last executing test programs: 2.029716877s ago: executing program 2 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_IE={0x4}]}, 0x38}}, 0x0) 1.91968415s ago: executing program 0 (id=1994): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x5, 0x3, 0xffffffec}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1.918070134s ago: executing program 2 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.694923441s ago: executing program 2 (id=1999): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) 1.480552078s ago: executing program 0 (id=2003): socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 1.195825185s ago: executing program 1 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x64, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.128223601s ago: executing program 2 (id=2007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)={@val={0xa, 0x883e}, @void, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "9ba796", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}, 0x3a) 1.076364813s ago: executing program 3 (id=2008): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x3ff, 0x6, 0xfffffffb}}]}]}}}]}, 0x6c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.017534206s ago: executing program 1 (id=2009): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000740)="9daaadb99f69c48373a1ee00001ff9", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 944.498366ms ago: executing program 2 (id=2011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0x38}]}}}}}}}, 0x0) 944.290465ms ago: executing program 3 (id=2012): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c082}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96d", 0xe}], 0x1}, 0x0) 818.683109ms ago: executing program 4 (id=2013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 777.887941ms ago: executing program 1 (id=2014): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, 0x0, 0x1, 0x6, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x44}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4401}, 0x4040894) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r6, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) 684.060893ms ago: executing program 4 (id=2015): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 683.772725ms ago: executing program 3 (id=2016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008000) 648.999812ms ago: executing program 1 (id=2017): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x50, 0x1, [@m_bpf={0x4c, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x19, 0x6, "8c5e889680ea699f0286c6926deecbcf795b716b0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x64}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="080001"], 0x90}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 565.537605ms ago: executing program 0 (id=2018): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x30, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 527.875539ms ago: executing program 3 (id=2019): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) socket$netlink(0x10, 0x3, 0x400000000000004) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) 527.622762ms ago: executing program 4 (id=2020): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x3, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xe, 0x0, @val=0x80}}}}}}}, 0x0) 374.966923ms ago: executing program 4 (id=2021): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000009840)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x40000, @empty, 0x1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}}], 0x2, 0x0) 342.927059ms ago: executing program 0 (id=2022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="30002f8008000100000000001800038008000100e6ff00000c00038046000100feff00000c00020000"], 0x4c}}, 0x4000040) 334.367356ms ago: executing program 4 (id=2023): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYBLOB="211000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4040800) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 330.740254ms ago: executing program 3 (id=2024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 224.541563ms ago: executing program 1 (id=2025): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x3, 0x7, 0xb}, {0x6, 0xfc, 0x0, 0xfffffffd}]}) write$ppp(r0, &(0x7f0000000640)="00f3", 0x2) 220.485355ms ago: executing program 0 (id=2026): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) 150.44261ms ago: executing program 4 (id=2027): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x30) 104.486973ms ago: executing program 3 (id=2028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fffbffff0000000000000000850000001100000085000000d000000095"], &(0x7f0000000680)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 104.324139ms ago: executing program 0 (id=2029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x40d, 0x70bd6d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x20046}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 66.238567ms ago: executing program 1 (id=2030): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 2 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4000080) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000090500010007000000180007800c00018001000100ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) kernel console output (not intermixed with test programs): ][ T8110] netlink: 240 bytes leftover after parsing attributes in process `syz.2.544'. [ 339.643490][ T8110] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 339.651662][ T5704] tipc: Node number set to 2886997007 [ 339.951018][ T8116] netlink: 'syz.3.546': attribute type 3 has an invalid length. [ 339.997942][ T8120] syzkaller0: entered promiscuous mode [ 340.026281][ T8120] syzkaller0: entered allmulticast mode [ 340.157510][ T8120] tipc: Enabled bearer , priority 0 [ 340.200568][ T8120] tipc: Resetting bearer [ 340.250527][ T8118] tipc: Resetting bearer [ 340.331372][ T8118] tipc: Disabling bearer [ 340.401841][ T8142] openvswitch: netlink: IP tunnel dst address not specified [ 340.420279][ T8142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.530073][ T8149] netlink: 'syz.3.556': attribute type 142 has an invalid length. [ 340.647608][ T8157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.716073][ T8156] xfrm1: entered allmulticast mode [ 341.064290][ T8174] bridge2: entered promiscuous mode [ 341.085281][ T8174] bridge2: entered allmulticast mode [ 341.111716][ T8174] team0: Port device bridge2 added [ 341.199104][ T8176] bridge0: port 3(team0) entered blocking state [ 341.222860][ T8176] bridge0: port 3(team0) entered disabled state [ 341.242482][ T8176] team0: entered allmulticast mode [ 341.251307][ T8176] team_slave_0: entered allmulticast mode [ 341.258572][ T8176] team_slave_1: entered allmulticast mode [ 341.285776][ T8176] team0: entered promiscuous mode [ 341.291028][ T8176] team_slave_0: entered promiscuous mode [ 341.297337][ T8176] team_slave_1: entered promiscuous mode [ 341.346994][ T6805] smc: removing ib device syz1 [ 341.496799][ T6805] smbdirect: ib_dev[syz1] removed [ 341.703518][ T6800] tipc: Subscription rejected, illegal request [ 342.050902][ T8214] bridge2: port 1(vlan2) entered blocking state [ 342.092254][ T8214] bridge2: port 1(vlan2) entered disabled state [ 342.122403][ T8214] vlan2: entered allmulticast mode [ 342.160575][ T8214] bridge2: entered allmulticast mode [ 342.245238][ T8214] vlan2: left allmulticast mode [ 342.275795][ T8214] bridge2: left allmulticast mode [ 342.337229][ T8218] netlink: 'syz.3.574': attribute type 62 has an invalid length. [ 342.748884][ T29] audit: type=1107 audit(1785076768.885:3): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 343.069714][ T8236] xt_CT: No such helper "snmp_trap" [ 344.117515][ T8269] syz.1.590: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.169017][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.1.590 Not tainted syzkaller #0 PREEMPT(full) [ 344.169046][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 344.169067][ T8269] Call Trace: [ 344.169075][ T8269] [ 344.169084][ T8269] dump_stack_lvl+0xe8/0x150 [ 344.169121][ T8269] warn_alloc+0x24c/0x270 [ 344.169151][ T8269] ? stack_depot_save_flags+0x33/0x800 [ 344.169182][ T8269] ? __pfx_warn_alloc+0x10/0x10 [ 344.169210][ T8269] ? kasan_save_track+0x3e/0x80 [ 344.169236][ T8269] ? __kasan_kmalloc+0x93/0xb0 [ 344.169269][ T8269] ? xsk_setsockopt+0x52a/0x960 [ 344.169289][ T8269] ? do_sock_setsockopt+0x17c/0x1b0 [ 344.169311][ T8269] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 344.169331][ T8269] ? do_syscall_64+0x174/0x580 [ 344.169356][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.169393][ T8269] __vmalloc_node_range_noprof+0x12c/0x1730 [ 344.169452][ T8269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.169484][ T8269] ? __kasan_kmalloc+0x93/0xb0 [ 344.169514][ T8269] ? __kmalloc_cache_noprof+0x32d/0x660 [ 344.169542][ T8269] ? __kmalloc_cache_noprof+0x150/0x660 [ 344.169573][ T8269] vmalloc_user_noprof+0xad/0xe0 [ 344.169600][ T8269] ? xskq_create+0xbf/0x170 [ 344.169624][ T8269] xskq_create+0xbf/0x170 [ 344.169650][ T8269] xsk_init_queue+0x8a/0xe0 [ 344.169675][ T8269] xsk_setsockopt+0x52a/0x960 [ 344.169696][ T8269] ? __fget_files+0x2a/0x420 [ 344.169726][ T8269] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.169759][ T8269] ? __pfx_aa_sk_perm+0x10/0x10 [ 344.169783][ T8269] ? aa_sock_opt_perm+0xff/0x1a0 [ 344.169807][ T8269] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 344.169828][ T8269] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.169850][ T8269] do_sock_setsockopt+0x17c/0x1b0 [ 344.169876][ T8269] __x64_sys_setsockopt+0x13d/0x1b0 [ 344.169901][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.169922][ T8269] do_syscall_64+0x174/0x580 [ 344.169944][ T8269] ? trace_irq_disable+0x3b/0x140 [ 344.169970][ T8269] ? clear_bhb_loop+0x40/0x90 [ 344.169995][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.170014][ T8269] RIP: 0033:0x7f481c19de99 [ 344.170034][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.170050][ T8269] RSP: 002b:00007f481d040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.170070][ T8269] RAX: ffffffffffffffda RBX: 00007f481c426090 RCX: 00007f481c19de99 [ 344.170084][ T8269] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 344.170095][ T8269] RBP: 00007f481c233eaf R08: 0000000000000004 R09: 0000000000000000 [ 344.170106][ T8269] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.170117][ T8269] R13: 00007f481c426128 R14: 00007f481c426090 R15: 00007ffd78c5cdc8 [ 344.170148][ T8269] [ 344.505821][ T8269] Mem-Info: [ 344.509656][ T8269] active_anon:9131 inactive_anon:0 isolated_anon:0 [ 344.509656][ T8269] active_file:0 inactive_file:43316 isolated_file:0 [ 344.509656][ T8269] unevictable:768 dirty:378 writeback:0 [ 344.509656][ T8269] slab_reclaimable:10564 slab_unreclaimable:183598 [ 344.509656][ T8269] mapped:30000 shmem:4804 pagetables:1301 [ 344.509656][ T8269] sec_pagetables:0 bounce:0 [ 344.509656][ T8269] kernel_misc_reclaimable:0 [ 344.509656][ T8269] free:1236583 free_pcp:13022 free_cma:0 [ 344.615558][ T8269] Node 0 active_anon:27424kB inactive_anon:0kB active_file:0kB inactive_file:173060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118200kB dirty:1412kB writeback:0kB shmem:8580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:5064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.688295][ T8269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.729069][ T8269] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.784198][ T8269] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 344.804816][ T8269] Node 0 DMA32 free:994804kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22544kB inactive_anon:0kB active_file:0kB inactive_file:173060kB unevictable:1536kB writepending:1372kB zspages:0kB present:3129332kB managed:2548616kB mlocked:0kB bounce:0kB free_pcp:58720kB local_pcp:27456kB free_cma:0kB [ 344.923751][ T8269] lowmem_reserve[]: 0 0 0 0 0 [ 344.943708][ T8269] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.986380][ T8269] lowmem_reserve[]: 0 0 0 0 0 [ 345.004129][ T8269] Node 1 Normal free:3944496kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.099470][ T8269] lowmem_reserve[]: 0 0 0 0 0 [ 345.132345][ T8269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.153444][ T8269] Node 0 DMA32: 1742*4kB (UM) 294*8kB (UM) 31*16kB (UME) 314*32kB (UM) 116*64kB (UM) 60*128kB (UME) 14*256kB (UME) 10*512kB (UM) 28*1024kB (UME) 19*2048kB (UM) 216*4096kB (UM) = 995992kB [ 345.178509][ T8294] netlink: 'syz.3.593': attribute type 21 has an invalid length. [ 345.212321][ T8294] netlink: 'syz.3.593': attribute type 22 has an invalid length. [ 345.220677][ T8269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.249941][ T8294] netlink: 'syz.3.593': attribute type 23 has an invalid length. [ 345.282039][ T8269] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 6*16kB (UM) 4*32kB (UM) 5*64kB (UM) 6*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (M) = 3944496kB [ 345.302799][ T8294] netlink: 'syz.3.593': attribute type 25 has an invalid length. [ 345.332013][ T8294] __nla_validate_parse: 9 callbacks suppressed [ 345.332030][ T8294] netlink: 96 bytes leftover after parsing attributes in process `syz.3.593'. [ 345.339694][ T8269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.415127][ T8269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.436847][ T8269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.481394][ T8269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.525505][ T8269] 44601 total pagecache pages [ 345.549094][ T8269] 0 pages in swap cache [ 345.566108][ T8269] Free swap = 124996kB [ 345.585296][ T8269] Total swap = 124996kB [ 345.606533][ T8269] 2097051 pages RAM [ 345.627288][ T8269] 0 pages HighMem/MovableOnly [ 345.646371][ T8269] 428217 pages reserved [ 345.675410][ T8269] 0 pages cma reserved [ 346.048636][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 346.285807][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 346.293571][ T8338] netlink: 'syz.4.605': attribute type 4 has an invalid length. [ 346.384200][ T8340] syzkaller0: entered promiscuous mode [ 346.405353][ T8340] syzkaller0: entered allmulticast mode [ 346.463291][ T8346] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 346.467389][ T8344] netlink: 'syz.2.608': attribute type 13 has an invalid length. [ 346.522017][ T8344] netlink: 'syz.2.608': attribute type 17 has an invalid length. [ 346.554874][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 346.560481][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 346.728941][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.752133][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.787323][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.806699][ T8359] netlink: 'syz.3.611': attribute type 11 has an invalid length. [ 346.830296][ T8359] netlink: 'syz.3.611': attribute type 4 has an invalid length. [ 346.878900][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.912937][ T8344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.935038][ T8344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.966035][ T8344] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 346.987560][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 347.028296][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.035523][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.094004][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.101246][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.178506][ T8365] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 347.198240][ T141] bridge0: port 3(team0) entered blocking state [ 347.212991][ T141] bridge0: port 3(team0) entered forwarding state [ 347.607016][ T8384] pimreg: left allmulticast mode [ 347.670971][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 347.930089][ T8401] syzkaller0: entered promiscuous mode [ 347.938442][ T8401] syzkaller0: entered allmulticast mode [ 348.017887][ T8407] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 348.053776][ T8407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.086257][ T8407] bond2: (slave dummy0): making interface the new active one [ 348.105663][ T8407] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 348.138782][ T8410] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 348.148810][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.625'. [ 348.177644][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.230695][ T8410] dummy0: entered promiscuous mode [ 348.241131][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.261127][ T8410] bond2: (slave dummy0): Releasing active interface [ 348.378751][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 348.500636][ T8426] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20004 [ 348.783324][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 348.954101][ T8445] syzkaller0: entered promiscuous mode [ 348.976239][ T8445] syzkaller0: entered allmulticast mode [ 350.359135][ T8498] syzkaller0: entered promiscuous mode [ 350.371073][ T8498] syzkaller0: entered allmulticast mode [ 350.469589][ T8511] __nla_validate_parse: 6 callbacks suppressed [ 350.469608][ T8511] netlink: 136 bytes leftover after parsing attributes in process `syz.3.652'. [ 350.716695][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 350.728483][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 350.977086][ T8527] tipc: Enabled bearer , priority 0 [ 350.991901][ T8527] syzkaller0: entered promiscuous mode [ 351.003694][ T8527] syzkaller0: entered allmulticast mode [ 351.027188][ T8527] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 351.119079][ T8527] tipc: Resetting bearer [ 351.127238][ T8530] validate_nla: 4 callbacks suppressed [ 351.127256][ T8530] netlink: 'syz.4.661': attribute type 21 has an invalid length. [ 351.143253][ T8526] tipc: Resetting bearer [ 351.152656][ T8530] netlink: 128 bytes leftover after parsing attributes in process `syz.4.661'. [ 351.174729][ T8526] tipc: Disabling bearer [ 351.187545][ T8530] netlink: 'syz.4.661': attribute type 4 has an invalid length. [ 351.205832][ T8530] netlink: 'syz.4.661': attribute type 5 has an invalid length. [ 351.213930][ T8530] netlink: 3 bytes leftover after parsing attributes in process `syz.4.661'. [ 351.303800][ T8535] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 351.314741][ T8537] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 351.326799][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.662'. [ 351.423062][ T8535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.431340][ T8537] dummy0: entered promiscuous mode [ 351.568736][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.664'. [ 351.593286][ T8545] netlink: 88 bytes leftover after parsing attributes in process `syz.4.664'. [ 351.618780][ T8549] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002 [ 351.796356][ T8515] infiniband syz1: set down [ 351.802796][ T8515] infiniband syz1: added syz_tun [ 351.809933][ T8515] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 351.823858][ T8515] infiniband syz1: Couldn't open port 1 [ 351.837409][ T8556] syzkaller0: entered promiscuous mode [ 351.844237][ T8515] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 351.861203][ T8515] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 351.873325][ T8556] syzkaller0: entered allmulticast mode [ 351.882408][ T8515] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 351.951096][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 352.003186][ T8515] RDS/IB: syz1: added [ 352.007336][ T8562] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.669'. [ 352.020620][ T8515] smc: adding ib device syz1 with port count 1 [ 352.035978][ T8515] smc: ib device syz1 port 1 has no pnetid [ 352.488580][ T7921] udevd[7921]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 352.534116][ T7824] udevd[7824]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 352.599125][ T8588] syzkaller0: entered promiscuous mode [ 352.605517][ T8588] syzkaller0: entered allmulticast mode [ 352.689396][ T8596] netlink: 'syz.0.676': attribute type 9 has an invalid length. [ 354.345114][ T8602] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 354.746731][ T8604] syzkaller0: entered promiscuous mode [ 354.752876][ T8604] syzkaller0: entered allmulticast mode [ 356.855261][ T8623] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 356.857377][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.872975][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.882491][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.889735][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.939365][ T8625] bridge0: entered promiscuous mode [ 356.983646][ T8653] __nla_validate_parse: 5 callbacks suppressed [ 356.983666][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 357.141219][ T8653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.174768][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 357.330610][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 357.573361][ T8673] netlink: 'syz.3.694': attribute type 4 has an invalid length. [ 357.634511][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 357.665232][ T8673] netlink: 7 bytes leftover after parsing attributes in process `syz.3.694'. [ 357.857901][ T8683] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 357.944648][ T8685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.698'. [ 358.321374][ T8687] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 358.352727][ T8687] bond3 (unregistering): Released all slaves [ 358.876565][ T8677] rdma_rxe: rxe_newlink: failed to add syz_tun [ 359.087173][ T8692] netlink: 244 bytes leftover after parsing attributes in process `syz.1.700'. [ 359.393027][ T8694] syzkaller0: entered promiscuous mode [ 359.406738][ T8694] syzkaller0: entered allmulticast mode [ 359.900186][ T8713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 360.689481][ T8719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.696834][ T8719] IPv6: NLM_F_CREATE should be set when creating new route [ 360.704234][ T8719] IPv6: NLM_F_CREATE should be set when creating new route [ 361.898755][ T8731] netlink: 'syz.3.707': attribute type 4 has an invalid length. [ 362.186924][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 362.255311][ T8738] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 362.581944][ T8738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.595715][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 362.613369][ T8738] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 362.825472][ T8764] syzkaller0: entered promiscuous mode [ 362.837430][ T8764] syzkaller0: entered allmulticast mode [ 362.884480][ T8767] netlink: 2316 bytes leftover after parsing attributes in process `syz.1.715'. [ 362.911148][ T8767] : renamed from sit0 [ 364.750750][ T8783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.719'. [ 364.766128][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.719'. [ 364.766488][ T6806] tipc: Subscription rejected, illegal request [ 364.972648][ T8800] pim6reg: entered allmulticast mode [ 364.992521][ T8804] netlink: 'syz.3.723': attribute type 3 has an invalid length. [ 365.018185][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.724'. [ 365.144302][ T8809] : renamed from lo [ 365.458550][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 365.491606][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 365.532768][ T8828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.731'. [ 365.665803][ T8831] tc action pedit 'at' offset -2147483648 out of bounds [ 366.459260][ T8865] vlan2: entered promiscuous mode [ 366.473244][ T8865] gretap0: entered promiscuous mode [ 366.560569][ T8864] netlink: 179624 bytes leftover after parsing attributes in process `syz.1.742'. [ 366.818238][ T8879] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 366.945398][ T8886] netlink: 'syz.1.747': attribute type 2 has an invalid length. [ 367.034396][ T8879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.152439][ T8886] : entered promiscuous mode [ 367.382839][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.403587][ T8896] __nla_validate_parse: 2 callbacks suppressed [ 367.403605][ T8896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.749'. [ 367.447033][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.483005][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.495236][ T8901] batadv_slave_0: entered promiscuous mode [ 367.508599][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.535946][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.570798][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.607735][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.643317][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.667505][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.698969][ T8895] batadv_slave_0: left promiscuous mode [ 367.705462][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.744743][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.780053][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.828124][ T8899] netlink: 'syz.1.750': attribute type 30 has an invalid length. [ 367.865866][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.896971][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 367.976256][ T8899] netlink: 56 bytes leftover after parsing attributes in process `syz.1.750'. [ 368.092553][ T8915] tap0: tun_chr_ioctl cmd 1074025677 [ 368.108831][ T8915] tap0: linktype set to 6 [ 369.639458][ T8958] bond3: entered promiscuous mode [ 369.645448][ T8958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.969942][ T8846] Set syz1 is full, maxelem 65536 reached [ 370.302908][ T8977] validate_nla: 27 callbacks suppressed [ 370.302926][ T8977] netlink: 'syz.4.773': attribute type 2 has an invalid length. [ 370.326130][ T8977] : entered promiscuous mode [ 370.380472][ T8979] netlink: 'syz.4.774': attribute type 13 has an invalid length. [ 370.437389][ T8980] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 370.457749][ T8980] syzkaller0: entered promiscuous mode [ 370.463814][ T8980] syzkaller0: entered allmulticast mode [ 370.488928][ T8979] tc_dump_action: action bad kind [ 371.300901][ T8924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.982774][ T9010] vlan2: entered allmulticast mode [ 371.997893][ T9010] bridge2: entered allmulticast mode [ 372.009819][ T9017] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 372.018095][ T9017] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 372.027697][ T9017] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 372.224547][ T9023] sctp: [Deprecated]: syz.3.788 (pid 9023) Use of int in max_burst socket option deprecated. [ 372.224547][ T9023] Use struct sctp_assoc_value instead [ 372.447126][ T9027] syzkaller1: entered promiscuous mode [ 372.469555][ T9032] __nla_validate_parse: 34 callbacks suppressed [ 372.469576][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 372.492124][ T9027] syzkaller1: entered allmulticast mode [ 372.596328][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 372.669219][ T9032] syzkaller0: entered promiscuous mode [ 372.692053][ T9032] syzkaller0: entered allmulticast mode [ 373.107496][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 373.151345][ T9071] netlink: 'syz.1.800': attribute type 4 has an invalid length. [ 373.167654][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 373.191170][ T9071] openvswitch: netlink: Multiple metadata blocks provided [ 373.527633][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'. [ 373.750924][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 373.867613][ T9090] xt_CONNSECMARK: invalid mode: 254 [ 374.085642][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 374.115247][ T9113] netlink: 59 bytes leftover after parsing attributes in process `syz.3.806'. [ 374.465539][ T9128] netlink: 'syz.3.812': attribute type 6 has an invalid length. [ 374.890199][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 375.039235][ T6797] tipc: Subscription rejected, illegal request [ 375.077797][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'. [ 375.531707][ T9175] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 375.586028][ T9177] netlink: 'syz.2.824': attribute type 2 has an invalid length. [ 375.610760][ T9173] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 375.794229][ T9173] bond4 (unregistering): Released all slaves [ 376.083208][ T9175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.227586][ T9194] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 376.902225][ T9223] tipc: Enabled bearer , priority 0 [ 376.944351][ T9223] syzkaller0: entered promiscuous mode [ 376.963092][ T9223] syzkaller0: entered allmulticast mode [ 377.039588][ T9223] tipc: Resetting bearer [ 377.053221][ T9222] tipc: Resetting bearer [ 377.105355][ T9222] tipc: Disabling bearer [ 377.213951][ T9235] netlink: 'syz.0.838': attribute type 5 has an invalid length. [ 377.892077][ T9235] geneve2: entered promiscuous mode [ 377.898109][ T9235] geneve2: entered allmulticast mode [ 377.941909][ T6794] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33675 - 0 [ 377.951311][ T6794] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33675 - 0 [ 377.967525][ T6794] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33675 - 0 [ 378.485749][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.857061][ T9092] Set syz1 is full, maxelem 65536 reached [ 378.926391][ T9264] __nla_validate_parse: 9 callbacks suppressed [ 378.926410][ T9264] netlink: 128 bytes leftover after parsing attributes in process `syz.1.847'. [ 378.944501][ T9264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.926701][ T9225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.263759][ T9283] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 380.282374][ T9283] bond3 (unregistering): Released all slaves [ 380.503288][ T9296] netlink: 'syz.3.856': attribute type 2 has an invalid length. [ 380.512576][ T9296] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 380.520329][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 380.541351][ T9296] nbd: illegal input index -120127480 [ 380.561196][ T9299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.855'. [ 380.571114][ T9301] Set syz1 is full, maxelem 65536 reached [ 380.595839][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 380.627740][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 381.025886][ T9319] batadv_slave_1: entered promiscuous mode [ 381.049067][ T9319] macvlan2: entered allmulticast mode [ 381.065176][ T9319] batadv_slave_1: entered allmulticast mode [ 381.090201][ T9319] batman_adv: batadv0: Adding interface: macvlan2 [ 381.125277][ T9319] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.166931][ T9319] batman_adv: batadv0: Interface activated: macvlan2 [ 381.236952][ T9331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.866'. [ 381.244821][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.865'. [ 381.300227][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 381.383912][ T9337] netlink: 'syz.0.866': attribute type 3 has an invalid length. [ 381.535281][ T9344] IPVS: set_ctl: invalid protocol: 58 172.20.20.46:20003 [ 381.549265][ T9345] netlink: 'syz.2.869': attribute type 1 has an invalid length. [ 381.560590][ T9345] netlink: 224 bytes leftover after parsing attributes in process `syz.2.869'. [ 381.575018][ T9344] x_tables: duplicate underflow at hook 1 [ 381.583687][ T9348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.868'. [ 381.740758][ T9351] vlan3: entered allmulticast mode [ 381.746162][ T9351] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 381.987429][ T9353] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 382.132850][ T9353] bond3 (unregistering): Released all slaves [ 383.113141][ T9372] dummy0: left promiscuous mode [ 383.319847][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.349394][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.521730][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.554324][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.981960][ T9372] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 384.036099][ T9372] bond3: left promiscuous mode [ 384.081145][ T9372] geneve2: left promiscuous mode [ 384.091751][ T9372] geneve2: left allmulticast mode [ 384.189767][ T141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.211872][ T141] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 33675 - 0 [ 384.236265][ T141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.266911][ T141] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 33675 - 0 [ 384.434535][ T141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.443734][ T141] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 33675 - 0 [ 384.614347][ T9417] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 384.628650][ T9417] bond5 (unregistering): Released all slaves [ 384.704564][ T9419] __nla_validate_parse: 3 callbacks suppressed [ 384.704584][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 384.996282][ T9406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.126048][ T9435] netlink: 64 bytes leftover after parsing attributes in process `syz.3.888'. [ 385.189501][ T9437] netlink: 'syz.3.890': attribute type 142 has an invalid length. [ 385.367602][ T9432] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 385.438937][ T9432] bond3 (unregistering): Released all slaves [ 385.543794][ T9439] gretap0: entered promiscuous mode [ 385.553403][ T9439] vlan1: entered promiscuous mode [ 386.067125][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 386.310824][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 386.322659][ T9479] netlink: 260 bytes leftover after parsing attributes in process `syz.3.900'. [ 386.770766][ T9500] netlink: 52 bytes leftover after parsing attributes in process `syz.1.906'. [ 386.890572][ T9495] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 386.905022][ T7166] IPVS: starting estimator thread 0... [ 387.022206][ T9506] IPVS: using max 25 ests per chain, 60000 per kthread [ 387.140133][ T9514] netlink: 'syz.0.908': attribute type 8 has an invalid length. [ 387.167894][ T9514] netlink: 256 bytes leftover after parsing attributes in process `syz.0.908'. [ 387.201101][ T9514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.908'. [ 387.273966][ T9520] netlink: 'syz.1.910': attribute type 30 has an invalid length. [ 387.319549][ T9518] netlink: 'syz.0.908': attribute type 23 has an invalid length. [ 387.334050][ T9520] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 387.463311][ T9521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.487809][ T9517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.577891][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 388.047299][ T9542] FAULT_INJECTION: forcing a failure. [ 388.047299][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 388.069814][ T9542] CPU: 1 UID: 0 PID: 9542 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 388.069837][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 388.069856][ T9542] Call Trace: [ 388.069863][ T9542] [ 388.069870][ T9542] dump_stack_lvl+0xe8/0x150 [ 388.069902][ T9542] should_fail_ex+0x40c/0x560 [ 388.069929][ T9542] _copy_from_user+0x2d/0xb0 [ 388.069947][ T9542] ___sys_sendmsg+0x1c6/0x360 [ 388.069973][ T9542] ? __lock_acquire+0x683/0x2cf0 [ 388.070002][ T9542] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.070062][ T9542] ? __fget_files+0x2a/0x420 [ 388.070085][ T9542] ? __fget_files+0x3a2/0x420 [ 388.070118][ T9542] __x64_sys_sendmsg+0x1b1/0x290 [ 388.070141][ T9542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.070177][ T9542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.070196][ T9542] do_syscall_64+0x174/0x580 [ 388.070218][ T9542] ? trace_irq_disable+0x3b/0x140 [ 388.070240][ T9542] ? clear_bhb_loop+0x40/0x90 [ 388.070262][ T9542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.070281][ T9542] RIP: 0033:0x7f6b4639de99 [ 388.070300][ T9542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.070317][ T9542] RSP: 002b:00007f6b47254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.070338][ T9542] RAX: ffffffffffffffda RBX: 00007f6b46625fa0 RCX: 00007f6b4639de99 [ 388.070352][ T9542] RDX: 0000000020000884 RSI: 0000200000003140 RDI: 0000000000000006 [ 388.070365][ T9542] RBP: 00007f6b47254090 R08: 0000000000000000 R09: 0000000000000000 [ 388.070377][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.070387][ T9542] R13: 00007f6b46626038 R14: 00007f6b46625fa0 R15: 00007ffdb6b405a8 [ 388.070417][ T9542] [ 388.489892][ T9554] netlink: 480 bytes leftover after parsing attributes in process `syz.4.921'. [ 388.523904][ T9556] openvswitch: netlink: Flow actions attr not present in new flow. [ 389.764203][ T9580] bond7: invalid ARP target 0.0.0.0 specified for addition [ 389.774102][ T9580] bond7: option arp_ip_target: invalid value (0) [ 389.783081][ T9580] bond7 (unregistering): Released all slaves [ 389.880892][ T9582] xt_hashlimit: size too large, truncated to 1048576 [ 389.913410][ T9589] FAULT_INJECTION: forcing a failure. [ 389.913410][ T9589] name failslab, interval 1, probability 0, space 0, times 1 [ 389.931152][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.3.929 Not tainted syzkaller #0 PREEMPT(full) [ 389.931178][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 389.931190][ T9589] Call Trace: [ 389.931198][ T9589] [ 389.931206][ T9589] dump_stack_lvl+0xe8/0x150 [ 389.931251][ T9589] should_fail_ex+0x40c/0x560 [ 389.931286][ T9589] should_failslab+0xa8/0x100 [ 389.931320][ T9589] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 389.931345][ T9589] ? local_lock_release+0x9c/0x160 [ 389.931368][ T9589] ? __alloc_skb+0x1d7/0x7a0 [ 389.931386][ T9589] ? __alloc_skb+0x1d7/0x7a0 [ 389.931412][ T9589] __alloc_skb+0x1d7/0x7a0 [ 389.931437][ T9589] netlink_sendmsg+0x5d4/0xb40 [ 389.931472][ T9589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.931503][ T9589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 389.931531][ T9589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.931556][ T9589] sock_sendmsg_nosec+0x13a/0x180 [ 389.931589][ T9589] ____sys_sendmsg+0x54e/0x850 [ 389.931619][ T9589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.931652][ T9589] ? import_iovec+0x73/0xa0 [ 389.931688][ T9589] ___sys_sendmsg+0x2a5/0x360 [ 389.931711][ T9589] ? __lock_acquire+0x683/0x2cf0 [ 389.931744][ T9589] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.931805][ T9589] ? __fget_files+0x2a/0x420 [ 389.931832][ T9589] ? __fget_files+0x3a2/0x420 [ 389.931879][ T9589] __x64_sys_sendmsg+0x1b1/0x290 [ 389.931907][ T9589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.931950][ T9589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.931973][ T9589] do_syscall_64+0x174/0x580 [ 389.931996][ T9589] ? trace_irq_disable+0x3b/0x140 [ 389.932023][ T9589] ? clear_bhb_loop+0x40/0x90 [ 389.932049][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.932070][ T9589] RIP: 0033:0x7f6b4639de99 [ 389.932089][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.932106][ T9589] RSP: 002b:00007f6b47254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.932128][ T9589] RAX: ffffffffffffffda RBX: 00007f6b46625fa0 RCX: 00007f6b4639de99 [ 389.932142][ T9589] RDX: 0000000020000884 RSI: 0000200000003140 RDI: 0000000000000006 [ 389.932155][ T9589] RBP: 00007f6b47254090 R08: 0000000000000000 R09: 0000000000000000 [ 389.932168][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.932179][ T9589] R13: 00007f6b46626038 R14: 00007f6b46625fa0 R15: 00007ffdb6b405a8 [ 389.932212][ T9589] [ 390.262226][ T9595] syzkaller0: entered promiscuous mode [ 390.317962][ T9595] syzkaller0: entered allmulticast mode [ 390.695421][ T6794] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 391.035771][ T9640] __nla_validate_parse: 3 callbacks suppressed [ 391.035790][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 391.051239][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 391.075683][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'. [ 391.349729][ T9609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.887326][ T9664] netlink: 'syz.4.946': attribute type 11 has an invalid length. [ 391.963926][ T9666] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 391.988909][ T9666] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 392.021206][ T9666] netlink: 43 bytes leftover after parsing attributes in process `syz.2.948'. [ 392.189689][ T9677] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.445178][ T9686] syzkaller0: entered promiscuous mode [ 392.450960][ T9686] syzkaller0: entered allmulticast mode [ 392.728637][ T9694] netlink: 'syz.3.957': attribute type 49 has an invalid length. [ 393.439665][ T9737] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 393.466736][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 393.535969][ T9742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.970'. [ 393.609295][ T9737] bond4: entered promiscuous mode [ 393.627898][ T9737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.781713][ T9752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.807658][ T9752] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 393.859463][ T9752] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 393.917249][ T9752] bond4: (slave xfrm1): making interface the new active one [ 393.946932][ T9752] xfrm1: entered promiscuous mode [ 393.970491][ T9752] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 394.245772][ T9767] openvswitch: netlink: Unknown key attributes 2 [ 394.475758][ T9780] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 394.678937][ T9780] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.120662][ T9793] syzkaller0: entered promiscuous mode [ 395.141072][ T9793] syzkaller0: entered allmulticast mode [ 395.628294][ T9825] netlink: 116 bytes leftover after parsing attributes in process `syz.3.987'. [ 398.488288][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 398.521591][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'. [ 398.538515][ T9856] netlink: 'syz.2.995': attribute type 12 has an invalid length. [ 398.550540][ T9856] netlink: 'syz.2.995': attribute type 11 has an invalid length. [ 399.169684][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 399.211038][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 399.259610][ T9873] gretap0: entered promiscuous mode [ 399.433799][ T9878] IPVS: set_ctl: invalid protocol: 136 172.30.1.2:20001 [ 399.479310][ T9880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'. [ 399.734530][ T9885] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 399.913348][ T9890] netlink: 'syz.3.1005': attribute type 4 has an invalid length. [ 399.942975][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 400.118938][ T9892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.152903][ T9892] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.173469][ T9892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.250471][ T9892] bridge_slave_1: left allmulticast mode [ 400.297343][ T9892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.314606][ T9892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.342137][ T9892] veth1_vlan: left promiscuous mode [ 400.352594][ T9892] veth0_vlan: left promiscuous mode [ 400.364624][ T9892] veth0_vlan: entered promiscuous mode [ 400.378197][ T9892] veth1_vlan: entered promiscuous mode [ 400.409953][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.428724][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.449921][ T9892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.472825][ T9892] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 400.489637][ T9892] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 400.524441][ T9892] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.536592][ T9892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.549463][ T9892] ip6erspan0: left allmulticast mode [ 400.560128][ T9892] bridge0: left promiscuous mode [ 400.565808][ T9892] bridge0: left allmulticast mode [ 400.574129][ T9892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.592914][ T9892] vlan2: left allmulticast mode [ 400.599386][ T9892] bridge2: left allmulticast mode [ 400.852642][ T6795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.884693][ T6795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.934457][ T9910] team0: left allmulticast mode [ 400.965313][ T9910] team_slave_0: left allmulticast mode [ 400.992828][ T9910] team_slave_1: left allmulticast mode [ 401.024866][ T9910] team0: left promiscuous mode [ 401.045999][ T9910] team_slave_0: left promiscuous mode [ 401.060940][ T9910] team_slave_1: left promiscuous mode [ 401.075358][ T9910] bridge0: port 3(team0) entered disabled state [ 401.107009][ T9910] bridge_slave_0: left allmulticast mode [ 401.120893][ T9910] bridge_slave_0: left promiscuous mode [ 401.139408][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.168282][ T9910] bridge_slave_1: left allmulticast mode [ 401.176497][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 401.198188][ T9910] bridge_slave_1: left promiscuous mode [ 401.205451][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.219203][ T9910] bond0: (slave bond_slave_0): Releasing backup interface [ 401.247513][ T9910] bond0: (slave bond_slave_1): Releasing backup interface [ 401.281229][ T9910] team0: Port device team_slave_0 removed [ 401.316539][ T9910] team0: Port device team_slave_1 removed [ 401.331360][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.348209][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.358286][ T9910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.385402][ T6795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.394929][ T6795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.458379][ T6794] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 401.516818][ T6794] bond1: (slave veth3): making interface the new active one [ 401.588114][ T6794] bond1: active interface up! [ 401.674197][ T9931] Bluetooth: MGMT ver 1.23 [ 402.132861][ T9949] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 402.327824][ T9953] netlink: 'syz.1.1023': attribute type 16 has an invalid length. [ 402.357886][ T9953] netlink: 'syz.1.1023': attribute type 17 has an invalid length. [ 402.400281][ T9953] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1023'. [ 402.465203][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 402.567602][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 402.670136][ T9971] veth0: entered promiscuous mode [ 402.829264][ T9973] veth0: left promiscuous mode [ 403.122440][ T9988] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 403.162651][ T9993] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 403.185278][ T9992] netlink: 'syz.2.1034': attribute type 9 has an invalid length. [ 403.207750][ T9992] netlink: 'syz.2.1034': attribute type 6 has an invalid length. [ 403.216016][ T9992] netlink: 'syz.2.1034': attribute type 7 has an invalid length. [ 403.237217][ T9998] bond7: entered promiscuous mode [ 403.266515][ T9998] bond7: entered allmulticast mode [ 403.424591][ T9988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.459620][ T9990] 8021q: VLANs not supported on [ 403.494997][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.522665][ T9986] bond6: (slave team0): Enslaving as an active interface with a down link [ 403.576985][T10008] validate_nla: 1 callbacks suppressed [ 403.577006][T10008] netlink: 'syz.2.1035': attribute type 21 has an invalid length. [ 403.651773][T10008] __nla_validate_parse: 5 callbacks suppressed [ 403.651793][T10008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1035'. [ 403.699726][T10013] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 403.773242][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 403.820790][T10022] netlink: 'syz.1.1038': attribute type 27 has an invalid length. [ 403.889174][T10013] bond5: entered promiscuous mode [ 403.930093][T10013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 404.018656][T10020] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 404.060869][T10030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1038'. [ 404.129578][T10020] bond7 (unregistering): Released all slaves [ 404.335021][T10022] veth2: entered allmulticast mode [ 404.532860][T10040] macvlan2: entered allmulticast mode [ 404.558209][T10040] batadv_slave_1: entered allmulticast mode [ 404.589509][T10040] batman_adv: batadv0: Adding interface: macvlan2 [ 404.614662][T10040] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.686895][T10040] batman_adv: batadv0: Interface activated: macvlan2 [ 404.716057][T10050] batadv_slave_0: Caught tx_queue_len zero misconfig [ 404.734107][T10048] openvswitch: netlink: Multiple metadata blocks provided [ 404.921313][T10060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1045'. [ 404.935649][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 405.842822][T10090] xt_hashlimit: size too large, truncated to 1048576 [ 405.853119][T10093] IPv6: addrconf: prefix option has invalid lifetime [ 405.912212][T10094] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 405.933272][T10094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1049'. [ 406.548180][T10108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1052'. [ 406.638132][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 406.831838][T10119] netlink: 'syz.4.1057': attribute type 11 has an invalid length. [ 406.969728][T10124] team0: Port device bridge0 added [ 407.004065][T10130] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 407.159027][T10128] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 407.516653][T10149] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 407.716488][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1065'. [ 407.789250][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 407.972512][T10143] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 408.033724][T10149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 408.090422][T10169] bridge0: port 1(vlan1) entered blocking state [ 408.097190][T10169] bridge0: port 1(vlan1) entered disabled state [ 408.117879][T10169] vlan1: entered allmulticast mode [ 408.128284][T10169] geneve0: entered allmulticast mode [ 408.168868][T10168] bond0 (unregistering): (slave 45): Releasing backup interface [ 408.217889][T10168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.268655][T10168] bond0 (unregistering): Released all slaves [ 408.617601][T10182] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 409.197961][T10174] macvlan1: left promiscuous mode [ 409.211041][T10174] macvlan1: left allmulticast mode [ 409.226324][T10174] ip6gre1: left allmulticast mode [ 409.239472][T10174] vlan2: left promiscuous mode [ 409.245428][T10174] xfrm1: left allmulticast mode [ 409.251311][T10174] bridge2: left promiscuous mode [ 409.257075][T10174] bridge2: left allmulticast mode [ 409.304727][T10174] batman_adv: batadv0: Interface deactivated: macvlan2 [ 409.312563][T10174] batadv_slave_1: left allmulticast mode [ 409.324458][T10174] macvlan2: left allmulticast mode [ 410.236844][T10228] __nla_validate_parse: 3 callbacks suppressed [ 410.236863][T10228] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1081'. [ 410.254739][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 410.892383][T10250] sctp: [Deprecated]: syz.4.1086 (pid 10250) Use of int in maxseg socket option. [ 410.892383][T10250] Use struct sctp_assoc_value instead [ 410.925451][T10249] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1085'. [ 411.359915][T10257] syzkaller0: entered promiscuous mode [ 411.368923][T10260] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 411.383244][T10257] syzkaller0: entered allmulticast mode [ 411.434233][T10260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 411.648595][T10271] Cannot find del_set index 4 as target [ 412.090668][T10282] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1091'. [ 412.124126][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 412.912827][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1100'. [ 412.971074][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 413.245219][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 413.290776][T10323] rdma_rxe: rxe_newlink: failed to add syz_tun [ 413.912580][ T5742] IPVS: starting estimator thread 0... [ 414.014457][T10356] IPVS: using max 27 ests per chain, 64800 per kthread [ 414.084977][T10361] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 414.140030][T10361] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 414.359668][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'. [ 414.413675][T10372] rdma_rxe: rxe_newlink: failed to add syz_tun [ 414.436969][T10374] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.448624][T10374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.455934][T10374] IPv6: NLM_F_CREATE should be set when creating new route [ 414.463310][T10374] IPv6: NLM_F_CREATE should be set when creating new route [ 414.470588][T10374] IPv6: NLM_F_CREATE should be set when creating new route [ 415.352548][T10413] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 415.427019][T10413] bond8: entered promiscuous mode [ 415.432454][T10413] bond8: entered allmulticast mode [ 415.438275][T10413] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.470188][T10419] syzkaller0: entered promiscuous mode [ 415.476521][T10419] syzkaller0: entered allmulticast mode [ 415.513357][T10423] __nla_validate_parse: 5 callbacks suppressed [ 415.513375][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 415.638653][T10425] team0: entered promiscuous mode [ 415.657904][T10425] team_slave_0: entered promiscuous mode [ 415.680932][T10425] team_slave_1: entered promiscuous mode [ 415.696602][T10425] team0: entered allmulticast mode [ 415.704079][T10429] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 415.720787][T10425] team_slave_0: entered allmulticast mode [ 415.727601][T10425] team_slave_1: entered allmulticast mode [ 415.737457][T10425] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.745759][T10425] team0: Cannot enslave team device to itself [ 415.757991][T10430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.917231][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 415.980383][T10427] veth5: entered allmulticast mode [ 416.014371][T10427] bond9: (slave veth5): Enslaving as an active interface with a down link [ 416.046282][T10430] bond9: (slave veth0_to_bond): making interface the new active one [ 416.072067][T10430] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 416.084288][T10446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1137'. [ 416.148603][T10453] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 416.180397][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 416.265691][T10453] batman_adv: batadv0: Adding interface: vlan2 [ 416.284172][T10453] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.343601][T10453] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 416.553821][T10467] netlink: 'syz.1.1141': attribute type 3 has an invalid length. [ 416.563236][T10467] netlink: 'syz.1.1141': attribute type 3 has an invalid length. [ 417.736232][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 418.631196][T10429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.732304][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 418.750053][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 418.971336][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 419.007561][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 419.060987][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 419.097671][T10501] rdma_rxe: rxe_newlink: failed to add syz_tun [ 419.286434][T10512] netlink: 'syz.2.1151': attribute type 25 has an invalid length. [ 419.325877][T10512] netlink: 'syz.2.1151': attribute type 3 has an invalid length. [ 419.748242][T10531] dvmrp0: entered allmulticast mode [ 420.071229][T10544] syzkaller0: entered promiscuous mode [ 420.096111][T10544] syzkaller0: entered allmulticast mode [ 420.596873][T10555] netlink: 'syz.1.1161': attribute type 3 has an invalid length. [ 420.604888][T10555] __nla_validate_parse: 1 callbacks suppressed [ 420.604906][T10555] netlink: 646 bytes leftover after parsing attributes in process `syz.1.1161'. [ 420.874596][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 420.898136][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1165'. [ 420.941334][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 421.041650][T10569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1166'. [ 421.056585][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1165'. [ 421.350466][T10574] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 421.473214][T10574] bond0: option mode: invalid value (8) [ 421.480624][T10574] bond0 (unregistering): Released all slaves [ 421.488958][T10583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1168'. [ 421.769369][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1172'. [ 421.837999][T10598] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 421.870745][ T29] audit: type=1804 audit(1785076848.005:4): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1172" name="/newroot/207/cgroup.controllers" dev="tmpfs" ino=1079 res=1 errno=0 [ 421.935316][ T29] audit: type=1800 audit(1785076848.005:5): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1172" name="cgroup.controllers" dev="tmpfs" ino=1079 res=0 errno=0 [ 422.029986][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 422.055470][T10601] rdma_rxe: rxe_newlink: failed to add syz_tun [ 422.527084][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 423.033103][T10649] netlink: 'syz.1.1186': attribute type 1 has an invalid length. [ 423.129971][T10649] netlink: 'syz.1.1186': attribute type 3 has an invalid length. [ 423.292509][T10667] xt_socket: unknown flags 0x8 [ 423.321050][T10649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.330838][T10649] bond3: (slave bond4): making interface the new active one [ 423.340505][T10649] bond3: (slave bond4): Enslaving as an active interface with an up link [ 423.350735][T10667] xt_socket: unknown flags 0x8 [ 423.617895][T10677] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 423.720985][T10682] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 423.739439][T10682] dvmrp1: linktype set to 776 [ 424.003448][T10695] netlink: 'syz.2.1197': attribute type 7 has an invalid length. [ 424.019878][T10686] syzkaller0: entered promiscuous mode [ 424.042197][T10686] syzkaller0: entered allmulticast mode [ 424.918361][T10721] rdma_rxe: rxe_newlink: failed to add syz_tun [ 424.984772][T10724] x_tables: ip_tables: osf match: only valid for protocol 6 [ 426.803650][T10739] dvmrp0: left allmulticast mode [ 426.841227][T10738] __nla_validate_parse: 8 callbacks suppressed [ 426.841247][T10738] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1208'. [ 426.910554][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 426.958252][T10744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.969158][T10745] tipc: Enabling of bearer rejected, failed to enable media [ 427.003201][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 427.540473][T10779] syzkaller0: entered promiscuous mode [ 427.912917][T10794] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 428.062470][T10798] lo speed is unknown, defaulting to 1000 [ 428.193069][T10801] lo speed is unknown, defaulting to 1000 [ 428.193206][T10798] lo speed is unknown, defaulting to 1000 [ 428.245366][T10798] lo speed is unknown, defaulting to 1000 [ 428.250594][T10801] lo speed is unknown, defaulting to 1000 [ 428.277960][T10813] tipc: Can't bind to reserved service type 0 [ 428.312948][T10801] lo speed is unknown, defaulting to 1000 [ 428.355856][T10801] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 428.419688][T10801] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 428.455715][T10801] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 428.548276][T10801] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 428.575170][T10801] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 428.773679][T10801] lo speed is unknown, defaulting to 1000 [ 428.807537][T10801] lo speed is unknown, defaulting to 1000 [ 428.826758][T10801] lo speed is unknown, defaulting to 1000 [ 428.849603][T10801] lo speed is unknown, defaulting to 1000 [ 428.896036][T10801] lo speed is unknown, defaulting to 1000 [ 429.224764][T10834] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 429.670286][T10846] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 429.967695][T10846] bond10 (unregistering): Released all slaves [ 430.059445][T10850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1241'. [ 430.087452][T10863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1236'. [ 430.097524][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1236'. [ 430.099219][T10831] lo speed is unknown, defaulting to 1000 [ 430.166060][T10798] infiniband sz1: set down [ 430.179974][T10798] infiniband sz1: added lo [ 430.205199][T10798] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 430.215584][T10798] infiniband sz1: Couldn't open port 1 [ 430.258813][ T5742] lo speed is unknown, defaulting to 1000 [ 430.272853][T10798] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 430.310096][T10798] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 430.356938][T10871] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 430.366494][T10798] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 430.391236][T10871] openvswitch: netlink: Flow actions attr not present in new flow. [ 430.477882][T10798] RDS/IB: sz1: added [ 430.506765][T10798] smc: adding ib device sz1 with port count 1 [ 430.534080][T10798] smc: ib device sz1 port 1 has no pnetid [ 430.669453][ T5704] lo speed is unknown, defaulting to 1000 [ 430.688670][T10798] lo speed is unknown, defaulting to 1000 [ 430.856000][T10886] netlink: 'syz.4.1246': attribute type 7 has an invalid length. [ 431.272247][T10798] lo speed is unknown, defaulting to 1000 [ 431.630617][T10911] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 431.643692][T10911] bond5 (unregistering): Released all slaves [ 431.775954][T10798] lo speed is unknown, defaulting to 1000 [ 432.211170][T10798] lo speed is unknown, defaulting to 1000 [ 432.270239][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 432.848520][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 432.892578][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 432.906471][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 432.932585][T10938] netlink: 'syz.4.1263': attribute type 19 has an invalid length. [ 432.961430][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 432.964640][T10938] netlink: 'syz.4.1263': attribute type 20 has an invalid length. [ 432.989110][T10939] netlink: 'syz.4.1263': attribute type 19 has an invalid length. [ 433.019015][T10939] netlink: 'syz.4.1263': attribute type 20 has an invalid length. [ 433.032280][T10943] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 433.045016][T10943] bond5 (unregistering): Released all slaves [ 433.134025][T10798] lo speed is unknown, defaulting to 1000 [ 433.450165][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 433.487559][T10950] syz1: rxe_newlink: already configured on syz_tun [ 433.507119][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 433.507338][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 433.766895][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 433.805412][T10798] lo speed is unknown, defaulting to 1000 [ 434.036284][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 434.144563][T10971] bond5: option miimon: invalid value (18446744073694246450) [ 434.168655][T10971] bond5: option miimon: allowed values 0 - 2147483647 [ 434.199203][T10971] bond5 (unregistering): Released all slaves [ 434.283981][ T6801] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.324619][ T6801] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.352125][ T6801] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.376754][ T6801] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.025573][T10994] IPVS: Error connecting to the multicast addr [ 435.457795][T10999] team_slave_0 (unregistering): left promiscuous mode [ 435.465623][T10999] team_slave_0 (unregistering): left allmulticast mode [ 435.487069][T10999] team0: Port device team_slave_0 removed [ 435.525987][T11006] ipip0: entered promiscuous mode [ 435.988953][T11024] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 436.080401][T11024] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.188825][T11026] bond5: (slave gretap1): making interface the new active one [ 436.225971][T11026] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 436.275528][T11036] geneve3: entered promiscuous mode [ 436.284623][T11036] geneve3: entered allmulticast mode [ 436.324093][T11043] netlink: 'syz.4.1291': attribute type 2 has an invalid length. [ 436.515780][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.539902][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.617591][ T141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.654193][ T141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.242175][T11089] netlink: 'syz.2.1303': attribute type 5 has an invalid length. [ 437.327766][T11089] netlink: 'syz.2.1303': attribute type 2 has an invalid length. [ 437.360699][T11089] __nla_validate_parse: 13 callbacks suppressed [ 437.360721][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 437.727737][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 437.904079][T11111] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1311'. [ 437.915221][T11111] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 437.926179][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1311'. [ 437.936799][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1311'. [ 437.987663][T11114] syzkaller0: entered promiscuous mode [ 437.998375][T11114] syzkaller0: entered allmulticast mode [ 438.349174][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 438.445025][T11104] lo speed is unknown, defaulting to 1000 [ 438.962423][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1316'. [ 439.149210][T11104] lo speed is unknown, defaulting to 1000 [ 439.539611][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 439.924614][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.830896][T11167] bond5 (unregistering): Released all slaves [ 441.269249][T11119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.590140][T11177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1320'. [ 441.917503][T11183] syzkaller0: entered promiscuous mode [ 441.944750][T11183] syzkaller0: entered allmulticast mode [ 501.363699][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.030972][T11227] vlan2: entered promiscuous mode [ 530.048540][T11227] bond0: entered promiscuous mode [ 530.062873][T11227] bond_slave_0: entered promiscuous mode [ 530.098296][T11227] bond_slave_1: entered promiscuous mode [ 530.233344][T11242] syzkaller0: entered promiscuous mode [ 530.268745][T11242] syzkaller0: entered allmulticast mode [ 530.438794][T11263] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 530.605603][T11263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 530.635964][T11254] vlan3: entered allmulticast mode [ 530.641478][T11254] bond8: entered allmulticast mode [ 530.732649][T11251] bond8: (slave geneve4): making interface the new active one [ 530.740283][T11251] geneve4: entered allmulticast mode [ 530.768533][T11251] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 530.800326][T11251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.885036][T11251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.138388][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1349'. [ 531.190023][T11289] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1349'. [ 531.204171][T11289] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1349'. [ 531.228928][T11288] ip6tnl1: entered allmulticast mode [ 531.418277][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 531.448738][T11294] ip6gre1: entered promiscuous mode [ 531.504038][T11294] ip6gre1: entered allmulticast mode [ 531.755952][T11300] syzkaller0: entered promiscuous mode [ 531.773688][T11300] syzkaller0: entered allmulticast mode [ 531.798775][T11269] lo speed is unknown, defaulting to 1000 [ 532.287425][T11323] netlink: 'syz.2.1360': attribute type 11 has an invalid length. [ 532.300169][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 532.324997][T11323] netlink: 'syz.2.1360': attribute type 11 has an invalid length. [ 532.347316][T11323] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1360'. [ 532.516216][T11269] lo speed is unknown, defaulting to 1000 [ 532.600673][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 532.613248][T11330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'. [ 532.783956][T11340] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1363'. [ 532.800006][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1363'. [ 533.003183][T11346] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 533.440976][T11354] syzkaller0: entered promiscuous mode [ 533.474282][T11354] syzkaller0: entered allmulticast mode [ 533.596151][T11370] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 533.698001][T11367] can: request_module (can-proto-0) failed. [ 533.765285][T11370] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 533.996921][T11386] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 534.036793][T11390] netlink: 'syz.3.1378': attribute type 4 has an invalid length. [ 534.647940][T11415] netlink: 'syz.0.1384': attribute type 1 has an invalid length. [ 534.820968][T11415] 8021q: adding VLAN 0 to HW filter on device bond6 [ 534.875549][T11417] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 534.918866][T11415] team0: left promiscuous mode [ 534.951015][T11415] team_slave_1: left promiscuous mode [ 534.963120][T11415] team0: left allmulticast mode [ 534.968311][T11415] team_slave_1: left allmulticast mode [ 534.990949][T11415] bond4: left promiscuous mode [ 535.009104][T11415] xfrm1: left promiscuous mode [ 535.026894][T11415] bond5: left promiscuous mode [ 535.084461][T11415] ip6tnl1: left allmulticast mode [ 535.094958][T11415] ip6gre1: left promiscuous mode [ 535.100104][T11415] ip6gre1: left allmulticast mode [ 535.249463][T11440] Bluetooth: MGMT ver 1.23 [ 538.611844][T11525] __nla_validate_parse: 12 callbacks suppressed [ 538.611863][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 538.624129][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.644010][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 538.742464][T11528] tap0: tun_chr_ioctl cmd 1074025677 [ 538.754667][T11528] tap0: linktype set to 6 [ 538.798647][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1417'. [ 538.842831][T11535] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 538.872739][T11531] syzkaller1: entered promiscuous mode [ 538.888461][T11531] syzkaller1: entered allmulticast mode [ 538.908801][T11531] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 538.973707][T11528] bridge3: entered promiscuous mode [ 539.011097][T11528] bridge3: entered allmulticast mode [ 539.126815][T11545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1420'. [ 539.161164][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1420'. [ 539.199452][T11548] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 539.559979][T11548] bond6 (unregistering): Released all slaves [ 539.809315][T11573] syzkaller0: entered promiscuous mode [ 539.830685][T11573] syzkaller0: entered allmulticast mode [ 539.854737][T11573] ip6gretap2: entered promiscuous mode [ 539.964813][T11582] netlink: 'syz.2.1429': attribute type 13 has an invalid length. [ 539.991516][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1427'. [ 539.997850][T11582] netlink: 'syz.2.1429': attribute type 17 has an invalid length. [ 540.069029][T11585] can: request_module (can-proto-0) failed. [ 540.082257][T11586] can: request_module (can-proto-0) failed. [ 540.100082][T11582] gretap0: left promiscuous mode [ 540.179058][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.193603][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.209299][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.270638][T11582] batadv_slave_1: left promiscuous mode [ 540.289485][T11582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.300867][T11582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.317863][T11582] veth1_vlan: left promiscuous mode [ 540.328128][T11582] veth0_vlan: left promiscuous mode [ 540.336395][T11582] veth0_vlan: entered promiscuous mode [ 540.348017][T11582] veth1_vlan: entered promiscuous mode [ 540.374218][T11582] veth1_macvtap: left promiscuous mode [ 540.385962][T11582] veth0_macvtap: left promiscuous mode [ 540.401234][T11582] veth0_macvtap: entered promiscuous mode [ 540.433771][T11582] veth1_macvtap: entered promiscuous mode [ 540.449198][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.466274][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.489900][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.524299][T11582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.553535][T11582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.598494][T11582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.617984][T11582] batadv_slave_1: entered promiscuous mode [ 540.628972][T11582] batman_adv: batadv0: Interface activated: macvlan2 [ 540.639415][T11582] gretap0: entered promiscuous mode [ 540.655203][T11582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.664676][T11582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.676249][T11582] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 540.909279][ T141] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.922895][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.935641][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 540.944910][ T141] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.955805][ T141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.996693][ T29] audit: type=1107 audit(1785076967.135:6): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 540.996693][ T29] ' [ 541.040187][T11615] vlan2: entered promiscuous mode [ 541.067153][T11615] syz_tun: entered promiscuous mode [ 541.094080][T11615] vlan2: entered allmulticast mode [ 541.114535][T11615] syz_tun: entered allmulticast mode [ 541.176776][ T141] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.191775][ T141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.200705][ T141] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.215605][ T141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.224988][T11612] veth1_macvtap: left promiscuous mode [ 541.310751][T11612] veth1_macvtap: entered promiscuous mode [ 541.368998][ T6795] ip6_tunnel: @ xmit: Local address not yet configured! [ 541.528764][T11633] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 541.877543][T11662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.954384][T11633] bond10 (unregistering): Released all slaves [ 542.205565][T11670] tap0: tun_chr_ioctl cmd 1074025676 [ 542.222156][T11670] tap0: owner set to 0 [ 542.233414][T11660] syzkaller1: entered promiscuous mode [ 542.241801][T11660] syzkaller1: entered allmulticast mode [ 542.526634][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 542.526974][ T6795] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 542.620099][T11692] netlink: 'syz.1.1449': attribute type 21 has an invalid length. [ 542.664166][T11686] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.683959][T11697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.708801][T11692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'. [ 542.789214][T11690] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 542.825266][T11688] syzkaller0: entered promiscuous mode [ 542.830830][T11688] syzkaller0: entered allmulticast mode [ 542.850580][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 543.020359][T11709] syzkaller0: entered promiscuous mode [ 543.027355][T11709] syzkaller0: entered allmulticast mode [ 543.039969][T11709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.090978][T11710] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 543.090978][T11710] Please contact the netfilter-devel mailing list or update your nftables rules. [ 544.484738][T11643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.123524][ C1] ip6_tunnel: @ xmit: Local address not yet configured! [ 545.357637][T11718] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 545.382143][T11718] __nla_validate_parse: 4 callbacks suppressed [ 545.382165][T11718] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1455'. [ 545.479820][T11720] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 545.547960][T11727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1457'. [ 545.564225][T11720] bond6 (unregistering): Released all slaves [ 545.836298][T11740] netlink: 'syz.4.1459': attribute type 4 has an invalid length. [ 545.889713][T11740] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1459'. [ 546.032297][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 546.398678][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1464'. [ 546.413735][T11767] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 546.478651][T11768] nbd: must specify at least one socket [ 546.561715][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 547.545019][T11799] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.607551][T11799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.743303][T11799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.785235][T11799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.830994][T11799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 547.854390][T11799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.878481][T11799] veth1_vlan: left promiscuous mode [ 547.913056][T11799] veth0_vlan: left promiscuous mode [ 547.944889][T11799] veth0_vlan: entered promiscuous mode [ 547.952977][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 547.980879][T11799] veth1_vlan: entered promiscuous mode [ 547.990847][T11826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 548.016662][T11828] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1480'. [ 548.043943][T11831] x_tables: duplicate underflow at hook 2 [ 548.061223][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.092302][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.127436][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.150648][T11799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.203402][T11799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.258841][T11799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.297353][T11799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.320724][T11799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.339814][T11799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 548.382237][T11799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.423526][T11799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.435619][T11848] sctp: [Deprecated]: syz.4.1484 (pid 11848) Use of int in maxseg socket option. [ 548.435619][T11848] Use struct sctp_assoc_value instead [ 548.452543][T11799] ip6gretap2: left promiscuous mode [ 548.468579][ T6801] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.475809][ T6801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.483737][ T7175] lo speed is unknown, defaulting to 1000 [ 548.492940][ T7175] syz2: Port: 1 Link ACTIVE [ 548.503039][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.510248][ T6801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.598777][ T6796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.610395][ T6796] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 34929 - 0 [ 548.649899][ T6796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.668073][ T6796] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 34929 - 0 [ 548.686524][ T6796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.696184][ T6796] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 34929 - 0 [ 548.739662][ T6797] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 548.755027][ T6797] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 548.763383][ T5742] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 548.943109][T10196] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 549.202233][T11791] Bluetooth: hci4: command 0x0406 tx timeout [ 549.285365][ T7175] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 549.637367][T11876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1490'. [ 549.771220][T11876] netlink: 'syz.2.1490': attribute type 11 has an invalid length. [ 549.797847][T11876] netlink: 'syz.2.1490': attribute type 11 has an invalid length. [ 549.807697][T11876] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1490'. [ 550.104564][T11896] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 550.117310][T11896] bond9 (unregistering): Released all slaves [ 550.406704][T11901] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 550.742175][T11901] bond10 (unregistering): Released all slaves [ 551.313541][T11939] __nla_validate_parse: 1 callbacks suppressed [ 551.313564][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 552.031076][T11958] syzkaller0: entered promiscuous mode [ 552.052076][T11958] syzkaller0: entered allmulticast mode [ 552.481588][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 552.504011][T11979] netlink: 'syz.1.1516': attribute type 4 has an invalid length. [ 552.541125][T11979] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1516'. [ 552.572801][T11987] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 552.594273][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 552.664576][T11992] netlink: 'syz.3.1520': attribute type 8 has an invalid length. [ 552.676963][T11989] bond0 (unregistering): Released all slaves [ 552.719970][T11994] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 552.737163][T11979] syzkaller0: entered promiscuous mode [ 552.741048][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 552.764355][T11992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 552.782085][T11979] syzkaller0: entered allmulticast mode [ 552.799359][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 552.816369][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 552.902737][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 552.924586][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 552.935862][T11989] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1519'. [ 553.202152][ C1] ip6_tunnel: @ xmit: Local address not yet configured! [ 553.611248][T12001] veth9: entered allmulticast mode [ 554.015703][T12028] syzkaller1: entered promiscuous mode [ 554.021453][T12028] syzkaller1: entered allmulticast mode [ 554.188494][T12023] block nbd1: server does not support multiple connections per device. [ 554.216889][T12023] block nbd1: shutting down sockets [ 554.917655][T12064] netlink: 'syz.0.1538': attribute type 2 has an invalid length. [ 555.123457][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 556.103608][T12097] syzkaller0: entered promiscuous mode [ 556.109312][T12097] syzkaller0: entered allmulticast mode [ 556.128128][T12092] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 556.152589][T12100] sctp: [Deprecated]: syz.2.1548 (pid 12100) Use of int in maxseg socket option. [ 556.152589][T12100] Use struct sctp_assoc_value instead [ 556.771727][T12101] syzkaller0: entered promiscuous mode [ 556.777835][T12101] syzkaller0: entered allmulticast mode [ 556.810502][T12124] netlink: 'syz.0.1552': attribute type 5 has an invalid length. [ 556.911184][T12128] __nla_validate_parse: 33 callbacks suppressed [ 556.911275][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1553'. [ 559.737584][T12164] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 559.888796][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.966770][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 560.431164][T12167] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 560.577827][T12170] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 560.596660][T12170] bond0: (slave batadv2): making interface the new active one [ 560.607824][T12170] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 560.879303][T12212] Cannot find del_set index 3 as target [ 561.145045][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1570'. [ 561.464144][ T6803] ip6_tunnel: @ xmit: Local address not yet configured! [ 561.513228][T10196] ip6_tunnel: @ xmit: Local address not yet configured! [ 561.541574][ T6803] ip6_tunnel: @ xmit: Local address not yet configured! [ 561.722783][T10196] ip6_tunnel: @ xmit: Local address not yet configured! [ 561.762294][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 561.824658][T12239] netlink: 'syz.3.1575': attribute type 12 has an invalid length. [ 561.890758][ T6803] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 561.932186][ T5742] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 561.940073][ T6803] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 562.015336][ T6801] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.090990][ T6801] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.129807][ T6801] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.281158][ T6801] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.415007][T10196] ip6_tunnel: @ xmit: Local address not yet configured! [ 562.473722][T10196] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 562.512837][T12265] syzkaller0: entered promiscuous mode [ 562.540270][T12265] syzkaller0: entered allmulticast mode [ 562.579015][T12263] sch_tbf: burst 252 is lower than device syzkaller0 mtu (1514) ! [ 562.650796][T12266] sch_tbf: burst 252 is lower than device syzkaller0 mtu (1514) ! [ 562.723976][T10196] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 562.809199][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.015157][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 563.913694][T12322] 8021q: adding VLAN 0 to HW filter on device bond10 [ 563.940433][T12325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.374379][T12351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.700086][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'. [ 564.723517][T12360] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 564.738789][T12360] netlink: 'syz.3.1601': attribute type 2 has an invalid length. [ 566.754628][T12316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.004521][T12375] syzkaller0: entered promiscuous mode [ 567.021817][T12375] syzkaller0: entered allmulticast mode [ 567.052679][T12375] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 567.068412][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 567.342251][T12392] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 567.359324][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 567.390757][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 567.422952][T12396] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1612'. [ 567.872940][T12412] netlink: 'syz.3.1616': attribute type 9 has an invalid length. [ 568.126107][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1619'. [ 568.260913][T12425] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 568.298330][T12423] ip6gre1: entered promiscuous mode [ 568.317808][T12423] ip6gre1: entered allmulticast mode [ 568.331942][ T6796] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 568.331961][ T6796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.365283][T10196] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.365293][ T6796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.427523][T12430] tipc: Enabling of bearer rejected, failed to enable media [ 568.742180][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.887434][T11210] udevd[11210]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 568.939902][T12444] bond6 (unregistering): Released all slaves [ 568.969910][T12457] x_tables: duplicate underflow at hook 1 [ 568.977658][T10196] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.073826][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 569.089777][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 569.516627][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 569.703865][T12472] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 569.715144][T12472] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 569.725388][T12472] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 570.154617][T12486] netlink: 'syz.2.1631': attribute type 1 has an invalid length. [ 570.291227][T12486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 570.314457][T12496] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1634'. [ 570.539445][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1632'. [ 570.682757][T12520] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1635'. [ 571.069336][T12543] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1637'. [ 571.293114][T12500] batman_adv: batadv0: Interface deactivated: macvlan2 [ 571.359450][ T6795] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.391163][ T6795] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.549659][ T6795] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.589465][ T6795] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.619022][ T6795] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.660072][ T6795] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.674384][T12560] netlink: 'syz.0.1641': attribute type 2 has an invalid length. [ 571.699448][ T6795] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.730920][ T6795] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.801596][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.073749][T12561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.146862][T12561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.576794][T12610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1644'. [ 573.776740][T12560] : entered promiscuous mode [ 573.800982][T12609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.821755][ T6800] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.855245][ T6800] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.899268][T12610] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1644'. [ 573.935755][T12610] tipc: Enabling of bearer rejected, media not registered [ 573.965369][ T6793] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.016275][ T6793] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.056397][ T6793] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.090433][ T6793] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.134601][T12622] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 574.142485][ T6793] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.177148][ T6793] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.227784][T12625] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1649'. [ 574.464652][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 574.489015][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 574.534966][T12642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 574.690879][T12645] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 574.956969][T12664] netlink: 'syz.2.1657': attribute type 21 has an invalid length. [ 574.998902][T12664] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1657'. [ 575.061003][T12664] netlink: 'syz.2.1657': attribute type 5 has an invalid length. [ 575.071703][T12666] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 575.112897][T12664] netlink: 'syz.2.1657': attribute type 6 has an invalid length. [ 575.160206][T12664] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1657'. [ 575.196961][T12666] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 575.502143][ T5621] IPVS: starting estimator thread 0... [ 575.549602][T12684] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1662'. [ 575.625441][T12689] IPVS: using max 26 ests per chain, 62400 per kthread [ 575.779208][T12699] netlink: 'syz.1.1664': attribute type 2 has an invalid length. [ 575.880373][T12693] bond6: entered promiscuous mode [ 575.920282][T12693] bond6: entered allmulticast mode [ 575.949082][T12693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 576.039063][T12701] ip6gre2: entered promiscuous mode [ 576.054098][T12701] ip6gre2: entered allmulticast mode [ 576.084322][ T6803] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.107709][ T6803] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.116370][ T7168] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.131882][T12685] tipc: Failed to remove unknown binding: 66,0,0/8432298:3003807792/3003807794 [ 576.171523][T12685] tipc: Failed to remove unknown binding: 66,0,0/8432298:3003807792/3003807793 [ 576.212556][T12688] tipc: Failed to remove unknown binding: 66,0,0/8432298:3003807792/3003807794 [ 576.229048][T12702] vxcan1: entered promiscuous mode [ 576.241403][T12702] vxcan1: entered allmulticast mode [ 576.252484][T12688] tipc: Failed to remove unknown binding: 66,0,0/8432298:3003807792/3003807793 [ 576.267393][T12709] netlink: 'syz.1.1666': attribute type 2 has an invalid length. [ 576.416350][T12709] : entered promiscuous mode [ 576.759658][T12729] netlink: 'syz.3.1670': attribute type 10 has an invalid length. [ 576.787191][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.798306][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.824157][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.883807][ T7167] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.902455][ T7167] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.980575][T12720] batadv_slave_1: entered promiscuous mode [ 576.999032][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.086314][T12720] veth1_vlan: left promiscuous mode [ 577.102655][T12720] veth0_vlan: left promiscuous mode [ 577.118415][T12720] veth0_vlan: entered promiscuous mode [ 577.158224][T12720] veth1_vlan: entered promiscuous mode [ 577.184140][T12720] veth1_macvtap: left promiscuous mode [ 577.203474][T12720] veth0_macvtap: left promiscuous mode [ 577.227666][T12720] veth0_macvtap: entered promiscuous mode [ 577.249005][T12720] veth1_macvtap: entered promiscuous mode [ 577.278289][T12720] geneve0: entered promiscuous mode [ 577.308938][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.328650][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.356448][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.402721][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.467558][T12720] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 577.507145][ T5621] syz1: Port: 1 Link ACTIVE [ 577.528326][T10198] batman_adv: batadv0: Interface activated: vlan2 [ 577.569717][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.576969][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.609813][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.617051][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.770221][T12674] lo speed is unknown, defaulting to 1000 [ 577.795151][T12745] dvmrp0: entered allmulticast mode [ 578.432553][T12776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1676'. [ 578.804810][T12663] lo speed is unknown, defaulting to 1000 [ 578.814469][T12674] lo speed is unknown, defaulting to 1000 [ 579.499579][T12806] syzkaller0: entered promiscuous mode [ 579.526632][T12806] syzkaller0: entered allmulticast mode [ 579.564519][T12810] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 579.624594][T12806] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1683'. [ 579.658147][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1683'. [ 579.781036][T12663] lo speed is unknown, defaulting to 1000 [ 580.001583][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.710233][T12832] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 581.087795][T12832] 8021q: adding VLAN 0 to HW filter on device bond9 [ 581.187022][T12838] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 581.236559][T12840] dummy0: left promiscuous mode [ 581.268159][T12840] bond3: left promiscuous mode [ 581.297183][T12840] bond4: left promiscuous mode [ 581.307957][T12840] bond7: left promiscuous mode [ 581.318346][T12840] bond7: left allmulticast mode [ 581.329521][T12840] bond8: left promiscuous mode [ 581.342807][T12840] bond8: left allmulticast mode [ 581.353986][T12840] veth5: left allmulticast mode [ 581.368966][T12840] ipip0: left promiscuous mode [ 581.384749][T12840] vlan2: left promiscuous mode [ 581.397983][T12840] bond0: left promiscuous mode [ 581.409229][T12840] bond_slave_0: left promiscuous mode [ 581.429015][T12840] bond_slave_1: left promiscuous mode [ 581.701039][T12854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.001503][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 582.293691][T12872] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 582.521004][T12882] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 582.584116][T12872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 582.675591][T12874] bond7: (slave veth0_to_bond): making interface the new active one [ 582.699048][T12874] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 582.870148][T12877] bond7: entered promiscuous mode [ 582.881191][T12877] veth0_to_bond: entered promiscuous mode [ 582.908111][T12877] bond7: entered allmulticast mode [ 582.917127][T12877] veth0_to_bond: entered allmulticast mode [ 583.130707][T12834] lo speed is unknown, defaulting to 1000 [ 583.334520][T12890] syzkaller0: entered promiscuous mode [ 583.350973][T12890] syzkaller0: entered allmulticast mode [ 585.888842][T12834] lo speed is unknown, defaulting to 1000 [ 585.902137][T12837] lo speed is unknown, defaulting to 1000 [ 586.421575][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'. [ 586.549157][T12959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1714'. [ 586.777515][T12837] lo speed is unknown, defaulting to 1000 [ 586.919606][T12968] syzkaller0: entered promiscuous mode [ 586.939481][T12968] syzkaller0: entered allmulticast mode [ 587.092475][T12982] syzkaller0: entered promiscuous mode [ 587.100001][T12982] syzkaller0: entered allmulticast mode [ 587.766130][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 588.265606][T13008] netlink: 472 bytes leftover after parsing attributes in process `syz.3.1727'. [ 588.860048][T13034] netlink: 'syz.3.1733': attribute type 21 has an invalid length. [ 588.912388][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1733'. [ 588.951157][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'. [ 589.029868][T13037] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 589.049803][T13037] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 589.083950][T13037] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 589.213263][T13045] bond7: Unable to set up delay as MII monitoring is disabled [ 589.239278][T13045] bond7 (unregistering): Released all slaves [ 589.324399][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1738'. [ 589.357636][T13048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1738'. [ 589.386908][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1738'. [ 589.473983][T13054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'. [ 589.507532][T13054] syz1: rxe_newlink: already configured on syz_tun [ 589.595451][T13056] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1740'. [ 589.619363][T13056] 0X: renamed from batadv0 (while UP) [ 589.633495][T13056] tipc: Disabling bearer [ 589.639856][T13056] 0X: entered allmulticast mode [ 589.647562][T13056] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 589.683460][T13058] ip6gre1: entered promiscuous mode [ 589.699177][T13058] ip6gre1: entered allmulticast mode [ 589.711997][T13058] netlink: 'syz.4.1741': attribute type 6 has an invalid length. [ 589.923604][T13060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.960588][T13072] netlink: 'syz.2.1742': attribute type 1 has an invalid length. [ 590.014764][T13078] x_tables: duplicate entry at hook 1 [ 590.228767][T13070] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 590.242175][T13070] bond8 (unregistering): Released all slaves [ 590.325387][T13072] bridge7: entered promiscuous mode [ 590.366939][T13072] bond7: (slave bridge7): making interface the new active one [ 590.392344][T13072] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 590.670338][T13112] Cannot find add_set index 0 as target [ 590.794990][T13115] syz1: rxe_newlink: already configured on syz_tun [ 591.178155][T13130] veth0: entered promiscuous mode [ 591.234034][T13136] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 591.410260][T13127] veth0: left promiscuous mode [ 591.808745][T13157] bridge7: entered promiscuous mode [ 591.819818][T13157] bridge7: entered allmulticast mode [ 591.834471][T13157] team0: Port device bridge7 added [ 591.840078][T13162] bridge0: port 3(team0) entered blocking state [ 591.848714][T13162] bridge0: port 3(team0) entered disabled state [ 591.859730][T13162] team0: entered allmulticast mode [ 591.866044][T13162] team_slave_0: entered allmulticast mode [ 591.873253][T13162] team_slave_1: entered allmulticast mode [ 591.884824][T13162] team0: entered promiscuous mode [ 591.889988][T13162] team_slave_0: entered promiscuous mode [ 591.896878][T13162] team_slave_1: entered promiscuous mode [ 591.906288][T13162] bridge0: port 3(team0) entered blocking state [ 591.912783][T13162] bridge0: port 3(team0) entered forwarding state [ 592.498394][T13182] __nla_validate_parse: 9 callbacks suppressed [ 592.498414][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1769'. [ 592.535626][T13182] syz1: rxe_newlink: already configured on syz_tun [ 594.570831][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 594.666443][T13209] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1777'. [ 594.677384][T13199] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 594.785811][T13213] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1777'. [ 595.349922][T13213] 0{X: renamed from gretap0 [ 595.384512][T13213] 0{X: entered allmulticast mode [ 595.415317][T13213] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 595.957427][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 596.020455][T13239] syz1: rxe_newlink: already configured on syz_tun [ 596.038600][T13251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1789'. [ 596.128654][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1790'. [ 596.386626][T13275] Unsupported ieee802154 address type: 0 [ 596.408084][T13275] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1792'. [ 596.667997][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 596.742948][T13286] vlan3: entered allmulticast mode [ 596.754407][T13286] bridge8: entered allmulticast mode [ 596.792282][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1797'. [ 597.114742][T13303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.143630][T13303] syzkaller1: entered promiscuous mode [ 597.157369][T13303] syzkaller1: entered allmulticast mode [ 597.510579][T13317] openvswitch: netlink: Flow actions attr not present in new flow. [ 597.613972][T13323] rdma_rxe: rxe_newlink: failed to add syz_tun [ 597.841195][T13332] netlink: 'syz.4.1810': attribute type 4 has an invalid length. [ 597.896379][T13334] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 598.069893][T13336] veth0_to_team: entered promiscuous mode [ 598.102442][T13336] veth0_to_team: left promiscuous mode [ 598.298796][T13354] __nla_validate_parse: 1 callbacks suppressed [ 598.298816][T13354] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1817'. [ 598.390968][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 598.416394][T13359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1818'. [ 598.827064][T13346] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 598.839571][T13378] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 598.868036][T13378] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1820'. [ 598.892145][T13346] bond9 (unregistering): Released all slaves [ 599.026779][T13388] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 599.055510][T13378] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1820'. [ 599.129363][T13378] team0 (unregistering): Port device bridge2 removed [ 599.175098][T13378] team0 (unregistering): Port device bridge0 removed [ 599.436763][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 600.386684][T13437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1839'. [ 600.453310][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 600.483573][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 600.498262][T13405] lo speed is unknown, defaulting to 1000 [ 600.510857][T13437] netlink: 'syz.1.1839': attribute type 14 has an invalid length. [ 600.539822][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.558162][T13437] netlink: 'syz.1.1839': attribute type 13 has an invalid length. [ 600.561877][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.591894][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.605797][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.622100][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.645475][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.654900][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.663890][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.671696][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.679501][T13441] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 600.900445][T13452] bond0: invalid NS target ff00:: specified for addition [ 600.911798][T13452] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 601.056419][T13405] lo speed is unknown, defaulting to 1000 [ 601.112315][T13450] lo speed is unknown, defaulting to 1000 [ 601.399693][T13455] syzkaller0: entered promiscuous mode [ 601.419356][T13455] syzkaller0: entered allmulticast mode [ 601.674625][T13459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'. [ 601.746614][T13462] netlink: 'syz.1.1847': attribute type 13 has an invalid length. [ 601.758920][T13462] tipc: Started in network mode [ 601.766046][T13462] tipc: Node identity , cluster identity 4711 [ 601.773058][T13462] tipc: Failed to obtain node identity [ 601.779936][T13462] tipc: Enabling of bearer rejected, failed to enable media [ 601.842421][T11791] Bluetooth: hci4: command 0x0406 tx timeout [ 601.878763][T13462] syzkaller0: entered promiscuous mode [ 601.884876][T13462] syzkaller0: entered allmulticast mode [ 601.896810][T13450] lo speed is unknown, defaulting to 1000 [ 601.896922][T13452] lo speed is unknown, defaulting to 1000 [ 603.959684][T13452] lo speed is unknown, defaulting to 1000 [ 604.516644][T13481] __nla_validate_parse: 1 callbacks suppressed [ 604.516664][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 605.739897][T13523] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 605.763379][T13514] tun0: tun_chr_ioctl cmd 1074025675 [ 605.778917][T13514] tun0: persist enabled [ 605.779921][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1859'. [ 606.278688][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1862'. [ 607.106998][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 607.253756][T13568] team1: entered promiscuous mode [ 607.259110][T13568] team1: entered allmulticast mode [ 607.266080][T13568] 8021q: adding VLAN 0 to HW filter on device team1 [ 607.404443][T13584] netlink: 'syz.2.1879': attribute type 5 has an invalid length. [ 607.520066][T13590] syzkaller0: entered promiscuous mode [ 607.530345][T13590] syzkaller0: entered allmulticast mode [ 607.546527][T13588] syzkaller0: entered promiscuous mode [ 607.558499][T13588] syzkaller0: entered allmulticast mode [ 607.660134][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 608.007294][T13616] sctp: [Deprecated]: syz.4.1887 (pid 13616) Use of int in max_burst socket option deprecated. [ 608.007294][T13616] Use struct sctp_assoc_value instead [ 608.136322][T13620] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1889'. [ 608.397570][T13636] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 608.421484][T13635] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 608.430013][T13636] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1893'. [ 608.473487][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1892'. [ 608.529396][T13635] bond9: option mode: invalid value (9) [ 608.569736][T13635] bond9 (unregistering): Released all slaves [ 608.589198][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1892'. [ 608.662648][T13647] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 608.704708][T13647] netlink: 'syz.2.1895': attribute type 2 has an invalid length. [ 608.734927][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 608.917377][T13655] tipc: Enabled bearer , priority 2 [ 609.049988][T13663] dummy0: entered promiscuous mode [ 609.057643][T13662] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 609.087310][T13663] dummy0: entered allmulticast mode [ 609.198454][T13662] bond9: option mode: invalid value (11) [ 609.217487][T13662] bond9 (unregistering): Released all slaves [ 609.367579][T13674] syzkaller0: entered promiscuous mode [ 609.375393][T13674] syzkaller0: entered allmulticast mode [ 609.386551][T13666] tipc: Started in network mode [ 609.398236][T13666] tipc: Node identity 6a79a0f9211b, cluster identity 4711 [ 609.413902][T13666] tipc: Enabled bearer , priority 0 [ 609.478093][T13666] tipc: Resetting bearer [ 609.642790][T13688] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 609.670682][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 611.598234][T13666] tipc: Disabling bearer [ 611.610542][T13680] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 611.718827][T13701] veth1_to_bond: Caught tx_queue_len zero misconfig [ 611.751002][ T995] tipc: Node number set to 1264754937 [ 611.758307][T13712] netlink: 'syz.1.1908': attribute type 15 has an invalid length. [ 611.768583][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'. [ 611.879894][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 611.898719][T13718] netlink: 'syz.1.1910': attribute type 30 has an invalid length. [ 611.917176][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 612.063172][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 612.158315][T13720] tipc: Enabled bearer , priority 0 [ 612.180078][T13720] syzkaller0: entered promiscuous mode [ 612.202173][T13720] syzkaller0: entered allmulticast mode [ 612.251167][T13719] tipc: Resetting bearer [ 612.332674][T13719] tipc: Disabling bearer [ 613.398306][T13768] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 613.414864][T13770] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 613.650284][T13734] bridge0: port 3(team0) entered disabled state [ 613.657435][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.664993][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.830934][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.278930][T13734] batman_adv: batadv0: Interface deactivated: macvlan2 [ 614.286763][T13734] batadv_slave_1: left allmulticast mode [ 614.368093][T13734] batman_adv: batadv0: Interface deactivated: vlan2 [ 614.504336][T10196] syz1: Port: 1 Link DOWN [ 614.509957][ T6794] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.553900][ T6794] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.591776][ T6794] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.613693][ T6794] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.646833][ T6794] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.681004][ T6794] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.728647][ T6794] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.760543][ T6794] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.790943][T13786] netlink: 'syz.0.1921': attribute type 12 has an invalid length. [ 614.829884][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 614.865469][T13791] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1923'. [ 614.947520][T13791] geneve5: entered promiscuous mode [ 614.978529][T13791] geneve5: entered allmulticast mode [ 615.044233][T13802] netlink: 'syz.4.1926': attribute type 4 has an invalid length. [ 615.145182][T13809] netlink: 'syz.0.1927': attribute type 32 has an invalid length. [ 615.248702][ T4935] block nbd0: Receive control failed (result -107) [ 615.265047][T13813] block nbd0: reconnected socket [ 615.806194][T13789] lo speed is unknown, defaulting to 1000 [ 615.874821][T13831] syzkaller0: entered promiscuous mode [ 615.880561][T13831] syzkaller0: entered allmulticast mode [ 615.985629][T13835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1939'. [ 616.439624][T13789] lo speed is unknown, defaulting to 1000 [ 616.809976][T13866] netlink: 'syz.1.1953': attribute type 2 has an invalid length. [ 617.312709][T13892] syzkaller0: entered promiscuous mode [ 617.323745][T13892] syzkaller0: entered allmulticast mode [ 618.240970][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.250625][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.288409][T13921] bridge0: left allmulticast mode [ 618.379868][T13923] syzkaller0: entered promiscuous mode [ 618.392943][T13923] syzkaller0: entered allmulticast mode [ 618.748210][T13939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.014317][T13954] openvswitch: netlink: Flow actions attr not present in new flow. [ 619.767969][T13991] xt_hashlimit: size too large, truncated to 1048576 [ 620.306466][T14010] syzkaller0: entered promiscuous mode [ 620.313127][T14010] syzkaller0: entered allmulticast mode [ 620.633671][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2017'. [ 620.667811][T14022] netlink: 'syz.1.2017': attribute type 8 has an invalid length. [ 620.691136][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2017'. [ 620.691142][T14022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2017'. [ 620.712606][T14026] netlink: 'syz.1.2017': attribute type 8 has an invalid length. [ 620.725191][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2017'. [ 620.928446][T14035] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2023'. [ 621.132971][T14044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.197772][T10198] lo speed is unknown, defaulting to 1000 [ 621.212505][T10198] syz2: Port: 1 Link DOWN [ 621.238567][T14047] [ 621.240954][T14047] ====================================================== [ 621.248008][T14047] WARNING: possible circular locking dependency detected [ 621.255056][T14047] syzkaller #0 Not tainted [ 621.259493][T14047] ------------------------------------------------------ [ 621.266523][T14047] syz.4.2027/14047 is trying to acquire lock: [ 621.272597][T14047] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 621.281970][T14047] [ 621.281970][T14047] but task is already holding lock: [ 621.289350][T14047] ffff888078630530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 621.298599][T14047] [ 621.298599][T14047] which lock already depends on the new lock. [ 621.298599][T14047] [ 621.309018][T14047] [ 621.309018][T14047] the existing dependency chain (in reverse order) is: [ 621.318074][T14047] [ 621.318074][T14047] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 621.325671][T14047] __mutex_lock+0x19d/0x1550 [ 621.330808][T14047] __ipv6_dev_mc_inc+0x4e/0xa40 [ 621.336205][T14047] __ipv6_sock_mc_join+0x4f7/0x740 [ 621.341856][T14047] ipv6_mcast_join_leave+0x1a2/0x240 [ 621.347687][T14047] do_ipv6_setsockopt+0x1990/0x3180 [ 621.353442][T14047] ipv6_setsockopt+0x59/0x170 [ 621.358656][T14047] do_sock_setsockopt+0x17c/0x1b0 [ 621.364226][T14047] __x64_sys_setsockopt+0x13d/0x1b0 [ 621.369969][T14047] do_syscall_64+0x174/0x580 [ 621.375114][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.381580][T14047] [ 621.381580][T14047] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 621.389345][T14047] lock_sock_nested+0x41/0x100 [ 621.394653][T14047] inet_shutdown+0x6a/0x390 [ 621.399723][T14047] nbd_mark_nsock_dead+0x2cb/0x550 [ 621.405377][T14047] recv_work+0x1cee/0x1e10 [ 621.410336][T14047] process_scheduled_works+0xa8e/0x14e0 [ 621.416414][T14047] worker_thread+0xa47/0xfb0 [ 621.421556][T14047] kthread+0x388/0x470 [ 621.426174][T14047] ret_from_fork+0x514/0xb70 [ 621.431311][T14047] ret_from_fork_asm+0x1a/0x30 [ 621.436615][T14047] [ 621.436615][T14047] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 621.444286][T14047] __mutex_lock+0x19d/0x1550 [ 621.449419][T14047] nbd_queue_rq+0x373/0x1150 [ 621.454543][T14047] blk_mq_dispatch_rq_list+0x499/0x1990 [ 621.460635][T14047] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 621.467507][T14047] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 621.474029][T14047] blk_mq_run_work_fn+0x16c/0x300 [ 621.479593][T14047] process_scheduled_works+0xa8e/0x14e0 [ 621.485677][T14047] worker_thread+0xa47/0xfb0 [ 621.490810][T14047] kthread+0x388/0x470 [ 621.495594][T14047] ret_from_fork+0x514/0xb70 [ 621.500732][T14047] ret_from_fork_asm+0x1a/0x30 [ 621.506036][T14047] [ 621.506036][T14047] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 621.513270][T14047] __mutex_lock+0x19d/0x1550 [ 621.518403][T14047] nbd_queue_rq+0xc1/0x1150 [ 621.523444][T14047] blk_mq_dispatch_rq_list+0x499/0x1990 [ 621.529535][T14047] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 621.536411][T14047] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 621.542941][T14047] blk_mq_run_work_fn+0x16c/0x300 [ 621.548512][T14047] process_scheduled_works+0xa8e/0x14e0 [ 621.554596][T14047] worker_thread+0xa47/0xfb0 [ 621.559721][T14047] kthread+0x388/0x470 [ 621.564354][T14047] ret_from_fork+0x514/0xb70 [ 621.569498][T14047] ret_from_fork_asm+0x1a/0x30 [ 621.574792][T14047] [ 621.574792][T14047] -> #3 (set->srcu){.+.+}-{0:0}: [ 621.581940][T14047] __synchronize_srcu+0xc9/0x2f0 [ 621.587427][T14047] elevator_switch+0x1e8/0x7b0 [ 621.592772][T14047] elevator_change+0x2fa/0x480 [ 621.598083][T14047] elevator_set_default+0x375/0x440 [ 621.603823][T14047] blk_register_queue+0x3f3/0x4e0 [ 621.609391][T14047] __add_disk+0x6cb/0xe30 [ 621.614256][T14047] add_disk_fwnode+0x100/0x3a0 [ 621.619554][T14047] nbd_dev_add+0x733/0xb60 [ 621.624504][T14047] nbd_init+0x15f/0x1e0 [ 621.629195][T14047] do_one_initcall+0x250/0x870 [ 621.634533][T14047] do_initcall_level+0x10a/0x1a0 [ 621.640018][T14047] do_initcalls+0x59/0xa0 [ 621.644887][T14047] kernel_init_freeable+0x29d/0x3e0 [ 621.650629][T14047] kernel_init+0x1d/0x1d0 [ 621.655502][T14047] ret_from_fork+0x514/0xb70 [ 621.660635][T14047] ret_from_fork_asm+0x1a/0x30 [ 621.665936][T14047] [ 621.665936][T14047] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 621.673775][T14047] __mutex_lock+0x19d/0x1550 [ 621.678909][T14047] elevator_change+0x1af/0x480 [ 621.684228][T14047] elevator_set_none+0xb5/0x140 [ 621.689626][T14047] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 621.696061][T14047] nbd_start_device+0x189/0xb30 [ 621.701468][T14047] nbd_genl_connect+0x1597/0x1c10 [ 621.707040][T14047] genl_family_rcv_msg_doit+0x233/0x340 [ 621.713144][T14047] genl_rcv_msg+0x614/0x7a0 [ 621.718216][T14047] netlink_rcv_skb+0x226/0x4a0 [ 621.723525][T14047] genl_rcv+0x28/0x40 [ 621.728057][T14047] netlink_unicast+0x7bb/0x940 [ 621.733373][T14047] netlink_sendmsg+0x813/0xb40 [ 621.738679][T14047] sock_sendmsg_nosec+0x13a/0x180 [ 621.744246][T14047] ____sys_sendmsg+0x54e/0x850 [ 621.749554][T14047] ___sys_sendmsg+0x2a5/0x360 [ 621.754769][T14047] __x64_sys_sendmsg+0x1b1/0x290 [ 621.760246][T14047] do_syscall_64+0x174/0x580 [ 621.765375][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.771811][T14047] [ 621.771811][T14047] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 621.780454][T14047] blk_alloc_queue+0x544/0x690 [ 621.785762][T14047] __blk_mq_alloc_disk+0x194/0x390 [ 621.791422][T14047] nbd_dev_add+0x494/0xb60 [ 621.796407][T14047] nbd_init+0x15f/0x1e0 [ 621.801111][T14047] do_one_initcall+0x250/0x870 [ 621.806419][T14047] do_initcall_level+0x10a/0x1a0 [ 621.811904][T14047] do_initcalls+0x59/0xa0 [ 621.816793][T14047] kernel_init_freeable+0x29d/0x3e0 [ 621.822534][T14047] kernel_init+0x1d/0x1d0 [ 621.827424][T14047] ret_from_fork+0x514/0xb70 [ 621.832563][T14047] ret_from_fork_asm+0x1a/0x30 [ 621.837878][T14047] [ 621.837878][T14047] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 621.845129][T14047] __lock_acquire+0x1520/0x2cf0 [ 621.850535][T14047] lock_acquire+0x106/0x350 [ 621.855579][T14047] fs_reclaim_acquire+0x71/0x100 [ 621.861085][T14047] __kmalloc_cache_noprof+0x61/0x660 [ 621.866922][T14047] __ipv6_dev_mc_inc+0x447/0xa40 [ 621.872408][T14047] ipv6_add_dev+0xe36/0x13a0 [ 621.877545][T14047] addrconf_notify+0x771/0x1050 [ 621.882944][T14047] notifier_call_chain+0x1a5/0x3d0 [ 621.888601][T14047] register_netdevice+0x18a4/0x1eb0 [ 621.894342][T14047] l2tp_eth_create+0x7f1/0xbd0 [ 621.899643][T14047] l2tp_nl_cmd_session_create+0x714/0xbe0 [ 621.905908][T14047] genl_family_rcv_msg_doit+0x233/0x340 [ 621.912003][T14047] genl_rcv_msg+0x614/0x7a0 [ 621.917056][T14047] netlink_rcv_skb+0x226/0x4a0 [ 621.922361][T14047] genl_rcv+0x28/0x40 [ 621.926894][T14047] netlink_unicast+0x7bb/0x940 [ 621.932202][T14047] netlink_sendmsg+0x813/0xb40 [ 621.937515][T14047] sock_sendmsg_nosec+0x13a/0x180 [ 621.943089][T14047] ____sys_sendmsg+0x54e/0x850 [ 621.948415][T14047] ___sys_sendmsg+0x2a5/0x360 [ 621.953645][T14047] __x64_sys_sendmsg+0x1b1/0x290 [ 621.959218][T14047] do_syscall_64+0x174/0x580 [ 621.964349][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.970792][T14047] [ 621.970792][T14047] other info that might help us debug this: [ 621.970792][T14047] [ 621.981023][T14047] Chain exists of: [ 621.981023][T14047] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 621.981023][T14047] [ 621.993642][T14047] Possible unsafe locking scenario: [ 621.993642][T14047] [ 622.001100][T14047] CPU0 CPU1 [ 622.006471][T14047] ---- ---- [ 622.011851][T14047] lock(&idev->mc_lock); [ 622.016207][T14047] lock(sk_lock-AF_INET6); [ 622.023258][T14047] lock(&idev->mc_lock); [ 622.030134][T14047] lock(fs_reclaim); [ 622.034148][T14047] [ 622.034148][T14047] *** DEADLOCK *** [ 622.034148][T14047] [ 622.042302][T14047] 4 locks held by syz.4.2027/14047: [ 622.047514][T14047] #0: ffffffff9009dee8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 622.055731][T14047] #1: ffffffff9009dd20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 622.064729][T14047] #2: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_create+0x7c9/0xbd0 [ 622.073976][T14047] #3: ffff888078630530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 622.083683][T14047] [ 622.083683][T14047] stack backtrace: [ 622.089584][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.4.2027 Not tainted syzkaller #0 PREEMPT(full) [ 622.089605][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 622.089617][T14047] Call Trace: [ 622.089626][T14047] [ 622.089635][T14047] dump_stack_lvl+0xe8/0x150 [ 622.089664][T14047] print_circular_bug+0x2e1/0x300 [ 622.089684][T14047] check_noncircular+0x12e/0x150 [ 622.089705][T14047] __lock_acquire+0x1520/0x2cf0 [ 622.089735][T14047] ? __pfx___mutex_trylock_common+0x10/0x10 [ 622.089755][T14047] ? rcu_is_watching+0x15/0xb0 [ 622.089771][T14047] ? trace_contention_end+0x3d/0x140 [ 622.089791][T14047] ? __kmalloc_cache_noprof+0x61/0x660 [ 622.089815][T14047] lock_acquire+0x106/0x350 [ 622.089839][T14047] ? __kmalloc_cache_noprof+0x61/0x660 [ 622.089864][T14047] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 622.089889][T14047] fs_reclaim_acquire+0x71/0x100 [ 622.089919][T14047] ? __kmalloc_cache_noprof+0x61/0x660 [ 622.089941][T14047] __kmalloc_cache_noprof+0x61/0x660 [ 622.089965][T14047] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 622.089987][T14047] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 622.090011][T14047] __ipv6_dev_mc_inc+0x447/0xa40 [ 622.090036][T14047] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 622.090055][T14047] ipv6_add_dev+0xe36/0x13a0 [ 622.090082][T14047] addrconf_notify+0x771/0x1050 [ 622.090112][T14047] notifier_call_chain+0x1a5/0x3d0 [ 622.090141][T14047] register_netdevice+0x18a4/0x1eb0 [ 622.090171][T14047] ? __pfx_register_netdevice+0x10/0x10 [ 622.090194][T14047] ? __pfx_l2tp_session_register+0x10/0x10 [ 622.090217][T14047] ? l2tp_eth_create+0x37e/0xbd0 [ 622.090236][T14047] l2tp_eth_create+0x7f1/0xbd0 [ 622.090254][T14047] ? l2tp_eth_create+0x37e/0xbd0 [ 622.090276][T14047] ? __pfx_l2tp_eth_create+0x10/0x10 [ 622.090298][T14047] l2tp_nl_cmd_session_create+0x714/0xbe0 [ 622.090327][T14047] ? trace_kmalloc+0x2a/0xf0 [ 622.090351][T14047] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 622.090383][T14047] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 622.090413][T14047] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 622.090444][T14047] genl_family_rcv_msg_doit+0x233/0x340 [ 622.090475][T14047] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 622.090507][T14047] ? bpf_lsm_capable+0x9/0x20 [ 622.090530][T14047] ? security_capable+0x7e/0x2c0 [ 622.090551][T14047] genl_rcv_msg+0x614/0x7a0 [ 622.090579][T14047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.090604][T14047] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 622.090639][T14047] netlink_rcv_skb+0x226/0x4a0 [ 622.090660][T14047] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.090691][T14047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 622.090718][T14047] ? down_read+0x2be/0x330 [ 622.090743][T14047] genl_rcv+0x28/0x40 [ 622.090767][T14047] netlink_unicast+0x7bb/0x940 [ 622.090789][T14047] netlink_sendmsg+0x813/0xb40 [ 622.090815][T14047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.090837][T14047] ? aa_sock_msg_perm+0xf1/0x1b0 [ 622.090858][T14047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.090879][T14047] sock_sendmsg_nosec+0x13a/0x180 [ 622.090911][T14047] ____sys_sendmsg+0x54e/0x850 [ 622.090933][T14047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.090957][T14047] ? import_iovec+0x73/0xa0 [ 622.090986][T14047] ___sys_sendmsg+0x2a5/0x360 [ 622.091006][T14047] ? __lock_acquire+0x683/0x2cf0 [ 622.091032][T14047] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.091053][T14047] ? futex_wait+0x2a2/0x390 [ 622.091086][T14047] ? __fget_files+0x2a/0x420 [ 622.091111][T14047] ? __fget_files+0x3a2/0x420 [ 622.091139][T14047] __x64_sys_sendmsg+0x1b1/0x290 [ 622.091160][T14047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 622.091188][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.091206][T14047] do_syscall_64+0x174/0x580 [ 622.091228][T14047] ? trace_irq_disable+0x3b/0x140 [ 622.091251][T14047] ? clear_bhb_loop+0x40/0x90 [ 622.091271][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.091290][T14047] RIP: 0033:0x7f12a5b9de99 [ 622.091311][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.091331][T14047] RSP: 002b:00007f12a6a3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.091354][T14047] RAX: ffffffffffffffda RBX: 00007f12a5e25fa0 RCX: 00007f12a5b9de99 [ 622.091371][T14047] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005 [ 622.091385][T14047] RBP: 00007f12a5c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 622.091399][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.091412][T14047] R13: 00007f12a5e26038 R14: 00007f12a5e25fa0 R15: 00007ffd84068d78 [ 622.091437][T14047] [ 624.243172][ T1316] ieee802154 phy0 wpan0: encryption failed: -22