last executing test programs: 2.294556977s ago: executing program 0 (id=14780): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffd, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x10000000, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.230865272s ago: executing program 3 (id=14781): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 2.126421235s ago: executing program 3 (id=14783): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x6001}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.987598764s ago: executing program 0 (id=14785): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(r1, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) 1.967081468s ago: executing program 4 (id=14786): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0x5, 0xe}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x6, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000002}, 0x10050090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.921917573s ago: executing program 0 (id=14788): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.892222369s ago: executing program 3 (id=14789): socket$nl_rdma(0x10, 0x3, 0x14) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 1.722366315s ago: executing program 1 (id=14790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xc5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.673321793s ago: executing program 0 (id=14791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd24, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x480d8}, 0x20004804) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x2000005, 0x5, 0xb762, 0x6, 0x7, 0x8, 0x7, 0x2, 0x80000001, 0x400, 0x800, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x5, 0x7, 0x0, 0x82, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x3, 0x9, 0xa, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffffa, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x2, 0x8, 0x7, 0x1, 0xffffffff, 0x1, 0x7, 0x7fffffff, 0x4, 0xe, 0x8000, 0x6, 0x45c, 0x80, 0x3, 0xae, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xb, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x6, 0x4, 0x7, 0x485e, 0xa89, 0x0, 0x3, 0x7, 0x7, 0x101, 0x2d5421e5, 0x67ccdc5e, 0x10000, 0xffffffff, 0xa, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x2, 0x401, 0x4, 0x9, 0x3, 0x5, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x5, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x6, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x5, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x9, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x0, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x1, 0x6, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.458619659s ago: executing program 1 (id=14793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.317270386s ago: executing program 0 (id=14794): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) socket(0x14, 0x2, 0x4) listen(r0, 0x0) close(0x4) 1.315586548s ago: executing program 4 (id=14796): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)="8414a2ce64638a509900a9a74bb01c", 0xf) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 1.24508219s ago: executing program 1 (id=14797): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.070865936s ago: executing program 2 (id=14798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r1, 0x0) 1.070437978s ago: executing program 4 (id=14799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 1.050286385s ago: executing program 1 (id=14800): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) 1.014504053s ago: executing program 2 (id=14801): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x50) 903.676723ms ago: executing program 2 (id=14802): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) 894.211438ms ago: executing program 1 (id=14803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 783.635414ms ago: executing program 4 (id=14804): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x3c}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 768.928677ms ago: executing program 2 (id=14805): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000580)}, {&(0x7f0000000a80)}], 0x3}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x5a2}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18", 0xc1}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 648.50134ms ago: executing program 4 (id=14806): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) 635.615818ms ago: executing program 3 (id=14807): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) readv(r0, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000911ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20184f93"], 0x4a) 532.337145ms ago: executing program 1 (id=14808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 531.580545ms ago: executing program 2 (id=14809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x4008008) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 435.499113ms ago: executing program 4 (id=14810): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xc2) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 305.111509ms ago: executing program 0 (id=14811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3}, 0x14) 189.396658ms ago: executing program 3 (id=14812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0), 0x8) 127.329199ms ago: executing program 2 (id=14813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd6, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) 0s ago: executing program 3 (id=14814): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.4.10451'. [ 469.517047][T28074] netlink: 'syz.4.10484': attribute type 1 has an invalid length. [ 469.547701][T28074] netlink: 'syz.4.10484': attribute type 3 has an invalid length. [ 469.595489][T28074] netlink: 'syz.4.10484': attribute type 7 has an invalid length. [ 469.609260][T28082] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.617203][T28082] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.626935][T28074] netlink: 'syz.4.10484': attribute type 8 has an invalid length. [ 469.650770][T28074] NCSI netlink: No device for ifindex 131092 [ 470.015824][T28106] __nla_validate_parse: 6 callbacks suppressed [ 470.015846][T28106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10500'. [ 470.051335][T28106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10500'. [ 470.493581][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10513'. [ 470.689597][T28144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10517'. [ 471.041516][T28159] netlink: 'syz.3.10524': attribute type 51 has an invalid length. [ 471.136253][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10526'. [ 471.551945][T28189] sctp: [Deprecated]: syz.4.10538 (pid 28189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.551945][T28189] Use struct sctp_sack_info instead [ 471.565233][T28191] netlink: 284 bytes leftover after parsing attributes in process `syz.2.10540'. [ 471.666135][T28197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10542'. [ 472.726131][T28262] netlink: 'syz.1.10573': attribute type 5 has an invalid length. [ 473.012972][T28281] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10580'. [ 474.341813][T28355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10616'. [ 474.418391][T28360] netem: incorrect gi model size [ 474.439850][T28360] netem: change failed [ 474.556423][T28362] netlink: 248 bytes leftover after parsing attributes in process `syz.2.10618'. [ 475.372633][T28413] tipc: Enabled bearer , priority 0 [ 475.816764][T28439] bond5: ARP target 1.0.0.0 is already present [ 475.823336][T28439] bond5: option arp_ip_target: invalid value (1) [ 475.854298][T28439] bond5 (unregistering): Released all slaves [ 475.888455][T28446] __nla_validate_parse: 1 callbacks suppressed [ 475.888476][T28446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10651'. [ 476.492607][ T1217] tipc: Node number set to 4269801642 [ 476.501780][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10663'. [ 477.108800][T28493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10671'. [ 477.533573][T28515] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.10682'. [ 477.715706][T28522] xt_hashlimit: size too large, truncated to 1048576 [ 477.804710][T28529] –: renamed from vxcan1 [ 478.247072][T28554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10696'. [ 478.365025][T28560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10700'. [ 478.476095][T28565] netlink: 'syz.1.10704': attribute type 2 has an invalid length. [ 478.487881][T28565] netlink: 'syz.1.10704': attribute type 2 has an invalid length. [ 478.884367][T28586] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10713'. [ 478.956006][T28589] block nbd4: not configured, cannot reconfigure [ 479.227978][T28603] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10721'. [ 479.428930][T28613] syzkaller1: entered promiscuous mode [ 479.447226][T28613] syzkaller1: entered allmulticast mode [ 479.464999][T28619] netlink: 'syz.4.10728': attribute type 11 has an invalid length. [ 479.818188][T28639] syzkaller1: entered promiscuous mode [ 479.852040][T28639] syzkaller1: entered allmulticast mode [ 480.201932][T28660] rdma_rxe: rxe_newlink: failed to add veth0_macvtap [ 480.225109][T28660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.619219][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10759'. [ 480.708306][T28684] team0: Port device team_slave_0 removed [ 480.870689][T28700] macvlan0: entered promiscuous mode [ 481.270711][T28723] netlink: 'syz.3.10775': attribute type 11 has an invalid length. [ 482.246958][T28778] netlink: 'syz.1.10801': attribute type 17 has an invalid length. [ 482.255733][T28778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10801'. [ 482.266102][T28778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10801'. [ 482.293496][T28779] netlink: 'syz.2.10802': attribute type 17 has an invalid length. [ 482.308788][T28778] gretap0: entered promiscuous mode [ 482.322641][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10802'. [ 482.333583][T28779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10802'. [ 482.354830][T28778] gretap0: left promiscuous mode [ 482.521205][T28788] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 482.955967][T28815] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10816'. [ 482.969016][T28814] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10818'. [ 483.230419][T28828] netlink: 'syz.1.10826': attribute type 63 has an invalid length. [ 483.239743][T28828] netlink: 'syz.1.10826': attribute type 63 has an invalid length. [ 483.559875][T28848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10833'. [ 484.215929][T28885] syzkaller1: entered promiscuous mode [ 484.239475][T28885] syzkaller1: entered allmulticast mode [ 484.706912][T28917] netlink: 'syz.0.10865': attribute type 4 has an invalid length. [ 484.726965][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10862'. [ 484.758467][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10862'. [ 484.839201][T28925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10867'. [ 485.266320][T28949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.470006][T28954] syzkaller1: entered promiscuous mode [ 485.476837][T28954] syzkaller1: entered allmulticast mode [ 485.771830][T28969] syzkaller1: entered promiscuous mode [ 485.787785][T28969] syzkaller1: entered allmulticast mode [ 485.807855][T28977] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 485.889027][T28980] macvtap1: entered promiscuous mode [ 485.895296][T28980] macvtap1: entered allmulticast mode [ 485.910488][T28980] veth1_vlan: entered allmulticast mode [ 485.955285][T28982] macvtap2: entered promiscuous mode [ 485.960672][T28982] macvtap2: entered allmulticast mode [ 486.770870][T29019] netlink: 'syz.3.10905': attribute type 2 has an invalid length. [ 487.042783][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 60 seconds [ 487.053688][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 60 seconds [ 487.066828][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 60 seconds [ 487.077959][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 60 seconds [ 487.297128][T29052] tipc: Started in network mode [ 487.314734][T29052] tipc: Node identity e0000001, cluster identity 4711 [ 487.329309][T29052] tipc: Enabling of bearer rejected, failed to enable media [ 487.830183][T29081] __nla_validate_parse: 4 callbacks suppressed [ 487.830208][T29081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10936'. [ 487.847889][T29081] netlink: 'syz.0.10936': attribute type 7 has an invalid length. [ 487.856089][T29081] netlink: 'syz.0.10936': attribute type 8 has an invalid length. [ 487.873013][T29081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10936'. [ 488.140772][T29096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10941'. [ 488.315703][T29105] syzkaller1: entered promiscuous mode [ 488.341974][T29105] syzkaller1: entered allmulticast mode [ 488.383488][T29108] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 488.526136][T29116] erspan0: entered promiscuous mode [ 488.558698][T29116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10951'. [ 488.782797][T29128] syzkaller1: entered promiscuous mode [ 488.788361][T29128] syzkaller1: entered allmulticast mode [ 488.875392][T29136] syzkaller1: entered promiscuous mode [ 488.881103][T29136] syzkaller1: entered allmulticast mode [ 489.226161][T29158] syzkaller1: entered promiscuous mode [ 489.231871][T29158] syzkaller1: entered allmulticast mode [ 490.042953][T29195] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10985'. [ 490.120522][T29199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10988'. [ 491.217067][ T5196] udevd[5196]: worker [24310] /devices/virtual/block/nbd2 is taking a long time [ 491.367239][T29263] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11017'. [ 492.070929][T29300] netlink: 'syz.0.11035': attribute type 39 has an invalid length. [ 492.148094][T29302] syzkaller1: entered promiscuous mode [ 492.154692][T29302] syzkaller1: entered allmulticast mode [ 492.442335][T29317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11043'. [ 492.980913][T29342] netlink: 'syz.1.11054': attribute type 10 has an invalid length. [ 493.014004][T29342] bridge_slave_1: left allmulticast mode [ 493.033272][T29342] bridge_slave_1: left promiscuous mode [ 493.048137][T29342] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.086685][T29342] bridge_slave_1: entered promiscuous mode [ 493.102016][T29342] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 493.245407][T29347] macvlan0: entered promiscuous mode [ 493.455665][T29359] syzkaller1: entered promiscuous mode [ 493.476964][T29359] syzkaller1: entered allmulticast mode [ 493.614097][T29367] siw: device registration error -23 [ 493.791435][T29382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11071'. [ 493.800859][T29382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11071'. [ 493.810469][T29382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11071'. [ 493.831862][T29382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11071'. [ 494.306343][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11086'. [ 494.489260][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11093'. [ 494.608942][T29428] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 494.717862][T29436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11099'. [ 495.295571][T29472] netlink: 'syz.0.11116': attribute type 29 has an invalid length. [ 495.317313][T29472] netlink: 'syz.0.11116': attribute type 29 has an invalid length. [ 495.326975][T29472] netlink: 500 bytes leftover after parsing attributes in process `syz.0.11116'. [ 496.675129][T29554] team0 (unregistering): Port device team_slave_0 removed [ 496.690826][T29554] team0 (unregistering): Port device team_slave_1 removed [ 497.125348][ T1217] IPVS: starting estimator thread 0... [ 497.132465][T29574] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.213720][T29576] IPVS: using max 30 ests per chain, 72000 per kthread [ 497.747960][T29602] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.11174'. [ 497.925340][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11180'. [ 497.952245][T29611] block nbd5: Unsupported socket: should be TCP or UNIX. [ 498.370821][T29637] syzkaller1: entered promiscuous mode [ 498.390438][T29637] syzkaller1: entered allmulticast mode [ 499.027230][T29674] pim6reg1: entered promiscuous mode [ 499.033127][T29674] pim6reg1: entered allmulticast mode [ 499.306467][T29687] __nla_validate_parse: 1 callbacks suppressed [ 499.306490][T29687] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11213'. [ 499.325461][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11215'. [ 500.031579][T29724] netlink: 43 bytes leftover after parsing attributes in process `syz.1.11232'. [ 500.693464][ T1217] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 500.918563][T29771] netlink: 'syz.3.11253': attribute type 1 has an invalid length. [ 500.930064][T29771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11253'. [ 500.954483][T29772] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11252'. [ 500.994302][ T1217] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.092388][T29777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11254'. [ 501.101624][T29777] netlink: 'syz.4.11254': attribute type 7 has an invalid length. [ 501.138005][T29777] netlink: 'syz.4.11254': attribute type 8 has an invalid length. [ 501.174108][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11254'. [ 501.791695][T29815] netlink: 'syz.2.11274': attribute type 1 has an invalid length. [ 501.819094][T29815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11274'. [ 502.179464][T29842] tipc: Resetting bearer [ 502.327010][T29842] tipc: Resetting bearer [ 502.348860][T29851] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11286'. [ 502.361117][T29851] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11286'. [ 502.839322][T29881] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.051724][T29893] veth0: entered promiscuous mode [ 503.067725][T29891] veth0: left promiscuous mode [ 503.231731][T29904] syzkaller1: entered promiscuous mode [ 503.291646][T29904] syzkaller1: entered allmulticast mode [ 503.606267][T29925] netlink: 'syz.4.11318': attribute type 7 has an invalid length. [ 503.645033][T29925] gretap0: entered promiscuous mode [ 503.658358][T29925] gretap0: left promiscuous mode [ 503.882405][T29937] block nbd5: server does not support multiple connections per device. [ 503.891604][T29937] block nbd5: shutting down sockets [ 504.069601][T29953] netlink: 'syz.3.11332': attribute type 1 has an invalid length. [ 504.089594][T29953] netlink: 'syz.3.11332': attribute type 2 has an invalid length. [ 504.294072][T29964] nbd: device at index 64 is going down [ 504.444484][T24301] udevd[24301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 504.611078][T29981] syzkaller1: entered promiscuous mode [ 504.618949][T29981] syzkaller1: entered allmulticast mode [ 505.390030][T30025] __nla_validate_parse: 9 callbacks suppressed [ 505.390056][T30025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11362'. [ 505.407849][T30025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11362'. [ 506.504457][T30085] sctp: [Deprecated]: syz.1.11386 (pid 30085) Use of int in max_burst socket option deprecated. [ 506.504457][T30085] Use struct sctp_assoc_value instead [ 506.716723][T30099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11395'. [ 507.178715][T30129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11407'. [ 507.963124][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11428'. [ 508.295138][T30192] syzkaller1: entered promiscuous mode [ 508.300923][T30192] syzkaller1: entered allmulticast mode [ 508.457079][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11439'. [ 508.530367][T30200] gtp1: entered promiscuous mode [ 508.567303][T30200] gtp1: entered allmulticast mode [ 508.655933][T30211] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11445'. [ 508.792043][ T796] wg1 speed is unknown, defaulting to 1000 [ 508.856212][T30222] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11450'. [ 509.250687][T30241] sctp: [Deprecated]: syz.3.11458 (pid 30241) Use of int in max_burst socket option. [ 509.250687][T30241] Use struct sctp_assoc_value instead [ 509.822730][T30273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11469'. [ 510.037430][T30281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11473'. [ 510.428654][T30306] veth0: entered promiscuous mode [ 510.438808][T30306] veth0: left promiscuous mode [ 512.781042][T30444] netlink: 'syz.0.11545': attribute type 1 has an invalid length. [ 513.108648][T30460] __nla_validate_parse: 1 callbacks suppressed [ 513.108671][T30460] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.11553'. [ 513.478369][T30482] syzkaller1: entered promiscuous mode [ 513.492815][T30482] syzkaller1: entered allmulticast mode [ 513.792990][T30502] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 513.844647][T30502] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 513.888623][T30502] gretap2: entered promiscuous mode [ 513.897780][T30502] gretap2: entered allmulticast mode [ 514.173535][T30527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11586'. [ 514.183835][T30527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11586'. [ 514.558330][T30548] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11596'. [ 514.599763][T30552] tipc: Enabled bearer , priority 5 [ 514.621552][T30554] sctp: [Deprecated]: syz.3.11599 (pid 30554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.621552][T30554] Use struct sctp_sack_info instead [ 514.995155][T30577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11610'. [ 515.061499][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11612'. [ 515.090076][T30582] syzkaller1: entered promiscuous mode [ 515.096944][T30582] syzkaller1: entered allmulticast mode [ 515.256221][T30594] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11617'. [ 515.841296][ T30] audit: type=1800 audit(1775060716.254:6): pid=30623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11631" name="memory.events" dev="tmpfs" ino=11748 res=0 errno=0 [ 516.421999][T30664] veth0: entered promiscuous mode [ 516.448251][T30663] veth0: left promiscuous mode [ 516.464488][T30666] ±ÿ=–a²š«: renamed from lo [ 516.864880][T30692] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11659'. [ 517.163438][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 90 seconds [ 517.174387][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 90 seconds [ 517.185600][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 90 seconds [ 517.197712][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 90 seconds [ 517.214830][T30712] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 517.511519][T30718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11670'. [ 517.551206][T30718] netlink: 'syz.4.11670': attribute type 7 has an invalid length. [ 517.574526][T30718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11670'. [ 518.296631][T30766] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11694'. [ 518.588703][T30783] netlink: 'syz.3.11701': attribute type 1 has an invalid length. [ 518.602282][T30783] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11701'. [ 518.632027][T30783] netlink: 'syz.3.11701': attribute type 1 has an invalid length. [ 518.652346][T30783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11701'. [ 518.750835][T30791] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11706'. [ 519.569929][T30844] ±ÿ=–a²š«: renamed from lo [ 519.673983][T30850] netlink: 'syz.1.11733': attribute type 1 has an invalid length. [ 519.693960][T30850] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11733'. [ 519.705071][T30850] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11733'. [ 519.716146][T30850] netlink: 'syz.1.11733': attribute type 1 has an invalid length. [ 519.724493][T30850] netlink: 634 bytes leftover after parsing attributes in process `syz.1.11733'. [ 519.880476][T30859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11737'. [ 520.037589][T30870] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.11741'. [ 520.049704][T30870] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 520.058488][T30872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11742'. [ 520.344686][T30885] syzkaller1: entered promiscuous mode [ 520.355907][T30885] syzkaller1: entered allmulticast mode [ 520.857145][T30917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.886791][T30920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.340687][T30943] netlink: ct family unspecified [ 521.699550][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079b81000: rx timeout, send abort [ 521.710383][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079b81000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 522.405441][T30995] tipc: Disabling bearer [ 522.697445][T31019] sock: sock_set_timeout: `syz.4.11806' (pid 31019) tries to set negative timeout [ 523.356562][T31058] __nla_validate_parse: 13 callbacks suppressed [ 523.356585][T31058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11826'. [ 523.660848][T31076] syzkaller1: entered promiscuous mode [ 523.674016][T31076] syzkaller1: entered allmulticast mode [ 524.388143][T31115] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 524.429013][T31123] netlink: 'syz.2.11851': attribute type 25 has an invalid length. [ 524.457140][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11851'. [ 524.527489][T28395] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.536927][T31123] netlink: 'syz.2.11851': attribute type 25 has an invalid length. [ 524.553527][ T366] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.570509][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11851'. [ 524.585256][ T366] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.610315][T31129] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.11853'. [ 524.616825][ T366] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.108328][T31157] netlink: 'syz.3.11860': attribute type 12 has an invalid length. [ 525.305578][T31169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11864'. [ 525.451383][T31176] geneve3: entered promiscuous mode [ 525.460255][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 57892 - 0 [ 525.469928][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 57892 - 0 [ 525.478783][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 57892 - 0 [ 525.497718][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 57892 - 0 [ 525.559154][T31182] netlink: 512 bytes leftover after parsing attributes in process `syz.3.11869'. [ 526.005085][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11878'. [ 526.017893][T31203] syzkaller0: entered allmulticast mode [ 526.087360][T31203] syzkaller0 (unregistering): left allmulticast mode [ 526.449937][T31230] netlink: 'syz.1.11892': attribute type 1 has an invalid length. [ 526.480374][T31234] netlink: 'syz.0.11893': attribute type 4 has an invalid length. [ 526.488967][T31234] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11893'. [ 526.546233][T31236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11894'. [ 526.593110][T31236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11894'. [ 526.950165][T31260] netlink: 'syz.0.11906': attribute type 1 has an invalid length. [ 526.958554][T31260] netlink: 'syz.0.11906': attribute type 1 has an invalid length. [ 527.081113][T31267] netlink: 'syz.3.11911': attribute type 1 has an invalid length. [ 527.166962][T31267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.265582][T31275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.297771][T31275] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 527.339625][T31275] bond2: (slave vcan2): Error -95 calling set_mac_address [ 527.881714][T31300] netlink: 'syz.2.11920': attribute type 15 has an invalid length. [ 527.925087][T31300] netlink: 'syz.2.11920': attribute type 15 has an invalid length. [ 527.970482][T31304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.993180][T31304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.019721][T31304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.029052][T31304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.350690][T31319] wg1 speed is unknown, defaulting to 1000 [ 528.580484][T31340] __nla_validate_parse: 10 callbacks suppressed [ 528.580509][T31340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11936'. [ 528.683573][T31344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11939'. [ 529.277334][T31375] syzkaller1: entered promiscuous mode [ 529.286290][T31375] syzkaller1: entered allmulticast mode [ 529.341926][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11957'. [ 529.406368][T31378] wg1 speed is unknown, defaulting to 1000 [ 529.434387][T31382] hsr_slave_0 (unregistering): left promiscuous mode [ 529.580007][T31392] validate_nla: 3 callbacks suppressed [ 529.580030][T31392] netlink: 'syz.2.11960': attribute type 10 has an invalid length. [ 529.637961][T31392] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.645433][T31392] bridge0: port 1(0¾x9ÿ) entered disabled state [ 529.713956][T31392] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.721230][T31392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.728855][T31392] bridge0: port 1(0¾x9ÿ) entered blocking state [ 529.735554][T31392] bridge0: port 1(0¾x9ÿ) entered forwarding state [ 529.777134][T31392] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 530.017977][T31415] netlink: 'syz.0.11967': attribute type 11 has an invalid length. [ 530.065111][T31417] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11968'. [ 530.804082][T31456] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11984'. [ 531.016464][T31471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 531.023388][T31471] syzkaller1: Linktype set failed because interface is up [ 531.716550][T31513] netlink: 'syz.4.12008': attribute type 1 has an invalid length. [ 531.756254][T31513] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.810147][T31513] bond5: (slave geneve2): making interface the new active one [ 531.835643][T31513] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 531.938845][T31526] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12009'. [ 532.032668][T31530] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.12015'. [ 532.164425][T31537] netlink: 'syz.4.12017': attribute type 1 has an invalid length. [ 532.200397][T31537] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.348820][T31546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12023'. [ 532.535259][T31555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12027'. [ 532.627131][T31560] netlink: 'syz.0.12029': attribute type 1 has an invalid length. [ 532.744824][T31560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.752455][T31572] netlink: 'syz.3.12033': attribute type 9 has an invalid length. [ 532.760474][T31572] netlink: 'syz.3.12033': attribute type 11 has an invalid length. [ 532.774418][T31572] netlink: 'syz.3.12033': attribute type 12 has an invalid length. [ 532.790235][T31566] bond4: (slave geneve4): making interface the new active one [ 532.801190][T31566] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 532.811332][ T1152] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.822877][ T1152] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.831215][ T1152] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.851492][ T1152] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 532.872356][T31572] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.12033'. [ 532.945498][T31576] netlink: 'syz.2.12036': attribute type 1 has an invalid length. [ 533.180249][T31592] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.199706][T31592] bond6: (slave lo): Enslaving as an active interface with an up link [ 533.234805][T31592] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 533.413273][T31604] netlink: 'syz.1.12047': attribute type 7 has an invalid length. [ 533.449915][ T3511] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.460231][T31604] netlink: 'syz.1.12047': attribute type 7 has an invalid length. [ 533.468343][ T3511] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.482954][ T3511] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.989662][T31641] __nla_validate_parse: 2 callbacks suppressed [ 533.989685][T31641] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.12063'. [ 534.009760][T31641] netlink: Conntrack attr has 4 unknown bytes [ 534.043904][T31640] syzkaller1: entered promiscuous mode [ 534.052777][T31640] syzkaller1: entered allmulticast mode [ 534.121227][T31643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12065'. [ 534.159886][T31646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12067'. [ 534.194729][T31646] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.494034][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12074'. [ 534.560093][T31669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12075'. [ 534.593243][T31669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12075'. [ 534.825272][T31683] netlink: 'syz.4.12081': attribute type 1 has an invalid length. [ 534.931584][T31691] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12084'. [ 535.137807][T31701] syzkaller1: entered promiscuous mode [ 535.146548][T31701] syzkaller1: entered allmulticast mode [ 535.407578][T31713] syzkaller1: entered promiscuous mode [ 535.418377][T31713] syzkaller1: entered allmulticast mode [ 535.447340][T31722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.326991][T31776] pim6reg1: entered promiscuous mode [ 536.333905][T31776] pim6reg1: entered allmulticast mode [ 536.395386][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12119'. [ 536.407793][T31779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12119'. [ 536.419104][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12119'. [ 536.441212][T28395] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.459851][T28395] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.483705][T28395] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.502769][T28395] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.029374][T31807] netlink: 'syz.4.12131': attribute type 11 has an invalid length. [ 537.096123][T31807] netlink: 'syz.4.12131': attribute type 11 has an invalid length. [ 537.519487][T31835] syzkaller1: entered promiscuous mode [ 537.534991][T31835] syzkaller1: entered allmulticast mode [ 537.855833][T31853] netlink: 'syz.4.12153': attribute type 9 has an invalid length. [ 537.864758][T31853] netlink: 'syz.4.12153': attribute type 9 has an invalid length. [ 539.090575][T31917] trusted_key: syz.0.12181 sent an empty control message without MSG_MORE. [ 539.186486][T31921] __nla_validate_parse: 13 callbacks suppressed [ 539.186510][T31921] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12183'. [ 539.259716][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12185'. [ 539.271085][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12185'. [ 539.530814][T31939] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12191'. [ 539.645629][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12194'. [ 539.656192][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12194'. [ 539.666912][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12194'. [ 539.726900][T31948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12195'. [ 539.741152][T31949] "syz.2.12196" (31949) uses obsolete ecb(arc4) skcipher [ 539.818518][T31951] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12197'. [ 540.419466][T31985] ip6gre2: entered promiscuous mode [ 540.636915][T31999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12218'. [ 541.681211][T32062] netlink: 'syz.0.12245': attribute type 1 has an invalid length. [ 541.747829][T32066] netlink: 'syz.2.12247': attribute type 7 has an invalid length. [ 541.756437][T32066] netlink: 'syz.2.12247': attribute type 8 has an invalid length. [ 542.928877][T32128] veth0: entered promiscuous mode [ 542.957698][T32127] veth0: left promiscuous mode [ 543.673702][T32165] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 543.679705][T32165] syzkaller1: Refused to change device type [ 543.808043][T32170] syzkaller1: entered promiscuous mode [ 543.821550][T32170] syzkaller1: entered allmulticast mode [ 544.040487][T32180] netlink: 'syz.4.12284': attribute type 18 has an invalid length. [ 544.050285][T32180] netlink: 'syz.4.12284': attribute type 18 has an invalid length. [ 544.073806][T32182] netlink: 'syz.2.12283': attribute type 15 has an invalid length. [ 544.079142][T32183] netlink: 'syz.1.12282': attribute type 1 has an invalid length. [ 544.158146][T32183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.273643][T32186] bond5: (slave geneve3): Opening slave failed [ 544.454388][T32203] netlink: 'syz.3.12290': attribute type 22 has an invalid length. [ 544.470936][T32203] __nla_validate_parse: 11 callbacks suppressed [ 544.470961][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12290'. [ 544.585475][T32203] netlink: 'syz.3.12290': attribute type 22 has an invalid length. [ 544.588051][T32209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12291'. [ 544.597437][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12290'. [ 545.093014][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12297'. [ 545.152461][T32240] netlink: 'syz.3.12297': attribute type 6 has an invalid length. [ 545.160394][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12297'. [ 545.240856][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12297'. [ 545.278723][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12297'. [ 545.416390][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12301'. [ 545.905308][T32278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.086654][T32291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12320'. [ 546.096843][T32291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12320'. [ 546.314452][T32255] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 546.324978][T32255] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 546.670866][T32319] bridge_slave_1: left allmulticast mode [ 546.688040][T32319] bridge_slave_1: left promiscuous mode [ 546.695323][T32319] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.712013][T32319] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 546.790607][T32322] hsr0: left allmulticast mode [ 546.799634][T32322] hsr_slave_0: left allmulticast mode [ 546.813934][T32322] hsr_slave_1: left allmulticast mode [ 546.858152][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.873511][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 57892 - 0 [ 546.906570][ T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.915708][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.924807][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 57892 - 0 [ 546.934869][ T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.945615][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.972452][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 57892 - 0 [ 547.013156][ T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.031681][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.050515][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 57892 - 0 [ 547.085450][ T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.203482][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 120 seconds [ 547.214413][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 120 seconds [ 547.225640][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 120 seconds [ 547.237901][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 120 seconds [ 547.436071][T32357] validate_nla: 6 callbacks suppressed [ 547.436096][T32357] netlink: 'syz.2.12350': attribute type 4 has an invalid length. [ 549.104390][T32406] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 549.180851][T32406] vlan2: left allmulticast mode [ 549.187327][T32406] gretap0: left allmulticast mode [ 549.266008][T32406] bond0: left promiscuous mode [ 549.279936][T32406] ip6erspan2: left allmulticast mode [ 549.293783][T32406] gtp0: left promiscuous mode [ 549.301335][T32406] gtp0: left allmulticast mode [ 549.311405][T32406] veth1_vlan: left allmulticast mode [ 549.317283][T32406] macvtap1: left promiscuous mode [ 549.322770][T32406] macvtap1: left allmulticast mode [ 549.347735][T28395] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.400890][T28395] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.430914][T28395] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.453239][T28395] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.489096][T28395] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.519549][T28395] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.589756][T28395] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.606255][T28395] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.743494][T32458] __nla_validate_parse: 5 callbacks suppressed [ 549.743518][T32458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12383'. [ 549.781585][T32458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12383'. [ 549.802410][T32458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12383'. [ 549.996984][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12385'. [ 550.006842][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12385'. [ 550.166337][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12385'. [ 550.178347][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12385'. [ 550.671805][T32484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12391'. [ 550.702879][T32484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12391'. [ 550.732361][T32484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12391'. [ 550.886233][T32496] chnl_net:caif_netlink_parms(): no params data found [ 550.966776][T32497] bridge_slave_0: left allmulticast mode [ 550.981243][T32497] bridge_slave_0: left promiscuous mode [ 551.005057][T32497] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.082030][T32497] : (slave bridge_slave_1): Releasing backup interface [ 551.115061][T32497] : (slave bond_slave_0): Releasing backup interface [ 551.142967][T32497] : (slave bond_slave_1): Releasing backup interface [ 551.171594][T32497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.540973][T32525] "syz.0.12403" (32525) uses obsolete ecb(arc4) skcipher [ 552.385868][T32561] netlink: 'syz.3.12415': attribute type 9 has an invalid length. [ 552.406827][T32561] netlink: 'syz.3.12415': attribute type 11 has an invalid length. [ 552.436453][T32561] netlink: 'syz.3.12415': attribute type 12 has an invalid length. [ 553.374504][T32607] netlink: 'syz.1.12434': attribute type 4 has an invalid length. [ 553.424027][T32607] netlink: 'syz.1.12434': attribute type 4 has an invalid length. [ 553.644672][T32624] netlink: 'syz.1.12442': attribute type 12 has an invalid length. [ 553.662213][T32624] netlink: 'syz.1.12442': attribute type 29 has an invalid length. [ 553.703173][T32624] netlink: 'syz.1.12442': attribute type 2 has an invalid length. [ 553.999504][T32644] bond6: (slave 26±ÿ=–a²š«): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 554.018063][T32647] netlink: Unknown conntrack attr (0) [ 554.028988][T32644] bond6: (slave 26±ÿ=–a²š«): Enslaving as an active interface with an up link [ 554.096354][T32644] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 554.367795][T32668] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 554.830386][T32686] netlink: 'syz.3.12470': attribute type 10 has an invalid length. [ 555.094242][T32695] netlink: 'syz.3.12474': attribute type 9 has an invalid length. [ 555.116385][T32695] netlink: 'syz.3.12474': attribute type 11 has an invalid length. [ 555.138915][T32695] netlink: 'syz.3.12474': attribute type 12 has an invalid length. [ 555.147821][T32695] __nla_validate_parse: 14 callbacks suppressed [ 555.147842][T32695] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.12474'. [ 555.151505][T32699] bond6: (slave 26±ÿ=–a²š«): Releasing backup interface [ 555.156013][T32695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12474'. [ 555.200683][T32699] bond6: (slave 26±ÿ=–a²š«): last VLAN challenged slave left bond - VLAN blocking is removed [ 555.288190][T32699] bond0: (slave bridge0): Releasing backup interface [ 555.311534][T32699] bridge0: left promiscuous mode [ 555.352812][T32699] bridge_slave_0: left promiscuous mode [ 555.358712][T32699] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.407818][T32699] bond0: (slave bridge_slave_1): Releasing backup interface [ 555.426457][T32699] bridge_slave_1: left promiscuous mode [ 555.455661][T32699] bond0: (slave bond_slave_0): Releasing backup interface [ 555.475861][T32699] bond_slave_0: left promiscuous mode [ 555.488823][T32699] bond0: (slave bond_slave_1): Releasing backup interface [ 555.518208][T32699] bond_slave_1: left promiscuous mode [ 555.539612][T32699] team0: Port device team_slave_1 removed [ 555.547220][T32699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.571976][T32699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.599952][T32699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.637349][T32699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.665586][T32703] team0: Mode changed to "random" [ 556.394901][T32748] netlink: 'syz.0.12492': attribute type 21 has an invalid length. [ 556.419313][T32748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12492'. [ 556.617850][T32756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12495'. [ 556.696330][T32761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12495'. [ 557.050150][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12503'. [ 557.176230][ T311] bond7: entered promiscuous mode [ 557.195671][ T311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.219901][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12503'. [ 557.287816][ T313] bond7: (slave bridge2): making interface the new active one [ 557.323994][ T313] bridge2: entered promiscuous mode [ 557.347763][ T313] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 557.406547][ T316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 557.450197][ T317] bond8: (slave ip6erspan0): making interface the new active one [ 557.474682][ T317] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 557.852350][ T329] bond6: (slave 26±ÿ=–a²š«): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.895182][ T329] bond6: (slave 26±ÿ=–a²š«): Enslaving as an active interface with an up link [ 557.928172][ T329] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 558.369100][ T348] syzkaller1: entered promiscuous mode [ 558.388385][ T348] syzkaller1: entered allmulticast mode [ 558.896741][ T381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12534'. [ 559.055581][ T386] atomic_op ffff88807d708198 conn xmit_atomic 0000000000000000 [ 559.212941][ T391] syzkaller1: entered promiscuous mode [ 559.228843][ T391] syzkaller1: entered allmulticast mode [ 559.283665][ T395] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12540'. [ 559.416578][ T399] vlan4: entered allmulticast mode [ 559.421802][ T399] bond0: entered allmulticast mode [ 559.433081][ T399] bond_slave_0: entered allmulticast mode [ 559.439342][ T399] bond_slave_1: entered allmulticast mode [ 559.455612][ T399] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12542'. [ 559.524196][ T399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.533793][ T399] bond_slave_0: left allmulticast mode [ 559.601822][ T399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.620121][ T399] bond_slave_1: left allmulticast mode [ 559.635603][ T399] bond0 (unregistering): Released all slaves [ 560.082781][ T430] bond6: option mode: unable to set because the bond device has slaves [ 560.154418][ T433] validate_nla: 8 callbacks suppressed [ 560.154444][ T433] netlink: 'syz.0.12557': attribute type 9 has an invalid length. [ 560.161358][ T430] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 560.193814][ T433] netlink: 'syz.0.12557': attribute type 11 has an invalid length. [ 560.215965][ T436] __nla_validate_parse: 1 callbacks suppressed [ 560.215989][ T436] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12558'. [ 560.238693][ T433] netlink: 'syz.0.12557': attribute type 12 has an invalid length. [ 560.252958][ T433] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.12557'. [ 560.273001][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12557'. [ 560.551613][ T451] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12566'. [ 561.375812][ T473] syzkaller1: entered promiscuous mode [ 561.381465][ T473] syzkaller1: entered allmulticast mode [ 561.388853][ T480] netlink: 'syz.0.12575': attribute type 15 has an invalid length. [ 561.401356][ T480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12575'. [ 561.485908][ T1044] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 561.486146][ T480] netlink: 'syz.0.12575': attribute type 15 has an invalid length. [ 561.497166][ T1044] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 561.522716][ T480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12575'. [ 561.542225][ T1044] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 561.584311][ T1044] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 562.054818][ T498] vlan3: entered allmulticast mode [ 562.060033][ T498] bridge0: entered allmulticast mode [ 562.090504][ T498] bridge0: port 3(vlan3) entered blocking state [ 562.109806][ T498] bridge0: port 3(vlan3) entered disabled state [ 562.844035][ T518] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.12591'. [ 562.873369][ T518] netlink: Unknown conntrack attr (type=2304, max=9) [ 563.608488][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12600'. [ 565.074558][ T596] netlink: 51 bytes leftover after parsing attributes in process `syz.4.12619'. [ 565.273475][ T603] bond6: option mode: unable to set because the bond device has slaves [ 565.298863][ T604] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 566.697356][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12645'. [ 566.727235][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12645'. [ 567.264990][ T671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12654'. [ 567.302806][ T671] netlink: 'syz.1.12654': attribute type 7 has an invalid length. [ 567.310719][ T671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12654'. [ 567.359836][ T671] gretap0: entered promiscuous mode [ 567.368013][ T671] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 567.969786][ T694] ip6tnl5: entered promiscuous mode [ 568.190774][ T702] syzkaller1: entered promiscuous mode [ 568.216482][ T702] syzkaller1: entered allmulticast mode [ 568.768573][ T725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12678'. [ 568.884245][ T728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12679'. [ 569.985071][ T778] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12698'. [ 571.239778][ T826] netlink: 'syz.0.12719': attribute type 2 has an invalid length. [ 572.068548][ T845] xt_hashlimit: size too large, truncated to 1048576 [ 572.312808][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12730'. [ 572.401255][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12730'. [ 572.660596][ T864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12733'. [ 572.915593][ T873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12737'. [ 573.511432][ T878] netlink: 'syz.4.12738': attribute type 2 has an invalid length. [ 573.545700][ T878] netlink: 'syz.4.12738': attribute type 2 has an invalid length. [ 573.817879][ T889] netlink: 'syz.3.12743': attribute type 4 has an invalid length. [ 573.848031][ T889] netlink: 'syz.3.12743': attribute type 4 has an invalid length. [ 574.150608][ T903] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.12749'. [ 574.208051][ T906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12750'. [ 574.233433][ T906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12750'. [ 574.347333][ T915] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12753'. [ 574.384292][ T915] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12753'. [ 574.705179][ T930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12758'. [ 574.772988][ T936] netlink: 'syz.4.12760': attribute type 1 has an invalid length. [ 574.879966][ T936] bond7: entered promiscuous mode [ 574.911306][ T936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 574.970185][ T946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 574.991075][ T946] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 575.004750][ T946] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 575.050313][ T946] bond7: (slave vcan1): making interface the new active one [ 575.062584][ T946] vcan1: entered promiscuous mode [ 575.096171][ T946] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 577.081923][ T1056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.094978][ T1056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.226532][ T1056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.261780][ T1056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.291656][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 150 seconds [ 577.303809][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 150 seconds [ 577.315148][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 150 seconds [ 577.326479][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 150 seconds [ 577.388557][ T1081] __nla_validate_parse: 3 callbacks suppressed [ 577.388580][ T1081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12806'. [ 577.497349][ T1056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.508068][ T1056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.522797][ T1081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12806'. [ 577.957460][ T1044] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.993110][ T1044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.037214][ T1044] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.046249][ T1044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.159734][ T1152] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.175231][ T1152] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.236109][ T1152] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.273634][ T1152] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.757920][ T1144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12827'. [ 579.194130][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12828'. [ 579.948627][ T1172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12840'. [ 580.298143][ T1185] netlink: 'syz.2.12845': attribute type 10 has an invalid length. [ 580.326403][ T1185] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.12845'. [ 580.499837][ T1192] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 580.522601][ T1202] bridge_slave_0: invalid flags given to default FDB implementation [ 580.552493][ T1199] sock: sock_set_timeout: `syz.2.12849' (pid 1199) tries to set negative timeout [ 581.295354][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12862'. [ 581.608442][ T1243] tls_set_device_offload: netdev not found [ 582.893450][ T1313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12899'. [ 583.124766][ T1322] netlink: 'syz.4.12903': attribute type 21 has an invalid length. [ 583.174242][ T1322] netlink: 'syz.4.12903': attribute type 22 has an invalid length. [ 583.183250][ T1322] netlink: 'syz.4.12903': attribute type 23 has an invalid length. [ 583.191214][ T1322] netlink: 'syz.4.12903': attribute type 25 has an invalid length. [ 583.221011][ T1322] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12903'. [ 583.614067][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12915'. [ 583.633585][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12915'. [ 584.073207][ T1376] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12926'. [ 584.320631][ T1386] IPv6: sit6: Disabled Multicast RS [ 584.341145][ T1386] sit6: entered allmulticast mode [ 585.131426][ T1434] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12952'. [ 585.317729][ T1443] netlink: 'syz.4.12956': attribute type 1 has an invalid length. [ 585.376904][ T1443] bond8: (slave gretap2): making interface the new active one [ 585.386809][ T1443] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 585.525306][ T1447] netlink: 'syz.4.12957': attribute type 11 has an invalid length. [ 585.541038][ T1447] netlink: 'syz.4.12957': attribute type 4 has an invalid length. [ 585.549102][ T1447] netlink: 'syz.4.12957': attribute type 5 has an invalid length. [ 585.560274][ T1447] netlink: 'syz.4.12957': attribute type 6 has an invalid length. [ 585.574225][ T1447] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.12957'. [ 586.497243][ T1487] netlink: 'syz.3.12974': attribute type 1 has an invalid length. [ 586.540192][ T1490] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12975'. [ 586.610591][ T1487] bond3: entered promiscuous mode [ 586.634297][ T1487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.668540][ T1487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.676136][ T1487] bond3: (slave vti1): The slave device specified does not support setting the MAC address [ 586.687600][ T1487] bond3: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 586.701975][ T1487] bond3: (slave vti1): making interface the new active one [ 586.709748][ T1487] vti1: entered promiscuous mode [ 586.718168][ T1487] bond3: (slave vti1): Enslaving as an active interface with an up link [ 586.864628][ T1498] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.12978'. [ 587.191811][ T1515] veth1_to_bond: entered allmulticast mode [ 587.234793][ T1515] veth1_to_bond: left allmulticast mode [ 587.344135][ T1521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12989'. [ 587.956691][ T1555] sctp: [Deprecated]: syz.4.13005 (pid 1555) Use of int in maxseg socket option. [ 587.956691][ T1555] Use struct sctp_assoc_value instead [ 588.378727][ T1570] wg1 speed is unknown, defaulting to 1000 [ 588.693577][ T1579] netlink: 'syz.0.13012': attribute type 1 has an invalid length. [ 588.833311][ T1581] bond0: (slave bridge8): making interface the new active one [ 588.863426][ T1581] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 589.380990][ T1612] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13024'. [ 589.691366][ T1622] netlink: 'syz.2.13031': attribute type 1 has an invalid length. [ 589.709944][ T1622] netlink: 'syz.2.13031': attribute type 1 has an invalid length. [ 589.746365][ T1624] wg1 speed is unknown, defaulting to 1000 [ 590.120864][ T1648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13043'. [ 590.218407][ T1642] syzkaller1: entered promiscuous mode [ 590.224342][ T1642] syzkaller1: entered allmulticast mode [ 590.764358][ T1673] tipc: Failed to remove unknown binding: 66,1,1/0:4129814803/4129814805 [ 590.789676][ T1673] tipc: Failed to remove unknown binding: 66,1,1/0:4129814803/4129814805 [ 590.927939][ T1681] veth0: entered promiscuous mode [ 590.957574][ T1681] veth0: left promiscuous mode [ 591.131102][ T1689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13056'. [ 591.272399][ T1702] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.13061'. [ 591.780991][ T1709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13064'. [ 591.842994][ T1709] erspan0: entered promiscuous mode [ 591.850270][ T1709] macvtap1: entered promiscuous mode [ 591.862455][ T1709] macvtap1: entered allmulticast mode [ 591.869048][ T1709] erspan0: entered allmulticast mode [ 592.009232][ T1721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13067'. [ 592.328599][ T1728] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 592.498791][ T1745] netlink: 'syz.0.13076': attribute type 1 has an invalid length. [ 592.572444][ T1750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13077'. [ 592.645057][ T1751] bond5: (slave gretap2): making interface the new active one [ 592.653965][ T1751] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 593.210014][ T1776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13089'. [ 593.220044][ T1776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13089'. [ 593.229813][ T1776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13089'. [ 594.135732][ T1830] netlink: 'syz.0.13115': attribute type 21 has an invalid length. [ 594.146549][ T1830] netlink: 'syz.0.13115': attribute type 22 has an invalid length. [ 594.158117][ T1830] netlink: 'syz.0.13115': attribute type 23 has an invalid length. [ 594.168800][ T1830] netlink: 'syz.0.13115': attribute type 25 has an invalid length. [ 594.983371][ T1873] __nla_validate_parse: 8 callbacks suppressed [ 594.983392][ T1873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13131'. [ 595.076152][ T1879] netlink: 184 bytes leftover after parsing attributes in process `syz.4.13134'. [ 595.439337][ T1893] netlink: 'syz.3.13140': attribute type 1 has an invalid length. [ 595.476182][ T1893] bond4: entered promiscuous mode [ 595.481882][ T1893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.573308][ T1893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.621982][ T1893] bond4: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 595.654967][ T1893] bond4: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 595.678064][ T1893] bond4: (slave ip6gre3): making interface the new active one [ 595.692514][ T1893] ip6gre3: entered promiscuous mode [ 595.707610][ T1893] bond4: (slave ip6gre3): Enslaving as an active interface with an up link [ 596.486340][ T1936] netlink: 'syz.4.13154': attribute type 1 has an invalid length. [ 596.596075][ T1936] bond9: entered promiscuous mode [ 596.601772][ T1936] 8021q: adding VLAN 0 to HW filter on device bond9 [ 596.672379][ T1936] 8021q: adding VLAN 0 to HW filter on device bond9 [ 596.701436][ T1936] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 596.734471][ T1936] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 596.781801][ T1936] bond9: (slave ip6gre1): making interface the new active one [ 596.797215][ T1936] ip6gre1: entered promiscuous mode [ 596.828016][ T1936] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 597.420008][ T1980] IPv6: sit2: Disabled Multicast RS [ 597.437624][ T1980] sit2: entered allmulticast mode [ 599.429786][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13186'. [ 599.451699][ T2009] block nbd0: Unsupported socket: should be TCP or UNIX. [ 599.921482][ T2018] wg1 speed is unknown, defaulting to 1000 [ 599.930000][ T2020] netlink: 'syz.1.13189': attribute type 1 has an invalid length. [ 600.217704][ T2030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13193'. [ 600.591958][ T2050] syzkaller1: entered promiscuous mode [ 600.602941][ T2050] syzkaller1: entered allmulticast mode [ 601.226875][ T2071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13211'. [ 601.907159][ T2094] syzkaller1: entered promiscuous mode [ 601.913208][ T2094] syzkaller1: entered allmulticast mode [ 602.202685][ T2106] syzkaller1: entered promiscuous mode [ 602.217377][ T2106] syzkaller1: entered allmulticast mode [ 602.261357][ T2112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13225'. [ 602.328318][ T2112] nbd: socks must be embedded in a SOCK_ITEM attr [ 602.335888][ T2115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13225'. [ 602.353159][ T2115] nbd: nbd64 already in use [ 602.376669][T24301] block nbd64: NBD_DISCONNECT [ 602.637977][T24301] udevd[24301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 602.795469][ T2129] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.13229'. [ 602.993280][ T2137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13242'. [ 603.022759][ T2137] bridge_slave_1: left allmulticast mode [ 603.030901][ T2137] bridge_slave_1: left promiscuous mode [ 603.052795][ T2137] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.071377][ T2137] ¾x9ÿ: left allmulticast mode [ 603.082819][ T2137] ¾x9ÿ: left promiscuous mode [ 603.098112][ T2137] bridge0: port 1(0¾x9ÿ) entered disabled state [ 603.170866][ T2137] bond0: (slave bridge0): Releasing backup interface [ 603.177927][ T2145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13235'. [ 604.708360][ T2185] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 604.716251][ T2185] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 604.729085][ T2186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13250'. [ 604.743597][ T2186] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 604.870618][ T2190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13254'. [ 605.133651][ T2201] netlink: 'syz.3.13259': attribute type 1 has an invalid length. [ 605.259193][ T2204] bond5: (slave gretap1): making interface the new active one [ 605.288427][ T2204] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 605.321899][ T2205] macvtap2: entered promiscuous mode [ 605.333854][ T2205] macvtap2: entered allmulticast mode [ 605.343897][ T2205] veth1_vlan: entered allmulticast mode [ 605.371664][ T2208] macvtap3: entered promiscuous mode [ 605.382190][ T2208] macvtap3: entered allmulticast mode [ 605.942805][ T2242] syzkaller1: entered promiscuous mode [ 605.954891][ T2242] syzkaller1: entered allmulticast mode [ 606.141923][ T2249] wg1 speed is unknown, defaulting to 1000 [ 606.346763][ T2260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13282'. [ 606.362818][ T2260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13282'. [ 606.589047][ T2268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13286'. [ 606.688323][ T2275] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.13287'. [ 606.727316][ T2268] nbd: socks must be embedded in a SOCK_ITEM attr [ 606.786675][ T2271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13286'. [ 606.822606][ T2271] nbd: device at index 64 is going down [ 606.832854][ T2278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13289'. [ 606.941405][ T2282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13288'. [ 607.003247][T24301] udevd[24301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 607.363691][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 180 seconds [ 607.374727][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 180 seconds [ 607.386273][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 180 seconds [ 607.398348][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 180 seconds [ 607.757377][ T2324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13306'. [ 607.783972][ T2327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13309'. [ 607.805136][ T2330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13308'. [ 607.869919][ T2324] nbd: socks must be embedded in a SOCK_ITEM attr [ 607.901542][ T2333] nbd: nbd64 already in use [ 608.096917][ T2342] netlink: 'syz.4.13311': attribute type 1 has an invalid length. [ 608.118761][ T2342] netlink: 'syz.4.13311': attribute type 4 has an invalid length. [ 608.338887][ T2352] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 609.264334][ T2394] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 609.741309][ T2415] syzkaller1: entered promiscuous mode [ 609.763162][ T2415] syzkaller1: entered allmulticast mode [ 611.077327][ T5196] udevd[5196]: worker [24310] /devices/virtual/block/nbd2 timeout; kill it [ 611.097520][ T5196] udevd[5196]: seq 15771 '/devices/virtual/block/nbd2' killed [ 612.188455][ T2570] __nla_validate_parse: 7 callbacks suppressed [ 612.188480][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13394'. [ 612.427694][ T2580] netlink: 'syz.3.13397': attribute type 1 has an invalid length. [ 612.525368][ T2585] bond6: (slave bridge0): making interface the new active one [ 612.551088][ T2585] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 612.656496][ T2593] bridge0: entered allmulticast mode [ 612.789094][ T2598] sctp: [Deprecated]: syz.2.13401 (pid 2598) Use of int in maxseg socket option. [ 612.789094][ T2598] Use struct sctp_assoc_value instead [ 612.867545][ T2602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13403'. [ 613.779247][ T2647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13422'. [ 613.846370][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13422'. [ 614.504365][ T2677] wg1 speed is unknown, defaulting to 1000 [ 615.005293][ T2694] netlink: 'syz.4.13436': attribute type 1 has an invalid length. [ 615.230508][ T2703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13437'. [ 615.351327][ T2694] bond11: entered promiscuous mode [ 615.383883][ T2694] 8021q: adding VLAN 0 to HW filter on device bond11 [ 615.454355][ T2698] 8021q: adding VLAN 0 to HW filter on device bond11 [ 615.463196][ T2698] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 615.490987][ T2698] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 615.510526][ T2698] bond11: (slave vti0): making interface the new active one [ 615.534351][ T2698] vti0: entered promiscuous mode [ 615.557873][ T2698] bond11: (slave vti0): Enslaving as an active interface with an up link [ 615.819375][ T2719] netlink: 'syz.3.13441': attribute type 26 has an invalid length. [ 615.831218][ T2719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13441'. [ 615.847353][ T2719] netlink: 'syz.3.13441': attribute type 26 has an invalid length. [ 615.857306][ T2719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13441'. [ 616.121356][ T2736] netlink: 'syz.0.13447': attribute type 15 has an invalid length. [ 616.135152][ T2738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13448'. [ 616.163271][ T2738] netlink: 'syz.2.13448': attribute type 7 has an invalid length. [ 616.181413][ T2738] netlink: 'syz.2.13448': attribute type 8 has an invalid length. [ 616.189921][ T2738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13448'. [ 616.233487][ T2740] netlink: 208 bytes leftover after parsing attributes in process `syz.4.13450'. [ 617.059721][ T2787] netlink: 'syz.4.13468': attribute type 26 has an invalid length. [ 617.096927][ T2787] netlink: 'syz.4.13468': attribute type 26 has an invalid length. [ 617.643095][ T2833] netlink: 'syz.1.13482': attribute type 26 has an invalid length. [ 617.646727][ T2826] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 617.651568][ T2833] __nla_validate_parse: 2 callbacks suppressed [ 617.651612][ T2833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13482'. [ 617.680547][ T2826] bond9 (unregistering): Released all slaves [ 617.711320][ T2833] netlink: 'syz.1.13482': attribute type 26 has an invalid length. [ 617.736533][ T2833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13482'. [ 618.019077][ T2855] netlink: 'syz.2.13489': attribute type 1 has an invalid length. [ 618.059061][ T2855] 8021q: adding VLAN 0 to HW filter on device bond9 [ 618.103090][ T2860] bond9: (slave gretap1): making interface the new active one [ 618.116258][ T2860] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 618.434362][ T2865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13492'. [ 618.456620][ T2865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13492'. [ 618.789382][ T2899] netlink: 'syz.0.13507': attribute type 1 has an invalid length. [ 618.868925][ T2899] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.961235][ T2905] bond6: (slave gretap3): making interface the new active one [ 618.970503][ T2905] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 621.050520][ T2952] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 621.189642][ T2956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13527'. [ 621.490117][ T2974] wg1 speed is unknown, defaulting to 1000 [ 622.017712][ T2998] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 622.146209][ T3013] netlink: 'syz.3.13548': attribute type 4 has an invalid length. [ 622.709085][ T3034] wg1 speed is unknown, defaulting to 1000 [ 622.884206][ T3045] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13561'. [ 623.960304][ T3095] netlink: 'syz.2.13581': attribute type 16 has an invalid length. [ 623.982188][ T3095] netlink: 'syz.2.13581': attribute type 17 has an invalid length. [ 624.127424][ T3090] tipc: Resetting bearer [ 624.146530][ T3090] tipc: Resetting bearer [ 624.240877][ T13] tipc: Resetting bearer [ 624.346463][ T3095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.686845][ T3130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13592'. [ 624.727743][ T3130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13592'. [ 625.186252][ T3153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13603'. [ 625.895804][ T3189] GUP no longer grows the stack in syz.3.13617 (3189): 200000003000-20000000a000 (200000001000) [ 625.912443][ T3189] CPU: 1 UID: 0 PID: 3189 Comm: syz.3.13617 Not tainted syzkaller #0 PREEMPT(full) [ 625.912473][ T3189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 625.912485][ T3189] Call Trace: [ 625.912493][ T3189] [ 625.912501][ T3189] dump_stack_lvl+0xe8/0x150 [ 625.912535][ T3189] __get_user_pages+0x2453/0x29d0 [ 625.912567][ T3189] ? __lock_acquire+0x6b5/0x2cf0 [ 625.912612][ T3189] ? __gup_longterm_locked+0xc4e/0x1630 [ 625.912643][ T3189] ? down_read_killable+0x1bb/0x340 [ 625.912677][ T3189] __gup_longterm_locked+0xdcf/0x1630 [ 625.912732][ T3189] gup_fast_fallback+0x1d82/0x22e0 [ 625.912792][ T3189] ? __pfx_gup_fast_fallback+0x10/0x10 [ 625.912819][ T3189] ? futex_unqueue+0x22/0x240 [ 625.912842][ T3189] ? futex_unqueue+0x22/0x240 [ 625.912864][ T3189] ? is_valid_gup_args+0x11f/0x200 [ 625.912912][ T3189] ? get_user_pages_fast+0x4d/0xb0 [ 625.912945][ T3189] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 625.912976][ T3189] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 625.913004][ T3189] iov_iter_get_pages2+0x5e/0xa0 [ 625.913033][ T3189] __se_sys_vmsplice+0x7b3/0x1490 [ 625.913088][ T3189] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 625.913124][ T3189] ? __pfx_futex_wait+0x10/0x10 [ 625.913174][ T3189] ? lockdep_hardirqs_on+0x7a/0x110 [ 625.913267][ T3189] do_syscall_64+0x14d/0xf80 [ 625.913294][ T3189] ? trace_irq_disable+0x3b/0x150 [ 625.913313][ T3189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.913336][ T3189] ? clear_bhb_loop+0x40/0x90 [ 625.913364][ T3189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.913386][ T3189] RIP: 0033:0x7f249f99c819 [ 625.913409][ T3189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.913429][ T3189] RSP: 002b:00007f24a0808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 625.913454][ T3189] RAX: ffffffffffffffda RBX: 00007f249fc15fa0 RCX: 00007f249f99c819 [ 625.913471][ T3189] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 625.913485][ T3189] RBP: 00007f249fa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 625.913500][ T3189] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 625.913513][ T3189] R13: 00007f249fc16038 R14: 00007f249fc15fa0 R15: 00007fff264d0888 [ 625.913551][ T3189] [ 626.407275][ T3204] netlink: 'syz.1.13622': attribute type 16 has an invalid length. [ 626.446116][ T3204] netlink: 'syz.1.13622': attribute type 17 has an invalid length. [ 626.523395][ T3204] F: left allmulticast mode [ 626.590799][ T3204] bond0: left promiscuous mode [ 626.598400][ T3204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.613832][ T3204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.726778][ T3208] wg1 speed is unknown, defaulting to 1000 [ 626.856103][ T3217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13627'. [ 626.933758][ T3217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13627'. [ 627.094312][ T3231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13633'. [ 627.796463][ T3271] netlink: 'syz.1.13650': attribute type 1 has an invalid length. [ 627.805337][ T3271] netlink: 'syz.1.13650': attribute type 4 has an invalid length. [ 627.817018][ T3271] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.13650'. [ 628.057848][ T3285] netlink: 'syz.2.13655': attribute type 1 has an invalid length. [ 628.095445][ T3285] netlink: 'syz.2.13655': attribute type 4 has an invalid length. [ 628.144479][ T3285] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.13655'. [ 628.287916][ T3299] netlink: 240 bytes leftover after parsing attributes in process `syz.0.13658'. [ 628.443496][ T3304] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13661'. [ 628.501002][ T3308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13662'. [ 628.555121][ T3308] team1: entered promiscuous mode [ 628.560257][ T3308] team1: entered allmulticast mode [ 628.977488][ T3336] netlink: 'syz.2.13671': attribute type 1 has an invalid length. [ 629.141891][ T3339] bond10: (slave ip6gretap1): making interface the new active one [ 629.183305][ T3350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13672'. [ 629.203990][ T3339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.243992][ T3339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 629.272413][ T3339] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 629.813432][ T3380] team0: Port device dummy0 removed [ 629.819996][ T3380] batman_adv: batadv0: Adding interface: dummy0 [ 629.848476][ T3380] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.885287][ T3380] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 629.912482][ T3385] policy can only be matched on NF_INET_PRE_ROUTING [ 629.912519][ T3385] unable to load match [ 630.063153][ T3400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13686'. [ 630.117388][ T3403] netlink: 'syz.1.13687': attribute type 1 has an invalid length. [ 630.131703][ T3403] netlink: 'syz.1.13687': attribute type 4 has an invalid length. [ 630.144078][ T3403] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.13687'. [ 630.483207][ T3421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13694'. [ 630.612127][ T3432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13699'. [ 630.645314][ T3433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13700'. [ 630.676283][ T3432] team1: entered promiscuous mode [ 630.681656][ T3432] team1: entered allmulticast mode [ 631.301440][ T3466] PKCS7: Unknown OID: [4] (bad) [ 631.316363][ T3466] PKCS7: Only support pkcs7_signedData type [ 631.340236][ T3470] netlink: 'syz.1.13719': attribute type 39 has an invalid length. [ 631.478706][ T3476] netlink: 'syz.4.13723': attribute type 2 has an invalid length. [ 631.615913][ T3481] netdevsim netdevsim3: Direct firmware load for 0 failed with error -2 [ 631.646648][ T3481] netdevsim netdevsim3: Falling back to sysfs fallback for: 0 [ 631.909600][ T3497] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 632.677908][ T3514] syzkaller1: entered promiscuous mode [ 632.683778][ T3514] syzkaller1: entered allmulticast mode [ 633.730573][ T3555] __nla_validate_parse: 4 callbacks suppressed [ 633.730685][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13753'. [ 634.323810][ T3583] netlink: 'syz.3.13766': attribute type 2 has an invalid length. [ 634.517800][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13774'. [ 634.827380][ T3609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13777'. [ 634.859137][ T3613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13778'. [ 634.977829][ T3621] netlink: 'syz.2.13782': attribute type 2 has an invalid length. [ 635.251721][ T3633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13787'. [ 635.283133][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13787'. [ 635.351044][ T3633] bridge0: port 2(syz_tun) entered blocking state [ 635.357818][ T3633] bridge0: port 2(syz_tun) entered listening state [ 635.365740][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.372992][ T3633] bridge0: port 1(bridge_slave_0) entered listening state [ 635.390500][ T3636] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 635.570552][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13792'. [ 635.615328][ T3650] vcan0 (unregistering): left allmulticast mode [ 635.640673][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13791'. [ 635.760369][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13794'. [ 635.793517][ T3657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13794'. [ 636.144891][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.193298][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.228965][ T3676] batadv_slave_1: entered allmulticast mode [ 636.377764][ T3680] openvswitch: netlink: ERSPAN option length err (len 5809, max 255). [ 636.660744][ T3694] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 636.676457][ T3694] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 636.686252][ T3694] team0: Failed to send options change via netlink (err -105) [ 636.695438][ T3694] team0: Port device batadv1 added [ 637.443585][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 210 seconds [ 637.454554][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 210 seconds [ 637.466140][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 210 seconds [ 637.478475][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 210 seconds [ 638.107466][ T3758] syzkaller1: entered promiscuous mode [ 638.113624][ T3758] syzkaller1: entered allmulticast mode [ 639.922347][ T3822] __nla_validate_parse: 10 callbacks suppressed [ 639.922371][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13856'. [ 640.266880][ T3814] mpoa:mpoad_close: () going down [ 641.167218][ T3867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13876'. [ 641.279463][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13880'. [ 641.510015][ T3881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13883'. [ 641.569714][ T3883] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 642.620063][ T3921] syzkaller0: entered promiscuous mode [ 642.639857][ T3921] syzkaller0: entered allmulticast mode [ 643.115363][ T3945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13903'. [ 644.794259][ T3963] syzkaller1: entered promiscuous mode [ 644.800001][ T3963] syzkaller1: entered allmulticast mode [ 645.037070][ T3976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13914'. [ 645.586222][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13916'. [ 645.818322][ T3992] netlink: 'syz.1.13921': attribute type 10 has an invalid length. [ 646.195485][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13928'. [ 646.313456][ T4014] netlink: 'syz.1.13930': attribute type 1 has an invalid length. [ 646.374740][ T4014] 8021q: adding VLAN 0 to HW filter on device bond8 [ 646.439337][ T4023] veth0_to_bond: left allmulticast mode [ 646.453478][ T4023] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 646.464918][ T4014] bond8: entered promiscuous mode [ 646.470023][ T4014] bond8: entered allmulticast mode [ 646.729525][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13939'. [ 647.516570][ T4062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13951'. [ 648.041018][ T4079] syzkaller1: entered promiscuous mode [ 648.047129][ T4079] syzkaller1: entered allmulticast mode [ 648.257063][ T4092] netlink: 'syz.2.13961': attribute type 1 has an invalid length. [ 648.447061][ T4092] bond11: entered promiscuous mode [ 648.453496][ T4092] 8021q: adding VLAN 0 to HW filter on device bond11 [ 648.477093][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13964'. [ 648.630012][ T4113] netlink: 'syz.0.13968': attribute type 1 has an invalid length. [ 648.765076][ T4117] bond7: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 648.776503][ T4117] bond7: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 648.792454][ T4117] bond7: (slave ip6gre3): making interface the new active one [ 648.805460][ T4117] bond7: (slave ip6gre3): Enslaving as an active interface with an up link [ 649.130685][ T4132] tipc: Can't bind to reserved service type 1 [ 649.356257][ T4147] sctp: [Deprecated]: syz.4.13979 (pid 4147) Use of int in maxseg socket option. [ 649.356257][ T4147] Use struct sctp_assoc_value instead [ 649.808728][ T4156] netlink: 'syz.4.13981': attribute type 5 has an invalid length. [ 650.144450][ T4169] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13986'. [ 650.216520][ T4169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13986'. [ 650.362518][ T4173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13989'. [ 650.882185][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 650.889565][ C1] bridge0: port 2(syz_tun) entered learning state [ 651.494146][ T4200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13998'. [ 651.594777][ T4200] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13998'. [ 651.974135][ T4223] wg1 speed is unknown, defaulting to 1000 [ 652.229674][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14009'. [ 652.379987][ T4238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14012'. [ 652.485755][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14011'. [ 652.714659][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14014'. [ 652.947254][ T4266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14020'. [ 653.510058][ T4293] netlink: 'syz.3.14033': attribute type 1 has an invalid length. [ 655.144884][ T4360] wg1 speed is unknown, defaulting to 1000 [ 655.861173][ T4377] __nla_validate_parse: 14 callbacks suppressed [ 655.861195][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14062'. [ 655.996683][ T4377] netlink: 'syz.1.14062': attribute type 1 has an invalid length. [ 656.095408][ T4364] geneve0: entered promiscuous mode [ 656.210703][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14065'. [ 656.312338][ T4390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14065'. [ 657.465849][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14083'. [ 657.539732][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14085'. [ 657.996119][ T4466] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 658.011800][ T4466] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 658.587155][ T4474] clip:clip_setentry: non-CLIP VCC [ 658.775617][ T4483] wg1 speed is unknown, defaulting to 1000 [ 659.208907][ T4491] netlink: 'syz.4.14098': attribute type 5 has an invalid length. [ 659.260870][ T4500] syzkaller0: entered promiscuous mode [ 659.267580][ T4500] syzkaller0: entered allmulticast mode [ 659.275683][ T4500] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 659.311532][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14103'. [ 659.693121][ T4519] syzkaller1: entered promiscuous mode [ 659.698764][ T4519] syzkaller1: entered allmulticast mode [ 659.743294][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14109'. [ 659.779395][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14109'. [ 660.284879][ T4542] clip:clip_setentry: non-CLIP VCC [ 660.625206][ T4559] syzkaller1: entered promiscuous mode [ 660.644755][ T4559] syzkaller1: entered allmulticast mode [ 660.749486][ T4563] netlink: 'syz.0.14126': attribute type 1 has an invalid length. [ 660.774658][ T4565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14128'. [ 660.821986][ T4563] 8021q: adding VLAN 0 to HW filter on device bond8 [ 660.893007][ T4570] bond8: (slave veth11): Enslaving as an active interface with a down link [ 660.912315][ T4563] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 660.919371][ T4563] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 661.191597][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14135'. [ 661.680984][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14141'. [ 661.685521][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14142'. [ 662.477719][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14147'. [ 662.948838][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14149'. [ 663.883992][ T4666] netlink: 'syz.2.14162': attribute type 1 has an invalid length. [ 664.039968][ T4666] bond12: entered promiscuous mode [ 664.076949][ T4666] bond12: entered allmulticast mode [ 664.102595][ T4666] 8021q: adding VLAN 0 to HW filter on device bond12 [ 664.276271][ T4686] macvtap0: entered promiscuous mode [ 664.295782][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14169'. [ 664.337586][ T4686] veth0_macvtap: left promiscuous mode [ 664.587217][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14176'. [ 664.734024][ T4707] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.14177'. [ 665.006690][ T4726] netlink: 'syz.3.14182': attribute type 8 has an invalid length. [ 665.013271][ T4729] netlink: 'syz.1.14184': attribute type 1 has an invalid length. [ 665.020996][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14182'. [ 665.026886][ T4729] netlink: 'syz.1.14184': attribute type 4 has an invalid length. [ 665.041078][ T4729] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.14184'. [ 665.106212][ T4726] bond0: entered promiscuous mode [ 665.127134][ T4726] gretap0: entered promiscuous mode [ 665.139118][ T4726] bond0: left promiscuous mode [ 665.176048][ T4726] gretap0: left promiscuous mode [ 665.279396][ T4738] sctp: [Deprecated]: syz.4.14188 (pid 4738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.279396][ T4738] Use struct sctp_sack_info instead [ 665.664364][ T4758] netlink: 'syz.1.14197': attribute type 4 has an invalid length. [ 665.674096][ T4756] netlink: 'syz.4.14196': attribute type 4 has an invalid length. [ 665.718097][ T4756] netlink: 'syz.4.14196': attribute type 4 has an invalid length. [ 666.252234][ C1] bridge0: port 2(syz_tun) entered forwarding state [ 666.258920][ C1] bridge0: topology change detected, propagating [ 666.265705][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.272995][ C1] bridge0: topology change detected, propagating [ 666.761863][ T4778] __nla_validate_parse: 2 callbacks suppressed [ 666.761886][ T4778] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.14205'. [ 666.969252][ T4784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14207'. [ 667.311804][ T4802] netlink: 'syz.3.14214': attribute type 1 has an invalid length. [ 667.487978][ T4802] bond7: entered promiscuous mode [ 667.522698][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 240 seconds [ 667.534628][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 240 seconds [ 667.543070][ T4802] bond7: entered allmulticast mode [ 667.548841][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 240 seconds [ 667.563296][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 240 seconds [ 667.574862][ T4802] 8021q: adding VLAN 0 to HW filter on device bond7 [ 667.594050][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14216'. [ 667.648334][ T4807] macvlan3: entered promiscuous mode [ 667.657784][ T4807] macvlan3: entered allmulticast mode [ 667.676919][ T4807] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 667.718680][ T4814] macvtap0: entered promiscuous mode [ 667.726909][ T4814] macvtap0: left promiscuous mode [ 667.750486][ T4816] tipc: Resetting bearer [ 667.770118][ T4816] veth0_macvtap: left promiscuous mode [ 667.870900][ T4816] tipc: Disabling bearer [ 668.010095][ T4826] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14220'. [ 668.153785][ T4836] netlink: 'syz.1.14224': attribute type 8 has an invalid length. [ 668.163401][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14225'. [ 668.174199][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14224'. [ 669.244276][ T4847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14227'. [ 670.189217][ T4836] bond0: entered promiscuous mode [ 670.196727][ T4836] bond0: left promiscuous mode [ 671.737333][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14246'. [ 673.381291][ T4971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14271'. [ 673.396488][ T4969] tipc: Failed to remove unknown binding: 66,1,1/4269801642:1370717304/1370717306 [ 673.547772][ T4972] syzkaller0: entered promiscuous mode [ 673.577854][ T4972] syzkaller0: entered allmulticast mode [ 673.809427][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14277'. [ 673.828025][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14277'. [ 675.621377][ T4990] tipc: Resetting bearer [ 675.883666][ T4990] bridge0: port 2(syz_tun) entered disabled state [ 675.900467][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.599720][ T4990] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 676.683072][ T4990] ip6tnl2: left allmulticast mode [ 676.693868][ T4990] vlan2: left promiscuous mode [ 676.698817][ T4990] bridge0: left promiscuous mode [ 676.709793][ T4990] sit1: left promiscuous mode [ 676.715111][ T4990] sit1: left allmulticast mode [ 676.747165][ T4990] vlan0: left allmulticast mode [ 676.752256][ T4990] geneve1: left allmulticast mode [ 676.757342][ T4990] vlan0: left promiscuous mode [ 676.762842][ T4990] geneve1: left promiscuous mode [ 676.768693][ T4990] macvtap1: left promiscuous mode [ 676.774448][ T4990] macvtap1: left allmulticast mode [ 676.783529][ T4990] veth0_macvtap: left allmulticast mode [ 676.789490][ T4990] macvtap2: left allmulticast mode [ 676.869865][ T4990] bond7: left promiscuous mode [ 676.875146][ T4990] vcan1: left promiscuous mode [ 676.910407][ T4990] bond9: left promiscuous mode [ 676.915641][ T4990] ip6gre1: left promiscuous mode [ 676.927360][ T4990] bond11: left promiscuous mode [ 676.932451][ T4990] vti0: left promiscuous mode [ 676.983016][ T4990] team1: left promiscuous mode [ 676.987966][ T4990] team1: left allmulticast mode [ 677.067445][ T5010] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 677.082552][ T1152] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.126456][ T1152] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.152269][ T1152] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.169532][ T1152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.313302][ T1152] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.335830][ T1152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.402353][ T1152] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.411522][ T1152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.507547][ T5040] vlan6: entered promiscuous mode [ 677.524337][ T5040] vlan6: entered allmulticast mode [ 677.540442][ T5040] hsr_slave_1: entered allmulticast mode [ 677.617751][ T5049] netlink: 'syz.2.14290': attribute type 4 has an invalid length. [ 677.680107][ T5050] netlink: 'syz.2.14290': attribute type 4 has an invalid length. [ 677.867833][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14294'. [ 678.016214][ T5060] syzkaller1: entered promiscuous mode [ 678.030725][ T5060] syzkaller1: entered allmulticast mode [ 678.788022][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14307'. [ 678.832313][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14307'. [ 679.194743][ T5117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14317'. [ 679.224213][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14317'. [ 679.254954][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14317'. [ 679.547815][ T5129] wg1 speed is unknown, defaulting to 1000 [ 679.741246][ T5138] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14325'. [ 679.797107][ T5138] syzkaller1: entered promiscuous mode [ 679.803198][ T5138] syzkaller1: entered allmulticast mode [ 679.848405][ T5118] lec:lec_atm_close: lec0: Shut down! [ 680.065706][ T5155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14327'. [ 680.469167][ T5182] batadv_slave_0: entered promiscuous mode [ 680.502194][ T5180] batadv_slave_0: left promiscuous mode [ 680.709921][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14336'. [ 680.788369][ T5193] tipc: Enabled bearer , priority 0 [ 680.910866][ T5193] syzkaller0: entered promiscuous mode [ 680.916698][ T5193] syzkaller0: entered allmulticast mode [ 680.925019][ T5193] tipc: Resetting bearer [ 680.987602][ T5191] tipc: Resetting bearer [ 681.119203][ T5210] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 682.539428][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14350'. [ 683.345795][ T5191] tipc: Disabling bearer [ 683.357114][T32416] tipc: Node number set to 3758096385 [ 683.424831][ T5221] wg1 speed is unknown, defaulting to 1000 [ 683.552351][T24757] lec:lec_start_xmit: lec0:No lecd attached [ 683.885898][ T5255] bond9: entered promiscuous mode [ 684.428645][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14363'. [ 684.472968][ T5282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14362'. [ 684.549371][ T5289] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14365'. [ 685.302606][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14373'. [ 685.571616][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14381'. [ 685.918820][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14389'. [ 685.945543][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14389'. [ 686.065170][ T5361] tipc: Enabled bearer , priority 0 [ 686.101059][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14394'. [ 686.121568][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14394'. [ 686.193803][ T5361] syzkaller0: entered promiscuous mode [ 686.210408][ T5361] syzkaller0: entered allmulticast mode [ 686.233109][ T5361] tipc: Resetting bearer [ 686.484930][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14400'. [ 686.780184][ T5358] tipc: Resetting bearer [ 688.568878][ T5358] tipc: Disabling bearer [ 688.586841][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.638908][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.649060][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.658352][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.202156][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 689.211222][ C0] lec:lec_tx_timeout: lec0 [ 689.217349][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 689.733830][ T5443] __nla_validate_parse: 2 callbacks suppressed [ 689.733851][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14422'. [ 689.795658][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14422'. [ 690.193121][ T5470] bridge10: entered promiscuous mode [ 690.198621][ T5470] bridge10: entered allmulticast mode [ 690.210836][ T5470] team0: Port device bridge10 added [ 690.301034][ T5473] bridge0: port 3(team0) entered blocking state [ 690.339525][ T5473] bridge0: port 3(team0) entered disabled state [ 690.357312][ T5473] team0: entered allmulticast mode [ 690.377635][ T5473] team_slave_0: entered allmulticast mode [ 690.390810][ T5473] team_slave_1: entered allmulticast mode [ 690.413811][ T5473] team0: entered promiscuous mode [ 690.433699][ T5473] team_slave_0: entered promiscuous mode [ 690.452341][ T5473] team_slave_1: entered promiscuous mode [ 690.479544][ T5482] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.14434'. [ 690.818858][ T5512] bond6: (slave 26±ÿ=–a²š«): Releasing backup interface [ 690.854776][ T5512] bond6: (slave 26±ÿ=–a²š«): last VLAN challenged slave left bond - VLAN blocking is removed [ 690.896326][ T5512] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 690.928938][ T5514] team0: No ports can be present during mode change [ 691.210543][ T5525] tipc: Enabled bearer , priority 0 [ 691.221928][ T5525] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 691.242826][ T5525] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 691.463004][ T5534] tipc: Enabling of bearer rejected, already enabled [ 691.476446][ T5534] mac80211_hwsim hwsim5 +: renamed from syzkaller0 [ 691.497717][ T5534] tipc: Disabling bearer [ 691.602824][ T5540] netlink: 'syz.3.14456': attribute type 8 has an invalid length. [ 691.613239][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14456'. [ 691.674984][ T5540] bond0: entered promiscuous mode [ 691.703639][ T5540] gretap0: entered promiscuous mode [ 691.723274][ T5540] veth0_to_team: entered promiscuous mode [ 691.751029][ T5549] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14459'. [ 691.763998][ T5540] hsr1: entered promiscuous mode [ 691.954654][ T5557] syzkaller1: entered promiscuous mode [ 691.975310][ T5557] syzkaller1: entered allmulticast mode [ 692.173760][ T5559] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14463'. [ 692.412516][ T5570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14464'. [ 692.630624][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14467'. [ 692.673762][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14467'. [ 693.352704][ T5593] syzkaller1: entered promiscuous mode [ 693.362996][ T5593] syzkaller1: entered allmulticast mode [ 693.388164][ T5599] tipc: Enabled bearer , priority 0 [ 693.411881][ T5599] syzkaller0: MTU too low for tipc bearer [ 693.417991][ T5599] tipc: Disabling bearer [ 693.458872][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14476'. [ 693.748532][ T5622] : entered promiscuous mode [ 694.232969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 694.241190][ C0] lec:lec_tx_timeout: lec0 [ 694.246127][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 694.318289][ T5608] lec:lec_atm_close: lec0: Shut down! [ 694.430966][ T5645] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 694.777359][ T5658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14488'. [ 695.133106][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14494'. [ 695.160317][ T5676] bridge_slave_1: left allmulticast mode [ 695.184196][ T5676] bridge_slave_1: left promiscuous mode [ 695.191915][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.228013][ T5676] bridge_slave_0: left allmulticast mode [ 695.234596][ T5676] bridge_slave_0: left promiscuous mode [ 695.248865][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.657308][ T5705] vlan7: entered allmulticast mode [ 695.702225][ T5705] hsr0: entered allmulticast mode [ 695.717150][ T5705] hsr_slave_0: entered allmulticast mode [ 695.895593][ T5717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14508'. [ 695.951444][ T5721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14510'. [ 696.160449][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14513'. [ 696.723466][ T5757] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14523'. [ 697.605198][ T1736] block nbd2: Possible stuck request ffff888026c60000: control (read@0,1024B). Runtime 270 seconds [ 697.617312][ T1736] block nbd2: Possible stuck request ffff888026c60200: control (read@1024,1024B). Runtime 270 seconds [ 697.629526][ T1736] block nbd2: Possible stuck request ffff888026c60400: control (read@2048,1024B). Runtime 270 seconds [ 697.640795][ T1736] block nbd2: Possible stuck request ffff888026c60600: control (read@3072,1024B). Runtime 270 seconds [ 697.782730][ T5775] erspan0: entered promiscuous mode [ 697.788034][ T5775] erspan0: entered allmulticast mode [ 698.225611][ T5813] netlink: 'syz.1.14539': attribute type 1 has an invalid length. [ 698.297469][ T5813] bond10: entered promiscuous mode [ 698.317035][ T5813] 8021q: adding VLAN 0 to HW filter on device bond10 [ 698.427183][ T5817] bond10: (slave bridge5): making interface the new active one [ 698.435292][ T5817] bridge5: entered promiscuous mode [ 698.446205][ T5817] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 698.485257][ T5813] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 698.542104][ T5813] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 698.747375][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14545'. [ 698.765234][ T5834] tipc: Enabled bearer , priority 0 [ 698.853502][ T5829] syzkaller0: entered promiscuous mode [ 698.859522][ T5829] syzkaller0: entered allmulticast mode [ 698.869309][ T5829] tipc: Resetting bearer [ 699.019515][ T49] tipc: Resetting bearer [ 699.096562][ T5827] tipc: Resetting bearer [ 699.272966][ T5850] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14553'. [ 699.329843][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 699.338117][ C0] lec:lec_tx_timeout: lec0 [ 699.344108][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 701.699271][ T5827] tipc: Disabling bearer [ 701.885741][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14565'. [ 701.912504][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14565'. [ 702.014812][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14568'. [ 702.159652][ T5920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14573'. [ 702.609474][ T5962] netlink: 'syz.0.14579': attribute type 4 has an invalid length. [ 702.649430][ T5962] netlink: 'syz.0.14579': attribute type 4 has an invalid length. [ 702.835151][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14584'. [ 703.298649][ T6014] netlink: 'syz.4.14590': attribute type 1 has an invalid length. [ 703.356224][ T6014] 8021q: adding VLAN 0 to HW filter on device bond13 [ 703.398501][ T6019] bond13: (slave bridge12): making interface the new active one [ 703.408108][ T6019] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 703.689246][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14595'. [ 703.754507][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14595'. [ 703.803214][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14595'. [ 703.918039][ T49] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 703.927240][ T49] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 703.936665][ T49] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 703.948903][ T49] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 704.073586][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14600'. [ 704.219125][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14602'. [ 704.352663][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 704.360897][ C0] lec:lec_tx_timeout: lec0 [ 704.366209][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 704.539230][ T6065] tipc: Failed to remove unknown binding: 66,0,0/4269801642:686264236/686264237 [ 704.551107][ T6065] tipc: Failed to remove unknown binding: 66,0,0/4269801642:686264236/686264237 [ 706.271015][ T6099] wg1 speed is unknown, defaulting to 1000 [ 706.567521][ T6115] netlink: 'syz.4.14622': attribute type 1 has an invalid length. [ 706.738627][ T6125] wg1 speed is unknown, defaulting to 1000 [ 706.957779][ T6139] __nla_validate_parse: 3 callbacks suppressed [ 706.957804][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14628'. [ 707.127542][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14631'. [ 707.154624][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14631'. [ 707.217664][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14633'. [ 707.436769][ T6159] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 707.526972][ T6165] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14640'. [ 707.731903][ T6176] netlink: 'syz.0.14644': attribute type 1 has an invalid length. [ 708.599695][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14652'. [ 708.885939][ T6217] netlink: 'syz.0.14657': attribute type 1 has an invalid length. [ 709.004687][ T6217] bond9: entered promiscuous mode [ 709.010364][ T6217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 709.024072][ T5146] block nbd5: Receive control failed (result -107) [ 709.055115][ T6223] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 709.082157][ T6222] nbd5: detected capacity change from 0 to 127 [ 709.115789][ T5206] block nbd5: Dead connection, failed to find a fallback [ 709.145528][ T6223] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 709.172383][ T5206] block nbd5: shutting down sockets [ 709.179001][ T5206] blk_print_req_error: 138 callbacks suppressed [ 709.179021][ T5206] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.182430][ T6223] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 709.224999][ T5206] buffer_io_error: 138 callbacks suppressed [ 709.225018][ T5206] Buffer I/O error on dev nbd5, logical block 0, async page read [ 709.256518][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14663'. [ 709.272774][ T5206] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.290840][ T6231] netlink: 'syz.2.14661': attribute type 4 has an invalid length. [ 709.299249][ T5206] Buffer I/O error on dev nbd5, logical block 1, async page read [ 709.316126][ T6217] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 709.331961][ T5206] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.343814][ T6217] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 709.354247][ T6235] netlink: 'syz.2.14661': attribute type 4 has an invalid length. [ 709.365636][ T5206] Buffer I/O error on dev nbd5, logical block 2, async page read [ 709.378709][ T5206] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.391270][ T5206] Buffer I/O error on dev nbd5, logical block 3, async page read [ 709.401788][ T5206] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.412112][ T5206] Buffer I/O error on dev nbd5, logical block 0, async page read [ 709.419996][ T5206] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.470175][ T5206] Buffer I/O error on dev nbd5, logical block 1, async page read [ 709.531108][ T5206] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.571744][ T5206] Buffer I/O error on dev nbd5, logical block 2, async page read [ 709.592311][ T5206] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.601961][ T5206] Buffer I/O error on dev nbd5, logical block 3, async page read [ 709.652189][ T5206] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.672577][ T5206] Buffer I/O error on dev nbd5, logical block 0, async page read [ 709.680835][ T5206] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 709.699203][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14666'. [ 709.714879][ T6243] bond6: (slave ip6gretap1): making interface the new active one [ 709.734948][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14667'. [ 709.744583][ T5206] Buffer I/O error on dev nbd5, logical block 1, async page read [ 709.755306][ T5206] ldm_validate_partition_table(): Disk read failed. [ 709.771118][ T5206] Dev nbd5: unable to read RDB block 0 [ 709.771411][ T6243] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 709.779904][ T5206] nbd5: unable to read partition table [ 709.799867][ T5206] ldm_validate_partition_table(): Disk read failed. [ 709.809331][ T5206] Dev nbd5: unable to read RDB block 0 [ 709.818074][ T5206] nbd5: unable to read partition table [ 710.162039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 710.170189][ C0] lec:lec_tx_timeout: lec0 [ 710.176195][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 710.184304][ T6266] syz_tun: entered allmulticast mode [ 710.221019][ T6266] dvmrp8: entered allmulticast mode [ 710.249437][ T6264] syz_tun: left allmulticast mode [ 710.338406][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14674'. [ 710.660354][ T6285] syzkaller0: entered promiscuous mode [ 710.666214][ T6285] syzkaller0: entered allmulticast mode [ 710.798722][ T6292] tipc: Failed to remove unknown binding: 66,0,0/15444650:457844850/457844851 [ 710.809722][ T6292] tipc: Failed to remove unknown binding: 66,0,0/15444650:457844850/457844851 [ 712.713679][ T6287] netlink: 'syz.0.14682': attribute type 1 has an invalid length. [ 712.848308][ T6313] __nla_validate_parse: 3 callbacks suppressed [ 712.848330][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14689'. [ 712.881929][ T6313] batadv_slave_1 (unregistering): left allmulticast mode [ 713.156350][ T6332] tipc: Enabled bearer , priority 0 [ 713.288019][ T6332] syzkaller0: entered promiscuous mode [ 713.295184][ T6332] syzkaller0: entered allmulticast mode [ 713.302360][ T6332] tipc: Resetting bearer [ 713.385601][ T6331] tipc: Resetting bearer [ 713.918853][ T6346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14701'. [ 713.970268][ T6349] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14701'. [ 715.203196][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 715.211282][ C0] lec:lec_tx_timeout: lec0 [ 715.216076][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 715.349535][ T6331] tipc: Disabling bearer [ 715.373048][ T6349] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14701'. [ 715.489766][ T6359] tipc: Failed to remove unknown binding: 66,0,0/1:992538133/992538134 [ 715.532746][ T6359] tipc: Failed to remove unknown binding: 66,0,0/1:992538133/992538134 [ 715.713205][ T6371] netlink: 'syz.3.14709': attribute type 1 has an invalid length. [ 715.770577][ T6371] bond8: entered promiscuous mode [ 715.778159][ T6371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 715.787105][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.879846][ T6371] bond8: (slave bridge11): making interface the new active one [ 715.888712][ T6371] bridge11: entered promiscuous mode [ 715.895169][ T6375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.909279][ T6371] bond8: (slave bridge11): Enslaving as an active interface with an up link [ 715.974981][ T6369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.070267][ T6384] syzkaller0: entered promiscuous mode [ 716.076340][ T6384] syzkaller0: entered allmulticast mode [ 716.793008][ T6417] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14726'. [ 716.805753][ T6417] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14726'. [ 717.474350][ T6438] syzkaller0: entered promiscuous mode [ 717.479951][ T6438] syzkaller0: entered allmulticast mode [ 717.554036][ T6441] syzkaller0: entered promiscuous mode [ 717.559606][ T6441] syzkaller0: entered allmulticast mode [ 717.694775][ T6446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 717.702189][ T6446] IPv6: NLM_F_CREATE should be set when creating new route [ 717.740684][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14736'. [ 717.828661][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14737'. [ 717.840116][ T6448] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14737'. [ 720.233459][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 720.241866][ C0] lec:lec_tx_timeout: lec0 [ 720.247214][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 720.476926][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14740'. [ 720.775267][ T6507] syzkaller0: entered promiscuous mode [ 723.033119][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.075099][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.094978][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 723.301060][ T6563] syzkaller0: entered promiscuous mode [ 723.319249][ T6563] syzkaller0: entered allmulticast mode [ 723.683513][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14771'. [ 723.931422][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14773'. [ 724.031371][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14775'. [ 725.059017][ T6639] netlink: 'syz.1.14793': attribute type 3 has an invalid length. [ 725.079816][ T6639] netlink: 'syz.1.14793': attribute type 3 has an invalid length. [ 725.262039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 725.270248][ C0] lec:lec_tx_timeout: lec0 [ 725.276208][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 725.467612][ T6655] netlink: 576 bytes leftover after parsing attributes in process `syz.4.14799'. [ 726.005131][ T6675] nbd: nbd2 already in use [ 726.012313][ T6675] block nbd2: NBD_DISCONNECT [ 726.019182][ T6675] block nbd2: Send disconnect failed -32 [ 726.032381][ T6675] block nbd2: shutting down sockets [ 726.073404][ C0] blk_print_req_error: 138 callbacks suppressed [ 726.073430][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.089441][ C0] buffer_io_error: 138 callbacks suppressed [ 726.089461][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 726.117699][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.127354][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 726.136535][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.146160][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 726.154152][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.163727][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 726.171913][T24310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.192289][T24310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 726.200468][T24310] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.221020][T24310] Buffer I/O error on dev nbd2, logical block 1, async page read [ 726.232408][T24310] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.266147][T24310] Buffer I/O error on dev nbd2, logical block 2, async page read [ 726.282203][T24310] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.311151][T24310] Buffer I/O error on dev nbd2, logical block 3, async page read [ 726.329703][T24310] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.349610][T24310] Buffer I/O error on dev nbd2, logical block 0, async page read [ 726.358440][T24310] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.369691][T24310] Buffer I/O error on dev nbd2, logical block 1, async page read [ 726.378766][T24310] ldm_validate_partition_table(): Disk read failed. [ 726.386638][T24310] Dev nbd2: unable to read RDB block 0 [ 726.423674][T24310] nbd2: unable to read partition table [ 726.451626][T24310] [ 726.454037][T24310] ====================================================== [ 726.461134][T24310] WARNING: possible circular locking dependency detected [ 726.468476][T24310] syzkaller #0 Not tainted [ 726.472918][T24310] ------------------------------------------------------ [ 726.479980][T24310] udevd/24310 is trying to acquire lock: [ 726.485638][T24310] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 726.496205][T24310] [ 726.496205][T24310] but task is already holding lock: [ 726.503676][T24310] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 726.514245][T24310] [ 726.514245][T24310] which lock already depends on the new lock. [ 726.514245][T24310] [ 726.524679][T24310] [ 726.524679][T24310] the existing dependency chain (in reverse order) is: [ 726.533818][T24310] [ 726.533818][T24310] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 726.542281][T24310] down_write+0x96/0x200 [ 726.547110][T24310] kernfs_add_one+0x41/0x5c0 [ 726.552383][T24310] kernfs_create_dir_ns+0xde/0x130 [ 726.558150][T24310] internal_create_group+0x425/0x1180 [ 726.564174][T24310] cpuhp_invoke_callback+0x445/0x860 [ 726.570015][T24310] cpuhp_issue_call+0x430/0x7a0 [ 726.575415][T24310] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 726.582042][T24310] __cpuhp_setup_state+0x3f/0x60 [ 726.587542][T24310] do_one_initcall+0x250/0x8d0 [ 726.592864][T24310] do_initcall_level+0x104/0x190 [ 726.598349][T24310] do_initcalls+0x59/0xa0 [ 726.603231][T24310] kernel_init_freeable+0x2a6/0x3e0 [ 726.608989][T24310] kernel_init+0x1d/0x1d0 [ 726.613878][T24310] ret_from_fork+0x51e/0xb90 [ 726.619015][T24310] ret_from_fork_asm+0x1a/0x30 [ 726.624331][T24310] [ 726.624331][T24310] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 726.632180][T24310] [ 726.632180][T24310] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 726.639955][T24310] cpus_read_lock+0x42/0x160 [ 726.645101][T24310] static_key_disable+0x12/0x20 [ 726.650503][T24310] __inet_hash_connect+0x2430/0x2440 [ 726.656348][T24310] tcp_v4_connect+0xd5f/0x19b0 [ 726.661677][T24310] __inet_stream_connect+0x25a/0xdd0 [ 726.667524][T24310] inet_stream_connect+0x66/0xa0 [ 726.673019][T24310] __sys_connect+0x312/0x450 [ 726.678167][T24310] __x64_sys_connect+0x7a/0x90 [ 726.683498][T24310] do_syscall_64+0x14d/0xf80 [ 726.688641][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.695098][T24310] [ 726.695098][T24310] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 726.702780][T24310] lock_sock_nested+0x48/0x100 [ 726.708116][T24310] inet_shutdown+0x6a/0x390 [ 726.713179][T24310] nbd_mark_nsock_dead+0x2e9/0x560 [ 726.718861][T24310] recv_work+0x1c7f/0x1d90 [ 726.724371][T24310] process_scheduled_works+0xb6e/0x18c0 [ 726.730483][T24310] worker_thread+0xa53/0xfc0 [ 726.735627][T24310] kthread+0x388/0x470 [ 726.740265][T24310] ret_from_fork+0x51e/0xb90 [ 726.745494][T24310] ret_from_fork_asm+0x1a/0x30 [ 726.750819][T24310] [ 726.750819][T24310] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 726.758492][T24310] __mutex_lock+0x19f/0x1300 [ 726.763767][T24310] nbd_queue_rq+0x37b/0x1100 [ 726.768948][T24310] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 726.775057][T24310] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 726.782136][T24310] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 726.788766][T24310] blk_mq_run_hw_queue+0x348/0x4f0 [ 726.794542][T24310] blk_mq_dispatch_list+0xd16/0xe10 [ 726.800308][T24310] blk_mq_flush_plug_list+0x48d/0x570 [ 726.806264][T24310] __blk_flush_plug+0x3ed/0x4d0 [ 726.811693][T24310] __submit_bio+0x28d/0x580 [ 726.816778][T24310] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 726.822961][T24310] block_read_full_folio+0x599/0x830 [ 726.828800][T24310] filemap_read_folio+0x137/0x3b0 [ 726.834412][T24310] do_read_cache_folio+0x358/0x590 [ 726.840094][T24310] read_part_sector+0xb6/0x2b0 [ 726.845427][T24310] adfspart_check_ICS+0xa5/0xa40 [ 726.850922][T24310] bdev_disk_changed+0x7ba/0x1550 [ 726.856686][T24310] blkdev_get_whole+0x380/0x510 [ 726.862117][T24310] bdev_open+0x31e/0xd30 [ 726.866918][T24310] blkdev_open+0x470/0x610 [ 726.871892][T24310] do_dentry_open+0x785/0x14e0 [ 726.877208][T24310] vfs_open+0x3b/0x340 [ 726.881839][T24310] path_openat+0x2e08/0x3860 [ 726.886989][T24310] do_file_open+0x23e/0x4a0 [ 726.892046][T24310] do_sys_openat2+0x113/0x200 [ 726.897285][T24310] __x64_sys_openat+0x138/0x170 [ 726.902699][T24310] do_syscall_64+0x14d/0xf80 [ 726.907861][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.914367][T24310] [ 726.914367][T24310] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 726.921611][T24310] __mutex_lock+0x19f/0x1300 [ 726.926865][T24310] nbd_queue_rq+0xc6/0x1100 [ 726.931924][T24310] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 726.938028][T24310] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 726.944997][T24310] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 726.951761][T24310] blk_mq_run_hw_queue+0x348/0x4f0 [ 726.957444][T24310] blk_mq_dispatch_list+0xd16/0xe10 [ 726.963215][T24310] blk_mq_flush_plug_list+0x48d/0x570 [ 726.969242][T24310] __blk_flush_plug+0x3ed/0x4d0 [ 726.974645][T24310] __submit_bio+0x28d/0x580 [ 726.979721][T24310] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 726.985908][T24310] block_read_full_folio+0x599/0x830 [ 726.992181][T24310] filemap_read_folio+0x137/0x3b0 [ 726.997851][T24310] do_read_cache_folio+0x358/0x590 [ 727.003518][T24310] read_part_sector+0xb6/0x2b0 [ 727.008840][T24310] adfspart_check_ICS+0xa5/0xa40 [ 727.014322][T24310] bdev_disk_changed+0x7ba/0x1550 [ 727.019897][T24310] blkdev_get_whole+0x380/0x510 [ 727.025309][T24310] bdev_open+0x31e/0xd30 [ 727.030196][T24310] blkdev_open+0x470/0x610 [ 727.035169][T24310] do_dentry_open+0x785/0x14e0 [ 727.040488][T24310] vfs_open+0x3b/0x340 [ 727.045114][T24310] path_openat+0x2e08/0x3860 [ 727.050288][T24310] do_file_open+0x23e/0x4a0 [ 727.055351][T24310] do_sys_openat2+0x113/0x200 [ 727.060586][T24310] __x64_sys_openat+0x138/0x170 [ 727.066009][T24310] do_syscall_64+0x14d/0xf80 [ 727.071153][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.077721][T24310] [ 727.077721][T24310] -> #4 (set->srcu){.+.+}-{0:0}: [ 727.085064][T24310] __synchronize_srcu+0xca/0x300 [ 727.090639][T24310] elevator_switch+0x1e8/0x7a0 [ 727.095959][T24310] elevator_change+0x2cc/0x450 [ 727.101311][T24310] elevator_set_default+0x36c/0x430 [ 727.107056][T24310] blk_register_queue+0x366/0x430 [ 727.112736][T24310] __add_disk+0x677/0xd50 [ 727.117635][T24310] add_disk_fwnode+0xfb/0x480 [ 727.122868][T24310] nbd_dev_add+0x72c/0xb50 [ 727.127945][T24310] nbd_init+0x168/0x1f0 [ 727.132652][T24310] do_one_initcall+0x250/0x8d0 [ 727.137967][T24310] do_initcall_level+0x104/0x190 [ 727.143452][T24310] do_initcalls+0x59/0xa0 [ 727.148353][T24310] kernel_init_freeable+0x2a6/0x3e0 [ 727.154117][T24310] kernel_init+0x1d/0x1d0 [ 727.159005][T24310] ret_from_fork+0x51e/0xb90 [ 727.164144][T24310] ret_from_fork_asm+0x1a/0x30 [ 727.169470][T24310] [ 727.169470][T24310] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 727.177321][T24310] __mutex_lock+0x19f/0x1300 [ 727.182466][T24310] elevator_change+0x1b3/0x450 [ 727.187803][T24310] elevator_set_none+0xb5/0x140 [ 727.193209][T24310] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 727.199576][T24310] nbd_start_device+0x17f/0xb10 [ 727.204977][T24310] nbd_genl_connect+0x165b/0x1cf0 [ 727.210636][T24310] genl_family_rcv_msg_doit+0x22a/0x330 [ 727.216845][T24310] genl_rcv_msg+0x61c/0x7a0 [ 727.221989][T24310] netlink_rcv_skb+0x232/0x4b0 [ 727.227310][T24310] genl_rcv+0x28/0x40 [ 727.231842][T24310] netlink_unicast+0x80f/0x9b0 [ 727.237194][T24310] netlink_sendmsg+0x813/0xb40 [ 727.242717][T24310] ____sys_sendmsg+0x972/0x9f0 [ 727.248122][T24310] ___sys_sendmsg+0x2a5/0x360 [ 727.253344][T24310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 727.258830][T24310] do_syscall_64+0x14d/0xf80 [ 727.263972][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.270463][T24310] [ 727.270463][T24310] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 727.279216][T24310] blk_alloc_queue+0x546/0x680 [ 727.284559][T24310] __blk_mq_alloc_disk+0x197/0x390 [ 727.290336][T24310] nbd_dev_add+0x499/0xb50 [ 727.295304][T24310] nbd_init+0x168/0x1f0 [ 727.300014][T24310] do_one_initcall+0x250/0x8d0 [ 727.305419][T24310] do_initcall_level+0x104/0x190 [ 727.310905][T24310] do_initcalls+0x59/0xa0 [ 727.315871][T24310] kernel_init_freeable+0x2a6/0x3e0 [ 727.321649][T24310] kernel_init+0x1d/0x1d0 [ 727.326582][T24310] ret_from_fork+0x51e/0xb90 [ 727.331728][T24310] ret_from_fork_asm+0x1a/0x30 [ 727.337478][T24310] [ 727.337478][T24310] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 727.344892][T24310] fs_reclaim_acquire+0x71/0x100 [ 727.350469][T24310] kmem_cache_alloc_noprof+0x40/0x650 [ 727.356384][T24310] __kernfs_iattrs+0xdf/0x340 [ 727.362150][T24310] kernfs_iop_setattr+0xea/0x3f0 [ 727.367641][T24310] notify_change+0xc1a/0xf40 [ 727.372780][T24310] do_truncate+0x1c2/0x250 [ 727.377741][T24310] path_openat+0x2f89/0x3860 [ 727.383062][T24310] do_file_open+0x23e/0x4a0 [ 727.388117][T24310] do_sys_openat2+0x113/0x200 [ 727.393473][T24310] __x64_sys_openat+0x138/0x170 [ 727.398884][T24310] do_syscall_64+0x14d/0xf80 [ 727.404046][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.410575][T24310] [ 727.410575][T24310] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 727.419134][T24310] __lock_acquire+0x15a5/0x2cf0 [ 727.424546][T24310] lock_acquire+0xf0/0x2e0 [ 727.429774][T24310] down_write+0x96/0x200 [ 727.434563][T24310] kernfs_unlink_sibling+0x71/0x180 [ 727.440479][T24310] __kernfs_remove+0x3e7/0x660 [ 727.445800][T24310] kernfs_remove_by_name_ns+0xaf/0x130 [ 727.451802][T24310] nbd_config_put+0x1e6/0x580 [ 727.457028][T24310] nbd_release+0xfe/0x140 [ 727.462000][T24310] bdev_release+0x536/0x650 [ 727.467065][T24310] blkdev_release+0x15/0x20 [ 727.472136][T24310] __fput+0x44f/0xa70 [ 727.476685][T24310] task_work_run+0x1d9/0x270 [ 727.481825][T24310] do_exit+0x70f/0x23c0 [ 727.486532][T24310] do_group_exit+0x21b/0x2d0 [ 727.491672][T24310] get_signal+0x1284/0x1330 [ 727.496757][T24310] arch_do_signal_or_restart+0xbc/0x830 [ 727.502855][T24310] exit_to_user_mode_loop+0x86/0x480 [ 727.508692][T24310] do_syscall_64+0x32d/0xf80 [ 727.513831][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.520365][T24310] [ 727.520365][T24310] other info that might help us debug this: [ 727.520365][T24310] [ 727.531052][T24310] Chain exists of: [ 727.531052][T24310] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 727.531052][T24310] [ 727.545779][T24310] Possible unsafe locking scenario: [ 727.545779][T24310] [ 727.553342][T24310] CPU0 CPU1 [ 727.558774][T24310] ---- ---- [ 727.564166][T24310] lock(&root->kernfs_rwsem); [ 727.568970][T24310] lock(cpuhp_state_mutex); [ 727.576146][T24310] lock(&root->kernfs_rwsem); [ 727.583497][T24310] lock(&root->kernfs_iattr_rwsem); [ 727.588812][T24310] [ 727.588812][T24310] *** DEADLOCK *** [ 727.588812][T24310] [ 727.596991][T24310] 3 locks held by udevd/24310: [ 727.601798][T24310] #0: ffff8880260ae358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 727.611420][T24310] #1: ffff8880260bea78 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 727.622157][T24310] #2: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 727.632905][T24310] [ 727.632905][T24310] stack backtrace: [ 727.638814][T24310] CPU: 1 UID: 0 PID: 24310 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 727.638835][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 727.638846][T24310] Call Trace: [ 727.638855][T24310] [ 727.638865][T24310] dump_stack_lvl+0xe8/0x150 [ 727.638891][T24310] print_circular_bug+0x2e1/0x300 [ 727.638921][T24310] check_noncircular+0x12e/0x150 [ 727.638950][T24310] __lock_acquire+0x15a5/0x2cf0 [ 727.638978][T24310] ? __lock_acquire+0x6b5/0x2cf0 [ 727.639005][T24310] lock_acquire+0xf0/0x2e0 [ 727.639026][T24310] ? kernfs_unlink_sibling+0x71/0x180 [ 727.639049][T24310] down_write+0x96/0x200 [ 727.639072][T24310] ? kernfs_unlink_sibling+0x71/0x180 [ 727.639089][T24310] ? __pfx_down_write+0x10/0x10 [ 727.639111][T24310] ? kernfs_root+0x1c/0x230 [ 727.639135][T24310] ? kernfs_root+0x1c/0x230 [ 727.639166][T24310] ? kernfs_root+0x1ea/0x230 [ 727.639191][T24310] kernfs_unlink_sibling+0x71/0x180 [ 727.639211][T24310] __kernfs_remove+0x3e7/0x660 [ 727.639249][T24310] kernfs_remove_by_name_ns+0xaf/0x130 [ 727.639271][T24310] nbd_config_put+0x1e6/0x580 [ 727.639294][T24310] nbd_release+0xfe/0x140 [ 727.639314][T24310] ? __pfx_nbd_release+0x10/0x10 [ 727.639334][T24310] bdev_release+0x536/0x650 [ 727.639358][T24310] ? __pfx_blkdev_release+0x10/0x10 [ 727.639380][T24310] blkdev_release+0x15/0x20 [ 727.639402][T24310] __fput+0x44f/0xa70 [ 727.639432][T24310] task_work_run+0x1d9/0x270 [ 727.639453][T24310] ? __pfx_task_work_run+0x10/0x10 [ 727.639470][T24310] ? do_raw_spin_unlock+0xf5/0x210 [ 727.639491][T24310] do_exit+0x70f/0x23c0 [ 727.639507][T24310] ? __kasan_slab_free+0x5c/0x80 [ 727.639532][T24310] ? kmem_cache_free+0x187/0x630 [ 727.639554][T24310] ? __pfx_do_exit+0x10/0x10 [ 727.639572][T24310] ? do_raw_spin_lock+0x12b/0x2f0 [ 727.639594][T24310] do_group_exit+0x21b/0x2d0 [ 727.639610][T24310] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.639630][T24310] get_signal+0x1284/0x1330 [ 727.639661][T24310] arch_do_signal_or_restart+0xbc/0x830 [ 727.639683][T24310] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 727.639702][T24310] ? do_sys_openat2+0x14c/0x200 [ 727.639737][T24310] exit_to_user_mode_loop+0x86/0x480 [ 727.639757][T24310] ? rcu_is_watching+0x15/0xb0 [ 727.639783][T24310] do_syscall_64+0x32d/0xf80 [ 727.639804][T24310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.639822][T24310] ? clear_bhb_loop+0x40/0x90 [ 727.639841][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.639858][T24310] RIP: 0033:0x7f422c0a7407 [ 727.639874][T24310] Code: Unable to access opcode bytes at 0x7f422c0a73dd. [ 727.639883][T24310] RSP: 002b:00007ffc90069430 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 727.639901][T24310] RAX: 0000000000000008 RBX: 00007f422c878880 RCX: 00007f422c0a7407 [ 727.639913][T24310] RDX: 00000000000a0800 RSI: 000055a175b46480 RDI: ffffffffffffff9c [ 727.639925][T24310] RBP: 000055a175b45910 R08: 0000000000000000 R09: 0000000000000000 [ 727.639936][T24310] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a175b58e20 [ 727.639947][T24310] R13: 000055a175b53190 R14: 0000000000000000 R15: 000055a175b58e20 [ 727.639968][T24310] [ 728.037186][ T5196] udevd[5196]: worker [24310] terminated by signal 9 (Killed) [ 728.058608][ T5196] udevd[5196]: worker [24310] failed while handling '/devices/virtual/block/nbd2' [ 730.292144][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 730.300283][ C0] lec:lec_tx_timeout: lec0 [ 730.305999][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 735.322073][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 735.330186][ C0] lec:lec_tx_timeout: lec0 [ 735.335553][ C0] lec:lec_start_xmit: lec0:No lecd attached