last executing test programs: 3.956189596s ago: executing program 0 (id=8449): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONE(r1, 0x40049409, r0) 3.881996186s ago: executing program 0 (id=8452): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r0}, 0xc) 3.791224453s ago: executing program 0 (id=8454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 3.660516176s ago: executing program 0 (id=8458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 3.598605134s ago: executing program 0 (id=8459): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfffe}, 0x8) 3.522955071s ago: executing program 0 (id=8461): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1}, 0x48) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) 2.708168272s ago: executing program 3 (id=8477): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) read(r0, &(0x7f0000000200)=""/7, 0x7) 2.522882872s ago: executing program 3 (id=8480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x4c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x3, 0x2, 0x0, {0x8, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x4, 0x34}}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20004800) 2.300861498s ago: executing program 4 (id=8484): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x24048000) 2.268226634s ago: executing program 3 (id=8485): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.213275284s ago: executing program 2 (id=8486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 2.068173021s ago: executing program 4 (id=8488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000480)={0xa, 0x1, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44191) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) 2.06382648s ago: executing program 3 (id=8489): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) 2.049216823s ago: executing program 1 (id=8490): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.040388434s ago: executing program 2 (id=8491): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) 1.922142723s ago: executing program 3 (id=8492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xc, 0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7f}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) 1.864814024s ago: executing program 2 (id=8493): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) 1.841274802s ago: executing program 4 (id=8494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}]}]}]}, 0x2c}}, 0x2400c090) 1.801773725s ago: executing program 2 (id=8495): unshare(0x20000400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) 1.739611837s ago: executing program 3 (id=8496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r1, 0x0) 1.664156216s ago: executing program 2 (id=8497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.6639881s ago: executing program 4 (id=8498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) 1.374062863s ago: executing program 4 (id=8499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.306118669s ago: executing program 2 (id=8500): unshare(0x22020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 1.167656597s ago: executing program 4 (id=8501): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xc63d}]}}]}, 0x3c}}, 0x0) 843.803109ms ago: executing program 1 (id=8502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 628.483524ms ago: executing program 1 (id=8503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 445.625937ms ago: executing program 1 (id=8504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) 171.211696ms ago: executing program 1 (id=8505): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x890, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) 0s ago: executing program 1 (id=8506): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) kernel console output (not intermixed with test programs): etdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.763160][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.826534][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.919596][ T762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.928273][ T146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.944033][ T762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.946452][ T146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.971055][ T146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.990123][ T146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.271841][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.297259][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.451866][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.485437][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.598618][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.629650][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.704293][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.746784][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.506677][ T6207] IPv6: addrconf: prefix option has invalid lifetime [ 104.513973][ T6207] IPv6: addrconf: prefix option has invalid lifetime [ 106.116876][ T6282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.467441][ T6345] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 112.589100][ T6581] IPv6: addrconf: prefix option has invalid lifetime [ 121.950719][ T7021] can: request_module (can-proto-0) failed. [ 129.340479][ T7380] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 132.765873][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777490][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.199326][ T7664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.382607][ T7717] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 141.825784][ T7964] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 144.988604][ T8107] netlink: 'syz.1.1139': attribute type 3 has an invalid length. [ 145.029794][ T8107] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 145.146853][ T8112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.609276][ T8133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.671100][ T8138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1156'. [ 146.173142][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1166'. [ 146.257005][ T8160] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.549910][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 146.914589][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 146.939388][ T8186] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 146.962092][ T8186] bond1 (unregistering): Released all slaves [ 147.885603][ T8230] Cannot find add_set index 0 as target [ 148.537209][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 149.297691][ T8288] netlink: 'syz.3.1229': attribute type 3 has an invalid length. [ 149.504787][ T8293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.973893][ T8316] Cannot find set identified by id 65534 to match [ 150.053344][ T8320] netlink: 'syz.4.1245': attribute type 7 has an invalid length. [ 150.224497][ T8328] netlink: 'syz.0.1249': attribute type 4 has an invalid length. [ 150.375974][ T8332] netlink: 'syz.4.1251': attribute type 1 has an invalid length. [ 150.393459][ T8332] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1251'. [ 150.769976][ T8351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1259'. [ 150.793601][ T8351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1259'. [ 151.803929][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1277'. [ 152.286691][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.540784][ T8415] netlink: 'syz.3.1291': attribute type 8 has an invalid length. [ 152.891155][ T8429] Cannot find add_set index 65532 as target [ 152.920433][ T8431] sctp: [Deprecated]: syz.2.1299 (pid 8431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.920433][ T8431] Use struct sctp_sack_info instead [ 152.991165][ T8433] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.065572][ T8433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.073772][ T8433] IPv6: NLM_F_CREATE should be set when creating new route [ 153.308282][ T8443] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 153.554359][ T8457] xt_TCPMSS: Only works on TCP SYN packets [ 153.779616][ T8465] SET target dimension over the limit! [ 154.017528][ T8473] netlink: 'syz.1.1320': attribute type 2 has an invalid length. [ 154.286307][ T30] audit: type=1107 audit(1783335626.844:2): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.287666][ T8483] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 155.417720][ T8533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1349'. [ 155.572978][ T8539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 155.793553][ T8549] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 155.883915][ T8554] tc_dump_action: action bad kind [ 155.936533][ T8557] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 155.969612][ T8557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1363'. [ 156.723000][ T8599] Cannot find del_set index 4 as target [ 156.806801][ T8601] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 156.999951][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'. [ 157.188360][ T8617] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1392'. [ 158.238587][ T8673] warning: `syz.0.1415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.355225][ T8679] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 158.389470][ T8679] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1418'. [ 158.416985][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'. [ 159.160064][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 159.728875][ T8749] SET target dimension over the limit! [ 159.911169][ T8759] ipt_rpfilter: unknown options [ 160.246334][ T8774] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 160.327431][ T8781] syz.1.1463 uses obsolete (PF_INET,SOCK_PACKET) [ 160.403038][ T8783] tunl0: entered promiscuous mode [ 160.461723][ T8783] netlink: 'syz.2.1465': attribute type 3 has an invalid length. [ 160.472138][ T8783] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1465'. [ 160.679142][ T8794] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.915290][ T8811] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1479'. [ 161.049875][ T8814] xt_cgroup: path and classid specified [ 161.080841][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 161.113819][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 161.128650][ T8819] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1484'. [ 161.389491][ T8832] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.527294][ T8839] netlink: zone id is out of range [ 161.571405][ T8839] netlink: del zone limit has 4 unknown bytes [ 161.631583][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 161.705325][ T8847] xfrm1: entered allmulticast mode [ 161.832345][ T8853] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 162.146417][ T8873] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1507'. [ 162.169728][ T8873] openvswitch: netlink: Message has 512 unknown bytes. [ 163.547167][ T8946] xt_ecn: cannot match TCP bits for non-tcp packets [ 165.213396][ T9023] netlink: 'syz.1.1580': attribute type 1 has an invalid length. [ 165.245959][ T9023] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1580'. [ 165.293071][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 165.431181][ T9036] ipt_ECN: cannot use operation on non-tcp rule [ 165.448550][ T9035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1586'. [ 165.705839][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 165.724867][ T9051] netlink: 'syz.3.1594': attribute type 8 has an invalid length. [ 165.962227][ T9064] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 165.997184][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 166.387017][ T9083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1610'. [ 166.648966][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 167.190483][ T9127] ip6t_srh: unknown srh match flags 5F28 [ 167.377391][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 167.496195][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 167.521463][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1639'. [ 167.724959][ T9156] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 167.743813][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1644'. [ 169.211707][ T9228] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1682'. [ 169.517146][ T9243] x_tables: unsorted entry at hook 2 [ 170.278298][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 170.681903][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 170.737031][ T9311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1718'. [ 170.888269][ T9313] unsupported nlmsg_type 40 [ 171.898140][ T9363] bond1: option all_slaves_active: invalid value (222) [ 171.917006][ T9363] bond1 (unregistering): Released all slaves [ 172.110521][ T9377] netlink: 'syz.1.1752': attribute type 1 has an invalid length. [ 172.118833][ T9377] __nla_validate_parse: 1 callbacks suppressed [ 172.118850][ T9377] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1752'. [ 172.290149][ T9347] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 172.489643][ T9396] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1760'. [ 172.513605][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 172.532692][ T9397] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1761'. [ 172.558311][ T9397] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1761'. [ 172.941074][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'. [ 173.050608][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 173.078353][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 173.105297][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 173.140121][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'. [ 173.738426][ T9457] netlink: 'syz.0.1790': attribute type 12 has an invalid length. [ 173.869431][ T9457] bond1: option primary_reselect: invalid value (255) [ 173.946931][ T9457] bond1 (unregistering): Released all slaves [ 174.049232][ T9458] C: renamed from lo (while UP) [ 174.066286][ T9458] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.267257][ T9479] 0: renamed from hsr0 (while UP) [ 174.299593][ T9479] 0: entered allmulticast mode [ 174.317553][ T9479] hsr_slave_0: entered allmulticast mode [ 174.336399][ T9479] hsr_slave_1: entered allmulticast mode [ 174.355151][ T9479] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 174.458744][ T9485] veth0_to_bond: default FDB implementation only supports local addresses [ 175.392875][ T9530] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 175.411335][ T9530] bond1 (unregistering): Released all slaves [ 175.438152][ T11] IPVS: starting estimator thread 0... [ 175.555266][ T9540] IPVS: using max 24 ests per chain, 57600 per kthread [ 176.172126][ T9577] netlink: 'syz.0.1849': attribute type 2 has an invalid length. [ 176.193390][ T9577] netlink: 'syz.0.1849': attribute type 2 has an invalid length. [ 176.208776][ T9580] openvswitch: netlink: IP tunnel dst address not specified [ 176.585591][ T9598] netlink: 'syz.0.1859': attribute type 10 has an invalid length. [ 176.665317][ T9598] team0: Port device geneve1 added [ 177.003652][ T9620] netlink: 'syz.2.1870': attribute type 3 has an invalid length. [ 177.742675][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.751304][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.031259][ T9650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.080080][ T9650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.338125][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.389402][ T14] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.433067][ T14] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.471607][ T14] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.918700][ T9707] Cannot find add_set index 4 as target [ 180.339928][ T9785] __nla_validate_parse: 10 callbacks suppressed [ 180.339975][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1951'. [ 180.569645][ T9798] ipt_ECN: cannot use operation on non-tcp rule [ 180.725093][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1962'. [ 180.988498][ T9821] netlink: 'syz.4.1969': attribute type 12 has an invalid length. [ 181.076101][ T9825] netlink: 'syz.1.1971': attribute type 8 has an invalid length. [ 181.217916][ T9831] netlink: 'syz.2.1973': attribute type 1 has an invalid length. [ 181.392412][ T9839] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 181.537509][ T9845] netlink: 'syz.4.1981': attribute type 2 has an invalid length. [ 181.599751][ T9851] netlink: 'syz.2.1983': attribute type 21 has an invalid length. [ 181.632257][ T9851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1983'. [ 181.733899][ T9856] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 182.116453][ T9877] bond0: Error: Cannot enslave bond to itself. [ 182.406218][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 182.480500][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2004'. [ 182.860055][ T9910] xt_recent: Unsupported userspace flags (000000b1) [ 183.005946][ T9921] netlink: 344 bytes leftover after parsing attributes in process `syz.3.2017'. [ 183.372992][ T9939] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.611315][ T9954] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 183.634933][ T9954] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 183.903497][ T9967] ipt_REJECT: TCP_RESET invalid for non-tcp [ 184.061153][ T9972] xt_CT: No such helper "snmp_trap" [ 184.102692][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 184.111881][ T9982] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 184.121508][ T9981] netlink: 'syz.3.2044': attribute type 5 has an invalid length. [ 184.141393][ T9981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2044'. [ 184.232321][ T9981] geneve3: entered promiscuous mode [ 184.260548][ T9981] geneve3: entered allmulticast mode [ 184.278915][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 184.306351][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 184.323636][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 184.340882][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 184.526496][ T9998] Cannot find del_set index 4 as target [ 185.276827][T10040] x_tables: duplicate underflow at hook 3 [ 185.558756][T10053] netlink: 'syz.1.2079': attribute type 2 has an invalid length. [ 185.578618][T10053] netlink: 'syz.1.2079': attribute type 11 has an invalid length. [ 185.601371][T10053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2079'. [ 185.759088][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 186.445959][T10101] lo: entered allmulticast mode [ 186.479040][T10101] tunl0: entered allmulticast mode [ 186.500517][T10101] gre0: entered allmulticast mode [ 186.525257][T10101] gretap0: entered allmulticast mode [ 186.540554][T10101] erspan0: entered allmulticast mode [ 186.559104][T10101] ip_vti0: entered allmulticast mode [ 186.580281][T10101] ip6_vti0: entered allmulticast mode [ 186.600653][T10101] sit0: entered allmulticast mode [ 186.610390][ T5629] IPVS: starting estimator thread 0... [ 186.613047][T10101] ip6tnl0: entered allmulticast mode [ 186.622236][T10101] ip6gre0: entered allmulticast mode [ 186.628078][T10101] syz_tun: entered allmulticast mode [ 186.724202][T10113] IPVS: using max 26 ests per chain, 62400 per kthread [ 186.881393][T10124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2113'. [ 187.169551][T10141] validate_nla: 1 callbacks suppressed [ 187.169570][T10141] netlink: 'syz.2.2121': attribute type 2 has an invalid length. [ 187.203076][T10141] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 187.573740][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 187.637936][T10165] netlink: 'syz.2.2133': attribute type 11 has an invalid length. [ 187.788753][T10171] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 187.804588][T10171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.834968][T10171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.087562][T10176] bond2 (unregistering): Released all slaves [ 188.310255][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'. [ 188.342657][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'. [ 188.669618][T10210] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.703599][T10212] netlink: 'syz.1.2155': attribute type 12 has an invalid length. [ 189.059003][T10229] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2163'. [ 189.095636][T10229] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2163'. [ 189.551440][T10255] Driver unsupported XDP return value 0 on prog (id 227) dev N/A, expect packet loss! [ 189.658976][T10263] netlink: 'syz.4.2180': attribute type 8 has an invalid length. [ 189.671450][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'. [ 189.682312][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2181'. [ 190.736549][T10317] netlink: 'syz.0.2205': attribute type 2 has an invalid length. [ 190.843233][T10322] __nla_validate_parse: 3 callbacks suppressed [ 190.843252][T10322] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2207'. [ 191.281286][T10342] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 191.681512][T10367] x_tables: duplicate underflow at hook 2 [ 192.046347][T10388] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.2240'. [ 192.192373][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 193.172191][T10437] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 193.473803][T10399] infiniband syz0: set down [ 193.486733][T10399] infiniband syz0: added ipvlan0 [ 193.511344][T10399] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 193.527558][T10399] infiniband syz0: Couldn't open port 1 [ 193.589946][T10399] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 193.633789][T10399] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 193.683779][T10399] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 193.872377][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2278'. [ 193.912742][T10399] RDS/IB: syz0: added [ 193.922566][T10399] smc: adding ib device syz0 with port count 1 [ 193.945134][T10399] smc: ib device syz0 port 1 has no pnetid [ 194.205313][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211800][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.807687][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2298'. [ 196.546696][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 196.599253][T10582] netlink: 'syz.0.2336': attribute type 9 has an invalid length. [ 197.455353][T10618] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 197.777905][T10630] netlink: 'syz.0.2360': attribute type 21 has an invalid length. [ 197.797337][T10630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2360'. [ 197.808171][T10630] netlink: 'syz.0.2360': attribute type 5 has an invalid length. [ 197.816392][T10630] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2360'. [ 198.227876][T10616] lo speed is unknown, defaulting to 1000 [ 198.243821][T10616] lo speed is unknown, defaulting to 1000 [ 198.268328][T10616] lo speed is unknown, defaulting to 1000 [ 198.285782][T10616] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 198.305526][T10616] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 198.355947][T10616] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 198.390152][T10616] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.411153][T10648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2368'. [ 198.422825][T10616] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 198.539507][T10616] lo speed is unknown, defaulting to 1000 [ 198.572503][T10616] lo speed is unknown, defaulting to 1000 [ 198.594886][T10616] lo speed is unknown, defaulting to 1000 [ 198.608664][T10616] lo speed is unknown, defaulting to 1000 [ 198.632252][T10616] lo speed is unknown, defaulting to 1000 [ 198.805234][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'. [ 198.834340][T10666] netlink: 'syz.3.2376': attribute type 21 has an invalid length. [ 198.862120][T10666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2376'. [ 199.045762][T10674] x_tables: duplicate underflow at hook 4 [ 199.086623][T10679] netlink: 'syz.1.2382': attribute type 13 has an invalid length. [ 199.095920][T10680] netlink: 'syz.4.2384': attribute type 75 has an invalid length. [ 199.103991][T10679] netlink: 'syz.1.2382': attribute type 58 has an invalid length. [ 199.137003][T10679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2382'. [ 199.921381][T10716] netlink: 'syz.1.2402': attribute type 11 has an invalid length. [ 200.133231][T10726] dvmrp0: entered allmulticast mode [ 200.506977][T10751] openvswitch: netlink: ct_state flags ffffffff unsupported [ 200.732777][T10761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.957750][T10773] netlink: 'syz.0.2429': attribute type 2 has an invalid length. [ 201.148820][T10784] netlink: 'syz.1.2437': attribute type 3 has an invalid length. [ 201.160924][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 201.470493][T10802] netlink: 'syz.2.2444': attribute type 2 has an invalid length. [ 201.822771][T10819] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2453'. [ 201.867051][T10824] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 202.015796][T10832] netlink: 'syz.4.2458': attribute type 10 has an invalid length. [ 202.080126][T10832] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.113621][T10832] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.938077][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 203.926302][T10934] erspan0: entered promiscuous mode [ 203.941867][T10934] erspan0: entered allmulticast mode [ 203.979549][T10936] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 204.015765][T10936] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 204.033392][T10936] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 204.064315][T10936] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.266515][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 204.687088][T10967] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 204.697280][T10970] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 204.705471][T10966] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2522'. [ 204.745484][T10970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.775811][T10970] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 206.155262][T11043] netlink: 'syz.1.2561': attribute type 3 has an invalid length. [ 206.809749][T11079] bridge1: entered promiscuous mode [ 206.827889][T11079] bridge1: entered allmulticast mode [ 207.076191][ T5629] IPVS: starting estimator thread 0... [ 207.172099][T11094] IPVS: using max 27 ests per chain, 64800 per kthread [ 208.280329][T11159] netlink: 'syz.0.2617': attribute type 10 has an invalid length. [ 208.309250][T11159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2617'. [ 208.342470][T11159] team0: entered allmulticast mode [ 208.368926][T11159] team_slave_0: entered allmulticast mode [ 208.391839][T11159] team_slave_1: entered allmulticast mode [ 208.408763][T11159] geneve1: entered allmulticast mode [ 208.419325][T11159] bridge0: port 3(team0) entered blocking state [ 208.435386][T11159] bridge0: port 3(team0) entered disabled state [ 208.467060][T11159] team0: entered promiscuous mode [ 208.472450][T11159] team_slave_0: entered promiscuous mode [ 208.478529][T11159] team_slave_1: entered promiscuous mode [ 208.485664][T11159] geneve1: entered promiscuous mode [ 208.496069][T11159] bridge0: port 3(team0) entered blocking state [ 208.502562][T11159] bridge0: port 3(team0) entered forwarding state [ 208.675508][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 208.838139][T11182] xt_hashlimit: overflow, rate too high: 0 [ 208.900935][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2630'. [ 208.914667][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2630'. [ 209.659718][T11227] netlink: 'syz.4.2649': attribute type 1 has an invalid length. [ 209.697978][T11230] x9: renamed from bridge_slave_0 [ 209.875954][T11233] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2653'. [ 209.917185][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2653'. [ 209.920885][ T9] IPVS: starting estimator thread 0... [ 210.062705][T11240] IPVS: using max 31 ests per chain, 74400 per kthread [ 211.000011][T11290] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2681'. [ 211.302927][T11306] netlink: 'syz.4.2689': attribute type 2 has an invalid length. [ 211.326335][T11306] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2689'. [ 211.552422][T11318] netlink: 808 bytes leftover after parsing attributes in process `syz.0.2695'. [ 211.642942][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 211.651155][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 211.657860][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 211.664797][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 212.694426][T11379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2724'. [ 212.871351][T11379] bond1 (unregistering): Released all slaves [ 213.367190][T11414] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.411165][T11416] __nla_validate_parse: 1 callbacks suppressed [ 213.411186][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 213.663241][T11427] Cannot find map_set index 135 as target [ 213.908326][T11438] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2752'. [ 213.928475][T11438] 0XD: renamed from gretap0 [ 213.943341][T11441] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 214.750991][T11481] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 215.592989][T11526] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 215.605577][T11525] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.611344][T11526] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2793'. [ 216.247265][T11559] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2812'. [ 216.448256][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 217.084481][T11604] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 217.520397][T11622] veth3: entered promiscuous mode [ 217.534361][T11622] veth3: entered allmulticast mode [ 217.543579][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2844'. [ 217.994329][T11646] netlink: 'syz.1.2855': attribute type 2 has an invalid length. [ 218.032073][T11646] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2855'. [ 218.126912][T11654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.423814][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'. [ 218.976888][T11695] netlink: 'syz.2.2880': attribute type 4 has an invalid length. [ 218.991222][T11696] netlink: 6208 bytes leftover after parsing attributes in process `syz.4.2879'. [ 219.283891][T11710] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 219.318718][T11710] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2887'. [ 219.380039][T11715] openvswitch: netlink: IPv4 tunnel dst address is zero [ 219.819989][T11739] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 219.835672][T11739] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2901'. [ 220.079819][T11750] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2905'. [ 220.117076][T11753] netlink: 'syz.1.2907': attribute type 1 has an invalid length. [ 220.131222][T11753] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2907'. [ 220.142611][T11755] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.237103][T11817] bond0: (slave gre0): refused to change device type [ 222.215017][T11863] netlink: 'syz.1.2961': attribute type 30 has an invalid length. [ 222.400029][T11874] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.417244][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'. [ 222.588166][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 222.631038][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2972'. [ 222.815452][T11894] netlink: 'syz.0.2977': attribute type 21 has an invalid length. [ 222.845083][T11894] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2977'. [ 222.912809][T11900] netlink: 'syz.3.2980': attribute type 1 has an invalid length. [ 224.449447][T11984] __nla_validate_parse: 2 callbacks suppressed [ 224.449466][T11984] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3022'. [ 224.488860][T11984] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.3022'. [ 224.540230][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 224.572576][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 224.604735][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 224.790141][T12000] geneve2: entered promiscuous mode [ 224.811450][T12000] geneve2: entered allmulticast mode [ 224.839028][ T762] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.878981][ T762] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.912948][ T762] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 224.949825][ T762] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 225.222532][T12019] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 225.344718][T12024] netlink: 'syz.4.3042': attribute type 1 has an invalid length. [ 225.367927][T12024] netlink: 'syz.4.3042': attribute type 2 has an invalid length. [ 225.553117][T11987] infiniband syz2: set down [ 225.557785][ T5724] vxcan1 speed is unknown, defaulting to 1000 [ 225.575739][T11987] infiniband syz2: added vxcan1 [ 225.595123][T11987] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 225.600345][T11987] infiniband syz2: Couldn't open port 1 [ 225.651834][T11987] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 225.698260][T11987] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 225.736679][T11987] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 225.805951][T12045] openvswitch: netlink: Missing valid actions attribute. [ 225.834006][T12045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.858037][T11987] RDS/IB: syz2: added [ 225.873252][T11987] smc: adding ib device syz2 with port count 1 [ 225.900621][T11987] smc: ib device syz2 port 1 has no pnetid [ 225.920548][ T5760] vxcan1 speed is unknown, defaulting to 1000 [ 225.935279][T12050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.944453][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 225.965668][T12051] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 225.993930][T12051] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3053'. [ 226.809944][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 227.051865][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 227.072377][T12101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.744981][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 227.771113][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3095'. [ 227.881904][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3097'. [ 227.936616][T12137] tipc: Trying to set illegal importance in message [ 228.175134][T12147] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3103'. [ 228.295082][T12153] vlan0: entered promiscuous mode [ 228.496165][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 228.756833][T12173] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 228.925777][T12178] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 229.185795][T11987] vxcan1 speed is unknown, defaulting to 1000 [ 229.316470][T12195] nftables ruleset with unbound chain [ 229.596133][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 229.653179][T12208] bond1: option xmit_hash_policy: invalid value (64) [ 229.676445][T12208] bond1 (unregistering): Released all slaves [ 230.040045][T12222] ipt_REJECT: ECHOREPLY no longer supported. [ 230.306659][T12236] xt_TCPMSS: Only works on TCP SYN packets [ 231.895791][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 231.975352][T12313] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.3185'. [ 231.997491][T12314] netlink: 'syz.4.3184': attribute type 4 has an invalid length. [ 232.049887][T12316] netlink: 'syz.3.3186': attribute type 11 has an invalid length. [ 232.083586][T12316] netlink: 'syz.3.3186': attribute type 11 has an invalid length. [ 232.095460][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3187'. [ 232.113258][T12316] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3186'. [ 232.361144][T12331] Unsupported ieee802154 address type: 0 [ 232.405007][T12336] SET target dimension over the limit! [ 232.480805][T12338] netlink: 'syz.0.3200': attribute type 7 has an invalid length. [ 232.873967][T12359] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 233.164080][T12372] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 233.580744][T12396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'. [ 233.613573][T12396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'. [ 233.744522][T12403] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 233.803447][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3232'. [ 233.949263][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3235'. [ 234.039565][T12416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 234.089611][T12416] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 234.112096][T12416] gretap1: entered promiscuous mode [ 234.125942][T12416] gretap1: entered allmulticast mode [ 234.225467][T12429] netlink: 'syz.3.3241': attribute type 2 has an invalid length. [ 234.237179][T12421] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 234.248390][T12421] bond1: option packets_per_slave: allowed values 0 - 65535 [ 234.268734][T12421] bond1 (unregistering): Released all slaves [ 234.337182][T12433] netlink: 'syz.1.3242': attribute type 6 has an invalid length. [ 234.768400][T12457] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3254'. [ 235.078277][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3259'. [ 235.216019][T12476] netlink: 'syz.0.3262': attribute type 23 has an invalid length. [ 235.500207][T12490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.556655][T12492] tc_dump_action: action bad kind [ 235.577672][ T9] lo speed is unknown, defaulting to 1000 [ 235.620598][ T9] sy2: Port: 1 Link DOWN [ 236.078131][T12519] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3283'. [ 236.101041][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 236.115615][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3283'. [ 236.125969][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3283'. [ 236.162143][T12526] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.918914][T12564] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 236.932093][T12564] netlink: 'syz.0.3306': attribute type 2 has an invalid length. [ 237.634909][T12598] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 237.656326][T12598] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3323'. [ 238.137786][T12614] bond1: option lp_interval: invalid value (0) [ 238.168498][T12614] bond1: option lp_interval: allowed values 1 - 2147483647 [ 238.198475][T12614] bond1 (unregistering): Released all slaves [ 239.287186][T12679] netlink: 'syz.2.3363': attribute type 21 has an invalid length. [ 239.368742][T12682] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3365'. [ 239.745509][T12701] netlink: 'syz.3.3374': attribute type 1 has an invalid length. [ 240.081444][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3383'. [ 240.223277][T12726] syz.0.3386: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.256954][T12728] netlink: 'syz.3.3387': attribute type 1 has an invalid length. [ 240.266296][T12726] CPU: 1 UID: 0 PID: 12726 Comm: syz.0.3386 Not tainted syzkaller #0 PREEMPT(full) [ 240.266342][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.266386][T12726] Call Trace: [ 240.266396][T12726] [ 240.266406][T12726] dump_stack_lvl+0xe8/0x150 [ 240.266459][T12726] warn_alloc+0x24c/0x270 [ 240.266491][T12726] ? stack_depot_save_flags+0x3ec/0x800 [ 240.266521][T12726] ? __pfx_warn_alloc+0x10/0x10 [ 240.266551][T12726] ? kasan_save_track+0x3e/0x80 [ 240.266578][T12726] ? __kasan_kmalloc+0x93/0xb0 [ 240.266613][T12726] ? xsk_setsockopt+0x52a/0x960 [ 240.266637][T12726] ? do_sock_setsockopt+0x17c/0x1b0 [ 240.266668][T12726] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 240.266698][T12726] ? do_syscall_64+0x174/0x580 [ 240.266727][T12726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.266760][T12726] __vmalloc_node_range_noprof+0x12c/0x1730 [ 240.266820][T12726] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.266850][T12726] ? __kasan_kmalloc+0x93/0xb0 [ 240.266880][T12726] ? __kmalloc_cache_noprof+0x32d/0x660 [ 240.266907][T12726] ? __kmalloc_cache_noprof+0x150/0x660 [ 240.266938][T12726] vmalloc_user_noprof+0xad/0xe0 [ 240.266963][T12726] ? xskq_create+0xbf/0x170 [ 240.266990][T12726] xskq_create+0xbf/0x170 [ 240.267021][T12726] xsk_init_queue+0x8a/0xe0 [ 240.267051][T12726] xsk_setsockopt+0x52a/0x960 [ 240.267075][T12726] ? __fget_files+0x2a/0x420 [ 240.267115][T12726] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.267141][T12726] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.267177][T12726] ? aa_sock_opt_perm+0xff/0x1a0 [ 240.267202][T12726] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 240.267223][T12726] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.267249][T12726] do_sock_setsockopt+0x17c/0x1b0 [ 240.267285][T12726] __x64_sys_setsockopt+0x13d/0x1b0 [ 240.267317][T12726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.267340][T12726] do_syscall_64+0x174/0x580 [ 240.267369][T12726] ? trace_irq_disable+0x3b/0x140 [ 240.267396][T12726] ? clear_bhb_loop+0x40/0x90 [ 240.267423][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.267445][T12726] RIP: 0033:0x7f078599de59 [ 240.267474][T12726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.267491][T12726] RSP: 002b:00007f078694d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.267514][T12726] RAX: ffffffffffffffda RBX: 00007f0785c25fa0 RCX: 00007f078599de59 [ 240.267529][T12726] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 240.267541][T12726] RBP: 00007f0785a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 240.267554][T12726] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.267568][T12726] R13: 00007f0785c26038 R14: 00007f0785c25fa0 R15: 00007ffe86ca89a8 [ 240.267602][T12726] [ 240.270545][T12726] Mem-Info: [ 240.612063][T12726] active_anon:5440 inactive_anon:0 isolated_anon:0 [ 240.612063][T12726] active_file:0 inactive_file:43086 isolated_file:0 [ 240.612063][T12726] unevictable:768 dirty:238 writeback:0 [ 240.612063][T12726] slab_reclaimable:10571 slab_unreclaimable:101727 [ 240.612063][T12726] mapped:29091 shmem:1289 pagetables:3480 [ 240.612063][T12726] sec_pagetables:0 bounce:0 [ 240.612063][T12726] kernel_misc_reclaimable:0 [ 240.612063][T12726] free:1324087 free_pcp:8128 free_cma:0 [ 240.677698][T12726] Node 0 active_anon:21760kB inactive_anon:0kB active_file:0kB inactive_file:172144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116364kB dirty:952kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12024kB pagetables:13684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.717825][T12735] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3392'. [ 240.756352][T12726] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 240.858325][T12726] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.923746][T12726] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 240.932536][T12726] Node 0 DMA32 free:1339844kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21772kB inactive_anon:0kB active_file:0kB inactive_file:172144kB unevictable:1536kB writepending:968kB zspages:0kB present:3129332kB managed:2548792kB mlocked:0kB bounce:0kB free_pcp:32792kB local_pcp:12564kB free_cma:0kB [ 241.017675][T12745] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 241.054744][T12726] lowmem_reserve[]: 0 0 0 0 0 [ 241.064626][T12726] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.111111][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'. [ 241.131482][T12726] lowmem_reserve[]: 0 0 0 0 0 [ 241.137203][T12726] Node 1 Normal free:3940692kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.192483][T12726] lowmem_reserve[]: 0 0 0 0 0 [ 241.212067][T12726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.271476][T12726] Node 0 DMA32: 194*4kB (UME) 1211*8kB (UME) 1263*16kB (UME) 872*32kB (UME) 758*64kB (UM) 659*128kB (UME) 428*256kB (UM) 236*512kB (UM) 84*1024kB (UME) 6*2048kB (UM) 200*4096kB (UM) = 1339344kB [ 241.306646][T12726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.350910][T12726] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 5*16kB (UM) 8*32kB (UM) 7*64kB (UM) 6*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940692kB [ 241.399583][T12726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.427797][T12726] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.440198][T12761] netlink: 'syz.1.3404': attribute type 9 has an invalid length. [ 241.459361][T12726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.485112][T12726] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.504708][T12726] 44371 total pagecache pages [ 241.514795][T12726] 0 pages in swap cache [ 241.526575][T12726] Free swap = 124996kB [ 241.548581][T12726] Total swap = 124996kB [ 241.568347][T12726] 2097051 pages RAM [ 241.577511][T12726] 0 pages HighMem/MovableOnly [ 241.582544][T12726] 428172 pages reserved [ 241.586754][T12726] 0 pages cma reserved [ 241.748233][T12771] netlink: 'syz.3.3409': attribute type 2 has an invalid length. [ 241.788925][T12773] netlink: 'syz.4.3410': attribute type 3 has an invalid length. [ 241.807535][T12773] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3410'. [ 242.029323][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 242.167044][T12791] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 242.284055][T12797] xt_l2tp: missing protocol rule (udp|l2tpip) [ 242.477626][T12805] netlink: 'syz.1.3426': attribute type 21 has an invalid length. [ 242.502320][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 242.549678][T12809] x_tables: unsorted underflow at hook 2 [ 243.184824][T12837] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 243.199383][T12843] netlink: 'syz.1.3442': attribute type 2 has an invalid length. [ 243.236593][T12837] bond1 (unregistering): Released all slaves [ 243.955259][T12884] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.076447][T12889] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 244.408417][T12908] netlink: 'syz.2.3476': attribute type 11 has an invalid length. [ 244.988569][T12937] netlink: 'syz.0.3490': attribute type 11 has an invalid length. [ 245.219015][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.477185][T12964] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 246.377861][T13014] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 247.146323][T13049] openvswitch: netlink: IP tunnel dst address not specified [ 247.363506][T13060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.640119][T13076] xt_hashlimit: size too large, truncated to 1048576 [ 248.430002][T13115] x_tables: unsorted underflow at hook 4 [ 248.735098][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3583'. [ 249.088686][T13148] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3592'. [ 249.466518][T13169] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 249.506509][T13169] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3603'. [ 249.683533][T13180] xt_hashlimit: max too large, truncated to 1048576 [ 249.703294][T13180] No such timeout policy "syz1" [ 249.927404][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3616'. [ 250.393920][T13217] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 250.408702][T13219] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3628'. [ 250.454072][T13219] 8021q: VLANs not supported on gre0 [ 250.471792][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3630'. [ 250.488938][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3631'. [ 250.836174][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3638'. [ 250.896120][T13247] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3641'. [ 251.085510][T13257] xt_TCPMSS: Only works on TCP SYN packets [ 251.117717][T13258] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3647'. [ 252.043935][T13263] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.307011][T13319] bond0: Error: CAN devices cannot be enslaved [ 252.518551][T13333] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 252.550142][T13333] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.631495][T13338] netlink: zone id is out of range [ 252.643175][T13338] netlink: zone id is out of range [ 252.658082][T13338] netlink: zone id is out of range [ 252.668216][T13338] netlink: zone id is out of range [ 252.680085][T13338] netlink: zone id is out of range [ 252.704751][T13338] netlink: zone id is out of range [ 252.718416][T13338] netlink: zone id is out of range [ 252.734016][T13338] netlink: zone id is out of range [ 252.747109][T13338] netlink: zone id is out of range [ 253.906448][T13404] __nla_validate_parse: 3 callbacks suppressed [ 253.906468][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3715'. [ 253.955582][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3715'. [ 254.843194][T13453] netlink: 'syz.4.3740': attribute type 21 has an invalid length. [ 254.867617][T13453] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.644751][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.651187][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.668388][T13499] netlink: 'syz.1.3764': attribute type 7 has an invalid length. [ 255.676577][T13499] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3764'. [ 255.773375][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3763'. [ 255.787237][T13505] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 255.806911][T13505] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 255.828367][T13505] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 256.153251][T13523] netlink: 'syz.3.3772': attribute type 11 has an invalid length. [ 256.161363][T13523] netlink: 'syz.3.3772': attribute type 4 has an invalid length. [ 256.170561][T13523] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3772'. [ 256.203147][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'. [ 256.717116][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3787'. [ 257.236497][T13579] IPv6: sit1: Disabled Multicast RS [ 257.403159][T13587] netlink: 'syz.0.3804': attribute type 2 has an invalid length. [ 257.486896][T13592] siw: device registration error -23 [ 258.334926][T13638] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 258.363408][T13638] netlink: 'syz.0.3831': attribute type 11 has an invalid length. [ 258.392348][T13638] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3831'. [ 258.646958][T13652] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 258.930862][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3843'. [ 259.151577][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 259.209238][T13673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 259.229352][T13673] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3847'. [ 259.327089][T13677] sctp: [Deprecated]: syz.0.3849 (pid 13677) Use of int in maxseg socket option. [ 259.327089][T13677] Use struct sctp_assoc_value instead [ 259.404466][T13679] netlink: 'syz.3.3850': attribute type 39 has an invalid length. [ 259.431701][T13679] hsr_slave_0: left promiscuous mode [ 259.448359][T13679] hsr_slave_1: left promiscuous mode [ 259.531672][T13683] bridge_slave_1: left allmulticast mode [ 259.547075][T13683] bridge_slave_1: left promiscuous mode [ 259.560878][T13683] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.601237][T13683] bridge_slave_0: left allmulticast mode [ 259.620208][T13683] bridge_slave_0: left promiscuous mode [ 259.639481][T13683] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.486843][T13727] xt_hashlimit: overflow, try lower: 3/0 [ 260.507379][T13729] x_tables: duplicate entry at hook 1 [ 260.928181][T13750] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 261.223674][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 261.667182][T13791] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.801480][T13796] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 262.714742][T13850] netlink: 'syz.4.3933': attribute type 24 has an invalid length. [ 262.979869][T13864] netlink: 'syz.3.3941': attribute type 1 has an invalid length. [ 263.286862][T13879] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3949'. [ 263.564494][T13895] net_ratelimit: 73 callbacks suppressed [ 263.564516][T13895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.097165][T13923] netlink: 524 bytes leftover after parsing attributes in process `syz.0.3969'. [ 264.964861][T13969] lo: entered promiscuous mode [ 264.978714][T13969] netlink: 'syz.4.3993': attribute type 2 has an invalid length. [ 265.008966][T13969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.750544][T14006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4011'. [ 265.774917][T14008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4012'. [ 266.005858][T14022] xt_ipcomp: unknown flags 1D [ 266.978623][T14068] bond4: (slave gre0): Device is not bonding slave [ 267.000951][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4046'. [ 267.015637][T14068] bond4: option active_slave: invalid value (gre0) [ 267.046997][T14068] bond4 (unregistering): Released all slaves [ 268.493699][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 269.080770][T14191] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.4102'. [ 269.376373][T14205] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4109'. [ 269.443984][T14209] Cannot find add_set index 2 as target [ 269.652306][T14223] xt_NFQUEUE: number of total queues is 0 [ 269.824013][T14231] tipc: Can't bind to reserved service type 0 [ 270.333825][T14260] netlink: 'syz.3.4135': attribute type 3 has an invalid length. [ 270.600035][T14276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4144'. [ 270.629261][T14278] ip6gre1: entered allmulticast mode [ 270.790315][T14289] openvswitch: netlink: Message has 1 unknown bytes. [ 270.887572][T14294] netlink: 'syz.0.4153': attribute type 1 has an invalid length. [ 270.990001][T14296] openvswitch: netlink: Key type 31 is not supported [ 271.395696][T14317] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4165'. [ 271.704786][T14334] netlink: 'syz.4.4173': attribute type 1 has an invalid length. [ 271.778853][T14336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.184029][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4185'. [ 272.399861][T14364] batadv1: entered allmulticast mode [ 272.997670][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4204'. [ 273.042694][T14397] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4203'. [ 273.186622][T14404] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.237779][T14410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4211'. [ 273.269292][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 273.294947][T14410] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4211'. [ 273.320664][T14410] netlink: 'syz.3.4211': attribute type 2 has an invalid length. [ 273.348925][T14410] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4211'. [ 274.422436][T14476] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 274.726527][T14490] netlink: 'syz.0.4253': attribute type 1 has an invalid length. [ 274.763726][T14490] __nla_validate_parse: 5 callbacks suppressed [ 274.763750][T14490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4253'. [ 274.862862][T14500] xt_bpf: check failed: parse error [ 275.081761][T14510] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 275.156736][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 275.247735][T14518] netlink: 'syz.4.4264': attribute type 10 has an invalid length. [ 275.283372][T14518] veth1_macvtap: left promiscuous mode [ 275.306054][T14518] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 275.529549][T14537] netlink: 'syz.0.4273': attribute type 10 has an invalid length. [ 276.431454][T14597] xt_TCPMSS: Only works on TCP SYN packets [ 276.536474][T14602] hsr0: entered promiscuous mode [ 276.619195][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 277.138880][T14640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4323'. [ 277.385836][T14652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4330'. [ 277.422760][T14652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4330'. [ 277.448743][T14652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4330'. [ 277.491335][T14659] ip6t_srh: unknown srh invflags 4000 [ 277.618393][T14665] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 277.989378][T14689] netlink: 'syz.3.4349': attribute type 7 has an invalid length. [ 278.421392][T14714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4362'. [ 278.761432][T14737] sctp: [Deprecated]: syz.1.4371 (pid 14737) Use of int in maxseg socket option. [ 278.761432][T14737] Use struct sctp_assoc_value instead [ 279.129635][T14753] bond2: entered allmulticast mode [ 279.141675][T14757] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4380'. [ 279.421382][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4391'. [ 279.468804][T14781] netlink: 'syz.4.4392': attribute type 58 has an invalid length. [ 280.652682][T14855] netlink: 'syz.0.4428': attribute type 4 has an invalid length. [ 280.665976][T14855] __nla_validate_parse: 1 callbacks suppressed [ 280.665993][T14855] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4428'. [ 281.298801][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4445'. [ 281.326828][T14891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.558986][T14907] netlink: 'syz.2.4453': attribute type 32 has an invalid length. [ 281.583423][T14909] netlink: 'syz.3.4454': attribute type 12 has an invalid length. [ 282.073256][T14937] bond0: entered promiscuous mode [ 282.083669][T14937] bond_slave_0: entered promiscuous mode [ 282.094473][T14937] bond_slave_1: entered promiscuous mode [ 282.117835][T14936] veth0_macvtap: entered allmulticast mode [ 282.132348][T14936] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 282.187471][T14943] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 282.346370][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4476'. [ 282.559051][T14963] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4481'. [ 282.886954][T14985] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 283.278267][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'. [ 283.739092][T15038] netlink: 'syz.0.4516': attribute type 1 has an invalid length. [ 283.774173][T15038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4516'. [ 283.856226][T15044] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 283.925292][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4522'. [ 283.970742][T15047] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4522'. [ 284.259518][T15069] netlink: 'syz.0.4533': attribute type 1 has an invalid length. [ 284.364838][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4536'. [ 285.808455][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4565'. [ 285.995057][T15155] tc_dump_action: action bad kind [ 286.796026][T15193] bond0: entered allmulticast mode [ 286.801349][T15193] bond_slave_0: entered allmulticast mode [ 286.814005][T15193] bond_slave_1: entered allmulticast mode [ 286.905400][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 287.586043][T15232] netlink: 'syz.1.4600': attribute type 6 has an invalid length. [ 288.194353][T15269] netlink: 'syz.4.4617': attribute type 16 has an invalid length. [ 288.212413][T15269] netlink: 'syz.4.4617': attribute type 3 has an invalid length. [ 288.238859][T15269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4617'. [ 288.521129][T15284] SET target dimension over the limit! [ 288.743555][T15293] Cannot find set identified by id 65535 to match [ 288.841227][ T762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.872308][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 288.875015][ T762] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.095827][T15301] netlink: 'syz.1.4633': attribute type 2 has an invalid length. [ 289.146789][T15277] lo speed is unknown, defaulting to 1000 [ 289.195399][T15277] vxcan1 speed is unknown, defaulting to 1000 [ 289.414801][T15315] sock: sock_timestamping_bind_phc: sock not bind to device [ 290.782293][T15385] netlink: 'syz.4.4671': attribute type 1 has an invalid length. [ 290.956359][T15392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.980241][T15394] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.002483][T15394] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.026760][T15394] bridge_slave_0: entered allmulticast mode [ 291.087777][T15394] bridge_slave_0: entered promiscuous mode [ 291.354486][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4682'. [ 291.373125][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 291.405625][T15411] Zero length message leads to an empty skb [ 291.649530][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4690'. [ 291.686313][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4690'. [ 292.620667][T15443] Bluetooth: MGMT ver 1.23 [ 292.850416][T15455] tipc: Enabling of bearer rejected, failed to enable media [ 293.046682][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4709'. [ 293.175135][T15476] Bluetooth: MGMT ver 1.23 [ 293.183499][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4713'. [ 293.487567][T15497] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 293.696803][T15507] netlink: 'syz.4.4728': attribute type 17 has an invalid length. [ 294.136987][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'. [ 294.327150][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'. [ 294.378730][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'. [ 294.407968][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'. [ 294.844451][T15576] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 295.211210][T15597] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 295.718263][T15626] netlink: 'syz.3.4786': attribute type 1 has an invalid length. [ 296.291271][T15656] netlink: 'syz.3.4800': attribute type 11 has an invalid length. [ 296.927769][T15688] __nla_validate_parse: 5 callbacks suppressed [ 296.927790][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'. [ 297.128057][T15704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4823'. [ 298.022562][T15753] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4846'. [ 298.062489][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4847'. [ 298.593330][T15786] netlink: 'syz.4.4860': attribute type 3 has an invalid length. [ 298.709105][T15794] netlink: 'syz.3.4864': attribute type 1 has an invalid length. [ 298.717318][T15794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.032480][T15811] vlan2: entered allmulticast mode [ 299.037839][T15811] bond0: entered allmulticast mode [ 299.043494][T15811] bond_slave_0: entered allmulticast mode [ 299.049395][T15811] bond_slave_1: entered allmulticast mode [ 299.056598][T15811] team0: entered allmulticast mode [ 299.064712][T15811] team_slave_0: entered allmulticast mode [ 299.079686][T15811] team_slave_1: entered allmulticast mode [ 299.459470][T15830] netlink: 'syz.3.4880': attribute type 1 has an invalid length. [ 300.057602][T15863] openvswitch: netlink: Missing key (keys=40, expected=100) [ 300.144296][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4895'. [ 300.241476][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4897'. [ 300.266470][T15872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4897'. [ 300.362294][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4900'. [ 300.885843][T15906] netlink: 'syz.2.4912': attribute type 1 has an invalid length. [ 301.469209][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4929'. [ 301.810084][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4938'. [ 302.528006][T16007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4961'. [ 302.659168][T16017] xt_l2tp: unknown flags: 10 [ 302.773059][T16019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.572354][T16071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4992'. [ 303.846274][T16087] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.980770][T16094] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5005'. [ 304.074845][T16101] netlink: 'syz.4.5007': attribute type 1 has an invalid length. [ 304.217265][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5012'. [ 304.730642][T16139] xt_time: unknown flags 0xf4 [ 305.949795][T16201] siw: device registration error -23 [ 305.988896][T16201] smc: removing ib device syz0 [ 306.077518][T16201] smbdirect: ib_dev[syz0] removed [ 306.242146][T16213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5061'. [ 307.227971][T16249] IPVS: sed: FWM 3 0x00000003 - no destination available [ 308.816756][T16307] pim6reg: entered allmulticast mode [ 308.828318][T16309] Bluetooth: MGMT ver 1.23 [ 309.476878][T16342] geneve2: entered promiscuous mode [ 309.936499][T16361] batadv0: entered promiscuous mode [ 309.951330][T16361] macsec1: entered promiscuous mode [ 309.958712][T16361] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 309.995828][T16361] batadv0: left promiscuous mode [ 310.339712][T16385] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 310.339712][T16385] Please contact the netfilter-devel mailing list or update your nftables rules. [ 310.860202][T16415] netlink: 'syz.0.5159': attribute type 83 has an invalid length. [ 311.078690][T16427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5164'. [ 311.175126][T16431] netlink: 'syz.0.5166': attribute type 1 has an invalid length. [ 311.193911][T16431] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5166'. [ 311.209712][T16431] netlink: 'syz.0.5166': attribute type 1 has an invalid length. [ 311.954338][T16464] 0XD: entered promiscuous mode [ 311.975732][T16464] vlan0: entered promiscuous mode [ 312.391622][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5195'. [ 312.544913][T16500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5199'. [ 312.638931][T16504] IPVS: Error connecting to the multicast addr [ 312.668752][T16506] bridge0: port 2(ipvlan2) entered blocking state [ 312.675976][T16506] bridge0: port 2(ipvlan2) entered disabled state [ 312.687806][T16506] ipvlan2: entered allmulticast mode [ 312.698527][T16506] bridge0: entered allmulticast mode [ 312.715149][T16506] ipvlan2: left allmulticast mode [ 312.725663][T16506] bridge0: left allmulticast mode [ 312.871263][T16515] tipc: Started in network mode [ 312.884603][T16515] tipc: Node identity ac14142f, cluster identity 4711 [ 312.903175][T16515] tipc: Enabling of bearer rejected, failed to enable media [ 312.911713][T16518] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5208'. [ 313.289415][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5218'. [ 313.299299][T16538] netlink: 'syz.2.5218': attribute type 3 has an invalid length. [ 313.561671][T16552] tipc: Enabling of bearer rejected, media not registered [ 314.227450][T16595] netlink: 'syz.4.5246': attribute type 1 has an invalid length. [ 314.580285][T16616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5255'. [ 314.974886][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5266'. [ 315.015192][T16642] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.157610][T16648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5270'. [ 315.496728][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5280'. [ 315.911121][T16690] netlink: 'syz.1.5292': attribute type 1 has an invalid length. [ 315.996975][T16693] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 316.173883][T16703] sctp: [Deprecated]: syz.0.5298 (pid 16703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.173883][T16703] Use struct sctp_sack_info instead [ 316.345584][T16709] netlink: 'syz.2.5301': attribute type 11 has an invalid length. [ 316.395023][T16709] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.5301'. [ 316.525197][T16720] IPVS: ip_vs_edit_dest(): server weight less than zero [ 316.580076][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 316.610500][T16727] netlink: 'syz.3.5310': attribute type 3 has an invalid length. [ 316.622154][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'. [ 316.632928][T16723] netlink: 'syz.0.5308': attribute type 12 has an invalid length. [ 316.642885][T16723] netlink: 'syz.0.5308': attribute type 11 has an invalid length. [ 316.661144][T16727] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5310'. [ 316.693326][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5311'. [ 316.834308][T16737] xt_l2tp: invalid flags combination: 0 [ 316.949633][T16742] netlink: 'syz.0.5317': attribute type 12 has an invalid length. [ 316.968622][T16742] netlink: 'syz.0.5317': attribute type 29 has an invalid length. [ 316.996007][T16742] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5317'. [ 317.022025][T16742] netlink: 59 bytes leftover after parsing attributes in process `syz.0.5317'. [ 317.069178][T16750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5321'. [ 317.084281][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.090682][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.186138][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5323'. [ 317.920250][T16794] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5342'. [ 318.078917][ T30] audit: type=1107 audit(1783335790.654:3): pid=16801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 318.154369][T16808] netlink: 'syz.2.5349': attribute type 49 has an invalid length. [ 318.559104][T16825] xt_policy: too many policy elements [ 318.599160][T16828] tipc: Started in network mode [ 318.604931][T16828] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 318.614899][T16828] tipc: Enabling of bearer rejected, failed to enable media [ 321.070690][T16974] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 321.338044][T16989] tipc: Cannot configure node identity twice [ 321.600039][T17006] __nla_validate_parse: 3 callbacks suppressed [ 321.600059][T17006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5443'. [ 321.976328][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5452'. [ 322.216818][T17038] netlink: 'syz.2.5459': attribute type 2 has an invalid length. [ 322.223032][ T67] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.260499][ T5629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.277922][ T67] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.280316][T17038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5459'. [ 322.416422][T17050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5465'. [ 322.782258][ T5629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.882250][ T5629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.935705][T17081] netlink: 'syz.4.5480': attribute type 11 has an invalid length. [ 324.461029][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'. [ 324.607235][T17175] sctp: [Deprecated]: syz.2.5525 (pid 17175) Use of int in maxseg socket option. [ 324.607235][T17175] Use struct sctp_assoc_value instead [ 325.220007][T17214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.483960][T17225] netlink: 'syz.2.5545': attribute type 1 has an invalid length. [ 325.515267][T17225] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5545'. [ 325.543115][T17225] netlink: 'syz.2.5545': attribute type 1 has an invalid length. [ 325.684116][T17238] netlink: 'syz.3.5552': attribute type 2 has an invalid length. [ 325.728761][T17242] C: entered allmulticast mode [ 325.738972][T17242] C: left allmulticast mode [ 326.059960][T17259] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5561'. [ 326.358278][T17275] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 326.442257][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.770903][T17300] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 326.843932][T17304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.675962][T17354] netlink: 'syz.2.5605': attribute type 7 has an invalid length. [ 328.183469][T17383] netlink: 'syz.4.5616': attribute type 3 has an invalid length. [ 328.398454][T17393] IPVS: length: 8 != 1152 [ 328.567342][T17401] netlink: 'syz.4.5625': attribute type 1 has an invalid length. [ 328.774977][T17414] openvswitch: netlink: Missing valid actions attribute. [ 328.808164][T17414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.998155][T17424] netlink: 'syz.0.5634': attribute type 25 has an invalid length. [ 329.088903][T17428] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5635'. [ 329.251403][T17437] lo: MTU too low for tipc bearer [ 329.267479][T17437] tipc: Enabling of bearer rejected, failed to enable media [ 329.885446][T17465] netlink: 'syz.1.5651': attribute type 2 has an invalid length. [ 329.908952][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5652'. [ 329.935261][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5652'. [ 329.952786][T17467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5650'. [ 329.965122][T17469] netlink: 'syz.4.5652': attribute type 14 has an invalid length. [ 329.979686][T17469] netlink: 'syz.4.5652': attribute type 13 has an invalid length. [ 330.041563][T17471] vlan0: entered promiscuous mode [ 330.049111][T17471] bridge0: entered promiscuous mode [ 330.120427][T17477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.716983][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5669'. [ 330.764495][T17517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5672'. [ 330.841702][T17510] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 330.868385][T17510] bond2 (unregistering): Released all slaves [ 330.959096][T17525] openvswitch: netlink: Unknown key attributes 20 [ 331.842796][ T14] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.862179][ T14] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.898604][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.907844][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.963867][T17575] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5695'. [ 332.231810][T17595] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 333.141101][T17637] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5725'. [ 333.153760][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5725'. [ 333.165689][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5725'. [ 333.464397][T17658] netlink: 'syz.1.5734': attribute type 1 has an invalid length. [ 333.515102][T17660] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 334.227701][T17705] openvswitch: netlink: Message has 4 unknown bytes. [ 334.247256][T17705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.413778][T17715] tipc: Started in network mode [ 334.436284][T17715] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 334.456767][T17715] tipc: Enabled bearer , priority 24 [ 334.621491][T17727] __nla_validate_parse: 2 callbacks suppressed [ 334.621515][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'. [ 334.813490][T17740] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5772'. [ 335.002179][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.107381][T17751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5779'. [ 335.233231][T17763] netlink: 'syz.3.5785': attribute type 2 has an invalid length. [ 335.583169][ T5731] tipc: Node number set to 10005162 [ 335.644294][T17786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5796'. [ 336.615726][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'. [ 336.878502][T17855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5828'. [ 337.321298][T17885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.119611][T17936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5863'. [ 338.199567][T17940] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.320101][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5869'. [ 338.409876][T17954] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5867'. [ 339.622177][T18013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.828274][T18025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.161042][T18042] tipc: MTU too low for tipc bearer [ 340.318840][T18048] tipc: Enabled bearer , priority 11 [ 340.319325][T18051] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5918'. [ 340.660467][T18067] netlink: 'syz.1.5926': attribute type 178 has an invalid length. [ 340.726562][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5927'. [ 340.762241][T18069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.026187][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5960'. [ 344.490449][T18264] macsec1: entered allmulticast mode [ 344.515389][T18264] bond0: entered allmulticast mode [ 344.535292][T18264] bond_slave_0: entered allmulticast mode [ 344.560351][T18264] bond_slave_1: entered allmulticast mode [ 344.592703][T18264] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 344.613774][T18264] bond_slave_0: entered promiscuous mode [ 344.620228][T18264] bond_slave_1: entered promiscuous mode [ 344.676861][T18264] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 344.707227][T18264] bond0: left allmulticast mode [ 344.715810][T18264] bond_slave_0: left allmulticast mode [ 344.731018][T18264] bond_slave_1: left allmulticast mode [ 344.747762][T18264] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 344.769262][T18264] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 344.825337][ T5724] bond_slave_0: left promiscuous mode [ 344.832066][ T5724] bond_slave_1: left promiscuous mode [ 344.840655][ T5724] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 345.481633][T18323] tipc: Started in network mode [ 345.490350][T18323] tipc: Node identity , cluster identity 4711 [ 345.735874][T18337] xt_HMARK: spi-set and port-set can't be combined [ 346.207556][T18367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6058'. [ 346.367101][T18374] netlink: 'syz.0.6063': attribute type 2 has an invalid length. [ 346.769592][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6076'. [ 347.600472][T18453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6102'. [ 348.256600][T18489] vlan2: entered allmulticast mode [ 348.495605][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6127'. [ 349.126342][T18542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.216623][T18546] nbd: must specify a size in bytes for the device [ 349.359633][T18556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6153'. [ 349.408243][T18560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6154'. [ 350.022515][T18597] Bluetooth: MGMT ver 1.23 [ 350.117177][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6175'. [ 350.272809][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6178'. [ 350.629924][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6191'. [ 350.740449][T18645] netlink: 'syz.2.6193': attribute type 4 has an invalid length. [ 351.642180][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.147840][T18719] "syz.4.6232" (18719) uses obsolete ecb(arc4) skcipher [ 352.410275][T18747] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6241'. [ 352.457369][T18750] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.6243'. [ 352.489492][T18750] netlink: 'syz.1.6243': attribute type 1 has an invalid length. [ 352.512914][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6244'. [ 352.535268][T18751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6244'. [ 352.575753][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6244'. [ 354.047481][T18847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6286'. [ 354.125297][T18851] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6287'. [ 354.229400][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 354.569373][T18877] netlink: 'syz.1.6300': attribute type 2 has an invalid length. [ 354.830543][T18893] netlink: 'syz.3.6308': attribute type 23 has an invalid length. [ 354.962791][T18899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6310'. [ 354.974045][T18900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.413591][T18911] erspan0: left promiscuous mode [ 355.428866][T18911] erspan0: left allmulticast mode [ 355.703294][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.710989][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.050161][T18911] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 356.430831][T18957] xt_hashlimit: size too large, truncated to 1048576 [ 356.574222][T18966] ipvlan2: entered promiscuous mode [ 356.589982][T18969] netlink: 'syz.4.6342': attribute type 142 has an invalid length. [ 356.741189][T18976] tipc: Invalid UDP bearer configuration [ 356.741277][T18976] tipc: Enabling of bearer rejected, failed to enable media [ 356.839567][T18981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.354107][T19011] nftables ruleset with unbound set [ 357.528389][T19020] vcan0: entered allmulticast mode [ 357.695416][T19030] netlink: 'syz.4.6373': attribute type 1 has an invalid length. [ 357.756789][T19034] netlink: 'syz.0.6375': attribute type 1 has an invalid length. [ 357.776874][T19034] netlink: 'syz.0.6375': attribute type 2 has an invalid length. [ 357.789413][T19037] netlink: 'syz.3.6374': attribute type 4 has an invalid length. [ 357.807725][T19037] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6374'. [ 358.000593][T19048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.241278][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6388'. [ 358.293794][T19062] macsec1: entered promiscuous mode [ 358.311297][T19062] bridge0: entered promiscuous mode [ 358.333475][T19062] macsec1: entered allmulticast mode [ 358.347761][T19062] bridge0: entered allmulticast mode [ 358.364904][T19062] bridge0: port 3(macsec1) entered blocking state [ 358.381808][T19062] bridge0: port 3(macsec1) entered disabled state [ 358.407247][T19062] bridge0: left allmulticast mode [ 358.445400][ T5738] bridge0: left promiscuous mode [ 358.455567][T19068] tipc: Enabling of bearer rejected, failed to enable media [ 360.027798][T19168] netlink: 'syz.4.6441': attribute type 3 has an invalid length. [ 360.236848][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6446'. [ 360.277645][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'. [ 360.352755][T19185] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6449'. [ 360.363300][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6450'. [ 360.374319][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6449'. [ 360.989830][T19216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6464'. [ 361.365930][T19239] macsec1: entered promiscuous mode [ 362.133012][T19291] openvswitch: netlink: Message has 1 unknown bytes. [ 362.139923][T19291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.355968][T19302] pimreg3: entered allmulticast mode [ 362.699864][T19326] netlink: 'syz.4.6517': attribute type 1 has an invalid length. [ 362.755914][T19326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.763259][T19326] IPv6: NLM_F_CREATE should be set when creating new route [ 362.770588][T19326] IPv6: NLM_F_CREATE should be set when creating new route [ 363.479930][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6540'. [ 363.678875][T19383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6545'. [ 363.846806][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6549'. [ 364.056591][T19401] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6554'. [ 364.228311][T19413] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 364.559902][T19429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6567'. [ 364.783583][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6576'. [ 364.830831][T19451] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 365.031322][T19463] vcan1: entered promiscuous mode [ 365.043859][T19463] vcan1: entered allmulticast mode [ 365.100014][T19462] netlink: 'syz.1.6583': attribute type 3 has an invalid length. [ 365.232139][T19473] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.496021][T19491] netlink: 'syz.1.6597': attribute type 32 has an invalid length. [ 365.531836][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6597'. [ 365.579788][T19491] bond4: Setting coupled_control to off (0) [ 365.821155][T19510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6606'. [ 366.164250][T19533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6619'. [ 366.480408][T19552] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.167324][T19599] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6651'. [ 367.289312][T19605] netlink: 'syz.4.6654': attribute type 1 has an invalid length. [ 367.309449][T19607] netlink: 'syz.1.6655': attribute type 1 has an invalid length. [ 367.317496][T19607] netlink: 'syz.1.6655': attribute type 1 has an invalid length. [ 368.738502][T19695] netlink: 'syz.3.6697': attribute type 32 has an invalid length. [ 368.756712][T19695] __nla_validate_parse: 1 callbacks suppressed [ 368.756761][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6697'. [ 368.773711][ T146] wlan1: Trigger new scan to find an IBSS to join [ 368.866478][T19695] bond1: option coupled_control: invalid value (192) [ 368.877370][T19695] bond1 (unregistering): Released all slaves [ 369.127251][T19716] netlink: 'syz.1.6707': attribute type 2 has an invalid length. [ 369.265169][T19716] : entered promiscuous mode [ 370.042382][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 370.420831][T19793] macvlan0: entered promiscuous mode [ 370.953132][T19826] nbd: must specify a device to reconfigure [ 371.499811][ T67] tipc: Subscription rejected, illegal request [ 371.638522][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6780'. [ 371.672750][T19868] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6780'. [ 371.802444][ T67] wlan1: Trigger new scan to find an IBSS to join [ 371.926389][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6786'. [ 372.566595][T19924] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6808'. [ 372.576984][T19924] nbd: illegal input index -8454144 [ 372.639395][T19927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.724448][T19933] netlink: 'syz.1.6812': attribute type 1 has an invalid length. [ 372.749330][T19933] netlink: 'syz.1.6812': attribute type 3 has an invalid length. [ 372.757955][T19933] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6812'. [ 372.794470][T19933] NCSI netlink: No device for ifindex 813332851 [ 373.088625][T19950] nbd: must specify at least one socket [ 373.137324][T19955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6821'. [ 373.929491][T19999] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6843'. [ 374.645548][T20042] netlink: 'syz.1.6863': attribute type 2 has an invalid length. [ 374.842816][ T67] wlan1: Trigger new scan to find an IBSS to join [ 375.574685][T20099] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 375.757829][ T146] wlan1: Creating new IBSS network, BSSID be:22:84:d2:0f:0a [ 375.847244][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6897'. [ 375.884293][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6897'. [ 376.510366][T20157] netlink: 'syz.1.6915': attribute type 1 has an invalid length. [ 376.541790][T20157] nbd: error processing sock list [ 376.815871][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6922'. [ 376.852617][T20175] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6922'. [ 376.875783][T20175] netlink: 'syz.2.6922': attribute type 5 has an invalid length. [ 377.218632][T20197] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 377.233015][T20197] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.620888][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6947'. [ 377.716328][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6950'. [ 377.744135][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6950'. [ 378.069317][T20248] netlink: 'syz.4.6960': attribute type 29 has an invalid length. [ 378.370536][T20269] netlink: 'syz.3.6971': attribute type 11 has an invalid length. [ 378.525089][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.531564][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.540821][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.645552][T20282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6977'. [ 379.070321][T20303] tipc: Enabling of bearer rejected, failed to enable media [ 379.160196][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6988'. [ 379.379512][T20314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6992'. [ 379.463908][T20320] netlink: 'syz.0.6994': attribute type 1 has an invalid length. [ 379.920715][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7008'. [ 380.746346][T20399] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7033'. [ 381.106170][T20415] openvswitch: netlink: Missing key (keys=40, expected=100) [ 381.316264][T20403] Set syz1 is full, maxelem 6117 reached [ 381.603541][T20437] openvswitch: netlink: Missing key (keys=40, expected=100) [ 381.738961][T20447] openvswitch: netlink: Missing key (keys=40, expected=100) [ 381.846080][T20454] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7060'. [ 382.671366][T20508] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 382.686735][T20508] syzkaller1: linktype set to 823 [ 382.803047][T20515] sctp: [Deprecated]: syz.3.7090 (pid 20515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.803047][T20515] Use struct sctp_sack_info instead [ 382.868703][T20519] IPv6: Can't replace route, no match found [ 382.885229][T20519] IPv6: Can't replace route, no match found [ 382.939094][T20522] netlink: 'syz.4.7093': attribute type 4 has an invalid length. [ 383.050782][ T30] audit: type=1804 audit(1783335855.624:4): pid=20528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7096" name="/newroot/1435/cgroup.controllers" dev="tmpfs" ino=7204 res=1 errno=0 [ 383.119142][ T30] audit: type=1800 audit(1783335855.624:5): pid=20528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7096" name="cgroup.controllers" dev="tmpfs" ino=7204 res=0 errno=0 [ 383.289715][T20544] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7103'. [ 383.303652][T20544] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7103'. [ 383.653512][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.906405][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7118'. [ 384.085355][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7126'. [ 384.722939][T20634] netlink: 'syz.0.7146': attribute type 21 has an invalid length. [ 384.741154][T20634] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7146'. [ 384.753393][T20634] netlink: 'syz.0.7146': attribute type 4 has an invalid length. [ 384.797957][T20638] netlink: 'syz.0.7146': attribute type 21 has an invalid length. [ 384.801146][T20634] netlink: 'syz.0.7146': attribute type 5 has an invalid length. [ 384.833511][T20638] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7146'. [ 384.857426][T20634] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7146'. [ 384.867249][T20638] netlink: 'syz.0.7146': attribute type 4 has an invalid length. [ 384.878243][T20638] netlink: 'syz.0.7146': attribute type 5 has an invalid length. [ 384.890866][T20640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7149'. [ 384.902549][T20638] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7146'. [ 385.021651][T20648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7153'. [ 385.699538][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7174'. [ 385.808436][ T5636] block nbd0: Receive control failed (result -32) [ 387.506005][T20809] netlink: 'syz.2.7230': attribute type 33 has an invalid length. [ 387.601728][T20809] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 387.651508][T20809] bond2 (unregistering): Released all slaves [ 387.742103][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7236'. [ 388.127863][T20838] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 388.144514][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7245'. [ 389.607162][T20904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7278'. [ 389.795172][T20913] openvswitch: netlink: IPv4 tunnel dst address is zero [ 389.813232][T20913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.917248][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7279'. [ 389.926444][T20918] netlink: 'syz.4.7279': attribute type 10 has an invalid length. [ 389.935372][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7279'. [ 390.274995][T20938] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7292'. [ 390.317107][T20941] netlink: 'syz.3.7294': attribute type 3 has an invalid length. [ 390.447356][T20949] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7298'. [ 390.643013][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7305'. [ 390.673425][T20962] erspan0: entered promiscuous mode [ 390.935476][T20975] netlink: 'syz.4.7310': attribute type 8 has an invalid length. [ 391.212421][T20989] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7315'. [ 391.275812][T20988] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7315'. [ 391.320340][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7317'. [ 391.955129][T21027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7335'. [ 392.302000][T21052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7344'. [ 392.476922][T21061] sctp: [Deprecated]: syz.1.7348 (pid 21061) Use of int in max_burst socket option. [ 392.476922][T21061] Use struct sctp_assoc_value instead [ 393.833661][T21136] netlink: 'syz.1.7383': attribute type 2 has an invalid length. [ 395.641746][T21231] __nla_validate_parse: 10 callbacks suppressed [ 395.641767][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7429'. [ 395.864759][T21244] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7434'. [ 396.040465][T21254] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 396.794238][T21307] tipc: New replicast peer: 255.255.255.255 [ 396.813669][T21307] tipc: Enabled bearer , priority 10 [ 396.823856][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7465'. [ 397.080329][T21322] netlink: 'syz.2.7471': attribute type 83 has an invalid length. [ 397.095627][T21325] sctp: [Deprecated]: syz.3.7472 (pid 21325) Use of int in max_burst socket option deprecated. [ 397.095627][T21325] Use struct sctp_assoc_value instead [ 397.300603][T21334] xt_hashlimit: size too large, truncated to 1048576 [ 398.124996][T21382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7498'. [ 398.348254][T21390] IPVS: persistence engine module ip_vs_pe_ not found [ 398.555187][T21407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7506'. [ 398.771607][T21423] netlink: 'syz.0.7514': attribute type 21 has an invalid length. [ 398.785867][T21423] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7514'. [ 398.899649][T21427] tunl0: entered promiscuous mode [ 398.915596][T21427] netlink: 'syz.4.7516': attribute type 4 has an invalid length. [ 398.934891][T21427] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7516'. [ 398.962480][T21431] netlink: 'syz.3.7515': attribute type 10 has an invalid length. [ 398.982065][T21431] team0: Port device dummy0 added [ 399.159072][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7523'. [ 399.204723][T21448] openvswitch: netlink: IP tunnel dst address not specified [ 399.212429][T21448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.227468][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7526'. [ 401.517565][T21596] netlink: 592 bytes leftover after parsing attributes in process `syz.3.7597'. [ 401.592596][T21599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7598'. [ 401.766543][T21610] ipvlan0: entered allmulticast mode [ 401.795149][T21610] batadv_slave_1: entered allmulticast mode [ 401.812384][T21612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7605'. [ 401.833805][T21612] netlink: 'syz.1.7605': attribute type 1 has an invalid length. [ 402.020003][T21626] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.7609'. [ 402.160163][T21632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7613'. [ 402.329049][T21645] netlink: get zone limit has 4 unknown bytes [ 402.366506][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7620'. [ 402.384217][T21649] xfrm1: entered promiscuous mode [ 402.389451][T21649] xfrm1: entered allmulticast mode [ 402.398777][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7620'. [ 404.076840][T21747] openvswitch: netlink: IP tunnel dst address not specified [ 404.085458][T21747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.158835][T21750] netlink: 'syz.2.7663': attribute type 83 has an invalid length. [ 404.331445][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7669'. [ 404.750144][T21788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7681'. [ 404.760033][T21788] block nbd1: Unsupported socket: should be TCP or UNIX. [ 406.891683][T21919] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7742'. [ 407.058249][T21931] netlink: 'syz.2.7749': attribute type 83 has an invalid length. [ 407.651761][T21970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7766'. [ 407.677509][T21970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7766'. [ 407.962508][ T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.078051][T22000] gretap0: entered promiscuous mode [ 408.500708][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7792'. [ 408.791036][T22040] sch_fq: defrate 0 ignored. [ 409.543788][T22086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7821'. [ 409.773565][T22101] netlink: 'syz.4.7827': attribute type 1 has an invalid length. [ 409.781629][T22101] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7827'. [ 410.282321][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 410.290165][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 410.973762][T22176] netlink: 'syz.2.7864': attribute type 83 has an invalid length. [ 411.085748][T22182] block nbd1: Unsupported socket: should be TCP or UNIX. [ 411.557445][T22214] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7880'. [ 412.026482][T22242] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.7896'. [ 412.319713][T22262] gtp1: entered promiscuous mode [ 412.325782][T22262] gtp1: entered allmulticast mode [ 413.445583][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7935'. [ 413.869876][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7946'. [ 415.114937][T22433] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 415.136079][T22430] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 415.147461][T22437] vcan0: tx address claim with dest, not broadcast [ 415.156670][T22430] syzkaller1: group set to 0 [ 415.419317][T22452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7989'. [ 415.548069][T22460] block nbd1: Unsupported socket: should be TCP or UNIX. [ 415.768199][T22470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7998'. [ 415.920149][T22478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8002'. [ 416.711825][T22531] smc: ib device syz2 ibport 2 erased user defined pnetid SYZ2 [ 416.736804][T22531] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8027'. [ 416.881118][T22538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8031'. [ 417.599942][T22581] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8051'. [ 417.613918][T22581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8051'. [ 417.949738][T22597] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 417.988050][T22602] netlink: 'syz.3.8062': attribute type 6 has an invalid length. [ 418.114966][T22609] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8065'. [ 418.675205][T22647] netlink: 'syz.0.8082': attribute type 83 has an invalid length. [ 418.771828][T22650] team0: No ports can be present during mode change [ 418.908976][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8089'. [ 419.331791][T22688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8102'. [ 419.659465][T22706] gtp0: entered allmulticast mode [ 419.673924][T22706] team0: Device gtp0 is of different type [ 419.851757][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8119'. [ 420.041750][T22728] netlink: 81 bytes leftover after parsing attributes in process `syz.3.8123'. [ 420.702584][T22766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8141'. [ 420.945607][T22782] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8149'. [ 421.456174][ T5636] block nbd1: Receive control failed (result -32) [ 421.576265][T22818] nbd: socks must be embedded in a SOCK_ITEM attr [ 421.881773][T22842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8178'. [ 422.646901][T22893] __nla_validate_parse: 1 callbacks suppressed [ 422.646923][T22893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8199'. [ 422.848209][T22903] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8207'. [ 423.028706][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8209'. [ 423.372920][T22930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8219'. [ 424.519621][T22983] netlink: 'syz.2.8240': attribute type 3 has an invalid length. [ 424.538565][T22983] netlink: 'syz.2.8240': attribute type 1 has an invalid length. [ 424.562317][T22983] netlink: 212 bytes leftover after parsing attributes in process `syz.2.8240'. [ 424.582463][T22983] NCSI netlink: No device for ifindex 813332851 [ 424.706179][T22994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8246'. [ 424.723615][T22994] bridge0: port 3(team0) entered disabled state [ 424.732338][T22994] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.740008][T22994] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.751651][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8247'. [ 425.161607][T23018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8257'. [ 425.361050][T23030] netlink: 766 bytes leftover after parsing attributes in process `syz.4.8263'. [ 425.910618][T23063] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8278'. [ 426.674190][T23110] sctp: Trying to GSO but underlying device doesn't support it. [ 427.681784][T23175] __nla_validate_parse: 3 callbacks suppressed [ 427.681806][T23175] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8328'. [ 427.728757][T23178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8330'. [ 427.872857][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8333'. [ 427.895246][T23188] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8335'. [ 428.064744][T23199] veth0: entered promiscuous mode [ 428.070692][T23198] veth0: left promiscuous mode [ 428.592548][T23211] nbd2: detected capacity change from 0 to 63 [ 428.617703][ T5636] block nbd2: Receive control failed (result -32) [ 428.629576][ T50] block nbd2: Receive control failed (result -32) [ 428.686917][ T1706] block nbd2: Dead connection, failed to find a fallback [ 428.697460][ T1706] block nbd2: shutting down sockets [ 428.705276][ T1706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.712803][ T10] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 428.717626][ T1706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.724045][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 428.724213][ T10] Buffer I/O error on dev nbd2, logical block 2, async page read [ 428.724283][ T10] Buffer I/O error on dev nbd2, logical block 3, async page read [ 428.759598][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.769384][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.777460][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 428.785351][ T10] Buffer I/O error on dev nbd2, logical block 2, async page read [ 428.798112][ T10] Buffer I/O error on dev nbd2, logical block 3, async page read [ 428.806346][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.815837][ T10] Buffer I/O error on dev nbd2, logical block 0, async page read [ 428.824533][ T10] Buffer I/O error on dev nbd2, logical block 1, async page read [ 428.832830][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.842835][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.852767][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.862528][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.872583][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 428.882826][T23233] ldm_validate_partition_table(): Disk read failed. [ 428.892399][ T10] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.904297][T23233] Dev nbd2: unable to read RDB block 0 [ 428.913770][T23233] nbd2: unable to read partition table [ 428.936158][T23233] ldm_validate_partition_table(): Disk read failed. [ 428.947301][T23233] Dev nbd2: unable to read RDB block 0 [ 428.956210][T23233] nbd2: unable to read partition table [ 429.266748][T23260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8370'. [ 429.447184][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8376'. [ 429.462286][T23272] netlink: 176 bytes leftover after parsing attributes in process `syz.2.8376'. [ 429.471580][T23272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8376'. [ 429.597435][T23281] netlink: 'syz.4.8380': attribute type 1 has an invalid length. [ 429.605536][T23281] netlink: 'syz.4.8380': attribute type 2 has an invalid length. [ 429.615787][T23281] netlink: 'syz.4.8380': attribute type 1 has an invalid length. [ 429.624424][T23281] netlink: 'syz.4.8380': attribute type 2 has an invalid length. [ 429.918846][T23291] bond0: entered promiscuous mode [ 429.931619][T23291] bond_slave_0: entered promiscuous mode [ 429.937934][T23291] bond_slave_1: entered promiscuous mode [ 429.952702][T23291] team0: entered promiscuous mode [ 429.963077][T23291] team_slave_0: entered promiscuous mode [ 429.976772][T23291] team_slave_1: entered promiscuous mode [ 429.997079][T23291] batadv0: entered promiscuous mode [ 430.025175][T23291] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 430.056209][T23291] bond0: left promiscuous mode [ 430.067106][T23291] bond_slave_0: left promiscuous mode [ 430.079462][T23291] bond_slave_1: left promiscuous mode [ 430.091230][T23291] team0: left promiscuous mode [ 430.103489][T23291] team_slave_0: left promiscuous mode [ 430.119426][T23291] team_slave_1: left promiscuous mode [ 430.134258][T23291] batadv0: left promiscuous mode [ 430.461727][T23320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8400'. [ 430.778187][T23341] block nbd0: reconnected socket [ 430.779884][ T50] block nbd0: Receive control failed (result -107) [ 431.100053][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8417'. [ 431.748539][T23393] tap0: tun_chr_ioctl cmd 2148553947 [ 433.170558][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8467'. [ 433.272114][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8467'. [ 433.749547][T23494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8478'. [ 434.033238][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8483'. [ 434.755179][T23534] bond2 (unregistering): Released all slaves [ 435.083399][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 435.138887][ T5624] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 435.152620][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 435.152647][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.152671][ T5624] Call Trace: [ 435.152743][ T5624] [ 435.152786][ T5624] dump_stack_lvl+0xe8/0x150 [ 435.152952][ T5624] dump_header+0xd3/0x4b0 [ 435.152988][ T5624] oom_kill_process+0x3ab/0x970 [ 435.153031][ T5624] out_of_memory+0x1064/0x1480 [ 435.153049][ T5624] ? try_charge_memcg+0xbca/0x1590 [ 435.153120][ T5624] ? __pfx_out_of_memory+0x10/0x10 [ 435.153137][ T5624] ? do_raw_spin_unlock+0xf5/0x210 [ 435.153183][ T5624] try_charge_memcg+0xc74/0x1590 [ 435.153227][ T5624] ? __pfx_try_charge_memcg+0x10/0x10 [ 435.153251][ T5624] ? percpu_ref_tryget+0x15/0x180 [ 435.153307][ T5624] ? charge_memcg+0x20/0x2b0 [ 435.153337][ T5624] charge_memcg+0x19c/0x2b0 [ 435.153365][ T5624] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 435.153392][ T5624] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 435.153423][ T5624] swap_cache_alloc_folio+0x4de/0x990 [ 435.153467][ T5624] swap_cache_read_folio+0x44/0x120 [ 435.153493][ T5624] swap_cluster_readahead+0x3a0/0x640 [ 435.153523][ T5624] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 435.153556][ T5624] ? rcu_is_watching+0x15/0xb0 [ 435.153599][ T5624] ? get_vma_policy+0x27b/0x3c0 [ 435.153632][ T5624] swapin_readahead+0x19a/0xc10 [ 435.153660][ T5624] ? swap_table_get+0x1e/0x260 [ 435.153682][ T5624] ? swap_table_get+0x1e/0x260 [ 435.153704][ T5624] ? __pfx_swapin_readahead+0x10/0x10 [ 435.153727][ T5624] ? swap_table_get+0x1e/0x260 [ 435.153747][ T5624] ? swap_table_get+0x1e/0x260 [ 435.153764][ T5624] ? swap_table_get+0x1e/0x260 [ 435.153785][ T5624] ? swap_table_get+0x216/0x260 [ 435.153807][ T5624] ? swap_cache_get_folio+0x2e7/0x2f0 [ 435.153836][ T5624] do_swap_page+0x455/0x5060 [ 435.153879][ T5624] ? __pte_offset_map+0x29/0x240 [ 435.153914][ T5624] ? __lock_acquire+0x683/0x2cf0 [ 435.153940][ T5624] ? do_swap_page+0x124/0x5060 [ 435.153995][ T5624] ? __pfx_do_swap_page+0x10/0x10 [ 435.154024][ T5624] ? __pte_offset_map+0x1ae/0x240 [ 435.154047][ T5624] ? pte_offset_map_rw_nolock+0xea/0x160 [ 435.154071][ T5624] handle_mm_fault+0x124c/0x3080 [ 435.154106][ T5624] ? handle_mm_fault+0xec/0x3080 [ 435.154135][ T5624] ? __pfx_handle_mm_fault+0x10/0x10 [ 435.154153][ T5624] ? lock_vma_under_rcu+0x45a/0x500 [ 435.154206][ T5624] do_user_addr_fault+0xa4d/0x1340 [ 435.154268][ T5624] ? trace_page_fault_user+0x84/0x1e0 [ 435.154311][ T5624] exc_page_fault+0x6a/0xc0 [ 435.154421][ T5624] asm_exc_page_fault+0x26/0x30 [ 435.154456][ T5624] RIP: 0033:0x7f078595e68e [ 435.154508][ T5624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.154527][ T5624] RSP: 002b:00007ffe86ca8c88 EFLAGS: 00010246 [ 435.154576][ T5624] RAX: 0000000000000000 RBX: 000055557027f500 RCX: 00007f078595e68e [ 435.154591][ T5624] RDX: 00007ffe86ca8ce0 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.154603][ T5624] RBP: 00007ffe86ca8d4c R08: 0000000000000000 R09: 0000000000000000 [ 435.154616][ T5624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 435.154629][ T5624] R13: 00000000000927c0 R14: 0000000000069e3e R15: 00007ffe86ca8da0 [ 435.154665][ T5624] [ 435.155830][ T5624] memory: usage 307200kB, limit 307200kB, failcnt 553 [ 435.547942][T23541] tunl0: left promiscuous mode [ 435.673790][ T5624] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 435.730818][ T5624] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 435.757824][ T5624] Memory cgroup stats for /syz0: [ 435.766536][ T5624] cache 0 [ 435.797709][ T5624] rss 0 [ 435.808388][ T5624] rss_huge 0 [ 435.818908][ T5624] shmem 0 [ 435.839575][ T5624] mapped_file 0 [ 435.857229][ T5624] dirty 0 [ 435.865646][ T5624] writeback 0 [ 435.872783][ T5624] workingset_refault_anon 6 [ 435.884339][ T5624] workingset_refault_file 0 [ 435.895714][ T5624] swap 167936 [ 435.903144][ T5624] swapcached 217088 [ 435.911535][ T5624] pgpgin 61465 [ 435.921061][ T5624] pgpgout 61459 [ 435.937549][ T5624] pgfault 181009 [ 435.965026][ T5624] pgmajfault 3 [ 435.972558][ T5624] inactive_anon 12288 [ 435.984823][ T5624] active_anon 12288 [ 435.996759][ T5624] inactive_file 0 [ 436.009194][ T5624] active_file 0 [ 436.022007][ T5624] unevictable 0 [ 436.034142][ T5624] hierarchical_memory_limit 314572800 [ 436.056725][ T5624] hierarchical_memsw_limit 9223372036854771712 [ 436.080104][ T5624] total_cache 0 [ 436.085745][ T5624] total_rss 0 [ 436.102361][ T5624] total_rss_huge 0 [ 436.109950][ T5624] total_shmem 0 [ 436.120055][ T5624] total_mapped_file 0 [ 436.140027][ T5624] total_dirty 0 [ 436.148554][ T5624] total_writeback 0 [ 436.167112][ T5624] total_workingset_refault_anon 6 [ 436.185086][ T5624] total_workingset_refault_file 0 [ 436.204285][ T5624] total_swap 167936 [ 436.219227][ T5624] total_swapcached 217088 [ 436.241045][ T5624] total_pgpgin 61465 [ 436.260495][ T5624] total_pgpgout 61459 [ 436.286616][ T5624] total_pgfault 181009 [ 436.295278][ T5624] total_pgmajfault 3 [ 436.310839][ T5624] total_inactive_anon 12288 [ 436.325246][ T5624] total_active_anon 12288 [ 436.343799][ T5624] total_inactive_file 0 [ 436.353777][ T5624] total_active_file 0 [ 436.366053][ T5624] total_unevictable 0 [ 436.383458][ T5624] anon_cost 0 [ 436.396792][ T5624] file_cost 0 [ 436.413833][ T5624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8461,pid=23453,uid=0 [ 436.474192][ T5624] Memory cgroup out of memory: Killed process 23453 (syz.0.8461) total-vm:104352kB, anon-rss:1256kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 436.477651][T23455] [ 436.494120][T23455] ====================================================== [ 436.501187][T23455] WARNING: possible circular locking dependency detected [ 436.508613][T23455] syzkaller #0 Not tainted [ 436.513053][T23455] ------------------------------------------------------ [ 436.520138][T23455] syz.0.8461/23455 is trying to acquire lock: [ 436.526240][T23455] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 436.535544][T23455] [ 436.535544][T23455] but task is already holding lock: [ 436.542929][T23455] ffff888078421d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 436.552458][T23455] [ 436.552458][T23455] which lock already depends on the new lock. [ 436.552458][T23455] [ 436.562893][T23455] [ 436.562893][T23455] the existing dependency chain (in reverse order) is: [ 436.571930][T23455] [ 436.571930][T23455] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 436.579633][T23455] __might_fault+0xcb/0x130 [ 436.584696][T23455] _copy_from_user+0x28/0xb0 [ 436.589976][T23455] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 436.596704][T23455] ip_generic_getfrag+0x149/0x2d0 [ 436.602382][T23455] __ip6_append_data+0x3b26/0x40c0 [ 436.608124][T23455] ip6_append_data+0x108/0x270 [ 436.613447][T23455] rawv6_sendmsg+0x1298/0x18c0 [ 436.618809][T23455] sock_sendmsg_nosec+0x10e/0x180 [ 436.624454][T23455] ____sys_sendmsg+0x54e/0x850 [ 436.629784][T23455] ___sys_sendmsg+0x2a5/0x360 [ 436.635034][T23455] __x64_sys_sendmsg+0x1b1/0x290 [ 436.640542][T23455] do_syscall_64+0x174/0x580 [ 436.645782][T23455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.652237][T23455] [ 436.652237][T23455] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 436.660019][T23455] lock_sock_nested+0x41/0x100 [ 436.665362][T23455] inet_shutdown+0x6a/0x390 [ 436.670509][T23455] nbd_mark_nsock_dead+0x2cb/0x550 [ 436.676282][T23455] recv_work+0x1cee/0x1e10 [ 436.681300][T23455] process_scheduled_works+0xa8e/0x14e0 [ 436.687419][T23455] worker_thread+0xa47/0xfb0 [ 436.692592][T23455] kthread+0x388/0x470 [ 436.697231][T23455] ret_from_fork+0x514/0xb70 [ 436.702428][T23455] ret_from_fork_asm+0x1a/0x30 [ 436.707745][T23455] [ 436.707745][T23455] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 436.715456][T23455] __mutex_lock+0x19d/0x1550 [ 436.720686][T23455] nbd_queue_rq+0x373/0x1150 [ 436.725847][T23455] blk_mq_dispatch_rq_list+0x499/0x1990 [ 436.732034][T23455] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 436.739019][T23455] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 436.745576][T23455] blk_mq_run_work_fn+0x16c/0x300 [ 436.751179][T23455] process_scheduled_works+0xa8e/0x14e0 [ 436.757293][T23455] worker_thread+0xa47/0xfb0 [ 436.762460][T23455] kthread+0x388/0x470 [ 436.767106][T23455] ret_from_fork+0x514/0xb70 [ 436.772272][T23455] ret_from_fork_asm+0x1a/0x30 [ 436.777603][T23455] [ 436.777603][T23455] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 436.784895][T23455] __mutex_lock+0x19d/0x1550 [ 436.790065][T23455] nbd_queue_rq+0xc1/0x1150 [ 436.795151][T23455] blk_mq_dispatch_rq_list+0x499/0x1990 [ 436.801275][T23455] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 436.808166][T23455] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 436.814699][T23455] blk_mq_run_work_fn+0x16c/0x300 [ 436.820275][T23455] process_scheduled_works+0xa8e/0x14e0 [ 436.826385][T23455] worker_thread+0xa47/0xfb0 [ 436.831538][T23455] kthread+0x388/0x470 [ 436.836167][T23455] ret_from_fork+0x514/0xb70 [ 436.841314][T23455] ret_from_fork_asm+0x1a/0x30 [ 436.846629][T23455] [ 436.846629][T23455] -> #3 (set->srcu){.+.+}-{0:0}: [ 436.853792][T23455] __synchronize_srcu+0xc9/0x2f0 [ 436.859296][T23455] elevator_switch+0x1e8/0x7b0 [ 436.864699][T23455] elevator_change+0x2fa/0x480 [ 436.870016][T23455] elevator_set_default+0x375/0x440 [ 436.875767][T23455] blk_register_queue+0x3f3/0x4e0 [ 436.881414][T23455] __add_disk+0x6cb/0xe30 [ 436.886291][T23455] add_disk_fwnode+0xfb/0x4b0 [ 436.891519][T23455] nbd_dev_add+0x733/0xb60 [ 436.896496][T23455] nbd_init+0x15f/0x1e0 [ 436.901335][T23455] do_one_initcall+0x250/0x870 [ 436.906665][T23455] do_initcall_level+0x10a/0x1a0 [ 436.912187][T23455] do_initcalls+0x59/0xa0 [ 436.917078][T23455] kernel_init_freeable+0x29d/0x3e0 [ 436.922827][T23455] kernel_init+0x1d/0x1d0 [ 436.927702][T23455] ret_from_fork+0x514/0xb70 [ 436.932853][T23455] ret_from_fork_asm+0x1a/0x30 [ 436.938214][T23455] [ 436.938214][T23455] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 436.946077][T23455] __mutex_lock+0x19d/0x1550 [ 436.951237][T23455] elevator_change+0x1af/0x480 [ 436.956563][T23455] elevator_set_none+0xb5/0x140 [ 436.961975][T23455] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 436.968344][T23455] nbd_start_device+0x189/0xb30 [ 436.973753][T23455] nbd_genl_connect+0x1597/0x1c10 [ 436.979337][T23455] genl_family_rcv_msg_doit+0x233/0x340 [ 436.985522][T23455] genl_rcv_msg+0x614/0x7a0 [ 436.990575][T23455] netlink_rcv_skb+0x226/0x4a0 [ 436.995947][T23455] genl_rcv+0x28/0x40 [ 437.000488][T23455] netlink_unicast+0x7bb/0x940 [ 437.005812][T23455] netlink_sendmsg+0x813/0xb40 [ 437.011171][T23455] sock_sendmsg_nosec+0x13a/0x180 [ 437.016743][T23455] ____sys_sendmsg+0x54e/0x850 [ 437.022065][T23455] ___sys_sendmsg+0x2a5/0x360 [ 437.027315][T23455] __x64_sys_sendmsg+0x1b1/0x290 [ 437.032811][T23455] do_syscall_64+0x174/0x580 [ 437.037967][T23455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.044413][T23455] [ 437.044413][T23455] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 437.053077][T23455] blk_alloc_queue+0x544/0x690 [ 437.058397][T23455] __blk_mq_alloc_disk+0x194/0x390 [ 437.064062][T23455] nbd_dev_add+0x494/0xb60 [ 437.069037][T23455] nbd_init+0x15f/0x1e0 [ 437.073755][T23455] do_one_initcall+0x250/0x870 [ 437.079085][T23455] do_initcall_level+0x10a/0x1a0 [ 437.084576][T23455] do_initcalls+0x59/0xa0 [ 437.089471][T23455] kernel_init_freeable+0x29d/0x3e0 [ 437.095232][T23455] kernel_init+0x1d/0x1d0 [ 437.100114][T23455] ret_from_fork+0x514/0xb70 [ 437.105260][T23455] ret_from_fork_asm+0x1a/0x30 [ 437.110578][T23455] [ 437.110578][T23455] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 437.117855][T23455] __lock_acquire+0x1520/0x2cf0 [ 437.123274][T23455] lock_acquire+0x106/0x350 [ 437.128338][T23455] fs_reclaim_acquire+0x71/0x100 [ 437.133831][T23455] prepare_alloc_pages+0x15b/0x650 [ 437.139502][T23455] __alloc_frozen_pages_noprof+0x12f/0x380 [ 437.145865][T23455] alloc_pages_mpol+0x212/0x380 [ 437.151271][T23455] folio_alloc_mpol_noprof+0x39/0x160 [ 437.157199][T23455] swap_cache_alloc_folio+0x2c1/0x990 [ 437.163127][T23455] swap_cluster_readahead+0x4d9/0x640 [ 437.169049][T23455] swapin_readahead+0x19a/0xc10 [ 437.174454][T23455] do_swap_page+0x455/0x5060 [ 437.179615][T23455] handle_mm_fault+0x124c/0x3080 [ 437.185105][T23455] do_user_addr_fault+0x744/0x1340 [ 437.190791][T23455] exc_page_fault+0x6a/0xc0 [ 437.195850][T23455] asm_exc_page_fault+0x26/0x30 [ 437.201253][T23455] __get_user_8+0x14/0x40 [ 437.206133][T23455] exit_robust_list+0x58/0x2b0 [ 437.211502][T23455] futex_exit_release+0x132/0x1d0 [ 437.217084][T23455] exit_mm_release+0x1a/0x30 [ 437.222227][T23455] exit_mm+0x4d/0x2d0 [ 437.226785][T23455] do_exit+0x6cd/0x2360 [ 437.231497][T23455] do_group_exit+0x22d/0x2f0 [ 437.236643][T23455] get_signal+0x121b/0x12c0 [ 437.241700][T23455] arch_do_signal_or_restart+0xbb/0x860 [ 437.247801][T23455] exit_to_user_mode_loop+0x104/0x730 [ 437.253743][T23455] do_syscall_64+0x353/0x580 [ 437.258900][T23455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.265343][T23455] [ 437.265343][T23455] other info that might help us debug this: [ 437.265343][T23455] [ 437.275598][T23455] Chain exists of: [ 437.275598][T23455] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 437.275598][T23455] [ 437.288274][T23455] Possible unsafe locking scenario: [ 437.288274][T23455] [ 437.295766][T23455] CPU0 CPU1 [ 437.301209][T23455] ---- ---- [ 437.306637][T23455] rlock(&mm->mmap_lock); [ 437.311091][T23455] lock(sk_lock-AF_INET6); [ 437.318143][T23455] lock(&mm->mmap_lock); [ 437.325027][T23455] lock(fs_reclaim); [ 437.329044][T23455] [ 437.329044][T23455] *** DEADLOCK *** [ 437.329044][T23455] [ 437.337208][T23455] 2 locks held by syz.0.8461/23455: [ 437.342435][T23455] #0: ffff88807da014a8 (&tsk->futex.exit_mutex){+.+.}-{4:4}, at: futex_exit_release+0x33/0x1d0 [ 437.352957][T23455] #1: ffff888078421d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 437.362929][T23455] [ 437.362929][T23455] stack backtrace: [ 437.368852][T23455] CPU: 0 UID: 0 PID: 23455 Comm: syz.0.8461 Not tainted syzkaller #0 PREEMPT(full) [ 437.368875][T23455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.368887][T23455] Call Trace: [ 437.368897][T23455] [ 437.368906][T23455] dump_stack_lvl+0xe8/0x150 [ 437.368936][T23455] print_circular_bug+0x2e1/0x300 [ 437.368957][T23455] check_noncircular+0x12e/0x150 [ 437.368991][T23455] __lock_acquire+0x1520/0x2cf0 [ 437.369021][T23455] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.369046][T23455] ? arch_stack_walk+0xfb/0x150 [ 437.369071][T23455] ? prepare_alloc_pages+0x15b/0x650 [ 437.369095][T23455] lock_acquire+0x106/0x350 [ 437.369120][T23455] ? prepare_alloc_pages+0x15b/0x650 [ 437.369147][T23455] ? check_path+0x21/0x40 [ 437.369174][T23455] ? check_noncircular+0xda/0x150 [ 437.369206][T23455] fs_reclaim_acquire+0x71/0x100 [ 437.369229][T23455] ? prepare_alloc_pages+0x15b/0x650 [ 437.369253][T23455] prepare_alloc_pages+0x15b/0x650 [ 437.369281][T23455] __alloc_frozen_pages_noprof+0x12f/0x380 [ 437.369309][T23455] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.369338][T23455] ? __pfx_policy_nodemask+0x10/0x10 [ 437.369370][T23455] alloc_pages_mpol+0x212/0x380 [ 437.369401][T23455] folio_alloc_mpol_noprof+0x39/0x160 [ 437.369430][T23455] swap_cache_alloc_folio+0x2c1/0x990 [ 437.369457][T23455] swap_cluster_readahead+0x4d9/0x640 [ 437.369481][T23455] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 437.369508][T23455] ? get_vma_policy+0x27b/0x3c0 [ 437.369536][T23455] swapin_readahead+0x19a/0xc10 [ 437.369558][T23455] ? swap_table_get+0x1e/0x260 [ 437.369576][T23455] ? swap_table_get+0x1e/0x260 [ 437.369623][T23455] ? __pfx_swapin_readahead+0x10/0x10 [ 437.369644][T23455] ? swap_table_get+0x1e/0x260 [ 437.369661][T23455] ? swap_table_get+0x1e/0x260 [ 437.369677][T23455] ? swap_table_get+0x1e/0x260 [ 437.369695][T23455] ? swap_table_get+0x216/0x260 [ 437.369713][T23455] ? swap_cache_get_folio+0x2e7/0x2f0 [ 437.369734][T23455] do_swap_page+0x455/0x5060 [ 437.369770][T23455] ? __pte_offset_map+0x29/0x240 [ 437.369794][T23455] ? do_swap_page+0x124/0x5060 [ 437.369823][T23455] ? __pfx_do_swap_page+0x10/0x10 [ 437.369851][T23455] ? __pte_offset_map+0x1ae/0x240 [ 437.369871][T23455] ? pte_offset_map_rw_nolock+0xea/0x160 [ 437.369893][T23455] handle_mm_fault+0x124c/0x3080 [ 437.369919][T23455] ? handle_mm_fault+0xec/0x3080 [ 437.369943][T23455] ? __pfx_handle_mm_fault+0x10/0x10 [ 437.369972][T23455] ? lock_mm_and_find_vma+0xa7/0x340 [ 437.369996][T23455] do_user_addr_fault+0x744/0x1340 [ 437.370032][T23455] exc_page_fault+0x6a/0xc0 [ 437.370058][T23455] asm_exc_page_fault+0x26/0x30 [ 437.370076][T23455] RIP: 0010:__get_user_8+0x14/0x40 [ 437.370099][T23455] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 bf 5a 04 00 90 90 90 90 90 90 90 90 90 [ 437.370116][T23455] RSP: 0018:ffffc9000371fa08 EFLAGS: 00050287 [ 437.370133][T23455] RAX: 00007f078692c9a0 RBX: ffff88807da01420 RCX: 0000000000000046 [ 437.370147][T23455] RDX: 00007ffffffff000 RSI: ffffffff8e4ae78c RDI: ffffffff8c4bd280 [ 437.370161][T23455] RBP: 1ffff1100fb4029a R08: ffffffff821b3ccf R09: 0000000000000000 [ 437.370175][T23455] R10: 0000000000000000 R11: ffff888078421d38 R12: 1ffff1100fb40284 [ 437.370188][T23455] R13: ffff88807da00000 R14: ffff88807da01420 R15: 00007f078692c9a0 [ 437.370206][T23455] ? __might_fault+0xaf/0x130 [ 437.370231][T23455] exit_robust_list+0x58/0x2b0 [ 437.370260][T23455] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.370347][T23455] futex_exit_release+0x132/0x1d0 [ 437.370377][T23455] exit_mm_release+0x1a/0x30 [ 437.370398][T23455] exit_mm+0x4d/0x2d0 [ 437.370426][T23455] do_exit+0x6cd/0x2360 [ 437.370469][T23455] ? __pfx_do_exit+0x10/0x10 [ 437.370496][T23455] ? do_raw_spin_lock+0x12b/0x2f0 [ 437.370520][T23455] do_group_exit+0x22d/0x2f0 [ 437.370564][T23455] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.370587][T23455] get_signal+0x121b/0x12c0 [ 437.370625][T23455] arch_do_signal_or_restart+0xbb/0x860 [ 437.370652][T23455] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 437.370703][T23455] exit_to_user_mode_loop+0x104/0x730 [ 437.370727][T23455] ? rcu_is_watching+0x15/0xb0 [ 437.370755][T23455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.370774][T23455] do_syscall_64+0x353/0x580 [ 437.370797][T23455] ? trace_irq_disable+0x3b/0x140 [ 437.370831][T23455] ? clear_bhb_loop+0x40/0x90 [ 437.370852][T23455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.370870][T23455] RIP: 0033:0x7f078599de59 [ 437.370887][T23455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.370903][T23455] RSP: 002b:00007f078692c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 437.370921][T23455] RAX: fffffffffffffe00 RBX: 00007f0785c26098 RCX: 00007f078599de59 [ 437.370934][T23455] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0785c26098 [ 437.370946][T23455] RBP: 00007f0785c26090 R08: 0000000000000000 R09: 0000000000000000 [ 437.370957][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.370968][T23455] R13: 00007f0785c26128 R14: 00007ffe86ca88c0 R15: 00007ffe86ca89a8 [ 437.370990][T23455] [ 438.084106][T23541] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.091706][T23541] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.188497][T23541] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 439.321965][ T762] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.963133][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.969517][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.976409][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len