461244][T29288] __nla_validate_parse: 8 callbacks suppressed [ 450.461261][T29288] netlink: 172 bytes leftover after parsing attributes in process `syz.0.11132'. [ 450.514131][T29288] NCSI netlink: No device for ifindex 813332851 [ 450.966333][T29329] team0: Device is already in use. [ 451.158094][T29341] netlink: 'syz.1.11157': attribute type 3 has an invalid length. [ 451.187764][T29341] netlink: 'syz.1.11157': attribute type 1 has an invalid length. [ 451.197024][T29341] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11157'. [ 451.689272][T29379] netlink: 'syz.3.11175': attribute type 1 has an invalid length. [ 451.724624][T29379] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11175'. [ 451.755964][T29379] netlink: 'syz.3.11175': attribute type 1 has an invalid length. [ 451.777256][T29385] netlink: 'syz.1.11179': attribute type 25 has an invalid length. [ 451.802683][T29389] netlink: 'syz.4.11180': attribute type 1 has an invalid length. [ 451.871175][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11182'. [ 451.915048][T29391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11182'. [ 451.957969][T29397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.104454][T29407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11189'. [ 452.693374][T29448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.923390][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11219'. [ 452.975372][T29470] atomic_op ffff88807e75d998 conn xmit_atomic 0000000000000000 [ 452.993339][T29465] macsec0: entered promiscuous mode [ 453.009296][T29465] bridge0: entered promiscuous mode [ 453.022886][T29465] macsec0: entered allmulticast mode [ 453.038622][T29465] bridge0: entered allmulticast mode [ 453.066165][T29465] bridge0: port 1(macsec0) entered blocking state [ 453.076413][T29465] bridge0: port 1(macsec0) entered disabled state [ 453.114232][T29465] bridge0: left allmulticast mode [ 453.134027][ T187] bridge0: left promiscuous mode [ 453.287667][T29491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.218851][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11261'. [ 454.231304][T29555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11261'. [ 454.338734][T29560] netlink: 332 bytes leftover after parsing attributes in process `syz.3.11264'. [ 454.700567][T29578] netlink: 'syz.1.11272': attribute type 1 has an invalid length. [ 456.239462][T29672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11318'. [ 456.384997][T29680] nbd: must specify at least one socket [ 456.395188][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.414834][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.424754][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.555473][T29693] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 456.749341][T29702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11335'. [ 456.861302][T29711] sctp: [Deprecated]: syz.3.11336 (pid 29711) Use of int in maxseg socket option. [ 456.861302][T29711] Use struct sctp_assoc_value instead [ 456.928844][T29715] veth1_vlan: entered promiscuous mode [ 457.254440][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.334258][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.750498][T29756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11359'. [ 457.782392][T29756] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11359'. [ 457.792296][T29756] netlink: 'syz.2.11359': attribute type 5 has an invalid length. [ 457.800280][T29756] netlink: 'syz.2.11359': attribute type 6 has an invalid length. [ 457.808762][T29756] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11359'. [ 458.462697][T29797] netlink: 'syz.4.11378': attribute type 1 has an invalid length. [ 458.480466][T29797] netlink: 232 bytes leftover after parsing attributes in process `syz.4.11378'. [ 458.494257][T29797] netlink: 'syz.4.11378': attribute type 1 has an invalid length. [ 458.674536][T29814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11386'. [ 458.686989][T29815] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 458.831156][T29822] netlink: 'syz.2.11390': attribute type 1 has an invalid length. [ 458.864177][T29822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.951817][T29831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11395'. [ 458.979838][T29831] IPVS: Error connecting to the multicast addr [ 458.997522][T29837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11397'. [ 459.296568][T29857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.416715][T29865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11410'. [ 459.729510][ T29] audit: type=1800 audit(1784744756.722:4): pid=29888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11423" name="memory.events" dev="tmpfs" ino=11312 res=0 errno=0 [ 459.780438][ T29] audit: type=1804 audit(1784744756.722:5): pid=29888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.11423" name="/newroot/2256/memory.events" dev="tmpfs" ino=11312 res=1 errno=0 [ 460.131715][T29913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.288122][T29923] IPVS: ip_vs_edit_dest(): server weight less than zero [ 460.297032][ T24] IPVS: starting estimator thread 0... [ 460.403682][T29925] IPVS: using max 26 ests per chain, 62400 per kthread [ 460.422645][T29928] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 460.533802][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.090671][T29980] netlink: 'syz.2.11467': attribute type 2 has an invalid length. [ 461.322849][T29998] veth0_to_bond: entered allmulticast mode [ 461.400673][ T775] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 461.611106][T30015] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 462.519806][T30086] xt_time: unknown flags 0xf4 [ 463.083175][T30117] netlink: 'syz.2.11535': attribute type 1 has an invalid length. [ 463.095443][T30115] __nla_validate_parse: 3 callbacks suppressed [ 463.095461][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11534'. [ 463.718294][T30151] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11551'. [ 463.732054][T30153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.093083][T30176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11563'. [ 464.183838][T30179] siw: device registration error -23 [ 464.212941][T30179] smc: removing ib device syz0 [ 464.335503][T30179] smbdirect: ib_dev[syz0] removed [ 465.786098][T30255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11598'. [ 466.178469][T30277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11609'. [ 466.190419][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11608'. [ 466.300546][T30281] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11611'. [ 466.329934][T30281] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11611'. [ 466.881942][T30317] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11628'. [ 466.892687][T30317] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11628'. [ 467.989856][T30396] xt_hashlimit: size too large, truncated to 1048576 [ 468.185809][T30410] __nla_validate_parse: 1 callbacks suppressed [ 468.185831][T30410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11674'. [ 468.479167][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11680'. [ 468.605714][T30436] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11687'. [ 468.618913][T30436] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11687'. [ 468.723058][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11689'. [ 468.933716][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 469.108038][T30466] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 469.116995][T30466] syzkaller1: group set to 0 [ 469.280123][T30481] netlink: 'syz.0.11709': attribute type 1 has an invalid length. [ 469.288510][T30481] netlink: 'syz.0.11709': attribute type 3 has an invalid length. [ 469.309454][T30481] netlink: 'syz.0.11709': attribute type 7 has an invalid length. [ 469.332086][T30481] netlink: 'syz.0.11709': attribute type 8 has an invalid length. [ 469.363684][T30481] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11709'. [ 469.378755][T30481] NCSI netlink: No device for ifindex 131092 [ 469.508188][T30493] netlink: 'syz.3.11716': attribute type 83 has an invalid length. [ 469.998473][T30520] netlink: 'syz.4.11727': attribute type 83 has an invalid length. [ 470.414731][T30550] netlink: 766 bytes leftover after parsing attributes in process `syz.2.11741'. [ 471.475400][T30624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11781'. [ 471.496382][T30624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11781'. [ 472.436736][T30635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.450060][T30635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.499043][T30635] veth0_vlan: left promiscuous mode [ 472.565574][T30639] vxcan1: entered allmulticast mode [ 472.686186][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11793'. [ 473.018027][T30681] netlink: 'syz.2.11803': attribute type 2 has an invalid length. [ 473.499927][T30715] openvswitch: netlink: IP tunnel dst address not specified [ 473.521735][T30715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.931786][T30743] __nla_validate_parse: 2 callbacks suppressed [ 473.931807][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11828'. [ 473.997593][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11828'. [ 474.175641][T30758] sctp: [Deprecated]: syz.3.11832 (pid 30758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.175641][T30758] Use struct sctp_sack_info instead [ 474.932656][T30803] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11847'. [ 474.981752][T30797] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11847'. [ 475.514767][T30843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11866'. [ 475.545422][T30843] netlink: 'syz.3.11866': attribute type 1 has an invalid length. [ 475.567646][T30843] netlink: 'syz.3.11866': attribute type 2 has an invalid length. [ 476.081711][T30879] tipc: New replicast peer: 255.255.255.255 [ 476.091485][T30879] tipc: Enabled bearer , priority 10 [ 476.101373][T30881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11884'. [ 476.169761][T30885] netlink: 'syz.3.11886': attribute type 21 has an invalid length. [ 476.196838][T30885] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11886'. [ 476.221708][T30885] netlink: 'syz.3.11886': attribute type 4 has an invalid length. [ 476.242211][T30885] netlink: 'syz.3.11886': attribute type 5 has an invalid length. [ 476.257562][T30892] netlink: 'syz.3.11886': attribute type 21 has an invalid length. [ 476.267281][T30885] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11886'. [ 476.277550][T30892] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11886'. [ 476.317310][T30892] netlink: 'syz.3.11886': attribute type 4 has an invalid length. [ 476.333887][T30892] netlink: 'syz.3.11886': attribute type 5 has an invalid length. [ 476.352706][T30892] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11886'. [ 476.364409][T30888] tun0: tun_chr_ioctl cmd 1074025675 [ 476.370011][T30888] tun0: persist disabled [ 477.204031][ T24] tipc: Node number set to 3758096385 [ 477.877478][T31002] Bluetooth: hci1: too big key_count value 32778 [ 478.390349][T31035] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 478.398587][T31035] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.387677][T31067] __nla_validate_parse: 3 callbacks suppressed [ 479.387697][T31067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11967'. [ 480.692400][T31161] netlink: 'syz.2.12013': attribute type 83 has an invalid length. [ 480.715875][T31163] netlink: 'syz.1.12014': attribute type 83 has an invalid length. [ 481.053407][T31178] netlink: 'syz.2.12021': attribute type 4 has an invalid length. [ 481.071791][T31178] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12021'. [ 481.101296][T31178] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.12021'. [ 481.354321][T31180] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.364026][T31180] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.601747][T31180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.631531][T31180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.710531][T31180] veth1_vlan: left promiscuous mode [ 481.873479][T31181] vxcan1: entered allmulticast mode [ 481.889787][ T3350] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.930052][ T3350] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 481.964840][ T3350] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.986890][ T3350] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 482.031445][ T3350] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.056065][T31202] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12030'. [ 482.067622][ T3350] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 482.103679][ T3350] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.122468][T31205] netlink: 'syz.1.12031': attribute type 1 has an invalid length. [ 482.149474][T31205] netlink: 'syz.1.12031': attribute type 7 has an invalid length. [ 482.156646][ T3350] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 482.186291][T31205] netlink: 'syz.1.12031': attribute type 8 has an invalid length. [ 482.232463][T31205] netlink: 208 bytes leftover after parsing attributes in process `syz.1.12031'. [ 482.243813][T31205] NCSI netlink: No device for ifindex 65584 [ 482.365345][T31207] bond6 (unregistering): Released all slaves [ 483.045381][T31262] block nbd0: Unsupported socket: should be TCP or UNIX. [ 483.614395][ T4943] block nbd0: Receive control failed (result -32) [ 483.753416][T31305] netlink: 'syz.0.12068': attribute type 3 has an invalid length. [ 484.094972][T31327] blkio.reset_stats is deprecated [ 484.157065][T31336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12082'. [ 484.441615][T31354] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12089'. [ 485.121189][T31404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12106'. [ 485.151021][T31406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12107'. [ 485.642275][T31439] netlink: 'syz.0.12122': attribute type 2 has an invalid length. [ 485.681863][T31439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12122'. [ 485.737258][T31447] lo: entered allmulticast mode [ 485.885908][T31457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12132'. [ 486.203324][T31480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12142'. [ 486.318689][T31487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12146'. [ 486.426157][T31492] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12148'. [ 486.469647][T31494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12149'. [ 486.655919][T31504] gretap1: entered promiscuous mode [ 486.677028][T31504] batman_adv: batadv0: Adding interface: gretap1 [ 486.696160][T31504] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.742760][T31504] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 486.827305][T31519] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12160'. [ 488.516826][T31619] netlink: 'syz.0.12209': attribute type 4 has an invalid length. [ 488.926199][T31643] tun0: tun_chr_ioctl cmd 1074025675 [ 488.942291][T31643] tun0: persist enabled [ 490.304473][T31751] __nla_validate_parse: 3 callbacks suppressed [ 490.304538][T31751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12271'. [ 490.641712][T31776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12280'. [ 490.841451][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12289'. [ 491.109836][T31810] netlink: 'syz.2.12298': attribute type 4 has an invalid length. [ 491.311224][T31821] netlink: 'syz.2.12302': attribute type 4 has an invalid length. [ 491.429858][T31828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12307'. [ 491.445970][T31828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12307'. [ 491.981300][T31859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12324'. [ 492.009279][T31859] openvswitch: netlink: Flow key attribute not present in set flow. [ 492.377394][T31886] netlink: 'syz.2.12333': attribute type 1 has an invalid length. [ 492.418116][T31886] netlink: 'syz.2.12333': attribute type 2 has an invalid length. [ 492.418960][T31890] netlink: 'syz.1.12336': attribute type 3 has an invalid length. [ 492.440465][T31894] netlink: 'syz.2.12333': attribute type 1 has an invalid length. [ 492.467282][T31894] netlink: 'syz.2.12333': attribute type 2 has an invalid length. [ 492.508290][T31896] netlink: 232 bytes leftover after parsing attributes in process `syz.0.12338'. [ 492.667180][T31909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12343'. [ 492.864417][T31922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12348'. [ 493.058523][T31933] xt_hashlimit: size too large, truncated to 1048576 [ 493.438422][T31960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12367'. [ 493.755161][T31982] sctp: [Deprecated]: syz.2.12378 (pid 31982) Use of int in max_burst socket option. [ 493.755161][T31982] Use struct sctp_assoc_value instead [ 493.834632][T31986] syz.1.12380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 493.901860][T31986] CPU: 0 UID: 0 PID: 31986 Comm: syz.1.12380 Not tainted syzkaller #0 PREEMPT(full) [ 493.901890][T31986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 493.901913][T31986] Call Trace: [ 493.901983][T31986] [ 493.902053][T31986] dump_stack_lvl+0xe8/0x150 [ 493.902196][T31986] warn_alloc+0x24c/0x270 [ 493.902245][T31986] ? stack_depot_save_flags+0x33/0x800 [ 493.902363][T31986] ? __pfx_warn_alloc+0x10/0x10 [ 493.902389][T31986] ? kasan_save_track+0x3e/0x80 [ 493.902421][T31986] ? __kasan_kmalloc+0x93/0xb0 [ 493.902444][T31986] ? xsk_setsockopt+0x52a/0x960 [ 493.902529][T31986] ? do_sock_setsockopt+0x17c/0x1b0 [ 493.902638][T31986] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 493.902662][T31986] ? do_syscall_64+0x174/0x580 [ 493.902721][T31986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.902764][T31986] __vmalloc_node_range_noprof+0x12c/0x1730 [ 493.902816][T31986] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 493.902843][T31986] ? __kasan_kmalloc+0x93/0xb0 [ 493.902869][T31986] ? __kmalloc_cache_noprof+0x32d/0x660 [ 493.902901][T31986] ? __kmalloc_cache_noprof+0x150/0x660 [ 493.902928][T31986] vmalloc_user_noprof+0xad/0xe0 [ 493.902952][T31986] ? xskq_create+0xbf/0x170 [ 493.903007][T31986] xskq_create+0xbf/0x170 [ 493.903045][T31986] xsk_init_queue+0x8a/0xe0 [ 493.903074][T31986] xsk_setsockopt+0x52a/0x960 [ 493.903097][T31986] ? __fget_files+0x2a/0x420 [ 493.903140][T31986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 493.903165][T31986] ? __pfx_aa_sk_perm+0x10/0x10 [ 493.903274][T31986] ? aa_sock_opt_perm+0xff/0x1a0 [ 493.903297][T31986] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 493.903338][T31986] ? __pfx_xsk_setsockopt+0x10/0x10 [ 493.903364][T31986] do_sock_setsockopt+0x17c/0x1b0 [ 493.903397][T31986] __x64_sys_setsockopt+0x13d/0x1b0 [ 493.903425][T31986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.903444][T31986] do_syscall_64+0x174/0x580 [ 493.903461][T31986] ? trace_irq_disable+0x3b/0x140 [ 493.903498][T31986] ? clear_bhb_loop+0x40/0x90 [ 493.903520][T31986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.903538][T31986] RIP: 0033:0x7fb67639de99 [ 493.903587][T31986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.903604][T31986] RSP: 002b:00007fb6745f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.903655][T31986] RAX: ffffffffffffffda RBX: 00007fb676625fa0 RCX: 00007fb67639de99 [ 493.903669][T31986] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 493.903681][T31986] RBP: 00007fb676433eaf R08: 0000000000000004 R09: 0000000000000000 [ 493.903694][T31986] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.903706][T31986] R13: 00007fb676626038 R14: 00007fb676625fa0 R15: 00007fff2900f018 [ 493.903740][T31986] [ 494.230380][T31986] Mem-Info: [ 494.235769][T31986] active_anon:6009 inactive_anon:0 isolated_anon:0 [ 494.235769][T31986] active_file:18 inactive_file:43485 isolated_file:0 [ 494.235769][T31986] unevictable:768 dirty:328 writeback:0 [ 494.235769][T31986] slab_reclaimable:12157 slab_unreclaimable:104986 [ 494.235769][T31986] mapped:29193 shmem:1300 pagetables:3614 [ 494.235769][T31986] sec_pagetables:0 bounce:0 [ 494.235769][T31986] kernel_misc_reclaimable:0 [ 494.235769][T31986] free:1315249 free_pcp:10490 free_cma:0 [ 494.281331][T31986] Node 0 active_anon:24036kB inactive_anon:0kB active_file:72kB inactive_file:173740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116772kB dirty:1312kB writeback:0kB shmem:3664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12732kB pagetables:14324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 494.316864][T31986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 494.350379][T31986] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.382158][T31986] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 494.388031][T31986] Node 0 DMA32 free:1295516kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24036kB inactive_anon:0kB active_file:72kB inactive_file:173740kB unevictable:1536kB writepending:1312kB zspages:0kB present:3129332kB managed:2548676kB mlocked:0kB bounce:0kB free_pcp:42104kB local_pcp:21092kB free_cma:0kB [ 494.421617][T31986] lowmem_reserve[]: 0 0 0 0 0 [ 494.426861][T31986] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.456764][T31986] lowmem_reserve[]: 0 0 0 0 0 [ 494.461521][T31986] Node 1 Normal free:3950120kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.493964][T31986] lowmem_reserve[]: 0 0 0 0 0 [ 494.498759][T31986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 494.511531][T31986] Node 0 DMA32: 1940*4kB (UME) 575*8kB (UM) 548*16kB (UME) 537*32kB (UME) 690*64kB (UME) 485*128kB (UME) 372*256kB (UM) 260*512kB (UM) 125*1024kB (UM) 4*2048kB (ME) 192*4096kB (UM) = 1295528kB [ 494.611940][T31986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 494.652755][T31986] Node 1 Normal: 0*4kB 3*8kB (UM) 7*16kB (UM) 5*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950120kB [ 494.672884][T31986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.709694][T31986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 494.721161][T31986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 494.759860][T31986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 494.779188][T31986] 44799 total pagecache pages [ 494.785520][T31986] 0 pages in swap cache [ 494.789878][T31986] Free swap = 124996kB [ 494.796938][T31986] Total swap = 124996kB [ 494.802433][T31986] 2097051 pages RAM [ 494.807267][T31986] 0 pages HighMem/MovableOnly [ 494.820620][T31986] 428202 pages reserved [ 494.830171][T31986] 0 pages cma reserved [ 495.646661][T32074] __nla_validate_parse: 5 callbacks suppressed [ 495.646678][T32074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12418'. [ 495.666173][T32074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12418'. [ 495.714855][T32079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12420'. [ 495.810417][T32087] block nbd0: Unsupported socket: should be TCP or UNIX. [ 496.069922][T32107] netlink: 'syz.3.12433': attribute type 3 has an invalid length. [ 496.094227][T32107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12433'. [ 496.119131][T32107] netlink: 'syz.3.12433': attribute type 3 has an invalid length. [ 496.157225][T32107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12433'. [ 496.230884][T32107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12433'. [ 496.613437][T32140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12445'. [ 496.618627][T32142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12448'. [ 496.710998][T32142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12448'. [ 497.240276][T32173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12463'. [ 497.328735][T32179] sctp: [Deprecated]: syz.0.12465 (pid 32179) Use of int in max_burst socket option deprecated. [ 497.328735][T32179] Use struct sctp_assoc_value instead [ 497.998783][T32229] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 498.039240][T32229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.584965][T32271] IPVS: sed: FWM 3 0x00000003 - no destination available [ 498.748462][T32282] sctp: [Deprecated]: syz.0.12512 (pid 32282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.748462][T32282] Use struct sctp_sack_info instead [ 498.940022][ T4943] block nbd1: Receive control failed (result -32) [ 499.178835][T32303] bond0: entered promiscuous mode [ 499.188149][T32303] bond_slave_0: entered promiscuous mode [ 499.197949][T32303] bond_slave_1: entered promiscuous mode [ 499.208419][T32303] batadv0: entered promiscuous mode [ 499.214687][T32303] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 499.228993][T32303] bond0: left promiscuous mode [ 499.251841][T32303] bond_slave_0: left promiscuous mode [ 499.269883][T32303] bond_slave_1: left promiscuous mode [ 499.286388][T32303] batadv0: left promiscuous mode [ 499.304954][T32303] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 500.133233][T32357] netlink: 'syz.2.12547': attribute type 3 has an invalid length. [ 500.149481][T32357] netlink: 'syz.2.12547': attribute type 3 has an invalid length. [ 500.471337][T32369] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.497087][T32369] .`: (slave team0): Releasing backup interface [ 500.528452][T32369] team0: Cannot enslave team device to itself [ 500.759843][T32388] __nla_validate_parse: 10 callbacks suppressed [ 500.759863][T32388] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.12563'. [ 500.802566][T32388] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.12563'. [ 500.917781][T32400] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12568'. [ 501.098223][T32410] tap0: tun_chr_ioctl cmd 1074025676 [ 501.135690][T32410] tap0: owner set to 0 [ 501.834684][T32464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.841993][T32464] IPv6: NLM_F_CREATE should be set when creating new route [ 501.849331][T32464] IPv6: NLM_F_CREATE should be set when creating new route [ 501.902900][T32464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.518183][T32513] team0: No ports can be present during mode change [ 502.867384][T32537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12633'. [ 503.206126][T32558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12641'. [ 503.458567][T32580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12652'. [ 503.626342][T32592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12660'. [ 504.016846][T32619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12672'. [ 504.397313][T32639] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12681'. [ 505.045879][T32674] netlink: 'syz.2.12700': attribute type 2 has an invalid length. [ 505.278375][T32693] netlink: 'syz.0.12708': attribute type 14 has an invalid length. [ 505.354303][T32698] veth0: entered promiscuous mode [ 505.361277][T32696] veth0: left promiscuous mode [ 505.487707][T32706] openvswitch: netlink: Missing key (keys=40, expected=100) [ 505.872334][T32735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12726'. [ 506.468209][ T308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12747'. [ 506.656997][ T325] netlink: 81 bytes leftover after parsing attributes in process `syz.3.12756'. [ 506.847734][ T337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12761'. [ 506.920566][ T342] netlink: 'syz.2.12765': attribute type 1 has an invalid length. [ 506.954317][ T342] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.12765'. [ 506.964966][ T344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12766'. [ 506.985041][ T342] netlink: 'syz.2.12765': attribute type 1 has an invalid length. [ 507.002335][ T342] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.12765'. [ 507.377885][ T372] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.12779'. [ 507.864865][ T402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12791'. [ 508.192595][ T420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12800'. [ 508.423126][ T439] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 509.075121][ T485] netlink: 'syz.4.12831': attribute type 83 has an invalid length. [ 509.261282][ T499] tipc: Started in network mode [ 509.282832][ T499] tipc: Node identity ac14140f, cluster identity 4711 [ 509.307467][ T499] tipc: New replicast peer: 255.255.255.255 [ 509.327500][ T499] tipc: Enabled bearer , priority 10 [ 509.675864][ T528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.685565][ T528] batman_adv: batadv0: Adding interface: bond0 [ 509.691841][ T528] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.718864][ T528] batman_adv: batadv0: Interface activated: bond0 [ 509.754500][ T3337] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 509.784478][ T3337] bond0: now running without any active interface! [ 510.453702][ T187] tipc: Node number set to 2886997007 [ 511.488969][ T654] veth0_to_bridge: entered promiscuous mode [ 511.495519][ T652] sctp: [Deprecated]: syz.4.12911 (pid 652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.495519][ T652] Use struct sctp_sack_info instead [ 511.513469][ T653] veth0_to_bridge: left promiscuous mode [ 512.152378][ T703] __nla_validate_parse: 6 callbacks suppressed [ 512.152400][ T703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12933'. [ 512.176289][ T703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12933'. [ 512.250825][ T709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12935'. [ 512.473219][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12944'. [ 512.485206][ T723] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12944'. [ 512.499220][ T723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12944'. [ 512.791718][ T741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12952'. [ 512.928589][ T749] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12957'. [ 512.960246][ T755] tipc: New replicast peer: 255.255.255.255 [ 512.988012][ T755] tipc: Enabled bearer , priority 10 [ 513.127306][ T766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12964'. [ 513.306461][ T777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12968'. [ 513.937572][ T821] nbd0: detected capacity change from 0 to 87 [ 513.964914][ T824] block nbd3: Unsupported socket: should be TCP or UNIX. [ 514.011034][ T25] block nbd0: Dead connection, failed to find a fallback [ 514.367296][ T854] x9: renamed from bridge_slave_0 [ 515.095103][ T25] block nbd0: shutting down sockets [ 515.102261][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.112649][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 515.125606][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 515.134774][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 515.142554][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 515.150772][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 515.161226][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 515.170439][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 515.178434][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 515.186792][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 515.194823][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 515.204888][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 515.214183][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 515.222004][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 515.234987][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.244445][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.253925][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.263181][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.272700][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.282938][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 515.295523][ T826] ldm_validate_partition_table(): Disk read failed. [ 515.306674][ T826] Dev nbd0: unable to read RDB block 0 [ 515.315536][ T826] nbd0: unable to read partition table [ 515.395669][ T826] ldm_validate_partition_table(): Disk read failed. [ 515.422648][ T826] Dev nbd0: unable to read RDB block 0 [ 515.445133][ T826] nbd0: unable to read partition table [ 515.716361][ T954] bridge: RTM_NEWNEIGH with invalid ether address [ 515.915989][ T972] ip6gre0: Master is either lo or non-ether device [ 515.988856][ T977] openvswitch: netlink: IP tunnel dst address not specified [ 516.007224][ T977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.405423][ T1089] gretap0: left allmulticast mode [ 517.429684][ T1089] gretap0: left promiscuous mode [ 517.438492][ T1089] bridge0: port 3(gretap0) entered disabled state [ 517.459085][ T1089] bridge_slave_1: left allmulticast mode [ 517.469261][ T1089] bridge_slave_1: left promiscuous mode [ 517.484788][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.513287][ T1089] bridge_slave_0: left allmulticast mode [ 517.528698][ T1089] bridge_slave_0: left promiscuous mode [ 517.538891][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.607855][ T1100] tap0: tun_chr_ioctl cmd 1074025672 [ 517.624072][ T1100] tap0: ignored: set checksum disabled [ 518.472903][ T1151] __nla_validate_parse: 7 callbacks suppressed [ 518.472924][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13121'. [ 518.496165][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13121'. [ 518.761597][ T1165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13128'. [ 518.797690][ T1165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13128'. [ 519.676238][ T5676] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 519.771212][ T5676] CPU: 1 UID: 0 PID: 5676 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 519.771241][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 519.771252][ T5676] Call Trace: [ 519.771259][ T5676] [ 519.771267][ T5676] dump_stack_lvl+0xe8/0x150 [ 519.771298][ T5676] dump_header+0xd3/0x4b0 [ 519.771360][ T5676] oom_kill_process+0x3ab/0x970 [ 519.771390][ T5676] out_of_memory+0x1064/0x1480 [ 519.771406][ T5676] ? try_charge_memcg+0xbca/0x1590 [ 519.771446][ T5676] ? __pfx_out_of_memory+0x10/0x10 [ 519.771462][ T5676] ? do_raw_spin_unlock+0xf5/0x210 [ 519.771510][ T5676] try_charge_memcg+0xc74/0x1590 [ 519.771550][ T5676] ? __pfx_try_charge_memcg+0x10/0x10 [ 519.771571][ T5676] ? percpu_ref_tryget+0x15/0x180 [ 519.771614][ T5676] ? charge_memcg+0x20/0x2b0 [ 519.771638][ T5676] charge_memcg+0x19c/0x2b0 [ 519.771659][ T5676] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 519.771679][ T5676] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 519.771701][ T5676] swap_cache_alloc_folio+0x4de/0x990 [ 519.771729][ T5676] swap_cache_read_folio+0x44/0x120 [ 519.771748][ T5676] swap_cluster_readahead+0x3a0/0x640 [ 519.771770][ T5676] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 519.771798][ T5676] ? get_vma_policy+0x27b/0x3c0 [ 519.771822][ T5676] swapin_readahead+0x19a/0xc10 [ 519.771841][ T5676] ? swap_table_get+0x1e/0x260 [ 519.771856][ T5676] ? swap_table_get+0x1e/0x260 [ 519.771872][ T5676] ? __pfx_swapin_readahead+0x10/0x10 [ 519.771890][ T5676] ? swap_table_get+0x1e/0x260 [ 519.771904][ T5676] ? swap_table_get+0x1e/0x260 [ 519.771916][ T5676] ? swap_table_get+0x1e/0x260 [ 519.771931][ T5676] ? swap_table_get+0x216/0x260 [ 519.771947][ T5676] ? swap_cache_get_folio+0x2e7/0x2f0 [ 519.771968][ T5676] do_swap_page+0x455/0x5060 [ 519.772008][ T5676] ? __pte_offset_map+0x29/0x240 [ 519.772029][ T5676] ? __lock_acquire+0x683/0x2cf0 [ 519.772048][ T5676] ? do_swap_page+0x124/0x5060 [ 519.772070][ T5676] ? __pfx_do_swap_page+0x10/0x10 [ 519.772091][ T5676] ? __pte_offset_map+0x1ae/0x240 [ 519.772109][ T5676] ? pte_offset_map_rw_nolock+0xea/0x160 [ 519.772128][ T5676] handle_mm_fault+0x124c/0x3080 [ 519.772155][ T5676] ? handle_mm_fault+0xec/0x3080 [ 519.772177][ T5676] ? __pfx_handle_mm_fault+0x10/0x10 [ 519.772191][ T5676] ? lock_vma_under_rcu+0x45a/0x500 [ 519.772233][ T5676] do_user_addr_fault+0xa4d/0x1340 [ 519.772278][ T5676] ? trace_page_fault_user+0x84/0x1e0 [ 519.772302][ T5676] exc_page_fault+0x6a/0xc0 [ 519.772386][ T5676] asm_exc_page_fault+0x26/0x30 [ 519.772401][ T5676] RIP: 0033:0x7f8b5bd5e6ce [ 519.772417][ T5676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.772430][ T5676] RSP: 002b:00007ffd005a5b08 EFLAGS: 00010246 [ 519.772444][ T5676] RAX: 0000000000000000 RBX: 000055555c81e500 RCX: 00007f8b5bd5e6ce [ 519.772455][ T5676] RDX: 00007ffd005a5b60 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.772464][ T5676] RBP: 00007ffd005a5bcc R08: 0000000000000000 R09: 0000000000000000 [ 519.772474][ T5676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 519.772483][ T5676] R13: 00000000000927c0 R14: 000000000007ea75 R15: 00007ffd005a5c20 [ 519.772508][ T5676] [ 520.133300][ T5676] memory: usage 307200kB, limit 307200kB, failcnt 576 [ 520.155986][ T5676] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 520.272333][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13152'. [ 520.291417][ T5676] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 520.401764][ T5676] Memory cgroup stats for /syz4: [ 520.402097][ T5676] cache 0 [ 520.473786][ T5676] rss 0 [ 520.478829][ T5676] rss_huge 0 [ 520.482791][ T5676] shmem 0 [ 520.486471][ T5676] mapped_file 0 [ 520.490083][ T5676] dirty 0 [ 520.493052][ T5676] writeback 0 [ 520.498202][ T5676] workingset_refault_anon 2 [ 520.523567][ T5676] workingset_refault_file 0 [ 520.541148][ T5676] swap 184320 [ 520.557035][ T5676] swapcached 200704 [ 520.572468][ T5676] pgpgin 114628 [ 520.586975][ T5676] pgpgout 114626 [ 520.597845][ T5676] pgfault 302928 [ 520.612501][ T5676] pgmajfault 3 [ 520.628801][ T5676] inactive_anon 4096 [ 520.641967][ T5676] active_anon 4096 [ 520.652114][ T5676] inactive_file 0 [ 520.672257][ T5676] active_file 0 [ 520.690658][ T5676] unevictable 0 [ 520.708182][ T5676] hierarchical_memory_limit 314572800 [ 520.725109][ T5676] hierarchical_memsw_limit 9223372036854771712 [ 520.745355][ T5676] total_cache 0 [ 520.749037][ T1239] netlink: 'syz.1.13159': attribute type 83 has an invalid length. [ 520.764133][ T5676] total_rss 0 [ 520.769086][ T5676] total_rss_huge 0 [ 520.780333][ T5676] total_shmem 0 [ 520.792171][ T5676] total_mapped_file 0 [ 520.804128][ T5676] total_dirty 0 [ 520.819269][ T5676] total_writeback 0 [ 520.843105][ T5676] total_workingset_refault_anon 2 [ 520.858979][ T5676] total_workingset_refault_file 0 [ 520.869275][ T5676] total_swap 184320 [ 520.887910][ T5676] total_swapcached 200704 [ 520.905130][ T5676] total_pgpgin 114628 [ 520.919580][ T5676] total_pgpgout 114626 [ 520.935357][ T5676] total_pgfault 302928 [ 520.951707][ T5676] total_pgmajfault 3 [ 520.964189][ T5676] total_inactive_anon 4096 [ 520.982137][ T1249] xt_hashlimit: size too large, truncated to 1048576 [ 520.990597][ T5676] total_active_anon 4096 [ 521.006539][ T5676] total_inactive_file 0 [ 521.016170][ T5676] total_active_file 0 [ 521.031626][ T5676] total_unevictable 0 [ 521.047360][ T5676] anon_cost 0 [ 521.061184][ T5676] file_cost 0 [ 521.073032][ T5676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.13106,pid=1118,uid=0 [ 521.124160][ T5676] Memory cgroup out of memory: Killed process 1118 (syz.4.13106) total-vm:102304kB, anon-rss:1256kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 521.611868][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13170'. [ 521.777039][ T1282] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13176'. [ 521.902251][ T1289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13180'. [ 522.106738][ T1300] netlink: 'syz.2.13185': attribute type 6 has an invalid length. [ 522.581996][ T1331] sch_fq: defrate 0 ignored. [ 523.001627][ T1350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13207'. [ 523.411298][ T1380] netlink: 'syz.3.13220': attribute type 3 has an invalid length. [ 523.432872][ T1380] netlink: 'syz.3.13220': attribute type 1 has an invalid length. [ 523.452654][ T1380] netlink: 212 bytes leftover after parsing attributes in process `syz.3.13220'. [ 523.481771][ T1380] NCSI netlink: No device for ifindex 813332851 [ 523.672115][ T5681] block nbd3: Receive control failed (result -32) [ 523.750360][ T1399] netlink: 'syz.2.13232': attribute type 11 has an invalid length. [ 524.422890][ T1446] netlink: 'syz.2.13251': attribute type 1 has an invalid length. [ 524.444133][ T1446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13251'. [ 525.370299][ T1510] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13282'. [ 525.510551][ T1529] netlink: 'syz.1.13291': attribute type 1 has an invalid length. [ 525.525022][ T1529] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13291'. [ 525.525388][ T1528] openvswitch: netlink: IPv4 tunnel dst address is zero [ 525.545174][ T1529] netlink: 'syz.1.13291': attribute type 2 has an invalid length. [ 525.561914][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13291'. [ 525.610340][ T1528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.683168][ T1535] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 525.898199][ T1544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13298'. [ 525.935901][ T1544] team0 (unregistering): Port device team_slave_0 removed [ 525.960426][ T1544] team0 (unregistering): Port device team_slave_1 removed [ 526.520810][ T1580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13312'. [ 526.625502][ T1580] macvtap1: entered promiscuous mode [ 526.631025][ T1580] vlan0: entered promiscuous mode [ 526.638892][ T1580] macvtap1: entered allmulticast mode [ 526.644969][ T1580] vlan0: entered allmulticast mode [ 526.650419][ T1580] veth0_vlan: entered allmulticast mode [ 526.662241][ T1585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13311'. [ 526.772193][ T1592] netlink: 'syz.0.13316': attribute type 30 has an invalid length. [ 526.917664][ T1594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.949870][ T1594] bond0: (slave bond5): Enslaving as an active interface with a down link [ 527.129732][ T1615] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13328'. [ 527.179719][ T76] bond0: (slave bond5): link status definitely up [ 527.206369][ T76] bond0: active interface up! [ 527.463319][ T1637] netlink: 'syz.3.13337': attribute type 1 has an invalid length. [ 527.471674][ T1637] netlink: 208 bytes leftover after parsing attributes in process `syz.3.13337'. [ 527.537219][ T1631] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.550831][ T1631] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.605613][ T1643] openvswitch: netlink: IP tunnel dst address not specified [ 527.613134][ T1643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.723651][ T1631] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.747157][ T1631] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.876786][ T1631] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.896770][ T1631] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.918808][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13347'. [ 528.014298][ T1631] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.027119][ T1631] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.069255][ T1667] netlink: 'syz.3.13351': attribute type 30 has an invalid length. [ 528.218018][ T775] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.237555][ T775] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.340682][ T47] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.367976][ T47] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.409150][ T76] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.432021][ T76] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.444673][ T1685] bridge_slave_0: default FDB implementation only supports local addresses [ 528.491856][ T47] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.512336][ T47] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.725513][ T1769] __nla_validate_parse: 6 callbacks suppressed [ 529.725533][ T1769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13401'. [ 529.785749][ T1769] netlink: 'syz.4.13401': attribute type 9 has an invalid length. [ 531.469362][ T1887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.479165][ T1887] bond_slave_0: left allmulticast mode [ 531.488342][ T1887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.499678][ T1887] bond_slave_1: left allmulticast mode [ 531.507224][ T1887] bond0 (unregistering): Released all slaves [ 532.294316][ T47] bond0: (slave bond5): interface is now down [ 532.319759][ T47] bond0: now running without any active interface! [ 532.388504][ T1951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13485'. [ 532.850592][ T1982] tap0: tun_chr_ioctl cmd 2148553947 [ 533.480513][ T2024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13517'. [ 533.882276][ T2043] netlink: 'syz.4.13527': attribute type 33 has an invalid length. [ 533.978395][ T2043] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 534.063306][ T2043] bond6 (unregistering): Released all slaves [ 534.657530][ T2091] rdma_rxe: rxe_newlink: failed to add syz_tun [ 535.232268][ T2122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13559'. [ 536.256328][ T2169] h: entered promiscuous mode [ 536.549047][ T2186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13590'. [ 536.658682][ T2196] netlink: 'syz.3.13594': attribute type 1 has an invalid length. [ 536.680413][ T2196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13594'. [ 536.699717][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13595'. [ 536.962681][ T2217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13604'. [ 536.985916][ T2217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13604'. [ 538.019955][ T2288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13634'. [ 538.564680][ T2320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13650'. [ 538.575799][ T2320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13650'. [ 538.585999][ T2320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13650'. [ 539.763726][ T2396] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 540.348423][ T2444] bridge_slave_0: default FDB implementation only supports local addresses [ 540.642639][ T2462] __nla_validate_parse: 3 callbacks suppressed [ 540.642657][ T2462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13711'. [ 540.726030][ T2469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13713'. [ 540.737432][ T2469] block nbd4: Unsupported socket: should be TCP or UNIX. [ 541.857298][ T2541] tunl0: entered promiscuous mode [ 541.890288][ T2541] netlink: 'syz.4.13743': attribute type 4 has an invalid length. [ 541.932989][ T2541] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13743'. [ 542.007577][ T2555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13747'. [ 542.318368][ T2581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13757'. [ 542.335940][ T2581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13757'. [ 542.458821][ T2597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13762'. [ 543.115608][ T2645] netlink: 'syz.4.13779': attribute type 2 has an invalid length. [ 543.318565][ T2656] netlink: 284 bytes leftover after parsing attributes in process `syz.4.13785'. [ 543.705302][ T2686] block nbd0: Unsupported socket: should be TCP or UNIX. [ 543.881422][ T2699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13799'. [ 543.928150][ T2704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13802'. [ 544.832956][ T2790] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 545.652164][ T2865] __nla_validate_parse: 3 callbacks suppressed [ 545.652182][ T2865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13859'. [ 545.670735][ T2865] netlink: 6 bytes leftover after parsing attributes in process `syz.1.13859'. [ 546.099599][ T2899] netlink: 'syz.1.13869': attribute type 83 has an invalid length. [ 546.451171][ T2923] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 546.738402][ T2946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13889'. [ 547.354693][ T2991] netlink: 'syz.0.13910': attribute type 4 has an invalid length. [ 547.917378][ T3031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13929'. [ 548.336078][ T3058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13940'. [ 548.543793][ T3070] netlink: 'syz.3.13946': attribute type 83 has an invalid length. [ 548.842568][ T3096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13955'. [ 549.574187][ T3149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13979'. [ 549.735842][ T3153] bond2: entered promiscuous mode [ 549.754751][ T3147] netlink: 'syz.2.13981': attribute type 3 has an invalid length. [ 549.914637][ T3167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13986'. [ 550.759968][ T3236] netlink: 'syz.0.14012': attribute type 2 has an invalid length. [ 551.419979][ T3284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14032'. [ 551.935756][ T3319] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.14048'. [ 551.962577][ T3318] pim6reg: entered allmulticast mode [ 552.317477][ T3338] IPv6: Can't replace route, no match found [ 552.349579][ T3338] IPv6: Can't replace route, no match found [ 552.378537][ T3343] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 552.387502][ T3343] syzkaller1: linktype set to 823 [ 552.525794][ T3356] netlink: 'syz.1.14065': attribute type 10 has an invalid length. [ 552.826001][ T3369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.150813][ T3383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14079'. [ 553.410429][ T3406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14089'. [ 553.682862][ T3420] openvswitch: netlink: IP tunnel dst address not specified [ 553.713951][ T3420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.738314][ T3423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14098'. [ 553.758385][ T3425] veth0: entered promiscuous mode [ 553.775747][ T3425] veth0: left promiscuous mode [ 553.829960][ T3430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14100'. [ 554.334889][ T3471] netlink: 'syz.3.14117': attribute type 28 has an invalid length. [ 554.354292][ T3471] netlink: 'syz.3.14117': attribute type 3 has an invalid length. [ 554.371509][ T3471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14117'. [ 554.987838][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14136'. [ 555.020670][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14136'. [ 555.312820][ T3532] bond0: option miimon: invalid value (18446744071829782528) [ 555.331128][ T3532] bond0: option miimon: allowed values 0 - 2147483647 [ 555.345945][ T3534] netlink: 'syz.0.14145': attribute type 11 has an invalid length. [ 555.620227][ T3550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14154'. [ 556.081528][ T3587] netlink: 'syz.4.14171': attribute type 11 has an invalid length. [ 556.315336][ T3598] block nbd0: reconnected socket [ 556.336210][ T5681] block nbd0: Receive control failed (result -32) [ 556.901927][ T3638] __nla_validate_parse: 7 callbacks suppressed [ 556.902134][ T3638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14193'. [ 557.406488][ T29] audit: type=1804 audit(1784744854.392:6): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14211" name="/newroot/2817/cgroup.controllers" dev="tmpfs" ino=14141 res=1 errno=0 [ 557.474765][ T3681] netlink: 'syz.2.14213': attribute type 8 has an invalid length. [ 557.479729][ T29] audit: type=1800 audit(1784744854.402:7): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14211" name="cgroup.controllers" dev="tmpfs" ino=14141 res=0 errno=0 [ 557.510711][ T3681] sch_fq: defrate 0 ignored. [ 557.733279][ T3694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14218'. [ 558.364662][ T3737] netlink: 'syz.1.14239': attribute type 2 has an invalid length. [ 558.404504][ T3737] netlink: 100 bytes leftover after parsing attributes in process `syz.1.14239'. [ 558.484858][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14244'. [ 558.809727][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14252'. [ 559.768757][ T3825] netlink: 71 bytes leftover after parsing attributes in process `syz.0.14281'. [ 559.779264][ T5681] block nbd0: Receive control failed (result -107) [ 559.782212][ T3826] block nbd0: reconnected socket [ 559.994558][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14287'. [ 560.006077][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14287'. [ 560.017363][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14287'. [ 560.050980][ T3842] netlink: 248 bytes leftover after parsing attributes in process `syz.4.14288'. [ 560.986471][ T3898] netlink: 'syz.0.14315': attribute type 4 has an invalid length. [ 562.187105][ T3973] bridge_slave_1: default FDB implementation only supports local addresses [ 562.319040][ T3979] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.364200][ T3979] bond0: (slave bond8): Enslaving as an active interface with a down link [ 562.467824][ T3995] __nla_validate_parse: 3 callbacks suppressed [ 562.467843][ T3995] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14361'. [ 562.951225][ T4024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14374'. [ 562.966826][ T4028] sctp: [Deprecated]: syz.2.14375 (pid 4028) Use of int in maxseg socket option. [ 562.966826][ T4028] Use struct sctp_assoc_value instead [ 563.117337][ T4037] netlink: 'syz.4.14380': attribute type 21 has an invalid length. [ 563.126152][ T4037] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14380'. [ 563.542376][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.781107][ T4083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14402'. [ 563.797338][ T4083] block nbd0: reconnected socket [ 563.805568][ T4083] nbd: socks must be embedded in a SOCK_ITEM attr [ 563.815105][ T5681] block nbd0: Receive control failed (result -32) [ 564.039071][ T4099] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14409'. [ 564.083627][ T4101] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 564.151455][ T4107] netlink: 'syz.3.14414': attribute type 19 has an invalid length. [ 564.592989][ T4136] netlink: 232 bytes leftover after parsing attributes in process `syz.3.14427'. [ 564.959479][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14438'. [ 565.590727][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14460'. [ 565.623720][ T4206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14460'. [ 565.806353][ T4221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14467'. [ 565.828056][ T4221] netlink: 'syz.1.14467': attribute type 1 has an invalid length. [ 565.848407][ T4221] netlink: 'syz.1.14467': attribute type 2 has an invalid length. [ 566.509173][ T4269] bond3: entered promiscuous mode [ 566.741914][ T4285] veth0: entered promiscuous mode [ 566.751567][ T4284] veth0: left promiscuous mode [ 567.777027][ T4358] netlink: 'syz.1.14533': attribute type 3 has an invalid length. [ 567.852606][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14534'. [ 567.894264][ T4365] syzkaller1: entered promiscuous mode [ 567.899875][ T4365] syzkaller1: entered allmulticast mode [ 568.079479][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14542'. [ 568.089392][ T4379] netlink: 'syz.3.14542': attribute type 10 has an invalid length. [ 568.098108][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14542'. [ 568.122576][ T4379] geneve2: entered promiscuous mode [ 568.128832][ T4379] geneve2: entered allmulticast mode [ 568.167484][ T4381] siw: device registration error -23 [ 568.369925][ T4393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14548'. [ 568.400921][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14550'. [ 568.412381][ T4393] netlink: 'syz.3.14548': attribute type 1 has an invalid length. [ 568.444644][ T4393] netlink: 'syz.3.14548': attribute type 2 has an invalid length. [ 568.510162][ T4400] [ 568.512538][ T4400] ====================================================== [ 568.519562][ T4400] WARNING: possible circular locking dependency detected [ 568.526659][ T4400] syzkaller #0 Not tainted [ 568.531067][ T4400] ------------------------------------------------------ [ 568.538128][ T4400] syz.2.14553/4400 is trying to acquire lock: [ 568.544223][ T4400] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 568.553471][ T4400] [ 568.553471][ T4400] but task is already holding lock: [ 568.560833][ T4400] ffff888056fad038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 568.570336][ T4400] [ 568.570336][ T4400] which lock already depends on the new lock. [ 568.570336][ T4400] [ 568.580819][ T4400] [ 568.580819][ T4400] the existing dependency chain (in reverse order) is: [ 568.589822][ T4400] [ 568.589822][ T4400] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 568.597444][ T4400] __might_fault+0xcb/0x130 [ 568.602465][ T4400] _copy_from_iter+0x100/0x1660 [ 568.607890][ T4400] tcp_sendmsg_locked+0x2620/0x55c0 [ 568.613681][ T4400] tcp_sendmsg+0x2f/0x50 [ 568.618437][ T4400] sock_sendmsg_nosec+0x10e/0x180 [ 568.623980][ T4400] sock_write_iter+0x2de/0x3e0 [ 568.629265][ T4400] vfs_write+0x612/0xba0 [ 568.634027][ T4400] ksys_write+0x150/0x270 [ 568.638901][ T4400] do_syscall_64+0x174/0x580 [ 568.644005][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.650412][ T4400] [ 568.650412][ T4400] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 568.658072][ T4400] lock_sock_nested+0x41/0x100 [ 568.663424][ T4400] inet_shutdown+0x6a/0x390 [ 568.668562][ T4400] nbd_mark_nsock_dead+0x2cb/0x550 [ 568.674251][ T4400] recv_work+0x1cee/0x1e10 [ 568.679204][ T4400] process_scheduled_works+0xa8e/0x14e0 [ 568.685276][ T4400] worker_thread+0xa47/0xfb0 [ 568.690378][ T4400] kthread+0x388/0x470 [ 568.694972][ T4400] ret_from_fork+0x514/0xb70 [ 568.700189][ T4400] ret_from_fork_asm+0x1a/0x30 [ 568.705489][ T4400] [ 568.705489][ T4400] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 568.713143][ T4400] __mutex_lock+0x19d/0x1550 [ 568.718324][ T4400] nbd_queue_rq+0x373/0x1150 [ 568.723504][ T4400] blk_mq_dispatch_rq_list+0x499/0x1990 [ 568.729649][ T4400] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 568.736645][ T4400] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 568.743145][ T4400] blk_mq_run_work_fn+0x16c/0x300 [ 568.748679][ T4400] process_scheduled_works+0xa8e/0x14e0 [ 568.754738][ T4400] worker_thread+0xa47/0xfb0 [ 568.759844][ T4400] kthread+0x388/0x470 [ 568.764426][ T4400] ret_from_fork+0x514/0xb70 [ 568.769534][ T4400] ret_from_fork_asm+0x1a/0x30 [ 568.774808][ T4400] [ 568.774808][ T4400] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 568.782016][ T4400] __mutex_lock+0x19d/0x1550 [ 568.787112][ T4400] nbd_queue_rq+0xc1/0x1150 [ 568.792129][ T4400] blk_mq_dispatch_rq_list+0x499/0x1990 [ 568.798216][ T4400] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 568.805066][ T4400] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 568.812100][ T4400] blk_mq_run_work_fn+0x16c/0x300 [ 568.817639][ T4400] process_scheduled_works+0xa8e/0x14e0 [ 568.823698][ T4400] worker_thread+0xa47/0xfb0 [ 568.828837][ T4400] kthread+0x388/0x470 [ 568.833445][ T4400] ret_from_fork+0x514/0xb70 [ 568.838570][ T4400] ret_from_fork_asm+0x1a/0x30 [ 568.843850][ T4400] [ 568.843850][ T4400] -> #3 (set->srcu){.+.+}-{0:0}: [ 568.850967][ T4400] __synchronize_srcu+0xc9/0x2f0 [ 568.856458][ T4400] elevator_switch+0x1e8/0x7b0 [ 568.861821][ T4400] elevator_change+0x2fa/0x480 [ 568.867098][ T4400] elevator_set_default+0x375/0x440 [ 568.872903][ T4400] blk_register_queue+0x3f3/0x4e0 [ 568.878479][ T4400] __add_disk+0x6cb/0xe30 [ 568.883319][ T4400] add_disk_fwnode+0x100/0x3a0 [ 568.888596][ T4400] nbd_dev_add+0x733/0xb60 [ 568.893530][ T4400] nbd_init+0x15f/0x1e0 [ 568.898299][ T4400] do_one_initcall+0x250/0x870 [ 568.903608][ T4400] do_initcall_level+0x10a/0x1a0 [ 568.909108][ T4400] do_initcalls+0x59/0xa0 [ 568.913954][ T4400] kernel_init_freeable+0x29d/0x3e0 [ 568.919695][ T4400] kernel_init+0x1d/0x1d0 [ 568.925142][ T4400] ret_from_fork+0x514/0xb70 [ 568.930249][ T4400] ret_from_fork_asm+0x1a/0x30 [ 568.935520][ T4400] [ 568.935520][ T4400] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 568.943410][ T4400] __mutex_lock+0x19d/0x1550 [ 568.948513][ T4400] elevator_change+0x1af/0x480 [ 568.954572][ T4400] elevator_set_none+0xb5/0x140 [ 568.959934][ T4400] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 568.966255][ T4400] nbd_start_device+0x189/0xb30 [ 568.971620][ T4400] nbd_genl_connect+0x1597/0x1c10 [ 568.977159][ T4400] genl_family_rcv_msg_doit+0x233/0x340 [ 568.983287][ T4400] genl_rcv_msg+0x614/0x7a0 [ 568.988299][ T4400] netlink_rcv_skb+0x226/0x4a0 [ 568.993569][ T4400] genl_rcv+0x28/0x40 [ 568.998060][ T4400] netlink_unicast+0x7bb/0x940 [ 569.003374][ T4400] netlink_sendmsg+0x813/0xb40 [ 569.008649][ T4400] sock_sendmsg_nosec+0x13a/0x180 [ 569.014196][ T4400] ____sys_sendmsg+0x54e/0x850 [ 569.019468][ T4400] ___sys_sendmsg+0x2a5/0x360 [ 569.024651][ T4400] __x64_sys_sendmsg+0x1b1/0x290 [ 569.030093][ T4400] do_syscall_64+0x174/0x580 [ 569.035190][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.041592][ T4400] [ 569.041592][ T4400] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 569.050648][ T4400] blk_alloc_queue+0x544/0x690 [ 569.055931][ T4400] __blk_mq_alloc_disk+0x194/0x390 [ 569.061562][ T4400] nbd_dev_add+0x494/0xb60 [ 569.066588][ T4400] nbd_init+0x15f/0x1e0 [ 569.071254][ T4400] do_one_initcall+0x250/0x870 [ 569.076534][ T4400] do_initcall_level+0x10a/0x1a0 [ 569.081986][ T4400] do_initcalls+0x59/0xa0 [ 569.086822][ T4400] kernel_init_freeable+0x29d/0x3e0 [ 569.092529][ T4400] kernel_init+0x1d/0x1d0 [ 569.097369][ T4400] ret_from_fork+0x514/0xb70 [ 569.102472][ T4400] ret_from_fork_asm+0x1a/0x30 [ 569.107753][ T4400] [ 569.107753][ T4400] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 569.114958][ T4400] __lock_acquire+0x1520/0x2cf0 [ 569.120413][ T4400] lock_acquire+0x106/0x350 [ 569.125428][ T4400] fs_reclaim_acquire+0x71/0x100 [ 569.130878][ T4400] prepare_alloc_pages+0x15b/0x650 [ 569.136501][ T4400] __alloc_frozen_pages_noprof+0x12f/0x380 [ 569.142817][ T4400] alloc_pages_mpol+0x212/0x380 [ 569.148180][ T4400] folio_alloc_mpol_noprof+0x39/0x160 [ 569.154065][ T4400] vma_alloc_folio_noprof+0xe1/0x1e0 [ 569.159874][ T4400] do_pte_missing+0x173a/0x34b0 [ 569.165237][ T4400] handle_mm_fault+0x1b36/0x3080 [ 569.170685][ T4400] do_user_addr_fault+0x744/0x1340 [ 569.176310][ T4400] exc_page_fault+0x6a/0xc0 [ 569.181340][ T4400] asm_exc_page_fault+0x26/0x30 [ 569.186698][ T4400] ep_try_send_events+0x5a2/0xd50 [ 569.192262][ T4400] do_epoll_wait+0x483/0xd30 [ 569.197361][ T4400] __se_sys_epoll_pwait+0x1a2/0x390 [ 569.203069][ T4400] do_syscall_64+0x174/0x580 [ 569.208204][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.214617][ T4400] [ 569.214617][ T4400] other info that might help us debug this: [ 569.214617][ T4400] [ 569.224829][ T4400] Chain exists of: [ 569.224829][ T4400] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 569.224829][ T4400] [ 569.237508][ T4400] Possible unsafe locking scenario: [ 569.237508][ T4400] [ 569.244994][ T4400] CPU0 CPU1 [ 569.250405][ T4400] ---- ---- [ 569.255760][ T4400] rlock(&mm->mmap_lock); [ 569.260168][ T4400] lock(sk_lock-AF_INET); [ 569.267095][ T4400] lock(&mm->mmap_lock); [ 569.273927][ T4400] lock(fs_reclaim); [ 569.277894][ T4400] [ 569.277894][ T4400] *** DEADLOCK *** [ 569.277894][ T4400] [ 569.286016][ T4400] 2 locks held by syz.2.14553/4400: [ 569.291193][ T4400] #0: ffff8880343bb060 (&ep->mtx){+.+.}-{4:4}, at: ep_try_send_events+0x197/0xd50 [ 569.300594][ T4400] #1: ffff888056fad038 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 569.310515][ T4400] [ 569.310515][ T4400] stack backtrace: [ 569.316392][ T4400] CPU: 1 UID: 0 PID: 4400 Comm: syz.2.14553 Not tainted syzkaller #0 PREEMPT(full) [ 569.316411][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 569.316421][ T4400] Call Trace: [ 569.316430][ T4400] [ 569.316437][ T4400] dump_stack_lvl+0xe8/0x150 [ 569.316462][ T4400] print_circular_bug+0x2e1/0x300 [ 569.316479][ T4400] check_noncircular+0x12e/0x150 [ 569.316504][ T4400] __lock_acquire+0x1520/0x2cf0 [ 569.316530][ T4400] ? unwind_next_frame+0x8f/0x2550 [ 569.316547][ T4400] ? prepare_alloc_pages+0x15b/0x650 [ 569.316566][ T4400] lock_acquire+0x106/0x350 [ 569.316584][ T4400] ? prepare_alloc_pages+0x15b/0x650 [ 569.316604][ T4400] ? __lock_acquire+0x683/0x2cf0 [ 569.316625][ T4400] fs_reclaim_acquire+0x71/0x100 [ 569.316643][ T4400] ? prepare_alloc_pages+0x15b/0x650 [ 569.316660][ T4400] prepare_alloc_pages+0x15b/0x650 [ 569.316681][ T4400] __alloc_frozen_pages_noprof+0x12f/0x380 [ 569.316703][ T4400] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 569.316724][ T4400] ? __pfx_policy_nodemask+0x10/0x10 [ 569.316746][ T4400] ? __lock_acquire+0x683/0x2cf0 [ 569.316766][ T4400] alloc_pages_mpol+0x212/0x380 [ 569.316789][ T4400] folio_alloc_mpol_noprof+0x39/0x160 [ 569.316811][ T4400] vma_alloc_folio_noprof+0xe1/0x1e0 [ 569.316835][ T4400] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 569.316856][ T4400] ? __pte_offset_map+0x29/0x240 [ 569.316871][ T4400] ? __pte_offset_map+0x29/0x240 [ 569.316887][ T4400] do_pte_missing+0x173a/0x34b0 [ 569.316912][ T4400] handle_mm_fault+0x1b36/0x3080 [ 569.316932][ T4400] ? handle_mm_fault+0xec/0x3080 [ 569.316949][ T4400] ? __pfx_handle_mm_fault+0x10/0x10 [ 569.316971][ T4400] ? lock_mm_and_find_vma+0xa7/0x340 [ 569.316990][ T4400] do_user_addr_fault+0x744/0x1340 [ 569.317017][ T4400] exc_page_fault+0x6a/0xc0 [ 569.317040][ T4400] asm_exc_page_fault+0x26/0x30 [ 569.317056][ T4400] RIP: 0010:ep_try_send_events+0x5a2/0xd50 [ 569.317080][ T4400] Code: b6 04 28 84 c0 0f 85 f8 03 00 00 49 8b 06 48 ba 00 f0 ff ff ff 7f 00 00 48 8b 74 24 48 48 89 f1 48 39 d1 48 0f 47 ca 0f 01 cb <44> 89 21 48 89 41 04 0f 01 ca 48 83 c6 0c 4c 8d a4 24 80 00 00 00 [ 569.317093][ T4400] RSP: 0018:ffffc9000d1afb00 EFLAGS: 00050283 [ 569.317108][ T4400] RAX: 0000000000000000 RBX: ffff88807e94d618 RCX: 0000200000000280 [ 569.317119][ T4400] RDX: 00007ffffffff000 RSI: 0000200000000280 RDI: ffff88807e94d673 [ 569.317130][ T4400] RBP: ffffc9000d1afc10 R08: ffff8880370519df R09: 1ffff11006e0a33b [ 569.317141][ T4400] R10: dffffc0000000000 R11: ffffed1006e0a33c R12: 0000000000000010 [ 569.317151][ T4400] R13: dffffc0000000000 R14: ffff88807e94d66c R15: 1ffff1100fd29acd [ 569.317173][ T4400] ? __pfx_ep_try_send_events+0x10/0x10 [ 569.317196][ T4400] ? ep_events_available+0xb4/0x280 [ 569.317216][ T4400] ? do_epoll_wait+0x385/0xd30 [ 569.317230][ T4400] ? lockdep_hardirqs_on+0x7a/0x110 [ 569.317251][ T4400] ? ep_events_available+0x15b/0x280 [ 569.317273][ T4400] do_epoll_wait+0x483/0xd30 [ 569.317294][ T4400] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 569.317314][ T4400] ? __pfx_do_epoll_wait+0x10/0x10 [ 569.317333][ T4400] ? seqcount_lockdep_reader_access+0xea/0x100 [ 569.317352][ T4400] ? set_user_sigmask+0xcd/0x1c0 [ 569.317393][ T4400] __se_sys_epoll_pwait+0x1a2/0x390 [ 569.317415][ T4400] ? __pfx___se_sys_epoll_pwait+0x10/0x10 [ 569.317441][ T4400] ? __x64_sys_epoll_pwait+0x21/0xf0 [ 569.317462][ T4400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.317477][ T4400] do_syscall_64+0x174/0x580 [ 569.317490][ T4400] ? trace_irq_disable+0x3b/0x140 [ 569.317508][ T4400] ? clear_bhb_loop+0x40/0x90 [ 569.317525][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.317539][ T4400] RIP: 0033:0x7fedd379de99 [ 569.317554][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.317567][ T4400] RSP: 002b:00007fedd46c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 569.317582][ T4400] RAX: ffffffffffffffda RBX: 00007fedd3a25fa0 RCX: 00007fedd379de99 [ 569.317592][ T4400] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 569.317602][ T4400] RBP: 00007fedd3833eaf R08: 0000000000000000 R09: 0000000000000000 [ 569.317611][ T4400] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 569.317620][ T4400] R13: 00007fedd3a26038 R14: 00007fedd3a25fa0 R15: 00007fffca5e8bc8 [ 569.317637][ T4400] [ 569.750536][ T4401] syzkaller1: entered promiscuous mode [ 569.756154][ T4401] syzkaller1: entered allmulticast mode