last executing test programs: 1.494116176s ago: executing program 2 (id=12328): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.385920845s ago: executing program 3 (id=12330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_ORPHAN_MASK, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) 1.364162165s ago: executing program 2 (id=12331): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) 1.188413134s ago: executing program 3 (id=12334): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1) write$cgroup_devices(r0, 0x0, 0xffdd) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x78d0) 1.09855013s ago: executing program 1 (id=12335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16=r0], 0xfdef) 1.064220823s ago: executing program 4 (id=12337): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xffffffffffffffc6, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 1.013242473s ago: executing program 3 (id=12338): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x8001}, &(0x7f0000000240)=0x8) 942.869428ms ago: executing program 0 (id=12339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000626f6e64000000000c00028008"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) 760.86069ms ago: executing program 4 (id=12340): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0x26, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 760.12671ms ago: executing program 3 (id=12341): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='M'], 0x8) 731.320618ms ago: executing program 0 (id=12342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 669.364831ms ago: executing program 1 (id=12343): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 547.22127ms ago: executing program 3 (id=12344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x20, r1, 0x1, 0xfffffffd, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x4000040) 545.488952ms ago: executing program 0 (id=12345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) unshare(0x8040480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 502.539935ms ago: executing program 4 (id=12346): r0 = socket$netlink(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x11, r0, 0xc98e5000) 491.259911ms ago: executing program 2 (id=12347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 470.741916ms ago: executing program 1 (id=12348): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0xfb, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xc5, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x0, "90c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa8"}}}}}}, 0x0) 373.728083ms ago: executing program 2 (id=12349): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/218, 0xda}, 0x8001}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000002000)=""/215, 0xd7}, {0x0}, {&(0x7f00000009c0)=""/101, 0x65}], 0x3}, 0x1}], 0x3, 0x22, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 372.935067ms ago: executing program 0 (id=12350): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 304.388314ms ago: executing program 4 (id=12351): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 303.717737ms ago: executing program 1 (id=12352): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1, 0x7}, &(0x7f0000000140)=0x8) 245.960573ms ago: executing program 3 (id=12353): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r0, 0xfff) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x800) 235.414439ms ago: executing program 1 (id=12354): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) 147.204017ms ago: executing program 0 (id=12355): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x11}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 145.814875ms ago: executing program 2 (id=12356): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) close(0x4) 79.810079ms ago: executing program 4 (id=12357): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 78.965832ms ago: executing program 0 (id=12358): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 68.343689ms ago: executing program 1 (id=12359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xd}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 54.681912ms ago: executing program 2 (id=12360): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="b1", 0x1}], 0x1}}], 0x1, 0x4040005) 0s ago: executing program 4 (id=12361): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x10}}], 0x1, 0x4000000) kernel console output (not intermixed with test programs): nd1: option miimon: allowed values 0 - 2147483647 [ 289.303214][T15337] bond1 (unregistering): Released all slaves [ 289.578692][T15365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4482'. [ 290.641960][T15427] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4508'. [ 290.849876][T15435] bond1 (unregistering): Released all slaves [ 291.208081][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 291.271200][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4524'. [ 291.340257][T15468] netlink: 'syz.0.4523': attribute type 4 has an invalid length. [ 291.802397][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4539'. [ 291.814480][T15497] netlink: 261 bytes leftover after parsing attributes in process `syz.0.4539'. [ 292.107600][T15519] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 292.365571][T15536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4559'. [ 292.545225][T15545] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.586416][T15548] netlink: 'syz.0.4565': attribute type 1 has an invalid length. [ 292.608081][T15548] netlink: 'syz.0.4565': attribute type 3 has an invalid length. [ 292.615995][T15548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4565'. [ 292.752668][T15556] netlink: 'syz.4.4570': attribute type 2 has an invalid length. [ 292.761676][T15556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4570'. [ 293.598910][T15606] ipt_REJECT: TCP_RESET invalid for non-tcp [ 293.889153][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4599'. [ 293.935776][T15629] netlink: 'syz.3.4601': attribute type 4 has an invalid length. [ 294.842951][T15687] gre0: entered promiscuous mode [ 294.868829][T15687] gre0: entered allmulticast mode [ 294.990071][T15691] bond1: option packets_per_slave: invalid value (1048582) [ 295.030718][T15691] bond1: option packets_per_slave: allowed values 0 - 65535 [ 295.050217][T15691] bond1 (unregistering): Released all slaves [ 295.245123][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4642'. [ 295.354570][T15714] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 295.399903][T15714] bond1 (unregistering): Released all slaves [ 295.420032][T15723] netlink: 'syz.1.4647': attribute type 21 has an invalid length. [ 295.680426][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4652'. [ 295.738114][T15736] netlink: 'syz.0.4653': attribute type 21 has an invalid length. [ 295.773156][T15737] netlink: 'syz.3.4654': attribute type 1 has an invalid length. [ 296.366233][T15766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4667'. [ 296.414376][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4669'. [ 296.911467][T15802] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 297.358348][T15831] ipt_ECN: cannot use operation on non-tcp rule [ 297.804379][T15860] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 297.895744][T15866] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 297.895744][T15866] Please contact the netfilter-devel mailing list or update your nftables rules. [ 298.138569][T15880] netlink: 'syz.3.4725': attribute type 10 has an invalid length. [ 298.157517][T15880] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 298.355876][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4730'. [ 299.155231][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 299.273173][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4762'. [ 299.287443][T15954] SET target dimension over the limit! [ 299.323298][T15958] netlink: 16628 bytes leftover after parsing attributes in process `syz.0.4763'. [ 299.681368][T15978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4773'. [ 299.770230][T15984] netlink: 'syz.0.4774': attribute type 4 has an invalid length. [ 299.778196][T15984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4774'. [ 299.792801][T15984] .`: renamed from bond0 [ 299.839980][T15982] geneve3: entered promiscuous mode [ 300.105142][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4783'. [ 300.542428][T16032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.354053][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4822'. [ 301.384685][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4822'. [ 301.409459][T16080] tc_dump_action: action bad kind [ 301.507580][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 301.552839][T16092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.959383][T16111] xt_addrtype: ipv6 does not support BROADCAST matching [ 302.184166][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4841'. [ 302.196716][T16122] tipc: Trying to set illegal importance in message [ 302.231838][T16125] netlink: 'syz.1.4842': attribute type 62 has an invalid length. [ 302.344414][T16129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.601027][T16146] netlink: 'syz.2.4852': attribute type 5 has an invalid length. [ 302.670273][T16153] xt_cgroup: invalid path, errno=-2 [ 303.010222][T16175] netlink: 'syz.0.4868': attribute type 21 has an invalid length. [ 303.029379][T16175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4868'. [ 303.044001][T16175] netlink: 'syz.0.4868': attribute type 1 has an invalid length. [ 303.143330][T16181] netlink: 576 bytes leftover after parsing attributes in process `syz.2.4870'. [ 303.201762][T16185] netlink: 'syz.0.4872': attribute type 1 has an invalid length. [ 303.499250][T16205] netlink: 'syz.2.4880': attribute type 61 has an invalid length. [ 303.619778][T16207] bond0: option packets_per_slave: invalid value (1048582) [ 303.629972][T16207] bond0: option packets_per_slave: allowed values 0 - 65535 [ 303.637743][T16214] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 303.689090][T16207] bond0 (unregistering): Released all slaves [ 303.900108][T16228] SET target dimension over the limit! [ 304.001083][T16238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4898'. [ 304.011482][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4898'. [ 304.160467][T16244] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.258104][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4905'. [ 304.326406][T16256] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4906'. [ 305.595697][T16334] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.648800][T16327] bond2: entered promiscuous mode [ 305.659339][T16327] bond2: entered allmulticast mode [ 305.677594][T16327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.779819][T16342] netlink: 'syz.2.4950': attribute type 2 has an invalid length. [ 306.115789][T16356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.321580][T16368] netlink: 'syz.2.4962': attribute type 1 has an invalid length. [ 306.353837][T16371] netlink: 'syz.0.4963': attribute type 29 has an invalid length. [ 306.361148][T16372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.662842][T16386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 306.783992][T16388] xt_TCPMSS: Only works on TCP SYN packets [ 307.098873][T16400] netlink: 'syz.1.4977': attribute type 1 has an invalid length. [ 307.107208][T16400] __nla_validate_parse: 3 callbacks suppressed [ 307.107226][T16400] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4977'. [ 307.281029][T16408] netlink: zone id is out of range [ 307.296843][T16408] netlink: zone id is out of range [ 307.309397][T16408] netlink: zone id is out of range [ 307.314607][T16408] netlink: zone id is out of range [ 307.337970][T16408] netlink: zone id is out of range [ 307.543144][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4992'. [ 307.600920][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4994'. [ 307.610317][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4994'. [ 307.704465][T16435] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 307.906082][T16447] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.5001'. [ 307.915721][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5001'. [ 307.956119][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5001'. [ 308.225624][T16467] netlink: 'syz.4.5011': attribute type 3 has an invalid length. [ 308.279269][T16467] netlink: 'syz.4.5011': attribute type 3 has an invalid length. [ 308.287208][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5011'. [ 308.317530][T16472] net_ratelimit: 1 callbacks suppressed [ 308.317551][T16472] openvswitch: netlink: IP tunnel dst address not specified [ 308.618116][T16491] netlink: 516 bytes leftover after parsing attributes in process `syz.2.5023'. [ 309.441500][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5049'. [ 309.474412][T16547] delete_channel: no stack [ 309.839051][T16567] netlink: 'syz.1.5060': attribute type 12 has an invalid length. [ 310.470863][T16604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.481921][T16605] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 310.825477][T16626] netlink: 'syz.1.5088': attribute type 2 has an invalid length. [ 311.716590][T16682] xt_TCPMSS: Only works on TCP SYN packets [ 311.938156][T16700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.945479][T16700] IPv6: NLM_F_CREATE should be set when creating new route [ 311.952937][T16700] IPv6: NLM_F_CREATE should be set when creating new route [ 312.327152][T16720] xfrm0: entered allmulticast mode [ 312.348152][T16720] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 312.510982][T16730] bridge0: entered allmulticast mode [ 312.594837][T16739] netlink: 'syz.2.5128': attribute type 21 has an invalid length. [ 312.603359][T16739] __nla_validate_parse: 4 callbacks suppressed [ 312.603378][T16739] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5128'. [ 312.622400][T16739] netlink: 'syz.2.5128': attribute type 4 has an invalid length. [ 312.638418][T16739] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5128'. [ 312.866564][T16751] netlink: 'syz.2.5136': attribute type 1 has an invalid length. [ 312.882344][T16751] netlink: 'syz.2.5136': attribute type 2 has an invalid length. [ 312.978142][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 313.038068][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'. [ 313.177834][T16768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5142'. [ 313.207444][T16765] xt_hashlimit: size too large, truncated to 1048576 [ 313.229684][T16765] xt_hashlimit: max too large, truncated to 1048576 [ 313.515086][T16787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.574039][T16790] netlink: 'syz.1.5152': attribute type 6 has an invalid length. [ 314.355529][T16844] netlink: 'syz.0.5177': attribute type 2 has an invalid length. [ 315.056855][T16883] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 315.097713][T16883] bond1 (unregistering): Released all slaves [ 315.457807][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5211'. [ 315.675401][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5215'. [ 315.944978][T16940] ieee802154 phy0 wpan0: encryption failed: -90 [ 316.200967][T16954] x_tables: unsorted entry at hook 3 [ 316.372161][T16965] geneve2: entered promiscuous mode [ 316.389310][T16965] geneve2: entered allmulticast mode [ 316.400892][T16963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.453543][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.471319][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.507980][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.516947][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.052634][T16994] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5253'. [ 317.083261][T16997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5254'. [ 317.142376][T16993] xt_CT: No such helper "snmp_trap" [ 317.320485][T17003] netlink: 'syz.4.5257': attribute type 13 has an invalid length. [ 317.353761][T17003] netlink: 'syz.4.5257': attribute type 17 has an invalid length. [ 317.398017][T17003] netlink: 'syz.4.5257': attribute type 27 has an invalid length. [ 317.470107][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.476561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.925193][T17022] netlink: 'syz.2.5266': attribute type 1 has an invalid length. [ 318.758259][T17064] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 318.952533][T17070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.108136][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5293'. [ 320.602389][T17143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5326'. [ 320.838110][T17155] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5332'. [ 320.871936][T17155] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5332'. [ 321.191598][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5340'. [ 321.288193][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 322.020918][T17216] syz.0.5361: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.049037][T17216] CPU: 1 UID: 0 PID: 17216 Comm: syz.0.5361 Not tainted syzkaller #0 PREEMPT(full) [ 322.049068][T17216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 322.049092][T17216] Call Trace: [ 322.049101][T17216] [ 322.049111][T17216] dump_stack_lvl+0xe8/0x150 [ 322.049149][T17216] warn_alloc+0x249/0x340 [ 322.049177][T17216] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 322.049209][T17216] ? __pfx_warn_alloc+0x10/0x10 [ 322.049242][T17216] ? kasan_save_track+0x4f/0x80 [ 322.049265][T17216] ? kasan_save_track+0x3e/0x80 [ 322.049287][T17216] ? __kasan_kmalloc+0x93/0xb0 [ 322.049309][T17216] ? __kmalloc_cache_noprof+0x31c/0x660 [ 322.049332][T17216] ? xskq_create+0x56/0x170 [ 322.049357][T17216] ? xsk_setsockopt+0x54c/0x990 [ 322.049378][T17216] ? do_sock_setsockopt+0x17c/0x1b0 [ 322.049410][T17216] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 322.049436][T17216] ? do_syscall_64+0x14d/0xf80 [ 322.049469][T17216] __vmalloc_node_range_noprof+0x132/0x1730 [ 322.049532][T17216] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.049565][T17216] ? __kasan_kmalloc+0x93/0xb0 [ 322.049596][T17216] vmalloc_user_noprof+0xad/0xe0 [ 322.049620][T17216] ? xskq_create+0xbf/0x170 [ 322.049646][T17216] xskq_create+0xbf/0x170 [ 322.049676][T17216] xsk_init_queue+0x8a/0xe0 [ 322.049704][T17216] xsk_setsockopt+0x54c/0x990 [ 322.049732][T17216] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.049758][T17216] ? __pfx_aa_sk_perm+0x10/0x10 [ 322.049793][T17216] ? aa_sock_opt_perm+0xff/0x1a0 [ 322.049816][T17216] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 322.049841][T17216] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.049866][T17216] do_sock_setsockopt+0x17c/0x1b0 [ 322.049901][T17216] __x64_sys_setsockopt+0x13d/0x1b0 [ 322.049936][T17216] do_syscall_64+0x14d/0xf80 [ 322.049965][T17216] ? trace_irq_disable+0x3b/0x150 [ 322.049983][T17216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.050004][T17216] ? clear_bhb_loop+0x40/0x90 [ 322.050030][T17216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.050051][T17216] RIP: 0033:0x7fe1c4f9c819 [ 322.050071][T17216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.050089][T17216] RSP: 002b:00007fe1c5e68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.050111][T17216] RAX: ffffffffffffffda RBX: 00007fe1c5215fa0 RCX: 00007fe1c4f9c819 [ 322.050127][T17216] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 322.050139][T17216] RBP: 00007fe1c5032c91 R08: 0000000000000004 R09: 0000000000000000 [ 322.050152][T17216] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.050164][T17216] R13: 00007fe1c5216038 R14: 00007fe1c5215fa0 R15: 00007ffdfec4e6e8 [ 322.050198][T17216] [ 322.050215][T17216] Mem-Info: [ 322.379524][T17216] active_anon:5806 inactive_anon:19 isolated_anon:0 [ 322.379524][T17216] active_file:1928 inactive_file:41028 isolated_file:0 [ 322.379524][T17216] unevictable:768 dirty:247 writeback:0 [ 322.379524][T17216] slab_reclaimable:12028 slab_unreclaimable:102787 [ 322.379524][T17216] mapped:29198 shmem:1364 pagetables:1294 [ 322.379524][T17216] sec_pagetables:0 bounce:0 [ 322.379524][T17216] kernel_misc_reclaimable:0 [ 322.379524][T17216] free:1309348 free_pcp:18892 free_cma:0 [ 322.462696][T17216] Node 0 active_anon:23124kB inactive_anon:76kB active_file:7712kB inactive_file:163912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116892kB dirty:988kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12316kB pagetables:5036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.527122][T17222] xt_CT: No such helper "netbios-ns" [ 322.558490][T17216] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 322.639961][T17216] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 322.678560][T17216] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 322.705397][T17216] Node 0 DMA32 free:1314896kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22924kB inactive_anon:76kB active_file:7712kB inactive_file:163912kB unevictable:1536kB writepending:988kB zspages:0kB present:3129332kB managed:2552248kB mlocked:0kB bounce:0kB free_pcp:42152kB local_pcp:21004kB free_cma:0kB [ 322.758745][T17216] lowmem_reserve[]: 0 0 0 0 0 [ 322.767393][T17216] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 322.818637][T17216] lowmem_reserve[]: 0 0 0 0 0 [ 322.828243][T17216] Node 1 Normal free:3907440kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:33920kB local_pcp:33920kB free_cma:0kB [ 322.888866][T17216] lowmem_reserve[]: 0 0 0 0 0 [ 322.899038][T17216] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 322.956516][T17216] Node 0 DMA32: 5593*4kB (UM) 2757*8kB (UME) 1307*16kB (UM) 913*32kB (UME) 764*64kB (UME) 620*128kB (UME) 513*256kB (UME) 436*512kB (UME) 336*1024kB (UME) 160*2048kB (UME) 16*4096kB (U) = 1314652kB [ 323.028027][T17216] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 323.047842][T17216] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7*16kB (UM) 11*32kB (UM) 6*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 952*4096kB (UM) = 3907440kB [ 323.089795][T17216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.118240][T17216] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.158123][T17216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.178058][T17216] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.187566][T17216] 44316 total pagecache pages [ 323.208283][T17216] 0 pages in swap cache [ 323.212525][T17216] Free swap = 124996kB [ 323.216736][T17216] Total swap = 124996kB [ 323.233601][T17216] 2097051 pages RAM [ 323.233756][T17259] netlink: 'syz.4.5383': attribute type 1 has an invalid length. [ 323.237479][T17216] 0 pages HighMem/MovableOnly [ 323.237498][T17216] 427155 pages reserved [ 323.237508][T17216] 0 pages cma reserved [ 323.298000][T17259] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5383'. [ 323.537523][T17267] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.811524][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5396'. [ 323.948737][T17291] IPVS: Error connecting to the multicast addr [ 323.974263][T17297] netlink: 'syz.4.5403': attribute type 1 has an invalid length. [ 323.983643][T17295] openvswitch: netlink: IP tunnel dst address not specified [ 323.991291][T17297] netlink: 'syz.4.5403': attribute type 2 has an invalid length. [ 324.007472][T17299] m1Ie5: entered promiscuous mode [ 324.157380][T17305] netlink: 'syz.0.5406': attribute type 10 has an invalid length. [ 324.222615][T17308] bond1 (unregistering): Released all slaves [ 324.256531][T17305] vxcan1: entered promiscuous mode [ 324.266052][T17305] team0: Device vxcan1 is of different type [ 324.603220][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.621463][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.642143][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.670442][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.690298][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.702579][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.716785][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.744430][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.759992][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.773100][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5417'. [ 324.793899][T17328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.804836][T17328] 8021q: adding VLAN 0 to HW filter on device ` [ 324.829135][T17328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.078172][T17344] veth0_virt_wifi: entered allmulticast mode [ 325.494812][T17372] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 325.518326][T17372] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.645470][T17379] netlink: 'syz.3.5442': attribute type 1 has an invalid length. [ 325.661147][T17382] netlink: 'syz.0.5444': attribute type 3 has an invalid length. [ 325.670723][T17382] netlink: 'syz.0.5444': attribute type 3 has an invalid length. [ 326.189743][T17409] set match dimension is over the limit! [ 326.671167][T17446] xfrm0: entered allmulticast mode [ 327.873119][T17486] bond3 (unregistering): Released all slaves [ 328.160187][T17500] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.691691][T17583] netdevsim0: mtu less than device minimum [ 329.738328][T17590] __nla_validate_parse: 19 callbacks suppressed [ 329.738352][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5542'. [ 330.321680][T17627] netlink: 'syz.0.5559': attribute type 1 has an invalid length. [ 330.388216][T17631] netlink: 'syz.3.5563': attribute type 11 has an invalid length. [ 330.662415][T17648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.818744][T17657] netlink: 'syz.2.5577': attribute type 75 has an invalid length. [ 331.236783][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5590'. [ 331.652664][T17707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.746491][T17713] netlink: 'syz.1.5604': attribute type 3 has an invalid length. [ 331.788101][T17713] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 331.816406][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5604'. [ 331.848966][T17713] NCSI netlink: No device for ifindex 808464432 [ 332.119434][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5615'. [ 332.928216][T17787] openvswitch: netlink: Actions may not be safe on all matching packets [ 332.950979][T17789] Cannot find del_set index 1 as target [ 333.326064][T17806] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5649'. [ 333.833873][T17823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5659'. [ 334.072669][T17833] xt_CT: No such helper "snmp_trap" [ 335.281032][T17904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5699'. [ 336.281064][T17949] netlink: 'syz.3.5721': attribute type 1 has an invalid length. [ 336.447162][T17959] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5725'. [ 336.660550][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5732'. [ 336.771567][T17979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5735'. [ 337.745232][T18043] veth1: entered allmulticast mode [ 338.386806][T18085] xt_nat: multiple ranges no longer supported [ 338.450931][T18091] netlink: 'syz.0.5786': attribute type 3 has an invalid length. [ 338.494943][T18091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.514189][T18093] netlink: 'syz.3.5791': attribute type 7 has an invalid length. [ 338.590653][T18098] netlink: 'syz.2.5793': attribute type 1 has an invalid length. [ 338.826401][T18111] netlink: 'syz.1.5800': attribute type 1 has an invalid length. [ 338.850179][T18111] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5800'. [ 339.191236][T18135] bond0: (slave bridge0): Releasing backup interface [ 339.224114][T18135] bridge_slave_1: left allmulticast mode [ 339.242592][T18135] bridge_slave_1: left promiscuous mode [ 339.258489][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.280232][T18135] bond0: (slave bond_slave_0): Releasing backup interface [ 339.299685][T18135] bond0: (slave bond_slave_1): Releasing backup interface [ 339.314679][T18135] team0: Port device team_slave_0 removed [ 339.339035][T18135] team0: Port device team_slave_1 removed [ 339.345847][T18135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.356542][T18135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.366154][T18135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.807838][T18169] netlink: 'syz.3.5828': attribute type 1 has an invalid length. [ 339.815992][T18169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5828'. [ 339.838386][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 340.378530][T18207] : renamed from veth0_to_bond [ 340.715159][T18226] netlink: 'syz.2.5857': attribute type 2 has an invalid length. [ 340.773849][T18233] netlink: 'syz.0.5860': attribute type 58 has an invalid length. [ 340.886550][T18239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5861'. [ 340.900577][T18240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5863'. [ 340.950076][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5865'. [ 341.297418][T18266] netlink: 'syz.1.5874': attribute type 15 has an invalid length. [ 341.335470][T18266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5874'. [ 341.617816][T18284] tc_dump_action: action bad kind [ 342.516920][T18340] geneve3: entered promiscuous mode [ 342.679065][T18350] netlink: 'syz.3.5916': attribute type 1 has an invalid length. [ 342.694187][T18350] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5916'. [ 342.864592][T18362] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5922'. [ 342.880254][T18363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5920'. [ 342.916653][T18363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5920'. [ 343.302809][T18390] IPVS: length: 35 != 24 [ 343.647112][T18413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5945'. [ 343.680130][T18413] netlink: 'syz.4.5945': attribute type 1 has an invalid length. [ 343.750823][T18414] bond4: Removing last ns target with arp_interval on [ 344.386123][T18459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5968'. [ 344.432733][T18460] netlink: 'syz.0.5969': attribute type 2 has an invalid length. [ 344.524983][T18465] netlink: 'syz.1.5972': attribute type 30 has an invalid length. [ 344.546352][T18469] netlink: 'syz.4.5974': attribute type 11 has an invalid length. [ 344.703769][T18478] xt_hashlimit: invalid rate [ 346.001022][T18563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 346.095607][T18565] __nla_validate_parse: 9 callbacks suppressed [ 346.095628][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6016'. [ 346.142411][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6016'. [ 346.172709][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6016'. [ 346.335286][T18575] netlink: 'syz.3.6020': attribute type 7 has an invalid length. [ 346.359847][T18575] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6020'. [ 347.125574][T18616] netlink: 'syz.3.6039': attribute type 9 has an invalid length. [ 347.772802][T18645] bond0: entered allmulticast mode [ 347.783518][T18645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.978272][T18691] SET target dimension over the limit! [ 349.031323][T18693] netlink: 'syz.2.6072': attribute type 1 has an invalid length. [ 349.173943][T18701] netlink: 'syz.2.6076': attribute type 4 has an invalid length. [ 349.202976][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 349.928376][T18734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6092'. [ 350.769662][T18787] ip6erspan1: entered allmulticast mode [ 351.230906][T18816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6132'. [ 351.322564][T18818] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6134'. [ 351.500695][T18829] netlink: 'syz.4.6140': attribute type 13 has an invalid length. [ 351.510588][T18830] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 351.528234][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6140'. [ 351.727590][T18837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.112575][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6155'. [ 352.189751][T18862] netlink: 'syz.1.6152': attribute type 1 has an invalid length. [ 352.258700][T18866] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 352.394392][T18874] openvswitch: netlink: IP tunnel dst address not specified [ 352.425029][T18876] netlink: 'syz.0.6162': attribute type 3 has an invalid length. [ 352.434455][T18876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6162'. [ 352.506813][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6164'. [ 352.526928][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6164'. [ 352.610744][T18886] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6167'. [ 352.834169][T18901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6173'. [ 353.026258][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6178'. [ 353.351625][T18930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.607148][T18944] tc_dump_action: action bad kind [ 353.913903][T18962] netlink: 'syz.0.6199': attribute type 1 has an invalid length. [ 354.258538][T18984] Cannot find set identified by id 0 to match [ 354.759603][T19016] nft_compat: unsupported protocol 0 [ 355.033142][T19037] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 355.311787][T19053] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.335963][T19053] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.348435][T19053] .` (unregistering): Released all slaves [ 355.718232][T19078] netlink: 'syz.4.6257': attribute type 1 has an invalid length. [ 355.752689][T19079] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 356.109551][T19101] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 356.638774][T19133] x_tables: unsorted entry at hook 2 [ 356.725984][T19141] ieee802154 phy1 wpan1: encryption failed: -22 [ 356.828304][T19145] __nla_validate_parse: 7 callbacks suppressed [ 356.828328][T19145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6290'. [ 356.931109][T19153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6294'. [ 357.100087][T19161] netlink: 'syz.0.6298': attribute type 2 has an invalid length. [ 357.120917][T19161] netlink: 'syz.0.6298': attribute type 9 has an invalid length. [ 357.148045][T19161] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6298'. [ 357.585961][T19187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6311'. [ 357.916042][T19211] netlink: 'syz.1.6323': attribute type 1 has an invalid length. [ 357.948344][T19211] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6323'. [ 357.978964][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6323'. [ 358.230507][T19232] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6333'. [ 358.448116][T19243] netlink: 'syz.0.6339': attribute type 3 has an invalid length. [ 358.734919][T19263] netlink: 'syz.1.6348': attribute type 9 has an invalid length. [ 359.474441][T19292] sctp: [Deprecated]: syz.3.6363 (pid 19292) Use of int in maxseg socket option. [ 359.474441][T19292] Use struct sctp_assoc_value instead [ 359.782980][T19304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.209487][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6379'. [ 360.548500][T19353] netlink: 'syz.1.6390': attribute type 21 has an invalid length. [ 360.597192][T19353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6390'. [ 360.638320][T19353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6390'. [ 360.758318][T19360] netlink: 'syz.2.6391': attribute type 58 has an invalid length. [ 360.840733][T19367] netlink: 'syz.4.6396': attribute type 3 has an invalid length. [ 361.008550][T19376] openvswitch: netlink: IPv4 tun info is not correct [ 361.690531][T19420] netlink: 'syz.3.6424': attribute type 32 has an invalid length. [ 361.848729][T19420] bond2: Setting coupled_control to off (0) [ 362.050582][T19447] __nla_validate_parse: 1 callbacks suppressed [ 362.050606][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6434'. [ 362.054733][T19445] xt_TCPMSS: Only works on TCP SYN packets [ 362.186252][T19449] netlink: 'syz.3.6439': attribute type 1 has an invalid length. [ 362.392343][T19463] openvswitch: netlink: Actions may not be safe on all matching packets [ 362.583453][T19473] netlink: zone id is out of range [ 362.592092][T19473] netlink: zone id is out of range [ 362.599140][T19473] netlink: zone id is out of range [ 362.604457][T19473] netlink: zone id is out of range [ 362.623935][T19473] netlink: zone id is out of range [ 362.633194][T19473] netlink: zone id is out of range [ 362.644281][T19473] netlink: zone id is out of range [ 363.143739][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 363.176318][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6466'. [ 363.565290][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6480'. [ 363.610595][T19540] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6481'. [ 363.735565][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6484'. [ 364.397373][T19588] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 364.632513][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6514'. [ 364.736203][T19610] netlink: 'syz.0.6516': attribute type 1 has an invalid length. [ 364.762625][T19612] netlink: 'syz.2.6517': attribute type 21 has an invalid length. [ 365.392039][T19654] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6538'. [ 365.415013][T19656] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6540'. [ 365.623375][T19662] net_ratelimit: 339 callbacks suppressed [ 365.623389][T19662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.093959][T19698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6560'. [ 366.178451][T19700] netlink: del zone limit has 8 unknown bytes [ 366.425164][T19718] netlink: 'syz.2.6569': attribute type 6 has an invalid length. [ 366.443574][T19718] netlink: 'syz.2.6569': attribute type 7 has an invalid length. [ 366.463282][T19718] netlink: 'syz.2.6569': attribute type 8 has an invalid length. [ 366.480344][T19718] netlink: 'syz.2.6569': attribute type 15 has an invalid length. [ 366.758176][T19735] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 366.866774][T19742] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 367.370724][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6593'. [ 367.400537][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6593'. [ 367.612616][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.659287][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.666708][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.721494][T19787] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 367.750696][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.769399][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.777375][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.802230][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.820837][T19787] wg1 speed is unknown, defaulting to 1000 [ 367.887970][T19801] netlink: 'syz.3.6605': attribute type 15 has an invalid length. [ 367.913601][T19801] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6605'. [ 368.288157][T19823] netlink: 'syz.3.6614': attribute type 2 has an invalid length. [ 368.648122][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 368.783884][T19853] xt_socket: unknown flags 0x4 [ 368.915139][T19860] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 369.471327][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6642'. [ 369.489192][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6643'. [ 369.502145][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6643'. [ 369.538491][T19891] netlink: 'syz.0.6643': attribute type 5 has an invalid length. [ 369.661627][T19902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6647'. [ 370.177547][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6658'. [ 370.710377][T19962] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 370.865871][T19969] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.450546][T20003] netlink: 'syz.2.6693': attribute type 10 has an invalid length. [ 371.524555][T20003] team0: Device veth1_macvtap failed to register rx_handler [ 371.729448][T20019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6700'. [ 372.843443][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6725'. [ 372.868149][T20069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6726'. [ 373.242213][T20088] Cannot find del_set index 0 as target [ 373.346834][T20093] netlink: 'syz.0.6738': attribute type 15 has an invalid length. [ 373.675121][T20111] IPv6: sit2: Disabled Multicast RS [ 373.917411][T20129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6756'. [ 374.046299][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 374.316108][T20150] netlink: 'syz.1.6766': attribute type 1 has an invalid length. [ 374.441048][T20160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.495465][T20164] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.725814][T20178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.829000][T20184] netlink: 'syz.2.6783': attribute type 3 has an invalid length. [ 375.316124][T20216] IPv6: Can't replace route, no match found [ 375.373171][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6801'. [ 375.701087][T20240] Cannot find add_set index 0 as target [ 375.858778][T20251] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 375.959352][T20256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.356984][T20283] netlink: 'syz.0.6831': attribute type 21 has an invalid length. [ 376.468113][T20290] netlink: 'syz.4.6835': attribute type 9 has an invalid length. [ 376.486448][T20290] netlink: 'syz.4.6835': attribute type 6 has an invalid length. [ 376.754155][T20309] batadv_slave_0: entered promiscuous mode [ 376.778082][T20309] batadv_slave_0: entered allmulticast mode [ 377.112441][T20327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6853'. [ 377.147941][T20330] netlink: 'syz.1.6855': attribute type 10 has an invalid length. [ 377.294141][T20333] SET target dimension over the limit! [ 377.418236][T20341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.648180][T20351] netlink: 'syz.1.6865': attribute type 8 has an invalid length. [ 377.865090][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6871'. [ 378.367236][T20396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6886'. [ 378.422037][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'. [ 378.456007][T20399] ip6tnl3: entered allmulticast mode [ 378.806772][T20425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6901'. [ 378.896870][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.211646][T20449] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6912'. [ 380.122729][T20501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6938'. [ 380.191637][T20504] netlink: 'syz.3.6940': attribute type 7 has an invalid length. [ 380.218884][T20506] gretap1: entered promiscuous mode [ 380.237959][T20506] gretap1: entered allmulticast mode [ 380.299791][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6942'. [ 380.411756][T20514] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.440412][T20514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.447764][T20514] IPv6: NLM_F_CREATE should be set when creating new route [ 380.455372][T20514] IPv6: NLM_F_CREATE should be set when creating new route [ 380.462708][T20514] IPv6: NLM_F_CREATE should be set when creating new route [ 380.519071][T20522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6949'. [ 380.620560][T20527] x_tables: unsorted underflow at hook 2 [ 380.688109][T20532] netlink: 'syz.2.6953': attribute type 12 has an invalid length. [ 380.754014][T20534] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 381.153696][T20560] geneve4: entered promiscuous mode [ 381.205998][T20560] geneve4: entered allmulticast mode [ 381.946539][T20606] netlink: 'syz.0.6989': attribute type 1 has an invalid length. [ 381.964700][T20606] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6989'. [ 381.998135][T20606] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6989'. [ 382.105830][T20614] Cannot find del_set index 3 as target [ 382.671108][T20649] --map-set only usable from mangle table [ 382.698019][T20653] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 383.001893][T20671] set match dimension is over the limit! [ 383.188749][T20682] netlink: 'syz.1.7028': attribute type 1 has an invalid length. [ 383.206236][T20682] netlink: 'syz.1.7028': attribute type 2 has an invalid length. [ 383.292256][T20689] xt_hashlimit: max too large, truncated to 1048576 [ 383.684897][T20716] __nla_validate_parse: 4 callbacks suppressed [ 383.684920][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7045'. [ 383.739375][T20720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7047'. [ 383.749816][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 383.758480][T20716] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7045'. [ 383.759992][T20720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.008126][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 384.611861][T20773] netlink: 'syz.1.7072': attribute type 10 has an invalid length. [ 384.638452][T20773] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 385.061082][T20798] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 385.394646][T20818] RDS: rds_bind could not find a transport for fe80::3d, load rds_tcp or rds_rdma? [ 385.512651][T20823] netlink: 'syz.3.7098': attribute type 16 has an invalid length. [ 385.543758][T20823] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7098'. [ 385.960574][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7112'. [ 385.988383][T20853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7112'. [ 386.211283][T20867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7118'. [ 386.242140][T20872] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7120'. [ 386.278161][T20872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.334150][T20874] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 386.421123][T20880] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 387.239702][T20931] netlink: 'syz.1.7153': attribute type 1 has an invalid length. [ 387.239708][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7151'. [ 387.244602][T20934] SET target dimension over the limit! [ 387.419846][T20942] netlink: 'syz.3.7157': attribute type 5 has an invalid length. [ 387.578925][T20946] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 387.669730][T20946] bond4 (unregistering): Released all slaves [ 388.113839][T20985] netlink: 'syz.4.7177': attribute type 6 has an invalid length. [ 388.201825][T20991] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 388.594661][T21017] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 388.749608][T21027] netlink: 'syz.2.7198': attribute type 8 has an invalid length. [ 389.335279][T21064] netlink: 'syz.3.7217': attribute type 39 has an invalid length. [ 389.373011][T21065] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 389.510821][T21073] __nla_validate_parse: 4 callbacks suppressed [ 389.510843][T21073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7223'. [ 389.540605][T21077] veth0_to_hsr: entered promiscuous mode [ 389.867747][T21095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7232'. [ 389.908257][T21095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7232'. [ 389.931651][T21099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7233'. [ 390.361055][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7246'. [ 390.401637][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7246'. [ 390.507800][T21137] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7250'. [ 390.726078][T21150] netlink: 'syz.3.7255': attribute type 10 has an invalid length. [ 390.841104][T21150] `: Cannot enslave team device to itself [ 391.308049][T21187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7273'. [ 391.426143][T21196] netlink: 'syz.4.7278': attribute type 8 has an invalid length. [ 391.556802][T21203] netlink: 'syz.1.7281': attribute type 61 has an invalid length. [ 391.616834][T21203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7281'. [ 391.668696][T21209] bridge5: entered promiscuous mode [ 391.827183][T21218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.100945][T21239] netlink: 'syz.4.7299': attribute type 1 has an invalid length. [ 392.131773][T21239] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7299'. [ 392.143086][T21232] bond1: entered promiscuous mode [ 392.176959][T21232] bond1: entered allmulticast mode [ 392.198691][T21232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.381084][T21256] openvswitch: netlink: Flow key attribute not present in set flow. [ 392.600520][T21267] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 392.633108][T21270] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 392.659775][T21270] bridge6: entered allmulticast mode [ 392.693724][T21273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.711129][T21275] netlink: 'syz.1.7316': attribute type 3 has an invalid length. [ 392.727705][T21275] netlink: 'syz.1.7316': attribute type 2 has an invalid length. [ 392.768272][T21275] netlink: 'syz.1.7316': attribute type 2 has an invalid length. [ 394.053945][T21359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.112316][T21362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 394.368048][T21378] netlink: 'syz.4.7366': attribute type 1 has an invalid length. [ 394.816856][T21402] __nla_validate_parse: 8 callbacks suppressed [ 394.816880][T21402] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7378'. [ 394.938049][T21406] x_tables: duplicate entry at hook 3 [ 395.184472][T21422] netlink: 'syz.2.7387': attribute type 3 has an invalid length. [ 395.526504][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7396'. [ 395.637315][T21450] netlink: 'syz.4.7402': attribute type 5 has an invalid length. [ 395.646520][T21451] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7400'. [ 395.660835][T21450] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7402'. [ 395.755715][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7403'. [ 395.872276][T21462] validate_nla: 1 callbacks suppressed [ 395.872309][T21462] netlink: 'syz.0.7408': attribute type 5 has an invalid length. [ 395.910560][T21463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7407'. [ 395.937102][T21465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7409'. [ 395.970580][T21465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7409'. [ 397.138014][T21515] netlink: zone id is out of range [ 397.450123][T21534] netlink: 'syz.2.7442': attribute type 1 has an invalid length. [ 397.469676][T21536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7444'. [ 397.492715][T21534] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7442'. [ 397.524462][T21534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.986780][T21564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.456650][T21597] openvswitch: netlink: IP tunnel dst address not specified [ 398.468111][T21600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.782627][T21615] netlink: 'syz.3.7482': attribute type 4 has an invalid length. [ 399.423726][T21649] netlink: 'syz.0.7496': attribute type 21 has an invalid length. [ 399.511550][T21652] netlink: 'syz.1.7497': attribute type 1 has an invalid length. [ 399.547441][T21654] bridge0: port 1(team0) entered disabled state [ 399.554335][T21654] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.599764][T21654] bridge0: entered allmulticast mode [ 399.624313][T21654] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 399.979504][T21676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.330108][T21692] netlink: 'syz.3.7511': attribute type 10 has an invalid length. [ 400.371700][T21692] __nla_validate_parse: 3 callbacks suppressed [ 400.371720][T21692] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7511'. [ 400.770331][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7521'. [ 400.807627][T21717] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 401.178353][T21739] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7531'. [ 401.227693][T21739] .70: renamed from hsr0 (while UP) [ 401.281114][T21739] .70: entered allmulticast mode [ 401.303504][T21739] hsr_slave_0: entered allmulticast mode [ 401.318023][T21739] hsr_slave_1: entered allmulticast mode [ 401.335039][T21739] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 401.374435][T21747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7535'. [ 401.581006][T21762] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 401.599507][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7542'. [ 402.038036][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7552'. [ 402.803509][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7567'. [ 402.826644][T21834] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7567'. [ 402.855354][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7567'. [ 403.033995][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 403.044113][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 403.088004][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 403.151268][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 403.242230][T21850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.746450][T21879] netlink: 'syz.0.7587': attribute type 21 has an invalid length. [ 403.774961][T21879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7587'. [ 403.838499][T21886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.870148][T21886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.098248][T21958] dvmrp0: entered allmulticast mode [ 405.162645][T21964] netlink: 'syz.2.7627': attribute type 10 has an invalid length. [ 405.757068][T21952] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 406.020628][T22021] __nla_validate_parse: 2 callbacks suppressed [ 406.020651][T22021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7655'. [ 406.038029][T22020] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7654'. [ 406.064755][T22023] netlink: 'syz.3.7656': attribute type 2 has an invalid length. [ 406.085686][T22023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7656'. [ 407.022859][T22080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7683'. [ 407.457994][T22105] xt_CT: No such helper "syz1" [ 407.504482][T22113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7700'. [ 407.890682][T22134] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7710'. [ 407.937567][T22134] bridge_slave_1: default FDB implementation only supports local addresses [ 408.062477][T22144] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7714'. [ 408.396043][T22165] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7722'. [ 408.628756][T22180] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7728'. [ 408.639290][T22180] netlink: 'syz.0.7728': attribute type 1 has an invalid length. [ 408.658598][T22177] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7726'. [ 409.368900][T22223] xt_TCPMSS: Only works on TCP SYN packets [ 409.551255][T22235] xt_HMARK: spi-set and port-set can't be combined [ 409.661487][T22242] netlink: zone id is out of range [ 409.692326][T22242] netlink: del zone limit has 8 unknown bytes [ 410.189440][T22274] netlink: 'syz.0.7775': attribute type 5 has an invalid length. [ 410.395809][T22289] netlink: 'syz.3.7782': attribute type 7 has an invalid length. [ 410.415083][T22291] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 410.607749][T22303] netlink: 'syz.0.7790': attribute type 11 has an invalid length. [ 410.758313][T22310] xt_ipcomp: unknown flags 1D [ 411.462340][ T35] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.491353][ T35] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.517986][ T35] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.549802][ T35] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.706840][T22350] No such timeout policy "syz1" [ 411.773093][T22353] x_tables: unsorted underflow at hook 3 [ 411.853298][T22358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 412.343226][T22389] openvswitch: netlink: IP tunnel dst address not specified [ 412.742849][T22412] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 412.900742][T22424] __nla_validate_parse: 7 callbacks suppressed [ 412.900767][T22424] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7848'. [ 413.009131][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7848'. [ 413.233565][T22442] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 413.511396][T22453] bond5: option lp_interval: invalid value (0) [ 413.517743][T22453] bond5: option lp_interval: allowed values 1 - 2147483647 [ 413.554138][T22453] bond5 (unregistering): Released all slaves [ 413.588822][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7868'. [ 413.605334][T22468] unsupported nla_type 216 [ 413.612356][T22464] gre0: entered promiscuous mode [ 413.624671][T22464] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 413.844974][T22481] netlink: 'syz.2.7875': attribute type 1 has an invalid length. [ 413.854514][T22483] xt_TCPMSS: Only works on TCP SYN packets [ 413.878599][T22481] netlink: 'syz.2.7875': attribute type 3 has an invalid length. [ 413.904191][T22481] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7875'. [ 413.984610][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7880'. [ 414.148708][T22499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.402826][T22513] block nbd1: not configured, cannot reconfigure [ 414.481476][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7895'. [ 414.496016][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7895'. [ 414.557587][T22522] x_tables: ip_tables: ah match: only valid for protocol 51 [ 414.567785][T22524] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7898'. [ 414.582265][T22524] tc_dump_action: action bad kind [ 414.861016][T22539] Bluetooth: MGMT ver 1.23 [ 414.894051][T22541] batadv0: entered promiscuous mode [ 414.910373][T22541] batadv0: entered allmulticast mode [ 414.919966][T22541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.132032][T22553] vlan0: entered allmulticast mode [ 415.159220][T22553] bond0: entered allmulticast mode [ 415.164429][T22553] bond_slave_0: entered allmulticast mode [ 415.181763][T22553] bond_slave_1: entered allmulticast mode [ 415.198125][T22559] netlink: 'syz.4.7915': attribute type 1 has an invalid length. [ 415.252950][T22559] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7915'. [ 415.428902][T22568] netlink: 'syz.2.7919': attribute type 58 has an invalid length. [ 415.676067][T22584] IPVS: Error connecting to the multicast addr [ 415.876491][T22594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7932'. [ 416.706820][T22641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.800928][T22648] Zero length message leads to an empty skb [ 416.866148][T22645] bond2 (unregistering): Released all slaves [ 416.890568][T22654] sock: sock_set_timeout: `syz.3.7960' (pid 22654) tries to set negative timeout [ 416.974495][T22658] nftables ruleset with unbound set [ 418.133473][T22725] __nla_validate_parse: 2 callbacks suppressed [ 418.133497][T22725] netlink: 296 bytes leftover after parsing attributes in process `syz.3.7997'. [ 418.606085][ T35] tipc: Subscription rejected, illegal request [ 419.083434][T22779] netlink: 'syz.0.8022': attribute type 61 has an invalid length. [ 419.506278][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8036'. [ 419.973813][T22835] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8048'. [ 420.648212][T22871] IPVS: ip_vs_edit_dest(): server weight less than zero [ 420.658150][ T1544] IPVS: starting estimator thread 0... [ 420.758491][T22876] IPVS: using max 29 ests per chain, 69600 per kthread [ 420.774407][T22882] tipc: Enabling of bearer rejected, failed to enable media [ 421.362751][T22921] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.935071][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8105'. [ 421.945472][T22955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8105'. [ 422.703180][T23005] netlink: 'syz.2.8128': attribute type 5 has an invalid length. [ 422.891557][T23013] netlink: 'syz.3.8133': attribute type 4 has an invalid length. [ 422.899658][T23013] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8133'. [ 423.178794][T23031] netlink: 'syz.3.8142': attribute type 1 has an invalid length. [ 423.252871][T23034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8143'. [ 423.514810][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8151'. [ 423.699903][T23059] vlan0: entered promiscuous mode [ 423.721747][T23059] bridge0: entered promiscuous mode [ 423.844086][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8160'. [ 423.892738][T23069] ipvlan0: entered allmulticast mode [ 423.916221][T23069] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 424.048773][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8166'. [ 424.226288][T23094] netlink: 'syz.2.8173': attribute type 1 has an invalid length. [ 424.458176][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8177'. [ 424.493263][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8177'. [ 424.514655][T23105] netlink: 'syz.0.8177': attribute type 14 has an invalid length. [ 424.627132][T23117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8183'. [ 424.650107][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8183'. [ 424.678360][T23117] netlink: 'syz.3.8183': attribute type 18 has an invalid length. [ 424.874838][T23130] netlink: 364 bytes leftover after parsing attributes in process `syz.4.8188'. [ 425.713098][T23180] tipc: Started in network mode [ 425.726811][T23180] tipc: Node identity ac14140f, cluster identity 4711 [ 425.760271][T23180] tipc: Enabled bearer , priority 10 [ 425.982735][T23200] netlink: 292 bytes leftover after parsing attributes in process `syz.3.8221'. [ 426.501700][T23231] tipc: Started in network mode [ 426.518181][T23231] tipc: Node identity ac1414aa, cluster identity 4711 [ 426.525913][T23231] tipc: New replicast peer: 100.1.1.1 [ 426.544027][T23231] tipc: Enabled bearer , priority 10 [ 426.883550][ T24] tipc: Node number set to 2886997007 [ 427.514393][T23297] netlink: 'syz.4.8271': attribute type 3 has an invalid length. [ 427.668027][ T1544] tipc: Node number set to 2886997162 [ 428.230749][T23342] nbd: socks must be embedded in a SOCK_ITEM attr [ 428.531805][T23363] __nla_validate_parse: 7 callbacks suppressed [ 428.531827][T23363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8296'. [ 429.165349][T23392] delete_channel: no stack [ 430.083804][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8318'. [ 430.444210][T23446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8325'. [ 430.581394][T23455] netlink: 'syz.2.8329': attribute type 1 has an invalid length. [ 430.757336][T23469] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8335'. [ 431.048718][T23482] vxcan3: entered promiscuous mode [ 431.376805][T23492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8346'. [ 431.514201][T23496] netlink: 332 bytes leftover after parsing attributes in process `syz.2.8347'. [ 431.535823][T23496] netlink: 'syz.2.8347': attribute type 9 has an invalid length. [ 431.553662][T23496] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8347'. [ 431.583135][T23496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8347'. [ 431.833172][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8354'. [ 432.481706][T23546] netlink: 'syz.2.8370': attribute type 21 has an invalid length. [ 432.499448][T23546] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.507758][T23546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.515201][T23546] IPv6: NLM_F_CREATE should be set when creating new route [ 432.522844][T23546] IPv6: NLM_F_CREATE should be set when creating new route [ 432.530482][T23546] IPv6: NLM_F_CREATE should be set when creating new route [ 432.567650][T23546] netlink: 'syz.2.8370': attribute type 21 has an invalid length. [ 432.586478][T23546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.080925][T23580] netlink: 'syz.4.8387': attribute type 1 has an invalid length. [ 433.155046][T23588] Bluetooth: MGMT ver 1.23 [ 433.357389][T23600] ip6tnl3: entered promiscuous mode [ 433.362917][T23600] ip6tnl3: entered allmulticast mode [ 433.582103][T23611] netlink: 'syz.3.8401': attribute type 9 has an invalid length. [ 433.613551][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8401'. [ 433.667789][T23611] macvlan0: entered promiscuous mode [ 433.680216][T23611] gretap0: entered promiscuous mode [ 433.692254][T23611] macvlan0: entered allmulticast mode [ 433.708219][T23611] gretap0: entered allmulticast mode [ 434.091568][T23645] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8419'. [ 434.160758][T23647] tipc: Started in network mode [ 434.165988][T23647] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 434.181446][T23647] tipc: Enabling of bearer rejected, failed to enable media [ 434.694087][T23682] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8436'. [ 434.760462][T23686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8438'. [ 435.372658][T23729] netlink: 'syz.1.8460': attribute type 11 has an invalid length. [ 435.395047][T23729] netlink: 'syz.1.8460': attribute type 4 has an invalid length. [ 435.413241][T23729] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.8460'. [ 435.463485][T23732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8462'. [ 435.608081][T23735] pim6reg99999991: entered allmulticast mode [ 435.626956][T23740] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 435.703414][T23746] pimreg9: entered allmulticast mode [ 436.240746][T23782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.304733][T23787] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 436.373244][T23789] ipvlan0: entered promiscuous mode [ 437.358140][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8518'. [ 437.367087][T23848] openvswitch: netlink: Message has 2 unknown bytes. [ 437.518815][T23858] tipc: Started in network mode [ 437.534896][T23858] tipc: Node identity , cluster identity 4711 [ 437.562647][T23861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.571850][T23858] tipc: Failed to obtain node identity [ 437.589827][T23858] tipc: Enabling of bearer rejected, failed to enable media [ 437.674693][T23863] vlan0: entered promiscuous mode [ 437.760584][T23873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8529'. [ 437.881044][T23878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8532'. [ 438.177437][T23895] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8542'. [ 438.198026][T23895] ksmbd: Unknown IPC event: 1, ignore. [ 438.510205][T23911] IPVS: Unknown mcast interface: bridge_slave_0 [ 439.050184][T23951] __nla_validate_parse: 2 callbacks suppressed [ 439.050206][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8567'. [ 439.092037][T23953] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8569'. [ 439.108689][T23953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8569'. [ 439.135129][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8569'. [ 439.617263][T23986] xt_l2tp: v2 tid > 0xffff: 37482740 [ 439.814751][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8590'. [ 440.194228][T24021] nbd: must specify an index to disconnect [ 440.256928][T24026] vlan1: entered promiscuous mode [ 440.279285][T24026] bridge0: entered promiscuous mode [ 440.473767][T24038] macsec0: entered promiscuous mode [ 440.484821][T24040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.513798][T24038] macsec0: left promiscuous mode [ 441.160700][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8632'. [ 441.171934][T24085] sctp: [Deprecated]: syz.1.8630 (pid 24085) Use of int in max_burst socket option deprecated. [ 441.171934][T24085] Use struct sctp_assoc_value instead [ 441.198734][T24087] gre0: left promiscuous mode [ 441.233835][T24086] vlan0: entered promiscuous mode [ 441.537279][T24103] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8638'. [ 442.532864][T24160] netlink: 'syz.4.8665': attribute type 1 has an invalid length. [ 442.546182][T24160] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8665'. [ 442.772943][T24172] netlink: 'syz.2.8670': attribute type 4 has an invalid length. [ 443.340835][T24204] vlan1: entered promiscuous mode [ 443.589567][T24219] TCP: TCP_TX_DELAY enabled [ 443.741457][T24226] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8693'. [ 443.799621][T24232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.893347][T24234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8699'. [ 443.922951][T24238] netlink: 'syz.3.8698': attribute type 2 has an invalid length. [ 443.973545][T24238] netlink: 'syz.3.8698': attribute type 1 has an invalid length. [ 444.345209][T24262] __nla_validate_parse: 1 callbacks suppressed [ 444.345229][T24262] netlink: 268 bytes leftover after parsing attributes in process `syz.2.8711'. [ 444.363107][T24262] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8711'. [ 444.372775][T24262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8711'. [ 444.750704][T24286] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8721'. [ 444.785758][T24288] netlink: 'syz.3.8723': attribute type 1 has an invalid length. [ 444.828436][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8725'. [ 444.865101][T24292] netlink: 'syz.4.8724': attribute type 3 has an invalid length. [ 445.183783][T24309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8733'. [ 445.468224][T24325] netlink: 'syz.2.8741': attribute type 4 has an invalid length. [ 446.188368][T24345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8750'. [ 446.932340][T24383] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 446.936096][T24385] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8768'. [ 446.953666][T24385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.028896][T24451] Bluetooth: MGMT ver 1.23 [ 448.606305][T24485] netlink: 67 bytes leftover after parsing attributes in process `syz.3.8820'. [ 449.155735][T24516] netlink: 'syz.3.8832': attribute type 8 has an invalid length. [ 449.252388][T24520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8836'. [ 449.277449][T24526] xt_time: unknown flags 0xf4 [ 449.285031][T24520] nbd: illegal input index -1113835520 [ 449.692400][T24549] __nla_validate_parse: 1 callbacks suppressed [ 449.692422][T24549] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8849'. [ 450.020805][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8860'. [ 450.041947][T24574] netlink: 'syz.2.8862': attribute type 3 has an invalid length. [ 450.311617][T24590] netlink: 'syz.3.8870': attribute type 10 has an invalid length. [ 450.356253][T24590] netlink: 'syz.3.8870': attribute type 10 has an invalid length. [ 450.378065][T24590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8870'. [ 450.852195][T24623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8881'. [ 450.986059][T24633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8887'. [ 451.023354][T24637] tipc: MTU too low for tipc bearer [ 451.776656][T24685] atomic_op ffff888032557998 conn xmit_atomic 0000000000000000 [ 451.988182][T24701] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 452.082181][T24707] : entered promiscuous mode [ 452.185908][T24713] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 452.298762][T24721] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8928'. [ 452.843169][T24755] netlink: 'syz.0.8943': attribute type 2 has an invalid length. [ 454.087267][T24835] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8981'. [ 454.447634][T24855] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8993'. [ 454.467569][T24855] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8993'. [ 454.504058][T24859] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 455.608274][T24924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9027'. [ 455.851961][T24930] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9030'. [ 456.260121][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9039'. [ 456.451307][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9042'. [ 456.851303][T24973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9051'. [ 456.864635][T24973] netlink: 'syz.1.9051': attribute type 4 has an invalid length. [ 457.510819][T25001] block nbd1: not configured, cannot reconfigure [ 457.540786][T25003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9065'. [ 458.063954][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9081'. [ 458.206487][T25042] tipc: Enabling of bearer rejected, failed to enable media [ 458.668800][T25067] "syz.1.9096" (25067) uses obsolete ecb(arc4) skcipher [ 460.882851][T25201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9157'. [ 460.968706][T25205] netlink: 280 bytes leftover after parsing attributes in process `syz.4.9159'. [ 461.124540][T25212] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9162'. [ 461.464609][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9172'. [ 461.686635][T25249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9180'. [ 461.735186][T25253] netlink: 'syz.4.9182': attribute type 58 has an invalid length. [ 461.759802][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9182'. [ 461.873076][T25257] tipc: Enabling of bearer rejected, failed to enable media [ 462.148575][T25277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9194'. [ 462.579054][T25299] xt_hashlimit: size too large, truncated to 1048576 [ 462.960890][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9209'. [ 463.205261][T25323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9215'. [ 463.777764][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9234'. [ 464.065469][T25380] xt_l2tp: unknown flags: 51 [ 464.373610][T25398] openvswitch: netlink: Key type 769 is out of range max 32 [ 465.437560][T25443] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 465.456733][T25443] bond3 (unregistering): Released all slaves [ 466.273877][T25495] __nla_validate_parse: 6 callbacks suppressed [ 466.273898][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9297'. [ 467.369465][T25569] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 467.482069][T25577] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9338'. [ 467.636627][T25588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9342'. [ 467.713763][T25591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9345'. [ 467.876228][T25597] sch_fq: defrate 4294967293 ignored. [ 467.882581][T25593] smc: net device hsr0 applied user defined pnetid SYZ2 [ 467.962857][T25601] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.9350'. [ 468.000582][T25601] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.9350'. [ 468.086201][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9352'. [ 468.462279][T25635] netlink: 'syz.1.9364': attribute type 1 has an invalid length. [ 468.509973][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9367'. [ 468.520381][T25641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9367'. [ 468.530742][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9367'. [ 468.540192][T25641] netlink: 'syz.4.9367': attribute type 5 has an invalid length. [ 468.680233][ T24] IPVS: starting estimator thread 0... [ 468.809374][T25649] IPVS: using max 28 ests per chain, 67200 per kthread [ 468.932079][T25667] netlink: 'syz.0.9380': attribute type 1 has an invalid length. [ 469.483414][T25703] netlink: 'syz.3.9398': attribute type 2 has an invalid length. [ 469.791041][T25717] : option downdelay: invalid value (18446744073709547007) [ 469.808916][T25717] : option downdelay: allowed values 0 - 2147483647 [ 469.819624][T25717]  (unregistering): Released all slaves [ 470.342688][T25755] netlink: 'syz.2.9423': attribute type 10 has an invalid length. [ 470.566167][T25767] netlink: 'syz.0.9428': attribute type 1 has an invalid length. [ 472.627070][T25875] xt_limit: Overflow, try lower: 324382443/0 [ 472.971913][T25896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.558789][T25934] __nla_validate_parse: 3 callbacks suppressed [ 473.558813][T25934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9506'. [ 474.217739][T25969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9523'. [ 474.749098][T25950] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 475.073866][T26009] netlink: 'syz.4.9542': attribute type 1 has an invalid length. [ 475.133820][T26011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9543'. [ 475.299565][T26020] netlink: 804 bytes leftover after parsing attributes in process `syz.1.9547'. [ 475.395057][T26023] IPVS: Unknown mcast interface: veth0_to_bond [ 475.794939][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9560'. [ 476.025932][T26057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9565'. [ 476.513944][T26090] netlink: 'syz.0.9581': attribute type 29 has an invalid length. [ 476.600204][T26096] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 476.900687][T26116] vlan2: entered promiscuous mode [ 476.911675][T26116] gretap0: entered promiscuous mode [ 477.256069][T26134] Cannot find set identified by id 28724 to match [ 477.810967][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9614'. [ 478.146807][T26181] netlink: 'syz.2.9624': attribute type 1 has an invalid length. [ 478.155433][T26181] netlink: 'syz.2.9624': attribute type 1 has an invalid length. [ 478.444315][T26190] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 479.215148][T26225] udevd[26225]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 479.558474][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9657'. [ 479.728928][T26263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9661'. [ 480.011640][T26284] netlink: 332 bytes leftover after parsing attributes in process `syz.0.9672'. [ 480.189772][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9675'. [ 480.277404][T26298] netlink: 'syz.2.9678': attribute type 1 has an invalid length. [ 480.286308][T26298] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9678'. [ 480.336576][T26298] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9678'. [ 480.349356][T26298] netlink: 'syz.2.9678': attribute type 1 has an invalid length. [ 480.429374][T26302] Bluetooth: MGMT ver 1.23 [ 481.168515][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9704'. [ 481.222793][T26352] netlink: 'syz.3.9704': attribute type 1 has an invalid length. [ 481.644607][T26378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9717'. [ 481.945291][T26392] ip6gretap2: entered allmulticast mode [ 482.500029][T26425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9739'. [ 482.584992][T26433] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9744'. [ 482.815203][T26445] tipc: Started in network mode [ 482.836896][T26445] tipc: Node identity , cluster identity 4711 [ 482.860910][T26445] tipc: Failed to obtain node identity [ 482.867341][T26445] tipc: Enabling of bearer rejected, failed to enable media [ 482.970827][T26455] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 484.699802][T26546] __nla_validate_parse: 2 callbacks suppressed [ 484.699826][T26546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9799'. [ 485.646767][T26583] udevd[26583]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 486.046527][T26622] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 486.115191][T26628] tipc: Started in network mode [ 486.144624][T26628] tipc: Node identity , cluster identity 4711 [ 486.159022][T26628] tipc: Failed to set node id, please configure manually [ 486.166539][T26628] tipc: Enabling of bearer rejected, failed to enable media [ 486.593291][T26657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9843'. [ 488.029090][T26717] tipc: Enabling not permitted [ 488.047969][T26717] tipc: Enabling of bearer rejected, failed to enable media [ 488.208407][T26727] tipc: Invalid UDP bearer configuration [ 488.208477][T26727] tipc: Enabling of bearer rejected, failed to enable media [ 488.239307][T26733] netlink: 'syz.1.9879': attribute type 4 has an invalid length. [ 488.499536][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9885'. [ 488.520322][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9885'. [ 488.795903][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.929937][T26777] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 489.269151][T26795] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9909'. [ 489.294925][T26800] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9911'. [ 489.298199][T26795] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9909'. [ 489.305164][T26800] netlink: 'syz.2.9911': attribute type 2 has an invalid length. [ 489.358571][T26795] netlink: 'syz.1.9909': attribute type 5 has an invalid length. [ 489.374317][T26795] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9909'. [ 489.875720][T26826] netlink: 'syz.2.9925': attribute type 298 has an invalid length. [ 490.124951][T26842] netlink: 'syz.4.9932': attribute type 29 has an invalid length. [ 490.645968][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9946'. [ 490.772525][T26881] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9951'. [ 490.784680][T26879] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9950'. [ 490.806155][T26881] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9951'. [ 490.820808][T26885] vlan0: entered promiscuous mode [ 490.826058][T26885] geneve1: entered promiscuous mode [ 490.832604][T26885] vlan0: entered allmulticast mode [ 490.838983][T26879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9950'. [ 490.849255][T26885] geneve1: entered allmulticast mode [ 490.874877][T26879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9950'. [ 491.006596][T26889] pim6reg: entered allmulticast mode [ 491.043003][T26895] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 491.062326][T26889] pim6reg: left allmulticast mode [ 491.299244][T26910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9966'. [ 492.022477][ T29] audit: type=1804 audit(1775763646.659:4): pid=26958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9987" name="/newroot/1979/cgroup.controllers" dev="tmpfs" ino=9924 res=1 errno=0 [ 492.087759][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9989'. [ 492.087891][ T29] audit: type=1800 audit(1775763646.679:5): pid=26958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9987" name="cgroup.controllers" dev="tmpfs" ino=9924 res=0 errno=0 [ 492.142736][T26960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9989'. [ 492.188453][T26964] bond0: left allmulticast mode [ 492.209885][T26964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.296671][T26970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9993'. [ 493.945038][T27031] netlink: 'syz.3.10025': attribute type 10 has an invalid length. [ 493.980368][T27031] `: Port device dummy0 added [ 494.003513][T27039] netlink: 'syz.3.10025': attribute type 10 has an invalid length. [ 494.078747][T27039] `: Port device dummy0 removed [ 494.112969][T27039] dummy0: entered allmulticast mode [ 494.129211][T27039] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 495.888847][T27124] __nla_validate_parse: 3 callbacks suppressed [ 495.888868][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10068'. [ 496.066049][T27135] geneve1: entered promiscuous mode [ 496.079940][T27135] macsec1: entered promiscuous mode [ 496.085540][T27135] macsec1: entered allmulticast mode [ 496.116779][T27135] geneve1: entered allmulticast mode [ 496.504102][T27150] netlink: 324 bytes leftover after parsing attributes in process `syz.4.10081'. [ 496.540794][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10082'. [ 496.768689][T27158] pim6reg: entered allmulticast mode [ 496.788692][T27158] pim6reg: left allmulticast mode [ 497.108077][T27176] netlink: 'syz.3.10094': attribute type 1 has an invalid length. [ 497.147430][T27176] netlink: 'syz.3.10094': attribute type 2 has an invalid length. [ 497.314195][T27188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10100'. [ 498.875593][T27261] vlan2: entered promiscuous mode [ 498.885180][T27261] virt_wifi0: entered promiscuous mode [ 499.135147][T27277] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10143'. [ 499.665384][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10158'. [ 500.090019][T27332] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10171'. [ 500.152743][T27337] netlink: 'syz.2.10173': attribute type 15 has an invalid length. [ 502.194498][T27433] xt_hashlimit: size too large, truncated to 1048576 [ 502.315913][T27442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10219'. [ 502.362693][T27442] tipc: Invalid UDP bearer configuration [ 502.362752][T27442] tipc: Enabling of bearer rejected, failed to enable media [ 502.794096][T27468] netlink: 'syz.0.10231': attribute type 1 has an invalid length. [ 503.728004][T27514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.823112][T27522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10257'. [ 504.794811][T27584] block nbd3: not configured, cannot reconfigure [ 505.716574][T27646] netlink: 'syz.4.10319': attribute type 28 has an invalid length. [ 505.903494][T27656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10322'. [ 506.316693][T27683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10336'. [ 506.803738][T27714] ip6tnl7: entered allmulticast mode [ 507.187192][T27734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10361'. [ 507.589805][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10371'. [ 507.614362][T27760] xt_policy: too many policy elements [ 507.736624][T27768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10376'. [ 507.910120][T27776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10381'. [ 507.935706][T27776] tipc: Enabling of bearer rejected, failed to enable media [ 508.136268][T27794] netlink: 'syz.4.10390': attribute type 9 has an invalid length. [ 508.321483][T27808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10397'. [ 508.619168][T27826] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10403'. [ 508.668000][T27826] netlink: 'syz.3.10403': attribute type 9 has an invalid length. [ 509.012886][T27850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10417'. [ 509.852650][T27899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10441'. [ 510.215307][T27918] netem: change failed [ 510.340382][T27926] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 511.183111][T27985] netlink: 'syz.4.10482': attribute type 3 has an invalid length. [ 511.191914][T27985] netlink: 'syz.4.10482': attribute type 1 has an invalid length. [ 511.209801][T27985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10482'. [ 511.907075][T28033] macvtap0: entered promiscuous mode [ 511.945827][T28032] macvtap0: left promiscuous mode [ 511.956329][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10510'. [ 511.998086][T28038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10510'. [ 512.037735][T28038] netlink: 'syz.2.10510': attribute type 15 has an invalid length. [ 512.630566][T28081] IPVS: Error connecting to the multicast addr [ 512.982466][T28101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10538'. [ 513.142291][T28105] bond2: Removing last ns target with arp_interval on [ 513.679675][T28141] macsec2: entered allmulticast mode [ 513.690272][T28141] macsec0: entered allmulticast mode [ 514.188845][T28176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10575'. [ 514.350734][T28188] netlink: 'syz.1.10579': attribute type 5 has an invalid length. [ 514.484855][T28194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10583'. [ 514.503197][T28197] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10586'. [ 514.514068][T28194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10583'. [ 514.535557][T28200] netlink: 'syz.1.10585': attribute type 13 has an invalid length. [ 514.553329][T28198] macsec2: entered promiscuous mode [ 514.847653][T28213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10593'. [ 514.917611][T28213] macvtap1: entered promiscuous mode [ 514.940926][T28213] veth1_to_hsr: entered promiscuous mode [ 514.946837][T28213] macvtap1: entered allmulticast mode [ 514.990873][T28213] veth1_to_hsr: entered allmulticast mode [ 515.752216][T28241] ipvlan0: entered promiscuous mode [ 515.759585][T28250] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10609'. [ 515.962464][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10619'. [ 516.327744][T28293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10630'. [ 516.629659][T28310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10638'. [ 516.715479][T28315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.369891][T28355] netlink: 'syz.0.10660': attribute type 2 has an invalid length. [ 517.436600][T28359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.100743][T28389] hsr0 speed is unknown, defaulting to 1000 [ 518.405774][T28389] wg1 speed is unknown, defaulting to 1000 [ 518.954142][T28434] __nla_validate_parse: 4 callbacks suppressed [ 518.954166][T28434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10698'. [ 520.162218][T28494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10729'. [ 520.391377][T28510] vlan0: entered promiscuous mode [ 520.396711][T28510] bridge0: entered promiscuous mode [ 520.880473][T28541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10751'. [ 521.249112][T28565] netlink: 'syz.0.10763': attribute type 1 has an invalid length. [ 521.269599][T28565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.310668][T28567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10764'. [ 521.397320][T28575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10767'. [ 521.427453][T28575] netlink: 'syz.3.10767': attribute type 1 has an invalid length. [ 521.436452][T28577] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10768'. [ 521.454694][T28575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10767'. [ 521.498439][T28577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10768'. [ 521.528250][T28577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10768'. [ 521.689123][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10774'. [ 521.969640][T28602] netlink: 'syz.3.10781': attribute type 14 has an invalid length. [ 522.020577][T28600] syz.4.10780 (28600) used greatest stack depth: 17472 bytes left [ 522.371388][T28624] tipc: Enabling of bearer rejected, failed to enable media [ 523.235845][T28672] tipc: Enabling of bearer rejected, media not registered [ 524.193936][T28727] __nla_validate_parse: 5 callbacks suppressed [ 524.193958][T28727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10842'. [ 524.385305][T28744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10849'. [ 524.462238][T28749] netlink: 'syz.0.10851': attribute type 10 has an invalid length. [ 524.605017][T28756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10859'. [ 525.089128][T28788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.564623][T28818] netlink: 'syz.4.10885': attribute type 15 has an invalid length. [ 526.600813][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.622668][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 526.637311][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.648358][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 526.658614][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.666759][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 526.676718][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.703951][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 526.749177][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10916'. [ 526.760184][T28875] macsec2: entered promiscuous mode [ 526.774632][T28875] virt_wifi0: entered promiscuous mode [ 526.792052][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.800805][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 526.841845][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.873446][T28871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10912'. [ 526.938255][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 526.986527][T28871] netlink: 'syz.1.10912': attribute type 29 has an invalid length. [ 528.525939][T28978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.980748][T29006] : renamed from bond_slave_0 [ 529.020621][T29008] vlan0: entered promiscuous mode [ 529.497745][T29038] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 530.518763][T29098] __nla_validate_parse: 28 callbacks suppressed [ 530.518785][T29098] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11020'. [ 532.691907][T29220] netlink: 'syz.0.11069': attribute type 11 has an invalid length. [ 532.702062][T29220] validate_nla: 21 callbacks suppressed [ 532.702086][T29220] netlink: 'syz.0.11069': attribute type 4 has an invalid length. [ 532.737568][T29220] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.11069'. [ 533.031327][T29239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11079'. [ 533.054450][T29240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11080'. [ 533.081562][T29243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11081'. [ 534.156694][T29316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11118'. [ 534.776938][T29360] netlink: 452 bytes leftover after parsing attributes in process `syz.4.11138'. [ 534.787104][T29360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11138'. [ 534.851217][T29362] netlink: 'syz.1.11139': attribute type 6 has an invalid length. [ 535.164223][T29382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11147'. [ 535.189769][T29382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11147'. [ 535.210301][T29382] netlink: 'syz.4.11147': attribute type 13 has an invalid length. [ 535.239994][T29382] netlink: 'syz.4.11147': attribute type 11 has an invalid length. [ 535.306187][T29390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 535.485559][T29402] lo: entered allmulticast mode [ 535.506532][T29402] lo: left allmulticast mode [ 535.631950][T29414] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11163'. [ 535.730261][T29420] netlink: 'syz.2.11164': attribute type 8 has an invalid length. [ 535.840730][T29425] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11168'. [ 535.999121][T29435] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11172'. [ 536.323764][T29403] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 536.505821][T29461] hsr0 speed is unknown, defaulting to 1000 [ 536.824016][T29461] wg1 speed is unknown, defaulting to 1000 [ 537.031547][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11191'. [ 537.280360][T29495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11201'. [ 537.327023][T29495] nbd: illegal input index 38656 [ 537.691806][T29515] netlink: 272 bytes leftover after parsing attributes in process `syz.0.11210'. [ 537.773895][T29521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11212'. [ 538.133298][T29541] ipip1: entered promiscuous mode [ 538.846329][T29581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11243'. [ 539.105807][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11249'. [ 539.148591][T29595] dvmrp0: entered allmulticast mode [ 539.890947][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11269'. [ 539.933796][T29637] netlink: 'syz.3.11269': attribute type 19 has an invalid length. [ 539.966386][T29637] netlink: 'syz.3.11269': attribute type 20 has an invalid length. [ 539.977063][T29642] netlink: 'syz.0.11271': attribute type 11 has an invalid length. [ 541.806168][T29724] __nla_validate_parse: 2 callbacks suppressed [ 541.806188][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11307'. [ 541.913268][T29732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11311'. [ 542.226736][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11320'. [ 542.247149][T29747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11320'. [ 542.710682][T29773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11330'. [ 542.860760][T29773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11330'. [ 542.889654][T29780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11336'. [ 542.900828][T29780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11336'. [ 542.960742][T29699] block nbd64: NBD_DISCONNECT [ 543.053125][T29789] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11338'. [ 543.705458][T29833] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11358'. [ 545.509256][T29892] nbd: couldn't find a device at index 65546 [ 545.887454][T29908] netlink: 'syz.0.11390': attribute type 11 has an invalid length. [ 547.361338][T29976] __nla_validate_parse: 2 callbacks suppressed [ 547.361371][T29976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11424'. [ 547.920094][T29999] block nbd2: Unsupported socket: should be TCP or UNIX. [ 548.288423][T30004] nbd2: detected capacity change from 0 to 127 [ 548.307726][ T5839] block nbd2: Receive control failed (result -104) [ 548.307726][ T5833] block nbd2: Receive control failed (result -32) [ 548.614987][T30038] netlink: 'syz.2.11451': attribute type 10 has an invalid length. [ 548.680783][T30038] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 548.696616][T30038] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 548.740310][T30036] netpci0: tun_chr_ioctl cmd 1074025678 [ 548.746089][T30036] netpci0: group set to 0 [ 549.046127][T30060] netlink: 'syz.3.11461': attribute type 10 has an invalid length. [ 549.081782][T30060] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 549.171485][T30063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11463'. [ 549.194212][T30063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11463'. [ 549.215626][T30063] netlink: 'syz.0.11463': attribute type 15 has an invalid length. [ 549.248648][T30063] netlink: 'syz.0.11463': attribute type 18 has an invalid length. [ 549.376624][T30074] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11465'. [ 549.608382][T30088] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11473'. [ 549.905930][T30103] geneve5: entered promiscuous mode [ 550.789206][ T5833] block nbd3: Receive control failed (result -32) [ 550.818757][T30109] nbd3: detected capacity change from 0 to 63 [ 550.834130][T30068] block nbd3: Dead connection, failed to find a fallback [ 550.842373][T30068] block nbd3: shutting down sockets [ 550.849363][T30068] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.860727][T30068] Buffer I/O error on dev nbd3, logical block 0, async page read [ 550.869055][T30068] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.880432][T30068] Buffer I/O error on dev nbd3, logical block 1, async page read [ 550.907683][T30068] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.928389][T30068] Buffer I/O error on dev nbd3, logical block 2, async page read [ 550.932472][T30118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11486'. [ 550.936458][T30068] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.978518][T30068] Buffer I/O error on dev nbd3, logical block 3, async page read [ 551.022530][T30118] gtp0: entered promiscuous mode [ 551.027571][T30118] gtp0: entered allmulticast mode [ 551.029232][T30068] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 551.058487][T30068] Buffer I/O error on dev nbd3, logical block 0, async page read [ 551.066482][T30068] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 551.136868][T30068] Buffer I/O error on dev nbd3, logical block 1, async page read [ 551.148603][T30068] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 551.170934][T30068] Buffer I/O error on dev nbd3, logical block 2, async page read [ 551.191396][T30068] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 551.233264][T30068] Buffer I/O error on dev nbd3, logical block 3, async page read [ 551.268141][T30068] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 551.295207][T30068] Buffer I/O error on dev nbd3, logical block 0, async page read [ 551.322283][T30068] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 551.350112][T30068] Buffer I/O error on dev nbd3, logical block 1, async page read [ 551.377456][T30068] ldm_validate_partition_table(): Disk read failed. [ 551.399735][T30068] Dev nbd3: unable to read RDB block 0 [ 551.405943][T30068] nbd3: unable to read partition table [ 551.452353][T30068] ldm_validate_partition_table(): Disk read failed. [ 551.478751][T30068] Dev nbd3: unable to read RDB block 0 [ 551.510726][T30068] nbd3: unable to read partition table [ 551.517362][T30148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11501'. [ 551.966917][T30167] vlan0: entered promiscuous mode [ 552.210782][T30185] netlink: 'syz.2.11518': attribute type 2 has an invalid length. [ 552.369591][T30190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11521'. [ 552.583181][T30203] netlink: 'syz.3.11525': attribute type 2 has an invalid length. [ 552.629399][T30203] : entered promiscuous mode [ 552.649416][T30203] netlink: 'syz.3.11525': attribute type 2 has an invalid length. [ 552.669313][T30203] : left promiscuous mode [ 552.686648][T30207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11526'. [ 552.716791][T30208] erspan0: entered promiscuous mode [ 553.024193][T30220] netlink: 'syz.2.11532': attribute type 9 has an invalid length. [ 553.322371][T30232] tipc: New replicast peer: 255.255.255.255 [ 553.335806][T30232] tipc: Enabled bearer , priority 10 [ 554.457933][ T5915] tipc: Node number set to 11777 [ 556.142126][T30281] netlink: 232 bytes leftover after parsing attributes in process `syz.0.11559'. [ 556.898610][T30323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.925158][T30326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11580'. [ 557.440898][T30353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11594'. [ 557.866590][T30368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11602'. [ 558.066465][T30382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11607'. [ 558.201654][T30388] nbd: socks must be embedded in a SOCK_ITEM attr [ 558.219187][T30388] block nbd4: shutting down sockets [ 559.305578][T30430] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11629'. [ 559.506669][T30438] netlink: 'syz.4.11632': attribute type 2 has an invalid length. [ 559.567094][T30438] : entered promiscuous mode [ 559.605461][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11634'. [ 559.616777][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11634'. [ 559.629684][T30438] netlink: 'syz.4.11632': attribute type 2 has an invalid length. [ 559.662121][T30438] : left promiscuous mode [ 560.435067][T30486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11654'. [ 560.512329][T30487] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11653'. [ 561.114959][T30518] netlink: 'syz.4.11668': attribute type 1 has an invalid length. [ 561.160689][T30518] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11668'. [ 561.364444][T30531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11674'. [ 561.451966][T30536] bond0: entered promiscuous mode [ 561.457326][T30536] bond_slave_0: entered promiscuous mode [ 561.465193][T30536] bond_slave_1: entered promiscuous mode [ 561.483671][T30536] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 561.512234][T30536] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 562.687333][T30587] tap0: tun_chr_ioctl cmd 1074025681 [ 562.756019][T30592] __nla_validate_parse: 2 callbacks suppressed [ 562.756039][T30592] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11699'. [ 563.347065][T30621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11714'. [ 563.361957][T30621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11714'. [ 563.419158][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11715'. [ 563.490624][T30625] macvlan2: entered allmulticast mode [ 563.496121][T30625] hsr0: entered allmulticast mode [ 563.513189][T30632] netlink: 'syz.4.11719': attribute type 4 has an invalid length. [ 563.528409][T30625] hsr_slave_0: entered allmulticast mode [ 563.544544][T30625] hsr_slave_1: entered allmulticast mode [ 563.579324][T30625] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 563.898290][T30652] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 564.277072][T30675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11740'. [ 564.287186][T30675] netlink: 'syz.2.11740': attribute type 15 has an invalid length. [ 564.296719][T30675] netlink: 'syz.2.11740': attribute type 25 has an invalid length. [ 564.305237][T30675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11740'. [ 564.760514][T30694] sctp: [Deprecated]: syz.0.11749 (pid 30694) Use of int in max_burst socket option deprecated. [ 564.760514][T30694] Use struct sctp_assoc_value instead [ 565.973022][T30769] netlink: 'syz.1.11781': attribute type 1 has an invalid length. [ 566.743000][ T29] audit: type=1804 audit(1775763721.379:6): pid=30813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11802" name="/newroot/2408/cgroup.controllers" dev="tmpfs" ino=12078 res=1 errno=0 [ 566.778722][T30818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11803'. [ 566.801342][ T29] audit: type=1800 audit(1775763721.379:7): pid=30813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11802" name="cgroup.controllers" dev="tmpfs" ino=12078 res=0 errno=0 [ 567.481985][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11824'. [ 567.486700][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11825'. [ 567.505146][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11825'. [ 568.109362][T30892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.124076][T30892] 8021q: adding VLAN 0 to HW filter on device ` [ 568.141876][T30892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.213461][T30905] __nla_validate_parse: 1 callbacks suppressed [ 568.213483][T30905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11841'. [ 568.645237][T30930] dummy0: entered allmulticast mode [ 568.652195][T30930] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11852'. [ 568.664581][T30930] dummy0 (unregistering): left allmulticast mode [ 569.081080][T30956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11864'. [ 569.526504][T30983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11877'. [ 569.538066][T30983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11877'. [ 569.961136][T31005] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 569.976343][T31005] syzkaller1: linktype set to 1 [ 570.199984][T31022] netlink: 'syz.0.11894': attribute type 14 has an invalid length. [ 570.263163][T31026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11896'. [ 570.841895][T31051] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11905'. [ 571.603703][T31092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11926'. [ 571.615560][T31092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11926'. [ 571.625746][T31092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11926'. [ 572.653454][T31156] netlink: 'syz.0.11954': attribute type 21 has an invalid length. [ 573.447484][T31194] __nla_validate_parse: 3 callbacks suppressed [ 573.447515][T31194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11971'. [ 573.596723][T31201] netem: change failed [ 573.719904][T31206] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11978'. [ 574.380329][T31233] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 574.390196][T31233] syzkaller1: linktype set to 825 [ 575.058734][T31260] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12002'. [ 575.216648][T31266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12006'. [ 575.247351][T31266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12006'. [ 575.323489][T31272] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12008'. [ 575.344293][T31274] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12009'. [ 575.924310][T31315] sctp: [Deprecated]: syz.2.12023 (pid 31315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 575.924310][T31315] Use struct sctp_sack_info instead [ 576.514436][T31344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12037'. [ 576.529903][T31342] hsr0 speed is unknown, defaulting to 1000 [ 577.040060][T31361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12044'. [ 577.068851][T31342] wg1 speed is unknown, defaulting to 1000 [ 578.568415][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12073'. [ 578.592041][ T1706] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.601979][ T1706] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.611238][ T1706] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.619068][ T1706] block nbd2: Connection timed out, retrying (0/2 alive) [ 578.627296][ T1706] block nbd2: Dead connection, failed to find a fallback [ 578.637012][ T1706] block nbd2: shutting down sockets [ 578.644706][ T1706] blk_print_req_error: 138 callbacks suppressed [ 578.644731][ T1706] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.664545][ T1706] buffer_io_error: 138 callbacks suppressed [ 578.664568][ T1706] Buffer I/O error on dev nbd2, logical block 3, async page read [ 578.681131][ T1706] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.691062][ T1706] Buffer I/O error on dev nbd2, logical block 2, async page read [ 578.699293][ T1706] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.708964][ T1706] Buffer I/O error on dev nbd2, logical block 1, async page read [ 578.717631][ T1706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.728263][ T1706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 578.738399][T30002] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.748879][T30002] Buffer I/O error on dev nbd2, logical block 0, async page read [ 578.756826][T30002] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.798517][T30002] Buffer I/O error on dev nbd2, logical block 1, async page read [ 578.806441][T30002] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.841765][T30002] Buffer I/O error on dev nbd2, logical block 2, async page read [ 578.872420][T31434] bond4: entered promiscuous mode [ 578.878478][T31434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 578.880286][T31437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12077'. [ 578.888791][T31434] bridge0: port 3(bond4) entered blocking state [ 578.904644][T31434] bridge0: port 3(bond4) entered disabled state [ 578.911822][T31434] bond4: entered allmulticast mode [ 578.917072][T30002] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.917108][T30002] Buffer I/O error on dev nbd2, logical block 3, async page read [ 578.917282][T30002] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 578.960602][T31437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12077'. [ 578.995981][T30002] Buffer I/O error on dev nbd2, logical block 0, async page read [ 578.998962][T31439] netlink: 'syz.3.12078': attribute type 4 has an invalid length. [ 579.028463][T30002] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.048531][T30002] Buffer I/O error on dev nbd2, logical block 1, async page read [ 579.070158][T30002] ldm_validate_partition_table(): Disk read failed. [ 579.077985][T31439] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12078'. [ 579.101455][T30002] Dev nbd2: unable to read RDB block 0 [ 579.136293][T30002] nbd2: unable to read partition table [ 579.173304][T30002] ldm_validate_partition_table(): Disk read failed. [ 579.228967][T30002] Dev nbd2: unable to read RDB block 0 [ 579.235174][T30002] nbd2: unable to read partition table [ 580.924654][T31533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12122'. [ 580.936070][T31533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12122'. [ 581.010792][T31537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12123'. [ 581.388603][T31558] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12134'. [ 581.522957][T31568] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 582.219512][T31615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12161'. [ 583.363258][T31679] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 583.593798][T31693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12195'. [ 583.623473][T31693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12195'. [ 583.660760][T31693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12195'. [ 583.687213][T31693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12195'. [ 583.709797][T31693] netlink: 'syz.4.12195': attribute type 6 has an invalid length. [ 584.478388][T31732] block nbd4: server does not support multiple connections per device. [ 584.492178][T31732] block nbd4: shutting down sockets [ 584.715811][T31750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12223'. [ 585.298226][T31782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12238'. [ 585.434549][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12242'. [ 585.466543][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12242'. [ 585.508115][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12242'. [ 585.547820][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12242'. [ 586.066684][T31814] tipc: New replicast peer: 127.0.0.1 [ 586.078610][T31814] tipc: Enabled bearer , priority 10 [ 586.640993][T31851] sctp: [Deprecated]: syz.4.12271 (pid 31851) Use of int in max_burst socket option. [ 586.640993][T31851] Use struct sctp_assoc_value instead [ 587.070959][T31876] netlink: 'syz.0.12282': attribute type 1 has an invalid length. [ 587.085793][T31876] netlink: 'syz.0.12282': attribute type 2 has an invalid length. [ 587.110114][T31876] netlink: 'syz.0.12282': attribute type 1 has an invalid length. [ 587.121116][T31876] netlink: 'syz.0.12282': attribute type 3 has an invalid length. [ 587.940647][T31924] ipvlan0: left promiscuous mode [ 588.941658][T31979] netlink: 'syz.1.12329': attribute type 1 has an invalid length. [ 588.958421][T31979] __nla_validate_parse: 5 callbacks suppressed [ 588.958451][T31979] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12329'. [ 589.030914][T31981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12330'. [ 589.159632][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12332'. [ 589.358652][T31995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12337'. [ 589.923189][T32014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12347'. [ 590.366343][T32044] [ 590.368781][T32044] ====================================================== [ 590.376013][T32044] WARNING: possible circular locking dependency detected [ 590.383112][T32044] syzkaller #0 Not tainted [ 590.387571][T32044] ------------------------------------------------------ [ 590.394621][T32044] syz.0.12358/32044 is trying to acquire lock: [ 590.400815][T32044] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 590.410303][T32044] [ 590.410303][T32044] but task is already holding lock: [ 590.417710][T32044] ffff8880565ce0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 590.427534][T32044] [ 590.427534][T32044] which lock already depends on the new lock. [ 590.427534][T32044] [ 590.437990][T32044] [ 590.437990][T32044] the existing dependency chain (in reverse order) is: [ 590.447057][T32044] [ 590.447057][T32044] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 590.455040][T32044] lock_sock_nested+0x41/0x100 [ 590.460397][T32044] mptcp_sendmsg_fastopen+0x128/0x580 [ 590.466396][T32044] mptcp_sendmsg+0x1961/0x1bf0 [ 590.471939][T32044] ____sys_sendmsg+0x5c7/0x9f0 [ 590.477274][T32044] ___sys_sendmsg+0x2a5/0x360 [ 590.482924][T32044] __sys_sendmmsg+0x27c/0x4e0 [ 590.488176][T32044] __x64_sys_sendmmsg+0xa0/0xc0 [ 590.493593][T32044] do_syscall_64+0x14d/0xf80 [ 590.498759][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.505300][T32044] [ 590.505300][T32044] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 590.513084][T32044] lock_sock_nested+0x41/0x100 [ 590.518414][T32044] inet_shutdown+0x6a/0x390 [ 590.523473][T32044] nbd_mark_nsock_dead+0x2e9/0x560 [ 590.529235][T32044] sock_shutdown+0x15e/0x260 [ 590.534420][T32044] nbd_clear_sock+0x24/0x170 [ 590.539670][T32044] nbd_config_put+0x2dd/0x580 [ 590.544992][T32044] nbd_genl_connect+0x19d5/0x1cf0 [ 590.550563][T32044] genl_family_rcv_msg_doit+0x22a/0x330 [ 590.556673][T32044] genl_rcv_msg+0x61c/0x7a0 [ 590.561741][T32044] netlink_rcv_skb+0x232/0x4b0 [ 590.567164][T32044] genl_rcv+0x28/0x40 [ 590.571693][T32044] netlink_unicast+0x80f/0x9b0 [ 590.577022][T32044] netlink_sendmsg+0x813/0xb40 [ 590.582521][T32044] ____sys_sendmsg+0x972/0x9f0 [ 590.588020][T32044] ___sys_sendmsg+0x2a5/0x360 [ 590.593280][T32044] __x64_sys_sendmsg+0x1bd/0x2a0 [ 590.598771][T32044] do_syscall_64+0x14d/0xf80 [ 590.604355][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.610993][T32044] [ 590.610993][T32044] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 590.618955][T32044] __mutex_lock+0x19f/0x1300 [ 590.624222][T32044] nbd_queue_rq+0x37b/0x1100 [ 590.629474][T32044] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 590.635593][T32044] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 590.642483][T32044] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 590.649034][T32044] blk_mq_run_hw_queue+0x348/0x4f0 [ 590.654967][T32044] blk_mq_dispatch_list+0xd16/0xe10 [ 590.660724][T32044] blk_mq_flush_plug_list+0x48d/0x570 [ 590.666647][T32044] __blk_flush_plug+0x3ed/0x4d0 [ 590.672219][T32044] __submit_bio+0x28d/0x580 [ 590.677398][T32044] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 590.683676][T32044] block_read_full_folio+0x599/0x830 [ 590.689536][T32044] filemap_read_folio+0x137/0x3b0 [ 590.695239][T32044] do_read_cache_folio+0x358/0x590 [ 590.701100][T32044] read_part_sector+0xb6/0x2b0 [ 590.706508][T32044] adfspart_check_ICS+0xa5/0xa40 [ 590.712004][T32044] bdev_disk_changed+0x7ba/0x1550 [ 590.717677][T32044] blkdev_get_whole+0x380/0x510 [ 590.723082][T32044] bdev_open+0x31e/0xd30 [ 590.727960][T32044] blkdev_open+0x470/0x610 [ 590.733082][T32044] do_dentry_open+0x785/0x14e0 [ 590.738394][T32044] vfs_open+0x3b/0x340 [ 590.743184][T32044] path_openat+0x2e08/0x3860 [ 590.748321][T32044] do_file_open+0x23e/0x4a0 [ 590.753366][T32044] do_sys_openat2+0x113/0x200 [ 590.758676][T32044] __x64_sys_openat+0x138/0x170 [ 590.764078][T32044] do_syscall_64+0x14d/0xf80 [ 590.769276][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.775721][T32044] [ 590.775721][T32044] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 590.783057][T32044] __mutex_lock+0x19f/0x1300 [ 590.788200][T32044] nbd_queue_rq+0xc6/0x1100 [ 590.793278][T32044] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 590.799375][T32044] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 590.806297][T32044] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 590.813011][T32044] blk_mq_run_hw_queue+0x348/0x4f0 [ 590.818683][T32044] blk_mq_dispatch_list+0xd16/0xe10 [ 590.824638][T32044] blk_mq_flush_plug_list+0x48d/0x570 [ 590.830671][T32044] __blk_flush_plug+0x3ed/0x4d0 [ 590.836192][T32044] __submit_bio+0x28d/0x580 [ 590.841272][T32044] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 590.847551][T32044] block_read_full_folio+0x599/0x830 [ 590.853403][T32044] filemap_read_folio+0x137/0x3b0 [ 590.859184][T32044] do_read_cache_folio+0x358/0x590 [ 590.864960][T32044] read_part_sector+0xb6/0x2b0 [ 590.870467][T32044] adfspart_check_ICS+0xa5/0xa40 [ 590.875987][T32044] bdev_disk_changed+0x7ba/0x1550 [ 590.881671][T32044] blkdev_get_whole+0x380/0x510 [ 590.887095][T32044] bdev_open+0x31e/0xd30 [ 590.891912][T32044] blkdev_open+0x470/0x610 [ 590.896905][T32044] do_dentry_open+0x785/0x14e0 [ 590.902222][T32044] vfs_open+0x3b/0x340 [ 590.906933][T32044] path_openat+0x2e08/0x3860 [ 590.912091][T32044] do_file_open+0x23e/0x4a0 [ 590.917150][T32044] do_sys_openat2+0x113/0x200 [ 590.922400][T32044] __x64_sys_openat+0x138/0x170 [ 590.927899][T32044] do_syscall_64+0x14d/0xf80 [ 590.933059][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.939511][T32044] [ 590.939511][T32044] -> #3 (set->srcu){.+.+}-{0:0}: [ 590.946678][T32044] __synchronize_srcu+0xca/0x300 [ 590.952172][T32044] elevator_switch+0x1e8/0x7a0 [ 590.957501][T32044] elevator_change+0x2cc/0x450 [ 590.962988][T32044] elevator_set_default+0x36c/0x430 [ 590.968825][T32044] blk_register_queue+0x366/0x430 [ 590.974445][T32044] __add_disk+0x677/0xd50 [ 590.979427][T32044] add_disk_fwnode+0xfb/0x480 [ 590.984758][T32044] nbd_dev_add+0x72c/0xb50 [ 590.989752][T32044] nbd_init+0x168/0x1f0 [ 590.994462][T32044] do_one_initcall+0x250/0x8d0 [ 590.999875][T32044] do_initcall_level+0x104/0x190 [ 591.005389][T32044] do_initcalls+0x59/0xa0 [ 591.010365][T32044] kernel_init_freeable+0x2a6/0x3e0 [ 591.016176][T32044] kernel_init+0x1d/0x1d0 [ 591.021068][T32044] ret_from_fork+0x51e/0xb90 [ 591.026221][T32044] ret_from_fork_asm+0x1a/0x30 [ 591.031631][T32044] [ 591.031631][T32044] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 591.039890][T32044] __mutex_lock+0x19f/0x1300 [ 591.045053][T32044] elevator_change+0x1b3/0x450 [ 591.050452][T32044] elevator_set_none+0xb5/0x140 [ 591.056081][T32044] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 591.062519][T32044] nbd_start_device+0x17f/0xb10 [ 591.067948][T32044] nbd_genl_connect+0x165b/0x1cf0 [ 591.073677][T32044] genl_family_rcv_msg_doit+0x22a/0x330 [ 591.079926][T32044] genl_rcv_msg+0x61c/0x7a0 [ 591.084983][T32044] netlink_rcv_skb+0x232/0x4b0 [ 591.090324][T32044] genl_rcv+0x28/0x40 [ 591.094982][T32044] netlink_unicast+0x80f/0x9b0 [ 591.100520][T32044] netlink_sendmsg+0x813/0xb40 [ 591.105952][T32044] ____sys_sendmsg+0x972/0x9f0 [ 591.111442][T32044] ___sys_sendmsg+0x2a5/0x360 [ 591.116784][T32044] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.122393][T32044] do_syscall_64+0x14d/0xf80 [ 591.127556][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.134101][T32044] [ 591.134101][T32044] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 591.142765][T32044] blk_alloc_queue+0x546/0x680 [ 591.148521][T32044] __blk_mq_alloc_disk+0x197/0x390 [ 591.154190][T32044] nbd_dev_add+0x499/0xb50 [ 591.159257][T32044] nbd_init+0x168/0x1f0 [ 591.164052][T32044] do_one_initcall+0x250/0x8d0 [ 591.169601][T32044] do_initcall_level+0x104/0x190 [ 591.175108][T32044] do_initcalls+0x59/0xa0 [ 591.180119][T32044] kernel_init_freeable+0x2a6/0x3e0 [ 591.185890][T32044] kernel_init+0x1d/0x1d0 [ 591.190876][T32044] ret_from_fork+0x51e/0xb90 [ 591.196222][T32044] ret_from_fork_asm+0x1a/0x30 [ 591.201642][T32044] [ 591.201642][T32044] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 591.209081][T32044] __lock_acquire+0x15a5/0x2cf0 [ 591.214696][T32044] lock_acquire+0xf0/0x2e0 [ 591.219681][T32044] fs_reclaim_acquire+0x71/0x100 [ 591.225190][T32044] __kmalloc_cache_noprof+0x40/0x660 [ 591.231329][T32044] tcp_fastopen_defer_connect+0x250/0x390 [ 591.237631][T32044] tcp_v4_connect+0x10ac/0x19b0 [ 591.243053][T32044] tcp_v6_connect+0xbbb/0x1b10 [ 591.248392][T32044] __inet_stream_connect+0x25a/0xdd0 [ 591.254861][T32044] inet_stream_connect+0x66/0xa0 [ 591.260373][T32044] __sys_connect+0x312/0x450 [ 591.265544][T32044] __x64_sys_connect+0x7a/0x90 [ 591.270990][T32044] do_syscall_64+0x14d/0xf80 [ 591.276166][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.282720][T32044] [ 591.282720][T32044] other info that might help us debug this: [ 591.282720][T32044] [ 591.293359][T32044] Chain exists of: [ 591.293359][T32044] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 591.293359][T32044] [ 591.306880][T32044] Possible unsafe locking scenario: [ 591.306880][T32044] [ 591.314546][T32044] CPU0 CPU1 [ 591.320136][T32044] ---- ---- [ 591.325640][T32044] lock(k-sk_lock-AF_INET6); [ 591.330785][T32044] lock(sk_lock-AF_INET6); [ 591.337940][T32044] lock(k-sk_lock-AF_INET6); [ 591.345188][T32044] lock(fs_reclaim); [ 591.349215][T32044] [ 591.349215][T32044] *** DEADLOCK *** [ 591.349215][T32044] [ 591.357637][T32044] 1 lock held by syz.0.12358/32044: [ 591.363050][T32044] #0: ffff8880565ce0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 591.373342][T32044] [ 591.373342][T32044] stack backtrace: [ 591.379361][T32044] CPU: 1 UID: 0 PID: 32044 Comm: syz.0.12358 Not tainted syzkaller #0 PREEMPT(full) [ 591.379384][T32044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 591.379399][T32044] Call Trace: [ 591.379406][T32044] [ 591.379416][T32044] dump_stack_lvl+0xe8/0x150 [ 591.379445][T32044] print_circular_bug+0x2e1/0x300 [ 591.379473][T32044] check_noncircular+0x12e/0x150 [ 591.379503][T32044] __lock_acquire+0x15a5/0x2cf0 [ 591.379528][T32044] ? __tcp_get_metrics+0x7ec/0x870 [ 591.379560][T32044] lock_acquire+0xf0/0x2e0 [ 591.379580][T32044] ? __kmalloc_cache_noprof+0x40/0x660 [ 591.379604][T32044] fs_reclaim_acquire+0x71/0x100 [ 591.379625][T32044] ? __kmalloc_cache_noprof+0x40/0x660 [ 591.379644][T32044] __kmalloc_cache_noprof+0x40/0x660 [ 591.379663][T32044] ? tcp_fastopen_defer_connect+0x250/0x390 [ 591.379692][T32044] tcp_fastopen_defer_connect+0x250/0x390 [ 591.379724][T32044] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 591.379754][T32044] ? sk_setup_caps+0x9ef/0xc40 [ 591.379779][T32044] ? sk_setup_caps+0x29/0xc40 [ 591.379803][T32044] tcp_v4_connect+0x10ac/0x19b0 [ 591.379837][T32044] ? __pfx_tcp_v4_connect+0x10/0x10 [ 591.379861][T32044] ? aa_label_sk_perm+0x52b/0x6e0 [ 591.379886][T32044] ? tcp_v6_connect+0x62d/0x1b10 [ 591.379910][T32044] tcp_v6_connect+0xbbb/0x1b10 [ 591.379933][T32044] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 591.379962][T32044] ? __pfx_tcp_v6_connect+0x10/0x10 [ 591.379990][T32044] __inet_stream_connect+0x25a/0xdd0 [ 591.380014][T32044] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.380037][T32044] ? __pfx___inet_stream_connect+0x10/0x10 [ 591.380059][T32044] ? inet_stream_connect+0x51/0xa0 [ 591.380080][T32044] ? __local_bh_enable_ip+0xd0/0x130 [ 591.380110][T32044] inet_stream_connect+0x66/0xa0 [ 591.380132][T32044] __sys_connect+0x312/0x450 [ 591.380155][T32044] ? __pfx___sys_connect+0x10/0x10 [ 591.380180][T32044] ? rcu_is_watching+0x15/0xb0 [ 591.380208][T32044] __x64_sys_connect+0x7a/0x90 [ 591.380229][T32044] do_syscall_64+0x14d/0xf80 [ 591.380254][T32044] ? trace_irq_disable+0x3b/0x150 [ 591.380269][T32044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.380287][T32044] ? clear_bhb_loop+0x40/0x90 [ 591.380305][T32044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.380326][T32044] RIP: 0033:0x7fe1c4f9c819 [ 591.380343][T32044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.380358][T32044] RSP: 002b:00007fe1c5e68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 591.380377][T32044] RAX: ffffffffffffffda RBX: 00007fe1c5215fa0 RCX: 00007fe1c4f9c819 [ 591.380389][T32044] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 591.380400][T32044] RBP: 00007fe1c5032c91 R08: 0000000000000000 R09: 0000000000000000 [ 591.380411][T32044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.380420][T32044] R13: 00007fe1c5216038 R14: 00007fe1c5215fa0 R15: 00007ffdfec4e6e8 [ 591.380440][T32044]