last executing test programs: 3.597286446s ago: executing program 0 (id=12490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.507341457s ago: executing program 0 (id=12491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.948106489s ago: executing program 2 (id=12492): ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x3, 'veth0_macvtap\x00', {0x4}, 0x81}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000001e0000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.880659429s ago: executing program 2 (id=12493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.69892761s ago: executing program 2 (id=12495): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0xc3355000) socket(0x29, 0x2, 0x3) r1 = socket(0x8, 0x3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x61e0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0xa) 2.31879449s ago: executing program 2 (id=12496): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.242990907s ago: executing program 3 (id=12498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020059", 0x5}], 0x1}, 0x48000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "bbaeb286287dcf3e", "51dbda65f8ebf9de276880c9c23547d74fca736cb2b3b71295adff5cfbf02f71", "9675df08", "4936754361571648"}, 0x38) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4065, 0xfe1, 0x20017, 0x0, 0x0) 1.238667142s ago: executing program 0 (id=12500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "8b99713c49ae53e4", "b26ac9163f2291edf70bc132ba23165e", "39a8b9d7", "a0391c4630086180"}, 0x28) 1.22815356s ago: executing program 2 (id=12501): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.154837137s ago: executing program 3 (id=12503): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[], 0xfb5) 1.030233291s ago: executing program 0 (id=12506): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd", 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200010d0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.002651133s ago: executing program 4 (id=12507): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 881.49333ms ago: executing program 2 (id=12508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x80000001, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 857.812275ms ago: executing program 1 (id=12509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 785.068695ms ago: executing program 4 (id=12510): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$unix(r0, &(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 718.654634ms ago: executing program 1 (id=12511): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474804000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56da4dc46dc2767bbe00"}, 0x6c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 587.114301ms ago: executing program 4 (id=12512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060803b00", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4048000) 550.707777ms ago: executing program 3 (id=12513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x9, 0xa}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x3}, {0x0, 0xbcd4}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in=@private=0xa010100, 0x0, 0x2b}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x1, 0x0, 0x0, 0xbffffffe}]}]}, 0x13c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 517.95544ms ago: executing program 0 (id=12514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 515.938699ms ago: executing program 4 (id=12515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r5, 0x0, 0x3ffffffffffffa) 470.967617ms ago: executing program 1 (id=12516): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 402.439735ms ago: executing program 4 (id=12517): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 382.845706ms ago: executing program 0 (id=12518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, &(0x7f0000002540)=""/4086, 0x1055, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/79, 0x4f}], 0x1}, 0x7fffffff}], 0x2, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 339.593769ms ago: executing program 1 (id=12519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000000008006001600060000000500120001000000060011000900000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600080000000500120001000000060011000500000008000b00080000000e0001006e657464657673696d2b"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 326.654633ms ago: executing program 3 (id=12520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 290.238265ms ago: executing program 4 (id=12521): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 218.689406ms ago: executing program 3 (id=12522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$bt_hci(r1, 0x84, 0x2, 0x0, &(0x7f0000000700)) 159.238479ms ago: executing program 1 (id=12523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 89.283714ms ago: executing program 3 (id=12524): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 0s ago: executing program 1 (id=12525): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): id value (1032) [ 407.200882][T23698] syzkaller1: entered promiscuous mode [ 407.211500][T23698] syzkaller1: entered allmulticast mode [ 407.461479][T23716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8299'. [ 407.610714][T23721] syzkaller1: entered promiscuous mode [ 407.625796][T23721] syzkaller1: entered allmulticast mode [ 407.723721][T23727] netem: change failed [ 407.819385][T23739] netlink: 'syz.4.8310': attribute type 63 has an invalid length. [ 407.857406][T23739] netlink: 'syz.4.8310': attribute type 63 has an invalid length. [ 408.656155][T23790] syz_tun: entered allmulticast mode [ 408.679513][T23789] syz_tun: left allmulticast mode [ 409.303988][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8344'. [ 410.197968][T23878] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.8369'. [ 410.263746][T23884] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8371'. [ 410.347468][T23887] No such timeout policy "syz1" [ 410.603173][ T1729] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 60 seconds [ 410.614436][ T1729] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 60 seconds [ 410.627392][ T1729] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 60 seconds [ 410.638564][ T1729] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 60 seconds [ 410.835006][T23917] syzkaller1: entered promiscuous mode [ 410.858169][T23917] syzkaller1: entered allmulticast mode [ 411.213555][T23942] netlink: 'syz.0.8397': attribute type 1 has an invalid length. [ 411.238523][T23940] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.915824][T23976] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8413'. [ 411.927130][T23978] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8411'. [ 412.249102][T23995] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8420'. [ 412.714131][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8435'. [ 412.724770][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8435'. [ 412.736194][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8435'. [ 412.761291][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8435'. [ 412.947540][T24042] siw: device registration error -23 [ 413.004431][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 413.646860][T24086] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 413.764805][T24095] netem: change failed [ 413.804029][T24099] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.8471'. [ 414.027636][T24109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8475'. [ 414.247438][T24129] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8483'. [ 414.427418][T24141] syzkaller1: entered promiscuous mode [ 414.434080][T24141] syzkaller1: entered allmulticast mode [ 414.666297][T24153] syz_tun: entered allmulticast mode [ 414.674013][T24152] syz_tun: left allmulticast mode [ 415.350463][T24189] block nbd4: server does not support multiple connections per device. [ 415.369774][T24189] block nbd4: shutting down sockets [ 415.660614][T24216] syzkaller1: entered promiscuous mode [ 415.666190][T24216] syzkaller1: entered allmulticast mode [ 416.988205][T24302] __nla_validate_parse: 4 callbacks suppressed [ 416.988237][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8566'. [ 417.166437][T24312] geneve0: entered promiscuous mode [ 417.175359][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 60302 - 0 [ 417.202485][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 60302 - 0 [ 417.214835][T24315] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8572'. [ 417.236692][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 60302 - 0 [ 417.264878][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 60302 - 0 [ 417.406007][T24331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.278770][T24392] netem: change failed [ 418.403949][T24399] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.8613'. [ 418.426619][ T4995] udevd[4995]: worker [5636] /devices/virtual/block/nbd0 is taking a long time [ 418.532664][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8615'. [ 419.046753][T24440] hsr0 speed is unknown, defaulting to 1000 [ 419.113598][T24440] wg1 speed is unknown, defaulting to 1000 [ 419.143127][T24440] lo speed is unknown, defaulting to 1000 [ 419.191432][T24452] smc: net device team0 applied user defined pnetid SYZ2 [ 419.204423][T24452] smc: net device team0 erased user defined pnetid SYZ2 [ 419.660308][T24475] netlink: 'syz.4.8646': attribute type 17 has an invalid length. [ 419.679921][T24475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8646'. [ 419.690126][T24475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8646'. [ 419.801691][T24480] macvlan0: entered promiscuous mode [ 419.967804][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8651'. [ 420.278161][T24504] sctp: [Deprecated]: syz.0.8658 (pid 24504) Use of int in max_burst socket option. [ 420.278161][T24504] Use struct sctp_assoc_value instead [ 421.133357][T24545] pim6reg1: entered promiscuous mode [ 421.150063][T24545] pim6reg1: entered allmulticast mode [ 421.323445][T24560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8683'. [ 421.405240][T24565] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8686'. [ 421.460275][T24569] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8688'. [ 422.045577][T24609] erspan0: left allmulticast mode [ 422.062408][T24609] __nla_validate_parse: 1 callbacks suppressed [ 422.062426][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8707'. [ 422.187022][T24616] netlink: 'syz.4.8711': attribute type 3 has an invalid length. [ 422.528108][T24641] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.8724'. [ 423.669835][T24720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8758'. [ 423.692338][T24722] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 423.700397][T24722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8759'. [ 423.973470][T24743] netlink: 'syz.1.8769': attribute type 1 has an invalid length. [ 423.983884][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8769'. [ 424.116689][T24752] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8773'. [ 424.160611][T24754] bridge_slave_0: left allmulticast mode [ 424.166337][T24754] bridge_slave_0: left promiscuous mode [ 424.174244][T24754] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.183331][T24754] veth1_to_bridge: left allmulticast mode [ 424.189185][T24754] veth1_to_bridge: left promiscuous mode [ 424.195259][T24754] bridge0: port 3(veth1_to_bridge) entered disabled state [ 424.207425][T24754] bridge_slave_1: left allmulticast mode [ 424.213264][T24754] bridge_slave_1: left promiscuous mode [ 424.219177][T24754] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.232195][T24754] bond0: (slave bond_slave_0): Releasing backup interface [ 424.240666][T24754] bond_slave_0: left allmulticast mode [ 424.252093][T24754] bond0: (slave bond_slave_1): Releasing backup interface [ 424.262154][T24754] bond_slave_1: left allmulticast mode [ 424.285344][T24754] team0: Port device team_slave_0 removed [ 424.309544][T24754] team0: Port device team_slave_1 removed [ 424.322808][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.332466][T24754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.342116][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.352868][T24754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.367172][T24754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.554317][T24767] veth0: entered promiscuous mode [ 424.565437][T24767] veth0: left promiscuous mode [ 424.612860][T24771] sctp: [Deprecated]: syz.4.8779 (pid 24771) Use of int in max_burst socket option deprecated. [ 424.612860][T24771] Use struct sctp_assoc_value instead [ 425.021440][T24793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8790'. [ 425.239222][T24807] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.8798'. [ 425.303897][T24809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 425.367883][T24813] syzkaller1: entered promiscuous mode [ 425.381924][T24813] syzkaller1: entered allmulticast mode [ 425.645206][T24830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8809'. [ 425.661350][T24831] sctp: [Deprecated]: syz.2.8808 (pid 24831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.661350][T24831] Use struct sctp_sack_info instead [ 425.670099][T24830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8809'. [ 425.866037][T24841] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.103492][T24847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.111545][T24847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.149040][T24847] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 426.204218][ T5361] lo speed is unknown, defaulting to 1000 [ 426.213284][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.224816][ T5361] syz0: Port: 1 Link ACTIVE [ 426.246289][ T5776] wg1 speed is unknown, defaulting to 1000 [ 426.283924][ T10] lo speed is unknown, defaulting to 1000 [ 426.294763][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 426.450332][T24871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.468568][T24871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.613151][T24880] netlink: 'syz.4.8828': attribute type 2 has an invalid length. [ 426.625559][T24880] netlink: 'syz.4.8828': attribute type 2 has an invalid length. [ 426.782248][T24890] netlink: 'syz.4.8832': attribute type 1 has an invalid length. [ 427.751881][T24947] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 427.787114][T24945] sctp: [Deprecated]: syz.3.8856 (pid 24945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.787114][T24945] Use struct sctp_sack_info instead [ 428.742299][T25009] netlink: 'syz.1.8886': attribute type 1 has an invalid length. [ 429.094168][T25033] syzkaller1: entered promiscuous mode [ 429.110023][T25033] syzkaller1: entered allmulticast mode [ 429.672899][T25064] __nla_validate_parse: 3 callbacks suppressed [ 429.672920][T25064] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8909'. [ 429.959935][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.039843][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 430.473025][T25110] netlink: 67 bytes leftover after parsing attributes in process `syz.3.8931'. [ 430.701644][T25126] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8937'. [ 430.823678][T25130] tipc: Resetting bearer [ 430.915625][T25130] tipc: Disabling bearer [ 430.977880][T25131] tipc: Started in network mode [ 430.982990][T25131] tipc: Node identity ac1414aa, cluster identity 4711 [ 430.993963][T25131] tipc: Enabled bearer , priority 10 [ 431.705046][T25186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8962'. [ 431.755900][T25188] netlink: 'syz.4.8963': attribute type 39 has an invalid length. [ 431.869341][T25194] syzkaller1: entered promiscuous mode [ 431.891513][T25194] syzkaller1: entered allmulticast mode [ 431.896724][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8967'. [ 431.906754][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8967'. [ 432.124228][ T5776] tipc: Node number set to 2886997162 [ 432.534427][T25230] syzkaller1: entered promiscuous mode [ 432.547530][T25230] syzkaller1: entered allmulticast mode [ 432.948381][T25257] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 432.982444][T25262] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8998'. [ 432.993901][T25262] netlink: ct family unspecified [ 433.040090][T25263] syzkaller1: entered promiscuous mode [ 433.063002][T25263] syzkaller1: entered allmulticast mode [ 433.187053][T25270] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 433.207514][T25270] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 433.222045][T25270] gretap5: entered promiscuous mode [ 433.233968][T25270] gretap5: entered allmulticast mode [ 433.373757][T25287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9009'. [ 433.564078][T25294] netlink: 'syz.2.9013': attribute type 12 has an invalid length. [ 433.582493][T25294] netlink: 'syz.2.9013': attribute type 29 has an invalid length. [ 433.592151][T25294] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9013'. [ 433.601853][T25294] netlink: 'syz.2.9013': attribute type 3 has an invalid length. [ 433.610228][T25294] netlink: 'syz.2.9013': attribute type 2 has an invalid length. [ 433.618105][T25294] netlink: 35 bytes leftover after parsing attributes in process `syz.2.9013'. [ 434.243835][T25341] macvlan0: entered promiscuous mode [ 435.318556][T25413] __nla_validate_parse: 3 callbacks suppressed [ 435.318576][T25413] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9068'. [ 435.659719][T25436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.605283][T25493] veth0: entered promiscuous mode [ 436.621292][T25490] veth0: left promiscuous mode [ 436.746954][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9109'. [ 436.792771][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9111'. [ 436.822937][T25503] veth0_macvtap: left promiscuous mode [ 437.409798][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9128'. [ 437.436924][T25537] block nbd4: Unsupported socket: should be TCP or UNIX. [ 437.479784][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.120055][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 438.133531][T25577] netlink: 'syz.1.9147': attribute type 3 has an invalid length. [ 438.691370][T25613] syzkaller1: entered promiscuous mode [ 438.697160][T25613] syzkaller1: entered allmulticast mode [ 439.041952][T25623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.075166][T25623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 439.148260][T25636] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.325195][T25623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.346233][T25623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 439.493590][T25623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.516547][T25623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 439.716499][T25623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.729504][T25623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 439.935633][ T1124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.950466][ T1124] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 60302 - 0 [ 440.001275][ T1124] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.012142][ T1124] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 60302 - 0 [ 440.038327][ T1124] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.049159][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.068727][ T1124] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 60302 - 0 [ 440.086452][T25689] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9195'. [ 440.100074][ T1124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.117326][ T1124] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 60302 - 0 [ 440.219339][T25696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9199'. [ 440.259715][T25696] netlink: 'syz.3.9199': attribute type 7 has an invalid length. [ 440.272640][T25696] netlink: 'syz.3.9199': attribute type 8 has an invalid length. [ 440.283423][T25696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9199'. [ 440.452190][T25712] netlink: 'syz.4.9206': attribute type 29 has an invalid length. [ 440.478672][T25712] netlink: 'syz.4.9206': attribute type 29 has an invalid length. [ 440.515752][T25712] netlink: 500 bytes leftover after parsing attributes in process `syz.4.9206'. [ 440.525973][T25717] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9209'. [ 440.682454][ T1729] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 90 seconds [ 440.696311][ T1729] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 90 seconds [ 440.708146][ T1729] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 90 seconds [ 440.720505][ T1729] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 90 seconds [ 440.910896][T25740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9219'. [ 441.277660][T25767] netlink: 'syz.1.9231': attribute type 4 has an invalid length. [ 441.662110][T25789] macvlan0: left promiscuous mode [ 441.668011][T25791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9244'. [ 441.677154][T25789] netlink: 'syz.1.9243': attribute type 2 has an invalid length. [ 441.692704][T25791] netlink: 'syz.0.9244': attribute type 7 has an invalid length. [ 441.700941][T25791] netlink: 'syz.0.9244': attribute type 8 has an invalid length. [ 441.708776][T25791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9244'. [ 442.254026][T25823] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.9256'. [ 442.481758][T25829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9259'. [ 442.822786][T25849] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.830101][T25849] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.964762][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9272'. [ 443.458879][T25887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.372508][T25945] netlink: 'syz.1.9314': attribute type 11 has an invalid length. [ 444.400503][T25950] tipc: Resetting bearer [ 444.567757][T25950] tipc: Disabling bearer [ 445.216747][T25994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9335'. [ 445.241079][T25994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9335'. [ 446.614686][T26084] __nla_validate_parse: 2 callbacks suppressed [ 446.615854][T26084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9372'. [ 446.652312][T26084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9372'. [ 446.775281][T26094] xt_hashlimit: size too large, truncated to 1048576 [ 447.197395][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9380'. [ 447.493498][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9388'. [ 447.521352][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9388'. [ 447.568079][T26129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9388'. [ 447.589787][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9388'. [ 447.730502][T26140] netlink: 'syz.2.9391': attribute type 11 has an invalid length. [ 447.764284][T26146] netlink: 'syz.4.9393': attribute type 13 has an invalid length. [ 447.775155][T26146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9393'. [ 447.786591][T26146] netlink: 'syz.4.9393': attribute type 13 has an invalid length. [ 447.795205][T26146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9393'. [ 447.800112][T26145] tipc: Resetting bearer [ 448.002322][T26160] netlink: 'syz.2.9400': attribute type 1 has an invalid length. [ 448.096622][T26160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 448.157592][T26174] trusted_key: syz.1.9405 sent an empty control message without MSG_MORE. [ 448.195558][T26166] bond5: (slave geneve2): making interface the new active one [ 448.219241][T26166] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 448.353143][T26183] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.9409'. [ 448.812169][T26211] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 448.818024][T26211] syzkaller0: group set to 10 [ 449.489017][ T48] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 450.083989][T26294] netlink: 'syz.0.9455': attribute type 7 has an invalid length. [ 450.094030][T26294] netlink: 'syz.0.9455': attribute type 8 has an invalid length. [ 451.399284][ T29] audit: type=1800 audit(1778479800.645:2): pid=26323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9465" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9638 res=0 errno=0 [ 451.666463][T26336] __nla_validate_parse: 5 callbacks suppressed [ 451.666481][T26336] netlink: 51 bytes leftover after parsing attributes in process `syz.3.9470'. [ 451.991900][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9477'. [ 452.193822][T26374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9480'. [ 452.615637][T26256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.775053][T26401] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9489'. [ 452.807128][T26404] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9492'. [ 452.967678][T26417] syzkaller1: entered promiscuous mode [ 452.974315][T26417] syzkaller1: entered allmulticast mode [ 453.864012][T26455] bond6: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 453.954771][T26455] bond6: (slave C): Enslaving as an active interface with an up link [ 453.981722][T26455] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 454.225439][T26478] vcan0: tx address claim with different name [ 454.410031][T26486] netlink: 'syz.3.9514': attribute type 29 has an invalid length. [ 454.424905][T26486] netlink: 'syz.3.9514': attribute type 29 has an invalid length. [ 454.436332][T26486] netlink: 'syz.3.9514': attribute type 32 has an invalid length. [ 454.447050][T26486] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9514'. [ 454.553113][T26493] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.9517'. [ 454.581388][T26493] netlink: Unknown conntrack attr (type=2304, max=9) [ 454.716965][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9520'. [ 454.735813][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9520'. [ 454.799043][T26501] netlink: 'syz.1.9521': attribute type 4 has an invalid length. [ 454.862835][T26503] veth0: entered promiscuous mode [ 454.883278][T26503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9522'. [ 455.741645][T26542] netlink: 'syz.0.9537': attribute type 1 has an invalid length. [ 455.842516][T26542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.914528][T26546] bond3: (slave geneve3): making interface the new active one [ 455.923440][T26546] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 455.932771][ T9663] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 455.966636][ T9663] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 456.225699][ T9663] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 456.246213][ T9663] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 456.517738][T26575] syzkaller1: entered promiscuous mode [ 456.524017][T26575] syzkaller1: entered allmulticast mode [ 456.727396][T26585] __nla_validate_parse: 1 callbacks suppressed [ 456.727414][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9554'. [ 456.784105][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9554'. [ 456.854651][T26595] netlink: 'syz.4.9559': attribute type 1 has an invalid length. [ 457.157554][T26619] syzkaller1: entered promiscuous mode [ 457.163220][T26619] syzkaller1: entered allmulticast mode [ 457.175233][T26619] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 457.330433][T26628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.559207][T26641] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 457.737544][T26649] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9584'. [ 457.748531][T26649] netlink: Conntrack attr has 3 unknown bytes [ 457.879301][T26657] gretap1: entered promiscuous mode [ 457.915241][T26657] batman_adv: batadv0: Adding interface: gretap1 [ 457.941035][T26657] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 457.988882][T26657] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 458.205184][T26678] netlink: 'syz.4.9596': attribute type 7 has an invalid length. [ 458.220561][T26678] netlink: 'syz.4.9596': attribute type 7 has an invalid length. [ 458.411722][T26695] netlink: 'syz.4.9601': attribute type 19 has an invalid length. [ 458.436910][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9601'. [ 458.472221][T26695] netlink: 'syz.4.9601': attribute type 19 has an invalid length. [ 458.480777][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9601'. [ 458.492491][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9603'. [ 458.514058][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9603'. [ 458.530530][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9603'. [ 458.544858][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9603'. [ 458.650202][T26707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9607'. [ 458.784215][T26716] nbd: nbd3 already in use [ 458.789550][T26716] block nbd3: NBD_DISCONNECT [ 458.795480][T26716] block nbd3: Send disconnect failed -32 [ 458.803232][T26716] block nbd3: shutting down sockets [ 459.121712][T26740] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 459.132270][T26740] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 459.144984][T26740] bond4: (slave ip6gre2): making interface the new active one [ 459.155827][T26740] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 459.193156][T26737] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 460.127642][T26804] validate_nla: 1 callbacks suppressed [ 460.127662][T26804] netlink: 'syz.4.9652': attribute type 16 has an invalid length. [ 460.601534][T26841] netlink: 'syz.4.9668': attribute type 4 has an invalid length. [ 460.877594][T26858] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.923832][T26858] bond3: (slave lo): Enslaving as an active interface with an up link [ 460.945031][T26858] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 461.272791][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 461.657682][T26905] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.664907][T26905] bridge0: port 2(bridge_slave_1) entered listening state [ 461.672366][T26905] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.681031][T26905] bridge0: port 1(bridge_slave_0) entered listening state [ 461.899825][T26903] nbd3: detected capacity change from 0 to 63 [ 461.908540][ T5626] block nbd3: Receive control failed (result -32) [ 461.909015][ T5641] block nbd3: Send control failed (result -32) [ 461.915411][ T50] block nbd3: Receive control failed (result -32) [ 461.943922][ T5641] block nbd3: Request send failed, requeueing [ 461.978515][ T1700] block nbd3: Dead connection, failed to find a fallback [ 461.988849][ T1700] block nbd3: shutting down sockets [ 461.995950][ T1700] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.008958][ T1700] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.022807][ T5641] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.041496][ T5641] Buffer I/O error on dev nbd3, logical block 1, async page read [ 462.051445][ T5641] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.061217][ T5641] Buffer I/O error on dev nbd3, logical block 2, async page read [ 462.069439][ T5641] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.079358][ T5641] Buffer I/O error on dev nbd3, logical block 3, async page read [ 462.087974][ T5641] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.097535][ T5641] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.106184][ T5641] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.115574][ T5641] Buffer I/O error on dev nbd3, logical block 1, async page read [ 462.123888][ T5641] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.133424][ T5641] Buffer I/O error on dev nbd3, logical block 2, async page read [ 462.141724][ T5641] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.151479][ T5641] Buffer I/O error on dev nbd3, logical block 3, async page read [ 462.156618][T26921] __nla_validate_parse: 7 callbacks suppressed [ 462.156635][T26921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9702'. [ 462.159918][ T5641] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.184434][ T5641] Buffer I/O error on dev nbd3, logical block 0, async page read [ 462.186225][T26921] netlink: 'syz.0.9702': attribute type 7 has an invalid length. [ 462.192990][ T5641] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.193021][ T5641] Buffer I/O error on dev nbd3, logical block 1, async page read [ 462.215656][T26884] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 462.218968][T26921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9702'. [ 462.233125][T26884] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 462.246888][ T5641] ldm_validate_partition_table(): Disk read failed. [ 462.256072][ T5641] Dev nbd3: unable to read RDB block 0 [ 462.258505][T26921] gretap0: entered promiscuous mode [ 462.264809][ T5641] nbd3: unable to read partition table [ 462.288803][ T5641] ldm_validate_partition_table(): Disk read failed. [ 462.298960][ T5641] Dev nbd3: unable to read RDB block 0 [ 462.301027][T26921] tipc: Resetting bearer [ 462.307307][ T5641] nbd3: unable to read partition table [ 462.348693][T26925] netlink: 'syz.3.9704': attribute type 1 has an invalid length. [ 462.411834][T26925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.431943][T26930] bond3: (slave geneve3): making interface the new active one [ 462.446091][T26930] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 462.457672][ T9655] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 462.484385][ T9655] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 462.525109][ T9655] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 462.557440][ T9655] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 462.857572][T26957] netlink: 'syz.1.9716': attribute type 12 has an invalid length. [ 462.899162][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9716'. [ 462.916449][T26957] netlink: 'syz.1.9716': attribute type 12 has an invalid length. [ 462.934840][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9716'. [ 463.011153][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9721'. [ 463.058252][T26970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9723'. [ 463.153287][T26976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.374605][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9733'. [ 463.389446][T26994] netem: invalid attributes len -5 [ 463.395534][T26994] netem: change failed [ 463.583281][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9738'. [ 463.639495][T27008] netlink: 'syz.0.9742': attribute type 7 has an invalid length. [ 463.669085][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.680448][T27008] netlink: 'syz.0.9742': attribute type 7 has an invalid length. [ 463.684400][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.700235][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.710411][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.237780][T27050] netlink: 'syz.1.9755': attribute type 1 has an invalid length. [ 464.433512][T27060] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9759'. [ 464.540247][T27050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.618057][T27054] bond4: (slave ip6erspan0): making interface the new active one [ 464.629159][T27054] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 464.643052][T27067] netlink: 'syz.3.9760': attribute type 15 has an invalid length. [ 464.665927][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9760'. [ 464.731427][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 464.748263][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 464.772742][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 464.797035][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 467.091187][T27142] nbd4: detected capacity change from 0 to 63 [ 467.116262][T27161] validate_nla: 1 callbacks suppressed [ 467.116280][T27161] netlink: 'syz.4.9801': attribute type 1 has an invalid length. [ 467.140808][ T5626] block nbd4: Receive control failed (result -104) [ 467.141944][ T50] block nbd4: Receive control failed (result -32) [ 467.204136][T27161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.328597][T27174] __nla_validate_parse: 2 callbacks suppressed [ 467.328616][T27174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9804'. [ 467.617624][T27186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9810'. [ 467.805681][T27193] netlink: 'syz.3.9813': attribute type 21 has an invalid length. [ 467.828230][T27193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9813'. [ 467.833593][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9814'. [ 467.848206][T27193] netlink: 'syz.3.9813': attribute type 5 has an invalid length. [ 467.865320][T27193] netlink: 'syz.3.9813': attribute type 6 has an invalid length. [ 467.865496][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9814'. [ 467.882870][T27193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9813'. [ 467.919842][T27196] netlink: 'syz.4.9814': attribute type 15 has an invalid length. [ 467.971328][ T48] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 467.971393][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9814'. [ 467.982375][ T48] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 467.999001][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9814'. [ 468.024041][T27196] netlink: 'syz.4.9814': attribute type 15 has an invalid length. [ 468.031324][ T48] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 468.050992][ T48] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 468.064394][T27200] netlink: 51 bytes leftover after parsing attributes in process `syz.2.9816'. [ 468.765492][T27234] netlink: 'syz.0.9829': attribute type 1 has an invalid length. [ 468.773817][T27236] netlink: 51 bytes leftover after parsing attributes in process `syz.1.9830'. [ 468.939729][T27249] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 469.446605][T27282] netlink: 'syz.1.9850': attribute type 11 has an invalid length. [ 469.466660][T27282] netlink: 'syz.1.9850': attribute type 11 has an invalid length. [ 469.488467][T27284] netlink: 'syz.3.9851': attribute type 29 has an invalid length. [ 469.502775][T27286] netlink: Unknown conntrack attr (type=2304, max=9) [ 469.696848][T27292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.766132][T27296] bond3: (slave gretap1): making interface the new active one [ 469.795965][T27296] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 469.997454][T27320] xt_hashlimit: size too large, truncated to 1048576 [ 470.771186][ T1729] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 120 seconds [ 470.782363][ T1729] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 120 seconds [ 470.793981][ T1729] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 120 seconds [ 470.806184][ T1729] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 120 seconds [ 471.254628][T27383] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 471.282028][T27383] bond5: (slave lo): Enslaving as an active interface with an up link [ 471.295876][T27383] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 472.195370][T27435] syz_tun: entered allmulticast mode [ 472.498555][T27455] __nla_validate_parse: 12 callbacks suppressed [ 472.498574][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9913'. [ 472.587276][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9914'. [ 472.621442][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9917'. [ 472.819244][T27475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9925'. [ 472.953484][T27489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9926'. [ 473.281732][T27508] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 473.528808][T27522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9940'. [ 473.818244][T27537] validate_nla: 2 callbacks suppressed [ 473.818262][T27537] netlink: 'syz.1.9948': attribute type 1 has an invalid length. [ 473.839288][T27537] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.9948'. [ 473.966356][T27542] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 474.024165][T27547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9953'. [ 474.200480][T27556] netlink: 'syz.4.9957': attribute type 1 has an invalid length. [ 474.210846][T27556] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9957'. [ 474.221568][T27556] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9957'. [ 474.269221][T27558] syzkaller1: entered promiscuous mode [ 474.285274][T27558] syzkaller1: entered allmulticast mode [ 474.888045][T27599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.351774][T27637] gretap0: left allmulticast mode [ 475.359047][T27637] bridge0: port 3(gretap0) entered disabled state [ 475.372494][T27637] bridge_slave_0: left allmulticast mode [ 475.378146][T27637] bridge_slave_0: left promiscuous mode [ 475.386244][T27637] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.396399][T27637] bridge_slave_1: left allmulticast mode [ 475.404747][T27638] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.408565][T27637] bridge_slave_1: left promiscuous mode [ 475.417611][T27637] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.428237][T27637] bond0: (slave bond_slave_0): Releasing backup interface [ 475.454047][T27637] team0: Port device team_slave_0 removed [ 475.472307][T27637] team0: Port device team_slave_1 removed [ 475.478616][T27637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.486140][T27637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.494810][T27637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.503170][T27637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.512219][T27637] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.648042][T27644] netlink: 'syz.4.9998': attribute type 14 has an invalid length. [ 475.657001][T27644] netlink: 'syz.4.9998': attribute type 14 has an invalid length. [ 476.595256][T27706] openvswitch: netlink: Unknown nsh attribute 0 [ 477.270646][T27747] netlink: 'syz.0.10041': attribute type 7 has an invalid length. [ 477.279802][T27747] netlink: 'syz.0.10041': attribute type 7 has an invalid length. [ 477.321327][T27749] netlink: 'syz.0.10042': attribute type 1 has an invalid length. [ 477.348504][T27749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 477.366838][T27749] bond5: (slave geneve4): making interface the new active one [ 477.376887][T27749] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 478.412605][T27799] __nla_validate_parse: 6 callbacks suppressed [ 478.412625][T27799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10062'. [ 478.431936][T27801] netlink: 'syz.1.10064': attribute type 22 has an invalid length. [ 478.447218][T27801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10064'. [ 478.476265][T27801] netlink: 'syz.1.10064': attribute type 22 has an invalid length. [ 478.495230][T27801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10064'. [ 478.508538][T27805] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.10065'. [ 479.041115][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10080'. [ 479.068010][T27835] netlink: 'syz.3.10080': attribute type 6 has an invalid length. [ 479.088828][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10080'. [ 479.237962][T27840] veth1_macvtap: entered promiscuous mode [ 479.259209][T27840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.299514][T27840] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 479.343876][T27835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10080'. [ 479.379316][T27835] netlink: 'syz.3.10080': attribute type 6 has an invalid length. [ 479.394555][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10080'. [ 479.395497][ T5776] hsr0 speed is unknown, defaulting to 1000 [ 479.412530][T27849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10084'. [ 479.528179][T27858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10088'. [ 479.751134][T27872] 8021q: adding VLAN 0 to HW filter on device bond6 [ 479.758682][T27872] bridge0: port 1(bond6) entered blocking state [ 479.766710][T27872] bridge0: port 1(bond6) entered disabled state [ 479.774137][T27872] bond6: entered allmulticast mode [ 479.783573][T27872] bond6: entered promiscuous mode [ 479.789435][T27872] bridge0: port 1(bond6) entered blocking state [ 479.795919][T27872] bridge0: port 1(bond6) entered listening state [ 479.807077][ T1124] bridge0: port 1(bond6) entered disabled state [ 479.828291][T27885] netlink: 'syz.1.10098': attribute type 1 has an invalid length. [ 479.957975][T27887] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 480.007169][T27887] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 480.045521][T27887] bond5: (slave ip6gre1): making interface the new active one [ 480.055652][T27887] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 480.749670][T27940] tls_set_device_offload: netdev not found [ 481.000738][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.867162][T28002] netlink: Conntrack attr has 4 unknown bytes [ 482.056007][T28008] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 482.088750][T28008] bond6 (unregistering): Released all slaves [ 482.656069][T28040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.813899][T28050] netlink: 'syz.0.10159': attribute type 4 has an invalid length. [ 482.866968][T28055] netlink: 'syz.0.10159': attribute type 4 has an invalid length. [ 482.879536][ T5361] lo speed is unknown, defaulting to 1000 [ 482.899720][ T5361] syz0: Port: 1 Link DOWN [ 482.907422][ T5361] lo speed is unknown, defaulting to 1000 [ 482.950498][ T24] lo speed is unknown, defaulting to 1000 [ 482.958212][ T24] syz0: Port: 1 Link ACTIVE [ 483.019044][T28066] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 483.094712][T28066] bond4: (slave lo): Enslaving as an active interface with an up link [ 483.132255][T28066] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 483.177901][T28074] veth0: entered promiscuous mode [ 483.187107][T28072] veth0: left promiscuous mode [ 483.671576][T28108] netlink: 'syz.1.10182': attribute type 1 has an invalid length. [ 483.710442][T28108] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.713185][T28111] __nla_validate_parse: 5 callbacks suppressed [ 483.713202][T28111] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10183'. [ 483.735212][T28108] bond6: (slave geneve3): making interface the new active one [ 483.746496][T28108] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 483.815849][T28111] netlink: 320 bytes leftover after parsing attributes in process `syz.0.10183'. [ 483.836762][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10186'. [ 483.936599][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10189'. [ 484.172137][T28139] netlink: 'syz.3.10196': attribute type 1 has an invalid length. [ 484.219287][T28139] bond7: entered promiscuous mode [ 484.225648][T28139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.293121][T28143] bond7: (slave bridge2): making interface the new active one [ 484.328235][T28143] bridge2: entered promiscuous mode [ 484.347559][T28143] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 484.504615][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10203'. [ 484.599429][T28167] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10204'. [ 484.839800][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 484.900310][T28183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10211'. [ 484.970831][T28188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10213'. [ 485.176875][T28191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10214'. [ 485.273871][T28195] xt_hashlimit: size too large, truncated to 1048576 [ 486.681263][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 486.882043][T28257] netlink: 'syz.2.10245': attribute type 21 has an invalid length. [ 486.908390][T28257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10245'. [ 486.920667][T28257] netlink: 'syz.2.10245': attribute type 21 has an invalid length. [ 487.660738][T28300] bond3: option mode: unable to set because the bond device has slaves [ 487.664320][T28302] netlink: Unknown conntrack attr (0) [ 487.677381][T28300] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 488.308688][T28343] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 488.688438][T28364] IPVS: Scheduler module ip_vs_sip not found [ 489.123948][T28396] netlink: 'syz.2.10306': attribute type 22 has an invalid length. [ 489.145295][T28396] __nla_validate_parse: 4 callbacks suppressed [ 489.145314][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10306'. [ 489.179185][T28396] netlink: 'syz.2.10306': attribute type 22 has an invalid length. [ 489.187898][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10306'. [ 489.206202][ T9670] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.220296][ T9670] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.230040][ T9670] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.487619][T28411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10315'. [ 489.593787][T28418] netlink: 'syz.2.10319': attribute type 25 has an invalid length. [ 489.630033][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10319'. [ 489.708159][T28418] netlink: 'syz.2.10319': attribute type 25 has an invalid length. [ 489.726909][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10319'. [ 489.941944][T28441] netlink: 'syz.0.10331': attribute type 2 has an invalid length. [ 489.978718][T28444] syzkaller1: entered promiscuous mode [ 489.985996][T28444] syzkaller1: entered allmulticast mode [ 489.992175][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10330'. [ 490.097609][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10334'. [ 490.126698][T28449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10334'. [ 490.146135][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10334'. [ 490.232696][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10334'. [ 490.283525][T28457] netlink: 'syz.4.10339': attribute type 1 has an invalid length. [ 490.291895][T28461] atomic_op ffff888057c5b198 conn xmit_atomic 0000000000000000 [ 490.300009][T28460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.885082][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 491.894138][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 492.150030][T28545] pim6reg1: entered promiscuous mode [ 492.163685][T28545] pim6reg1: entered allmulticast mode [ 492.566623][T28566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.578781][T28565] netlink: 'syz.0.10382': attribute type 15 has an invalid length. [ 492.897028][T28583] vcan0 (unregistering): left allmulticast mode [ 493.865737][T28625] netlink: 'syz.0.10409': attribute type 1 has an invalid length. [ 493.882282][T28625] netlink: 'syz.0.10409': attribute type 1 has an invalid length. [ 494.107086][T28641] syzkaller1: entered promiscuous mode [ 494.120935][T28641] syzkaller1: entered allmulticast mode [ 494.842578][T28677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.939236][T28684] netlink: 'syz.0.10435': attribute type 20 has an invalid length. [ 494.949336][T28684] __nla_validate_parse: 15 callbacks suppressed [ 494.949353][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10435'. [ 494.983014][T28684] netlink: 'syz.0.10435': attribute type 20 has an invalid length. [ 495.014661][T28684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10435'. [ 495.057372][T28690] ip6tnl3: entered promiscuous mode [ 495.296209][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10445'. [ 495.323602][T28704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10445'. [ 495.387526][T28709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10446'. [ 495.746260][T28728] netlink: 'syz.4.10456': attribute type 1 has an invalid length. [ 495.808652][T28740] netlink: 'syz.2.10458': attribute type 11 has an invalid length. [ 495.816886][T28740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10458'. [ 495.828128][T28739] ip6tnl4: entered promiscuous mode [ 495.834274][T28740] netlink: 'syz.2.10458': attribute type 11 has an invalid length. [ 495.864173][T28740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10458'. [ 495.958698][T28748] netlink: 'syz.2.10462': attribute type 1 has an invalid length. [ 496.008444][T28748] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.037954][T28753] bond7: (slave geneve3): making interface the new active one [ 496.051536][T28753] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 496.072245][T28756] bond3: option mode: unable to set because the bond device has slaves [ 496.082143][T28756] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 496.283151][T28765] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10472'. [ 496.389473][T28774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10475'. [ 496.718935][T28800] netlink: 'syz.1.10484': attribute type 1 has an invalid length. [ 496.764285][T28800] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.806038][T28800] bond7: (slave gretap6): making interface the new active one [ 496.814693][T28800] bond7: (slave gretap6): Enslaving as an active interface with an up link [ 496.927861][T28808] bridge_slave_0: invalid flags given to default FDB implementation [ 497.646000][ T1729] block nbd4: Connection timed out, retrying (0/2 alive) [ 497.654070][ T1729] block nbd4: Connection timed out, retrying (0/2 alive) [ 497.661552][ T1729] block nbd4: Connection timed out, retrying (0/2 alive) [ 497.669881][ T1729] block nbd4: Connection timed out, retrying (0/2 alive) [ 497.677054][ T11] block nbd4: Dead connection, failed to find a fallback [ 497.685557][ T11] block nbd4: shutting down sockets [ 497.692305][ T11] blk_print_req_error: 138 callbacks suppressed [ 497.692317][ T11] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.708957][ T11] buffer_io_error: 138 callbacks suppressed [ 497.708967][ T11] Buffer I/O error on dev nbd4, logical block 2, async page read [ 497.726372][ T11] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.735627][ T11] Buffer I/O error on dev nbd4, logical block 1, async page read [ 497.743772][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.752952][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 497.760917][ T11] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.770033][ T11] Buffer I/O error on dev nbd4, logical block 3, async page read [ 497.779281][ T5641] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.790475][ T5641] Buffer I/O error on dev nbd4, logical block 0, async page read [ 497.798332][ T5641] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.811074][ T5641] Buffer I/O error on dev nbd4, logical block 1, async page read [ 497.819007][ T5641] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.839993][ T5641] Buffer I/O error on dev nbd4, logical block 2, async page read [ 497.850482][ T5641] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.860029][ T5641] Buffer I/O error on dev nbd4, logical block 3, async page read [ 497.867958][ T5641] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.883638][ T5641] Buffer I/O error on dev nbd4, logical block 0, async page read [ 497.892309][ T5641] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 497.903656][ T5641] Buffer I/O error on dev nbd4, logical block 1, async page read [ 497.916111][ T5641] ldm_validate_partition_table(): Disk read failed. [ 497.941801][ T5641] Dev nbd4: unable to read RDB block 0 [ 497.951204][ T5641] nbd4: unable to read partition table [ 498.002656][ T5641] ldm_validate_partition_table(): Disk read failed. [ 498.022856][ T5641] Dev nbd4: unable to read RDB block 0 [ 498.033726][ T5641] nbd4: unable to read partition table [ 498.708181][T28732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.941835][ T9655] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 499.522276][ T9655] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 499.772661][T28894] netlink: 'syz.2.10519': attribute type 1 has an invalid length. [ 499.783816][T28894] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.10519'. [ 500.101557][T28914] __nla_validate_parse: 1 callbacks suppressed [ 500.101576][T28914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10529'. [ 500.212013][T28916] netlink: 'syz.2.10531': attribute type 2 has an invalid length. [ 500.267459][T28922] netlink: 'syz.4.10533': attribute type 1 has an invalid length. [ 500.280153][T28922] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.10533'. [ 500.773179][T28951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10547'. [ 500.844720][ T11] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 150 seconds [ 500.855673][ T11] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 150 seconds [ 500.866818][ T11] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 150 seconds [ 500.878071][ T11] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 150 seconds [ 501.055342][T28970] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 501.481434][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.883210][T29010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10574'. [ 502.270658][T29034] netlink: 'syz.0.10584': attribute type 14 has an invalid length. [ 502.297522][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10584'. [ 502.328412][T29034] netlink: 'syz.0.10584': attribute type 14 has an invalid length. [ 502.357486][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10584'. [ 502.454145][T29042] netlink: 'syz.3.10591': attribute type 1 has an invalid length. [ 502.474531][T29042] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10591'. [ 502.499840][T29042] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10591'. [ 502.587749][T29048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10592'. [ 502.736482][T29060] netlink: 'syz.1.10598': attribute type 2 has an invalid length. [ 502.776266][T29063] atomic_op ffff888056343198 conn xmit_atomic 0000000000000000 [ 503.018148][T29079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10607'. [ 503.102775][T29085] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 503.243653][T29091] syzkaller1: entered promiscuous mode [ 503.259518][T29091] syzkaller1: entered allmulticast mode [ 504.062761][T29142] netlink: 'syz.1.10633': attribute type 1 has an invalid length. [ 504.129423][T29142] 8021q: adding VLAN 0 to HW filter on device bond8 [ 504.180698][T29146] bond8: (slave geneve4): making interface the new active one [ 504.190939][T29146] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 504.339129][T29157] bond6: option mode: unable to set because the bond device has slaves [ 504.367721][T29157] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 505.343195][T29165] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 505.360320][T29165] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 505.512287][T29211] __nla_validate_parse: 8 callbacks suppressed [ 505.512305][T29211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10666'. [ 505.606727][T29215] netlink: 'syz.2.10667': attribute type 1 has an invalid length. [ 505.697185][T29215] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.748957][T29219] bond8: (slave geneve4): making interface the new active one [ 505.788613][T29219] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 505.874448][T29228] netlink: 'syz.2.10672': attribute type 21 has an invalid length. [ 505.883517][T29228] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10672'. [ 505.894033][T29228] netlink: 'syz.2.10672': attribute type 5 has an invalid length. [ 505.902332][T29228] netlink: 'syz.2.10672': attribute type 6 has an invalid length. [ 505.911291][T29228] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10672'. [ 505.962369][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10674'. [ 505.973212][T29232] netlink: 'syz.2.10674': attribute type 6 has an invalid length. [ 505.981613][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10674'. [ 506.000577][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10674'. [ 506.011285][T29232] netlink: 'syz.2.10674': attribute type 6 has an invalid length. [ 506.019147][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10674'. [ 506.153639][T29241] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.10678'. [ 506.219426][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10680'. [ 506.241922][T29246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10680'. [ 507.105955][T29286] 8021q: adding VLAN 0 to HW filter on device bond9 [ 507.114832][T29286] bridge0: port 3(bond9) entered blocking state [ 507.122971][T29286] bridge0: port 3(bond9) entered disabled state [ 507.129515][T29286] bond9: entered allmulticast mode [ 507.168523][T29286] bond9: entered promiscuous mode [ 507.181090][T29286] bridge0: port 3(bond9) entered blocking state [ 507.187542][T29286] bridge0: port 3(bond9) entered listening state [ 507.326376][ T9663] bridge0: port 3(bond9) entered disabled state [ 507.691925][T29326] bond5: entered promiscuous mode [ 508.596164][T29390] netlink: 'syz.1.10739': attribute type 4 has an invalid length. [ 508.613453][T29390] netlink: 'syz.1.10739': attribute type 4 has an invalid length. [ 508.932651][T29402] netlink: 'syz.4.10744': attribute type 6 has an invalid length. [ 509.031136][T29400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.045820][T29400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.056701][T29400] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 509.074697][T29402] netlink: 'syz.4.10744': attribute type 6 has an invalid length. [ 509.120678][T29406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.128406][T29406] bridge0: port 3(bond6) entered blocking state [ 509.135522][T29406] bridge0: port 3(bond6) entered disabled state [ 509.151033][T29406] bond6: entered allmulticast mode [ 509.168264][T29406] bond6: entered promiscuous mode [ 509.175301][T29406] bridge0: port 3(bond6) entered blocking state [ 509.181771][T29406] bridge0: port 3(bond6) entered forwarding state [ 509.778455][ T9655] bridge0: port 3(bond6) entered disabled state [ 510.912579][T29494] __nla_validate_parse: 10 callbacks suppressed [ 510.912599][T29494] netlink: 51 bytes leftover after parsing attributes in process `syz.2.10769'. [ 511.192219][T29508] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10777'. [ 511.218135][T29508] netlink: 320 bytes leftover after parsing attributes in process `syz.3.10777'. [ 511.526670][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10785'. [ 511.619276][T29525] netlink: 'syz.2.10786': attribute type 1 has an invalid length. [ 511.650344][T29525] bond10: entered promiscuous mode [ 511.655907][T29525] 8021q: adding VLAN 0 to HW filter on device bond10 [ 511.694708][T29525] bond10: (slave bridge5): making interface the new active one [ 511.720258][T29525] bridge5: entered promiscuous mode [ 511.730607][T29525] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 512.097301][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10804'. [ 512.107965][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10804'. [ 512.136462][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10794'. [ 512.307175][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10798'. [ 512.359358][T29553] syz_tun (unregistering): left allmulticast mode [ 512.551604][T29570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10805'. [ 512.839470][T29591] xt_hashlimit: size too large, truncated to 1048576 [ 512.847225][ T48] wlan0: Trigger new scan to find an IBSS to join [ 513.414525][T29621] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10830'. [ 514.126490][T29653] syzkaller1: entered promiscuous mode [ 514.140003][T29653] syzkaller1: entered allmulticast mode [ 515.064342][T29723] netlink: 'syz.0.10880': attribute type 21 has an invalid length. [ 515.075170][T29723] netlink: 'syz.0.10880': attribute type 21 has an invalid length. [ 515.881430][ T296] wlan0: Trigger new scan to find an IBSS to join [ 515.965504][T29782] __nla_validate_parse: 8 callbacks suppressed [ 515.965522][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10889'. [ 515.986019][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10889'. [ 515.995521][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10889'. [ 516.006198][T29782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10889'. [ 516.015663][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10889'. [ 516.025229][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10889'. [ 516.037204][ T48] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3e [ 516.205385][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10892'. [ 516.402082][T29805] netlink: 'syz.1.10899': attribute type 21 has an invalid length. [ 516.418261][T29805] netlink: 'syz.1.10899': attribute type 22 has an invalid length. [ 516.427495][T29805] netlink: 'syz.1.10899': attribute type 23 has an invalid length. [ 516.442915][T29805] netlink: 'syz.1.10899': attribute type 25 has an invalid length. [ 516.450414][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10900'. [ 516.459877][T29805] netlink: 'syz.1.10899': attribute type 26 has an invalid length. [ 516.459900][T29805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10899'. [ 516.627357][T29817] netlink: 'syz.4.10904': attribute type 22 has an invalid length. [ 516.635839][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10904'. [ 516.691028][T29820] netlink: 'syz.1.10905': attribute type 4 has an invalid length. [ 516.700878][T29820] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 516.723708][T29817] netlink: 'syz.4.10904': attribute type 22 has an invalid length. [ 516.803094][ T48] wlan0: Creating new IBSS network, BSSID d6:81:87:01:ba:45 [ 517.179156][T29846] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 517.194128][T29846] syzkaller1: Refused to change device type [ 517.304266][T29851] syzkaller1: entered promiscuous mode [ 517.328392][T29851] syzkaller1: entered allmulticast mode [ 517.483134][T29857] vlan4: entered allmulticast mode [ 517.544309][T29859] bond0 (unregistering): Released all slaves [ 518.093179][T29881] bridge8: entered promiscuous mode [ 518.100664][T29881] bridge8: entered allmulticast mode [ 518.134109][T29881] team0: Port device bridge8 added [ 518.149918][T29882] bridge0: port 1(team0) entered blocking state [ 518.167379][T29882] bridge0: port 1(team0) entered disabled state [ 518.179095][T29882] team0: entered allmulticast mode [ 518.206881][T29882] team0: entered promiscuous mode [ 519.969385][T29970] pim6reg1: entered promiscuous mode [ 519.991257][T29970] pim6reg1: entered allmulticast mode [ 520.025935][T29972] netlink: 'syz.2.10963': attribute type 15 has an invalid length. [ 520.937681][T30028] netlink: 'syz.4.10983': attribute type 4 has an invalid length. [ 520.950427][T30028] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 521.164387][T30042] __nla_validate_parse: 19 callbacks suppressed [ 521.164418][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10989'. [ 521.185704][T30042] netlink: 'syz.3.10989': attribute type 1 has an invalid length. [ 521.199669][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10989'. [ 521.211838][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10989'. [ 521.240498][T30042] netlink: 'syz.3.10989': attribute type 1 has an invalid length. [ 521.261602][T30042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10989'. [ 521.362069][T30052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10994'. [ 521.439251][T30056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10996'. [ 521.455027][T30056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10996'. [ 521.470837][T30059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10997'. [ 521.548583][T30062] vlan0: entered allmulticast mode [ 521.556564][T30062] bond0: entered allmulticast mode [ 521.575280][T30062] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10999'. [ 521.604642][T30062] bond0 (unregistering): Released all slaves [ 521.961906][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.969176][ C0] bridge0: topology change detected, propagating [ 521.975918][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.983174][ C0] bridge0: topology change detected, propagating [ 522.707086][T30093] ip6tnl3: entered promiscuous mode [ 523.509214][T30010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.634457][T30103] netlink: 'syz.1.11012': attribute type 20 has an invalid length. [ 523.669818][T30103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11012'. [ 523.781656][T30103] netlink: 'syz.1.11012': attribute type 20 has an invalid length. [ 525.054860][T30175] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 525.061207][T30175] syzkaller1: Linktype set failed because interface is up [ 525.156140][T30180] netlink: 'syz.0.11047': attribute type 4 has an invalid length. [ 525.194486][ T5776] lo speed is unknown, defaulting to 1000 [ 525.205984][T30180] netlink: 'syz.0.11047': attribute type 4 has an invalid length. [ 525.214225][ T5776] syz0: Port: 1 Link DOWN [ 525.219186][ T5776] lo speed is unknown, defaulting to 1000 [ 525.230533][ T5776] lo speed is unknown, defaulting to 1000 [ 525.244316][ T5776] syz0: Port: 1 Link ACTIVE [ 525.378071][T30195] veth1_macvtap: entered allmulticast mode [ 525.439132][T30199] netlink: 'syz.2.11054': attribute type 8 has an invalid length. [ 525.639069][T30199] bond0: entered promiscuous mode [ 525.656706][T30199] bond_slave_0: entered promiscuous mode [ 525.672458][T30199] bond_slave_1: entered promiscuous mode [ 525.689268][T30199] bond0: left promiscuous mode [ 525.702237][T30199] bond_slave_0: left promiscuous mode [ 525.712527][T30199] bond_slave_1: left promiscuous mode [ 525.875181][T30224] netlink: 'syz.0.11064': attribute type 1 has an invalid length. [ 526.228102][T30250] veth1_macvtap: entered allmulticast mode [ 526.238773][T30250] __nla_validate_parse: 8 callbacks suppressed [ 526.238790][T30250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11077'. [ 526.480355][T30260] IPv6: sit3: Disabled Multicast RS [ 526.489433][T30262] netlink: 'syz.0.11082': attribute type 4 has an invalid length. [ 526.540574][T27846] lo speed is unknown, defaulting to 1000 [ 526.547117][T27846] syz0: Port: 1 Link DOWN [ 526.563866][ T5776] lo speed is unknown, defaulting to 1000 [ 526.860788][T30280] veth1_to_bond: entered allmulticast mode [ 526.887426][T30280] veth1_to_bond: left allmulticast mode [ 527.262342][T30301] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11095'. [ 527.694676][T30328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11107'. [ 527.714617][T30328] netlink: 'syz.2.11107': attribute type 7 has an invalid length. [ 527.732531][T30328] netlink: 'syz.2.11107': attribute type 8 has an invalid length. [ 527.740717][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11107'. [ 528.680594][T29559] Bluetooth: hci4: command 0x0406 tx timeout [ 529.193672][T30413] syzkaller0: entered promiscuous mode [ 529.214402][T30413] syzkaller0: entered allmulticast mode [ 529.395011][T30428] lo: left promiscuous mode [ 529.444548][T30428] tunl0: left promiscuous mode [ 529.464849][T30428] gre0: left promiscuous mode [ 529.493630][T30428] gretap0: left promiscuous mode [ 529.538597][T30428] ip_vti0: left promiscuous mode [ 529.559414][T30428] sit0: left promiscuous mode [ 529.792327][T30452] netlink: 'syz.1.11144': attribute type 1 has an invalid length. [ 529.831451][T30428] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 529.895305][T30428] gtp0: left promiscuous mode [ 529.917601][T30428] bridge4: left promiscuous mode [ 529.945764][T30428] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 530.020598][T30452] bond0: entered promiscuous mode [ 530.026314][T30452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.096111][T30456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.106283][T30456] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 530.116863][T30456] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 530.132109][T30456] bond0: (slave vti0): making interface the new active one [ 530.139756][T30456] vti0: entered promiscuous mode [ 530.147610][T30456] bond0: (slave vti0): Enslaving as an active interface with an up link [ 530.401593][T30469] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 530.624599][T30488] sock: sock_set_timeout: `syz.4.11157' (pid 30488) tries to set negative timeout [ 530.673130][T30490] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11158'. [ 530.807894][ T4995] udevd[4995]: worker [5636] /devices/virtual/block/nbd0 timeout; kill it [ 530.837412][ T4995] udevd[4995]: seq 16876 '/devices/virtual/block/nbd0' killed [ 530.921201][ T11] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 180 seconds [ 530.932222][ T11] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 180 seconds [ 530.945991][ T11] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 180 seconds [ 530.957124][ T11] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 180 seconds [ 531.043704][T30505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11164'. [ 531.226688][T30512] syzkaller1: entered promiscuous mode [ 531.232403][T30512] syzkaller1: entered allmulticast mode [ 531.937124][T30554] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.11187'. [ 532.064662][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11189'. [ 532.093443][T30564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11189'. [ 532.158417][T30568] xt_hashlimit: size too large, truncated to 1048576 [ 532.278637][T30575] bond7: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 532.536117][T30575] bond7 (unregistering): Released all slaves [ 532.623324][T30580] bridge_slave_0: invalid flags given to default FDB implementation [ 532.780993][T30600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11204'. [ 532.790230][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11204'. [ 532.799451][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11204'. [ 532.873621][T30600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11204'. [ 532.886072][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11204'. [ 532.904602][T30604] 8021q: adding VLAN 0 to HW filter on device eth0 [ 532.909774][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11204'. [ 532.918677][T30604] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.932556][T30604] 8021q: adding VLAN 0 to HW filter on device eth2 [ 532.943127][T30604] 8021q: adding VLAN 0 to HW filter on device eth3 [ 532.953090][T30604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.977147][ T5361] lo speed is unknown, defaulting to 1000 [ 532.993679][ T5361] syz0: Port: 1 Link ACTIVE [ 533.016290][ T10] lo speed is unknown, defaulting to 1000 [ 533.172480][T30614] netlink: 'syz.4.11209': attribute type 1 has an invalid length. [ 533.242313][T30614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.279087][T30618] bond0: (slave geneve2): making interface the new active one [ 533.307117][T30618] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 533.484043][T30625] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 533.518233][T30625] bond7: (slave lo): Enslaving as an active interface with an up link [ 533.530851][T30625] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 533.547481][ T10] lo speed is unknown, defaulting to 1000 [ 533.555434][ T5361] lo speed is unknown, defaulting to 1000 [ 533.563495][ T10] lo speed is unknown, defaulting to 1000 [ 533.704722][T30640] netlink: 'syz.1.11216': attribute type 1 has an invalid length. [ 533.792959][T30640] bond9: entered promiscuous mode [ 533.799287][T30640] 8021q: adding VLAN 0 to HW filter on device bond9 [ 533.912187][T30644] bond9: (slave bridge9): making interface the new active one [ 533.935161][T30644] bridge9: entered promiscuous mode [ 533.947610][T30644] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 535.083093][T30695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11240'. [ 535.137413][T30699] xt_hashlimit: size too large, truncated to 1048576 [ 536.049176][T30748] netlink: Unknown conntrack attr (0) [ 536.554375][T30780] veth0: entered promiscuous mode [ 536.586008][T30780] veth0: left promiscuous mode [ 537.593960][T30821] __nla_validate_parse: 4 callbacks suppressed [ 537.593978][T30821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11293'. [ 540.100972][T30924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11328'. [ 540.126252][T30924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11328'. [ 540.235486][T30938] netlink: 'syz.4.11332': attribute type 1 has an invalid length. [ 540.255701][T30940] netlink: 240 bytes leftover after parsing attributes in process `syz.2.11329'. [ 540.282125][T30938] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.453427][T30953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 540.633017][T30953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 540.847589][T30970] netlink: 'syz.2.11340': attribute type 1 has an invalid length. [ 540.900780][T30970] bond11: (slave gretap2): making interface the new active one [ 540.909417][T30970] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 541.641665][T31010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11357'. [ 541.777262][T31023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11362'. [ 541.885344][T31028] netlink: 'syz.1.11364': attribute type 1 has an invalid length. [ 541.994397][T31032] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 542.444901][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 542.494303][T31050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.536194][T31032] bond8 (unregistering): Released all slaves [ 542.703325][T31035] bond10: (slave geneve5): making interface the new active one [ 542.712078][T31035] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 542.742738][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.769923][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.798568][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.826656][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 542.882559][T31062] hsr0 speed is unknown, defaulting to 1000 [ 542.891032][T31062] wg1 speed is unknown, defaulting to 1000 [ 542.898616][T31062] lo speed is unknown, defaulting to 1000 [ 543.395803][T31082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11382'. [ 543.488588][T31087] netlink: 'syz.1.11384': attribute type 1 has an invalid length. [ 544.009877][T31119] netlink: 'syz.2.11396': attribute type 4 has an invalid length. [ 544.057668][T31119] netlink: 'syz.2.11396': attribute type 4 has an invalid length. [ 544.252540][T31126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11399'. [ 544.351680][T31132] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11401'. [ 545.569188][T31170] syzkaller1: entered promiscuous mode [ 545.575222][T31170] syzkaller1: entered allmulticast mode [ 546.693131][T31098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.996785][T31204] netlink: 'syz.2.11431': attribute type 1 has an invalid length. [ 547.032171][T31206] IPv6: sit4: Disabled Multicast RS [ 547.043353][T31204] netlink: 'syz.2.11431': attribute type 4 has an invalid length. [ 547.074151][T31204] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.11431'. [ 547.554031][T31226] netlink: 'syz.4.11439': attribute type 1 has an invalid length. [ 547.563565][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 547.727783][T31227] bond7: (slave geneve3): making interface the new active one [ 547.738521][T31227] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 547.994808][T31231] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 548.059033][T31231] bond2: left promiscuous mode [ 548.089225][T31231] geneve2: left promiscuous mode [ 548.108679][T31231] macvtap1: left promiscuous mode [ 548.123802][T31231] vlan0: left promiscuous mode [ 548.163130][T31231] h: left promiscuous mode [ 548.168601][T31231] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 548.210225][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 548.229878][ T1107] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 548.289316][ T1107] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 548.311876][ T1107] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 548.379390][ T1107] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 548.395566][ T1107] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 548.413628][ T1107] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 548.437848][ T1107] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 548.521932][T31267] netlink: 'syz.4.11450': attribute type 8 has an invalid length. [ 548.530368][T31267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11450'. [ 548.551705][T31267] bond0: entered promiscuous mode [ 548.557121][T31267] geneve2: entered promiscuous mode [ 548.567283][T31267] gretap0: entered promiscuous mode [ 548.573851][T31267] team0: entered promiscuous mode [ 548.585334][T31267] debugfs: 'hsr1' already exists in 'hsr' [ 548.591284][T31267] Cannot create hsr debugfs directory [ 548.596846][T31267] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 548.608900][T31267] hsr1: entered promiscuous mode [ 548.849695][ T9666] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.774904][T31238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.904343][T31282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11456'. [ 551.297675][T31308] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11466'. [ 551.594762][T31321] sock: sock_set_timeout: `syz.0.11472' (pid 31321) tries to set negative timeout [ 551.608017][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11482'. [ 551.787693][T31335] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11480'. [ 551.801773][T31335] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 551.925088][ T9666] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 552.141834][T31362] netlink: 208 bytes leftover after parsing attributes in process `syz.0.11489'. [ 552.474946][T31382] netlink: 'syz.0.11495': attribute type 1 has an invalid length. [ 552.725403][T31396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11501'. [ 552.746547][T31396] team1: entered promiscuous mode [ 552.752816][T31396] team1: entered allmulticast mode [ 552.896891][T31404] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.11505'. [ 554.807964][T31337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 555.010122][T31484] netlink: 'syz.0.11530': attribute type 15 has an invalid length. [ 556.068701][T31532] netlink: 'syz.4.11547': attribute type 29 has an invalid length. [ 556.078126][T31532] netlink: 'syz.4.11547': attribute type 29 has an invalid length. [ 556.090207][T31532] netlink: 'syz.4.11547': attribute type 32 has an invalid length. [ 556.356856][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11556'. [ 556.388309][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11556'. [ 556.422922][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11556'. [ 556.458665][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11556'. [ 556.991591][T31588] syzkaller1: entered promiscuous mode [ 557.023141][T31588] syzkaller1: entered allmulticast mode [ 557.300933][T31601] netlink: 'syz.0.11575': attribute type 1 has an invalid length. [ 557.565129][T31602] bond9: (slave bridge3): making interface the new active one [ 557.601121][T31602] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 557.710172][T31616] netlink: 'syz.0.11581': attribute type 2 has an invalid length. [ 557.720365][T31616] netlink: 'syz.0.11581': attribute type 2 has an invalid length. [ 558.277659][T31643] syzkaller0: entered promiscuous mode [ 558.285284][T31643] syzkaller0: entered allmulticast mode [ 558.401022][T31645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11592'. [ 560.923962][T31666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11597'. [ 560.934049][T31666] bridge: RTM_NEWNEIGH with invalid ether address [ 560.941270][T31667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11597'. [ 560.959839][T31667] bridge: RTM_NEWNEIGH with invalid ether address [ 561.000816][ T11] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 210 seconds [ 561.011799][ T11] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 210 seconds [ 561.023859][ T11] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 210 seconds [ 561.034929][ T11] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 210 seconds [ 561.456375][T31703] tipc: Failed to remove unknown binding: 66,1,1/0:3667442682/3667442684 [ 561.468531][T31703] tipc: Failed to remove unknown binding: 66,1,1/0:3667442682/3667442684 [ 561.556700][T31709] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.11613'. [ 561.755906][T31719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11618'. [ 561.837984][T31670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.962466][T31724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11619'. [ 562.097556][T31732] syzkaller0: entered promiscuous mode [ 562.107944][T31732] syzkaller0: entered allmulticast mode [ 562.117688][T31732] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 562.548427][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11638'. [ 562.571337][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11638'. [ 562.637429][T31767] netlink: 'syz.1.11639': attribute type 1 has an invalid length. [ 562.699681][T31767] 8021q: adding VLAN 0 to HW filter on device bond11 [ 562.922440][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.294310][T31799] netlink: 'syz.1.11652': attribute type 21 has an invalid length. [ 563.314562][T31799] netlink: 'syz.1.11652': attribute type 22 has an invalid length. [ 563.325331][T31799] netlink: 'syz.1.11652': attribute type 23 has an invalid length. [ 563.335955][T31799] netlink: 'syz.1.11652': attribute type 25 has an invalid length. [ 563.345073][T31799] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11652'. [ 563.520048][T31809] sctp: [Deprecated]: syz.0.11657 (pid 31809) Use of int in maxseg socket option. [ 563.520048][T31809] Use struct sctp_assoc_value instead [ 563.921603][T31836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11666'. [ 563.930846][T31836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11666'. [ 564.328365][T31862] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.11678'. [ 566.604616][T31815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.746932][T31884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11686'. [ 566.825095][T31884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11686'. [ 566.825428][T31892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11689'. [ 566.951364][T31897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11693'. [ 566.961713][T31897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11693'. [ 567.212969][T31912] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.11698'. [ 568.074554][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11721'. [ 568.225346][T31971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11724'. [ 568.726512][T31985] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 568.735276][T31985] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 569.786411][T32016] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 570.030035][T32044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11752'. [ 570.506793][T32051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11754'. [ 571.732297][T32079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.807185][T32130] xt_hashlimit: size too large, truncated to 1048576 [ 572.618114][T32169] __nla_validate_parse: 1 callbacks suppressed [ 572.618127][T32169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11806'. [ 572.625029][T32129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.729494][T32179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11806'. [ 572.781659][T32169] 8021q: adding VLAN 0 to HW filter on device bond8 [ 572.897286][T32175] 8021q: adding VLAN 0 to HW filter on device bond9 [ 572.912857][T32175] bond8: (slave bond9): Enslaving as an active interface with an up link [ 572.945108][T32179] bond8 (unregistering): (slave bond9): Releasing backup interface [ 572.965667][T32179] bond8 (unregistering): Released all slaves [ 572.971757][T32194] netlink: 'syz.0.11812': attribute type 1 has an invalid length. [ 573.039080][T32194] 8021q: adding VLAN 0 to HW filter on device bond10 [ 573.071041][T32197] ip_vti0: entered promiscuous mode [ 573.184366][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11813'. [ 573.361650][T32203] syzkaller0: entered promiscuous mode [ 573.368013][T32203] syzkaller0: entered allmulticast mode [ 576.621798][T32279] syzkaller1: entered promiscuous mode [ 576.635619][T32279] syzkaller1: entered allmulticast mode [ 576.868052][T32292] netlink: 'syz.2.11842': attribute type 1 has an invalid length. [ 576.889662][T32292] netlink: 'syz.2.11842': attribute type 4 has an invalid length. [ 576.904247][T32292] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11842'. [ 577.117743][T32308] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.11848'. [ 577.246123][T32313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11849'. [ 577.293676][T32315] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11850'. [ 577.380290][T32313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11849'. [ 577.578846][T32327] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 577.586361][T32327] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 578.178334][T32360] syzkaller1: entered promiscuous mode [ 578.184901][T32360] syzkaller1: entered allmulticast mode [ 578.288500][T32366] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.11872'. [ 578.857282][T32392] syzkaller1: entered promiscuous mode [ 578.870541][T32392] syzkaller1: entered allmulticast mode [ 579.167507][T32413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.190374][T32413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.203214][T32413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.224632][T32413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.235564][T32413] batman_adv: batadv0: Removing interface: gretap1 [ 579.466191][T32431] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.11899'. [ 579.557726][T32435] "syz.2.11902" (32435) uses obsolete ecb(arc4) skcipher [ 579.590585][T32437] netlink: 'syz.3.11901': attribute type 1 has an invalid length. [ 579.616996][T32437] bond8: entered promiscuous mode [ 579.625918][T32437] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.693632][T32437] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.700956][T32437] bond8: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 579.711912][T32437] bond8: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 579.725824][T32437] bond8: (slave ip6gre3): making interface the new active one [ 579.735410][T32437] ip6gre3: entered promiscuous mode [ 579.742522][T32437] bond8: (slave ip6gre3): Enslaving as an active interface with an up link [ 579.911333][T32451] netlink: 'syz.0.11907': attribute type 18 has an invalid length. [ 579.936534][T32451] netlink: 'syz.0.11907': attribute type 18 has an invalid length. [ 580.202008][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.656674][T32481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11918'. [ 580.750970][T32481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11918'. [ 580.792244][T32488] netlink: 'syz.1.11922': attribute type 1 has an invalid length. [ 580.808932][T32488] netlink: 'syz.1.11922': attribute type 4 has an invalid length. [ 580.821890][T32488] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.11922'. [ 580.882268][T32492] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 580.897288][T32492] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 581.265922][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11933'. [ 581.286744][T32515] netlink: 'syz.3.11933': attribute type 29 has an invalid length. [ 581.295484][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11933'. [ 581.307030][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11933'. [ 581.318169][T32515] netlink: 'syz.3.11933': attribute type 29 has an invalid length. [ 581.334431][T32515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11933'. [ 581.425505][T32525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11938'. [ 581.540436][T32525] bond10: entered promiscuous mode [ 582.156426][T32559] hsr_slave_1 (unregistering): left promiscuous mode [ 583.212774][T32618] netlink: 'syz.0.11978': attribute type 1 has an invalid length. [ 583.249440][T32618] netlink: 'syz.0.11978': attribute type 1 has an invalid length. [ 583.536211][T32631] __nla_validate_parse: 6 callbacks suppressed [ 583.536233][T32631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11984'. [ 583.626630][T32631] bond12: entered promiscuous mode [ 583.973791][ T1107] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 584.676680][T32672] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12000'. [ 584.844266][T32679] GUP no longer grows the stack in syz.4.12003 (32679): 200000003000-20000000a000 (200000001000) [ 584.860040][T32679] CPU: 1 UID: 0 PID: 32679 Comm: syz.4.12003 Not tainted syzkaller #0 PREEMPT(full) [ 584.860068][T32679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.860092][T32679] Call Trace: [ 584.860100][T32679] [ 584.860108][T32679] dump_stack_lvl+0xe8/0x150 [ 584.860136][T32679] __get_user_pages+0x2378/0x2720 [ 584.860164][T32679] ? __gup_longterm_locked+0xc4e/0x1630 [ 584.860203][T32679] ? __gup_longterm_locked+0xc4e/0x1630 [ 584.860225][T32679] ? down_read_killable+0x1bb/0x340 [ 584.860251][T32679] __gup_longterm_locked+0xdcf/0x1630 [ 584.860280][T32679] ? lock_acquire+0x106/0x350 [ 584.860321][T32679] gup_fast_fallback+0x1d84/0x20d0 [ 584.860379][T32679] ? __pfx_gup_fast_fallback+0x10/0x10 [ 584.860410][T32679] ? is_valid_gup_args+0x11f/0x200 [ 584.860437][T32679] ? get_user_pages_fast+0x4d/0xb0 [ 584.860464][T32679] __iov_iter_get_pages_alloc+0x370/0xa10 [ 584.860503][T32679] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 584.860536][T32679] iov_iter_get_pages2+0x5e/0xa0 [ 584.860570][T32679] __se_sys_vmsplice+0x7c7/0x1620 [ 584.860619][T32679] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 584.860646][T32679] ? __pfx_futex_wait+0x10/0x10 [ 584.860686][T32679] ? lockdep_hardirqs_on+0x7a/0x110 [ 584.860764][T32679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.860785][T32679] do_syscall_64+0x15f/0xf80 [ 584.860810][T32679] ? trace_irq_disable+0x3b/0x140 [ 584.860838][T32679] ? clear_bhb_loop+0x40/0x90 [ 584.860863][T32679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.860884][T32679] RIP: 0033:0x7f7b5419cdd9 [ 584.860902][T32679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.860919][T32679] RSP: 002b:00007f7b5502c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 584.860939][T32679] RAX: ffffffffffffffda RBX: 00007f7b54415fa0 RCX: 00007f7b5419cdd9 [ 584.860953][T32679] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 584.860966][T32679] RBP: 00007f7b54232d69 R08: 0000000000000000 R09: 0000000000000000 [ 584.860979][T32679] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 584.860988][T32679] R13: 00007f7b54416038 R14: 00007f7b54415fa0 R15: 00007ffcb2587638 [ 584.861021][T32679] [ 585.196182][T32691] xt_hashlimit: size too large, truncated to 1048576 [ 585.337216][T32698] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12009'. [ 585.458293][T32703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12011'. [ 585.657960][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12018'. [ 585.672285][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12018'. [ 586.031714][T32737] netlink: 'syz.0.12026': attribute type 1 has an invalid length. [ 586.111848][T32737] bond11: (slave gretap4): making interface the new active one [ 586.132909][T32737] bond11: (slave gretap4): Enslaving as an active interface with an up link [ 586.491404][T32758] netlink: 'syz.2.12033': attribute type 3 has an invalid length. [ 586.681957][ T48] nci: nci_rx_work: unknown MT 0x1 [ 586.791741][ T304] syzkaller1: entered promiscuous mode [ 586.798631][ T304] syzkaller1: entered allmulticast mode [ 587.138014][ T324] netlink: 'syz.0.12047': attribute type 1 has an invalid length. [ 587.266805][ T324] 8021q: adding VLAN 0 to HW filter on device bond12 [ 587.365957][ T333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12050'. [ 587.734602][ T353] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12056'. [ 587.831347][ T357] netlink: 'syz.2.12058': attribute type 1 has an invalid length. [ 587.863861][ T357] bond13: entered promiscuous mode [ 587.869176][ T357] bond13: entered allmulticast mode [ 587.875455][ T357] 8021q: adding VLAN 0 to HW filter on device bond13 [ 587.904277][ T361] macvlan0: entered promiscuous mode [ 587.911185][ T361] macvlan0: entered allmulticast mode [ 587.929977][ T361] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 587.996138][ T365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12061'. [ 588.326301][ T374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.405460][ T385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12070'. [ 588.454322][ T390] netlink: 'syz.1.12072': attribute type 1 has an invalid length. [ 588.510763][ T390] 8021q: adding VLAN 0 to HW filter on device bond12 [ 588.542903][ T394] 8021q: adding VLAN 0 to HW filter on device bond12 [ 588.553662][ T394] bond12: (slave vcan0): The slave device specified does not support setting the MAC address [ 588.572453][ T394] bond12: (slave vcan0): Error -95 calling set_mac_address [ 588.662774][ T401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12075'. [ 588.816128][ T407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12077'. [ 588.914012][ T407] netlink: 'syz.1.12077': attribute type 1 has an invalid length. [ 588.926418][ T407] netlink: 'syz.1.12077': attribute type 2 has an invalid length. [ 588.952846][ T407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12077'. [ 588.987403][ T409] netlink: 'syz.0.12078': attribute type 13 has an invalid length. [ 589.126874][ T418] sctp: [Deprecated]: syz.4.12080 (pid 418) Use of int in maxseg socket option. [ 589.126874][ T418] Use struct sctp_assoc_value instead [ 589.242251][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 589.588809][ T442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12091'. [ 590.541441][ T472] bridge12: entered promiscuous mode [ 590.549620][ T472] bridge12: entered allmulticast mode [ 591.042121][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12107'. [ 591.089698][ T11] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 240 seconds [ 591.104650][ T11] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 240 seconds [ 591.117474][ T11] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 240 seconds [ 591.129121][ T11] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 240 seconds [ 591.186484][ T504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12111'. [ 593.200520][ T458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.403948][ T522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12117'. [ 593.693501][ T535] netlink: 'syz.3.12121': attribute type 1 has an invalid length. [ 594.704593][ T535] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 594.920949][ T546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12126'. [ 595.013167][ T556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12129'. [ 595.095761][ T549] wireguard0: entered promiscuous mode [ 595.102294][ T549] wireguard0: entered allmulticast mode [ 595.190380][ T554] hsr0 speed is unknown, defaulting to 1000 [ 595.198948][ T554] wg1 speed is unknown, defaulting to 1000 [ 595.216510][ T554] lo speed is unknown, defaulting to 1000 [ 596.243764][ T600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12138'. [ 596.887581][ T620] xt_hashlimit: size too large, truncated to 1048576 [ 597.072432][ T634] netlink: 'syz.4.12153': attribute type 1 has an invalid length. [ 597.123186][ T634] bond8: entered promiscuous mode [ 597.128731][ T634] 8021q: adding VLAN 0 to HW filter on device bond8 [ 597.188774][ T634] bond8: (slave bridge7): making interface the new active one [ 597.198506][ T634] bridge7: entered promiscuous mode [ 597.211012][ T634] bridge7: left promiscuous mode [ 597.621241][ T660] syzkaller1: entered promiscuous mode [ 597.627030][ T660] syzkaller1: entered allmulticast mode [ 600.507137][ T684] tipc: Enabling not permitted [ 600.513484][ T684] tipc: Enabling of bearer rejected, failed to enable media [ 600.604567][ T697] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12175'. [ 600.747011][ T714] netlink: 'syz.1.12181': attribute type 1 has an invalid length. [ 600.938377][ T724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12184'. [ 600.992152][ T726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12185'. [ 601.127722][ T731] netlink: 'syz.1.12187': attribute type 1 has an invalid length. [ 601.267758][ T741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12191'. [ 601.491419][ T704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.776124][ T754] tipc: Failed to remove unknown binding: 66,1,1/10005162:2747545237/2747545239 [ 602.000274][ T763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12200'. [ 602.103318][ T768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12202'. [ 602.275481][ T777] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 602.316663][ T779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12206'. [ 602.318701][ T777] xt_hashlimit: size too large, truncated to 1048576 [ 602.444369][ T779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12206'. [ 602.810216][ T797] netlink: 7 bytes leftover after parsing attributes in process `syz.4.12213'. [ 602.985078][ T802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12215'. [ 603.017650][ T804] sctp: [Deprecated]: syz.0.12216 (pid 804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 603.017650][ T804] Use struct sctp_sack_info instead [ 603.331330][ T817] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 603.340669][ T791] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 603.722618][ T831] syzkaller1: entered promiscuous mode [ 603.731444][ T831] syzkaller1: entered allmulticast mode [ 604.053988][ T849] netlink: 'syz.4.12234': attribute type 9 has an invalid length. [ 604.649638][ T853] netlink: 'syz.1.12236': attribute type 16 has an invalid length. [ 604.666158][ T853] netlink: 'syz.1.12236': attribute type 17 has an invalid length. [ 604.711591][ T873] netlink: 'syz.0.12242': attribute type 3 has an invalid length. [ 604.772651][ T853] bridge0: port 1(team0) entered blocking state [ 604.779368][ T853] bridge0: port 1(team0) entered forwarding state [ 604.788763][ T853] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.816457][ T853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.860139][ T853] 0·: left allmulticast mode [ 604.864847][ T853] hsr_slave_0: left allmulticast mode [ 604.870843][ T853] hsr_slave_1: left allmulticast mode [ 604.886416][ T853] veth1_macvtap: entered promiscuous mode [ 604.909001][ T853] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 604.927395][ T853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.948074][ T853] gretap2: left promiscuous mode [ 604.954450][ T853] gretap2: left allmulticast mode [ 604.969090][ T853] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 605.663932][ T913] netlink: 'syz.4.12260': attribute type 1 has an invalid length. [ 605.672598][ T913] netlink: 'syz.4.12260': attribute type 4 has an invalid length. [ 605.683447][ T913] __nla_validate_parse: 9 callbacks suppressed [ 605.683463][ T913] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.12260'. [ 605.733771][ T915] tipc: Enabled bearer , priority 0 [ 605.768800][ T915] syzkaller0: entered promiscuous mode [ 605.783287][ T915] syzkaller0: entered allmulticast mode [ 605.843836][ T920] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.854874][ T920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.866337][ T920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 605.877341][ T920] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 605.895698][ T914] tipc: Resetting bearer [ 605.917533][ T914] tipc: Disabling bearer [ 605.936734][ T917] netlink: 25 bytes leftover after parsing attributes in process `syz.2.12262'. [ 605.970577][ T917] netlink: 'syz.2.12262': attribute type 4 has an invalid length. [ 606.004537][ T920] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.026408][ T920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.046801][ T920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 606.057724][ T920] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 606.175607][ T920] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.201698][ T920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.233280][ T920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 606.268747][ T920] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 606.290919][ T949] netlink: 'syz.3.12269': attribute type 1 has an invalid length. [ 606.377085][ T949] macvlan2: entered promiscuous mode [ 606.384111][ T949] macvlan2: entered allmulticast mode [ 606.391242][ T949] bond11: entered promiscuous mode [ 606.397391][ T949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 606.417873][ T949] bond11: left promiscuous mode [ 606.511823][ T920] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.522000][ T920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.532925][ T920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 60302 - 0 [ 606.543422][ T965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12274'. [ 606.543711][ T920] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 606.666038][ T968] netlink: 'syz.1.12274': attribute type 1 has an invalid length. [ 606.885338][ T9663] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.899703][ T9663] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 606.927419][ T9663] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 606.960015][ T9663] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 60302 - 0 [ 607.012286][ T979] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.12280'. [ 607.087386][ T1107] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.107753][ T1107] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 607.133838][ T1107] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.159335][ T1107] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 60302 - 0 [ 607.188487][ T296] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.208245][ T296] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 607.231516][ T984] netlink: 'syz.4.12282': attribute type 39 has an invalid length. [ 607.236260][ T296] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.270300][ T296] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 60302 - 0 [ 607.330692][ T48] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.373530][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 607.402035][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.430583][ T48] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 60302 - 0 [ 607.672062][ T996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.193568][ T1010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12290'. [ 609.293663][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12307'. [ 609.670747][ T1080] netlink: 'syz.2.12308': attribute type 1 has an invalid length. [ 612.204866][ T3287] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 612.324791][ T1080] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 612.416747][ T1099] netlink: 'syz.2.12315': attribute type 26 has an invalid length. [ 612.434795][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12315'. [ 612.499101][ T1099] netlink: 'syz.2.12315': attribute type 26 has an invalid length. [ 612.525778][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12315'. [ 613.139451][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12329'. [ 614.074361][ T1165] team0: Device gtp2 is of different type [ 614.371045][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12345'. [ 614.564444][ T1192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12352'. [ 614.924705][ T1211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12360'. [ 614.950475][ T1211] 8021q: adding VLAN 0 to HW filter on device bond13 [ 614.979896][ T1211] ipvlan0: entered allmulticast mode [ 614.985342][ T1211] bond13: entered allmulticast mode [ 614.996531][ T1211] bond13: (slave ipip1): refused to change device type [ 615.177954][ T1219] bond14: entered promiscuous mode [ 615.188088][ T1222] xt_hashlimit: size too large, truncated to 1048576 [ 615.198233][ T1219] macvlan0: entered promiscuous mode [ 615.204453][ T1219] macvlan0: entered allmulticast mode [ 615.213057][ T1219] bond14: (slave macvlan0): Opening slave failed [ 615.363138][ T1227] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.12365'. [ 616.238015][ T1137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.354917][ T1257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12378'. [ 616.613507][ T1272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12384'. [ 616.954771][ T1289] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.12389'. [ 617.528251][ T1307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12394'. [ 617.547383][ T1307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12394'. [ 617.589765][ T1309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.619712][ T1309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.765367][ T1318] tipc: Enabled bearer , priority 0 [ 617.837889][ T1318] syzkaller0: entered promiscuous mode [ 617.843715][ T1318] syzkaller0: entered allmulticast mode [ 617.850750][ T1318] tipc: Resetting bearer [ 617.901423][ T1317] tipc: Resetting bearer [ 619.880741][ T1124] wlan1: Trigger new scan to find an IBSS to join [ 620.139319][ T1317] tipc: Disabling bearer [ 620.151702][ T1331] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 620.194708][ T5776] tipc: Node number set to 1 [ 620.501813][ T1381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12421'. [ 620.512148][ T1381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12421'. [ 621.159966][ T11] block nbd0: Possible stuck request ffff888027627000: control (read@0,1024B). Runtime 270 seconds [ 621.172756][ T11] block nbd0: Possible stuck request ffff8880276271c0: control (read@1024,1024B). Runtime 270 seconds [ 621.183889][ T11] block nbd0: Possible stuck request ffff888027627380: control (read@2048,1024B). Runtime 270 seconds [ 621.195033][ T11] block nbd0: Possible stuck request ffff888027627540: control (read@3072,1024B). Runtime 270 seconds [ 621.887684][ T1407] tipc: Started in network mode [ 621.892760][ T1407] tipc: Node identity 080211000001, cluster identity 4711 [ 621.900189][ T1407] tipc: Enabled bearer , priority 0 [ 621.908170][ T1408] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 621.943215][ T1408] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 622.184023][ T1424] netlink: 'syz.3.12438': attribute type 1 has an invalid length. [ 622.271337][ T1424] 8021q: adding VLAN 0 to HW filter on device bond12 [ 622.357299][ T1429] vlan2: entered promiscuous mode [ 622.366608][ T1429] bond12: entered promiscuous mode [ 622.373587][ T1429] vlan2: entered allmulticast mode [ 622.378863][ T1429] bond12: entered allmulticast mode [ 622.471672][ T1442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12444'. [ 622.483691][ T1435] hsr0 speed is unknown, defaulting to 1000 [ 622.495386][ T1435] wg1 speed is unknown, defaulting to 1000 [ 622.505349][ T1435] lo speed is unknown, defaulting to 1000 [ 622.647734][ T1449] netlink: 'syz.2.12447': attribute type 1 has an invalid length. [ 622.698024][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12449'. [ 622.734314][ T1449] bond14: entered promiscuous mode [ 622.754742][ T1449] 8021q: adding VLAN 0 to HW filter on device bond14 [ 622.795320][ T1457] bond14: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 622.825321][ T1457] bond14: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 622.849470][ T1457] bond14: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 622.903821][ T1455] bond14: (slave bridge7): making interface the new active one [ 622.912372][ T1455] bridge7: entered promiscuous mode [ 622.923639][ T1455] bond14: (slave bridge7): Enslaving as an active interface with an up link [ 622.969135][ T1465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12452'. [ 623.084078][ T50] block nbd6: Receive control failed (result -104) [ 623.120777][ T5865] tipc: Node number set to 134418688 [ 623.135205][ T1471] bond5: option mode: unable to set because the bond device has slaves [ 623.255216][ T1472] tipc: Enabled bearer , priority 0 [ 623.324142][ T1472] syzkaller0: entered promiscuous mode [ 623.329856][ T1472] syzkaller0: entered allmulticast mode [ 623.336451][ T1472] tipc: Resetting bearer [ 623.435838][ T1468] tipc: Resetting bearer [ 623.444491][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12459'. [ 624.364260][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.378930][ T1494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12461'. [ 624.846339][ T48] wlan1: Trigger new scan to find an IBSS to join [ 625.557018][ T1468] tipc: Disabling bearer [ 625.766065][ T1503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12465'. [ 625.780724][ T1124] wlan1: Creating new IBSS network, BSSID ce:68:f0:91:01:f5 [ 625.875437][ T1509] netlink: 'syz.0.12467': attribute type 1 has an invalid length. [ 625.947774][ T1512] bond15: entered promiscuous mode [ 625.993560][ T1509] 8021q: adding VLAN 0 to HW filter on device bond15 [ 626.025271][ T1514] vlan1: entered allmulticast mode [ 626.031844][ T1514] bond15: entered allmulticast mode [ 626.272464][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12474'. [ 626.295416][ T1535] tls_set_device_offload_rx: netdev not found [ 626.318248][ T1534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12474'. [ 626.474206][ T1534] bridge5: port 1(vlan3) entered blocking state [ 626.507801][ T1534] bridge5: port 1(vlan3) entered disabled state [ 626.540226][ T1534] vlan3: entered allmulticast mode [ 626.553728][ T1534] bridge5: entered allmulticast mode [ 626.598049][ T1534] vlan3: left allmulticast mode [ 626.620262][ T1534] bridge5: left allmulticast mode [ 627.073163][ T1565] tipc: Enabled bearer , priority 0 [ 627.173673][ T1565] syzkaller0: entered promiscuous mode [ 627.184496][ T1565] syzkaller0: entered allmulticast mode [ 627.197112][ T1565] tipc: Resetting bearer [ 627.252853][ T1563] tipc: Resetting bearer [ 628.060749][ T1592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12493'. [ 628.088509][ T1592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12493'. [ 628.099718][ T1592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12493'. [ 628.623370][ T1602] netlink: 'syz.2.12496': attribute type 1 has an invalid length. [ 629.458898][ T1563] tipc: Disabling bearer [ 629.473258][ T1587] bond7: (slave lo): Releasing backup interface [ 629.482915][ T1587] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 629.501488][ T1587] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 629.525732][ T1588] ip6gre3: entered allmulticast mode [ 629.534408][ T1588] team0: Device ip6gre3 is of different type [ 629.593620][ T1602] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 629.598913][ T5776] lo speed is unknown, defaulting to 1000 [ 629.637325][ T5776] syz0: Port: 1 Link DOWN [ 629.653106][T27846] lo speed is unknown, defaulting to 1000 [ 629.913839][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12504'. [ 630.600094][ T5361] page_pool_release_retry() stalled pool shutdown: id 138, 1 inflight 60 sec [ 630.618074][ T1661] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12519'. [ 630.920295][ T1640] [ 630.922658][ T1640] ====================================================== [ 630.929669][ T1640] WARNING: possible circular locking dependency detected [ 630.936685][ T1640] syzkaller #0 Not tainted [ 630.941088][ T1640] ------------------------------------------------------ [ 630.948092][ T1640] syz.2.12508/1640 is trying to acquire lock: [ 630.954143][ T1640] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 630.963975][ T1640] [ 630.963975][ T1640] but task is already holding lock: [ 630.971322][ T1640] ffff8880333d6a60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 630.979942][ T1640] [ 630.979942][ T1640] which lock already depends on the new lock. [ 630.979942][ T1640] [ 630.990337][ T1640] [ 630.990337][ T1640] the existing dependency chain (in reverse order) is: [ 630.999368][ T1640] [ 630.999368][ T1640] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 631.007010][ T1640] lock_sock_nested+0x41/0x100 [ 631.012296][ T1640] inet_shutdown+0x6a/0x390 [ 631.017322][ T1640] nbd_mark_nsock_dead+0x2e9/0x560 [ 631.022945][ T1640] recv_work+0x1c2e/0x1d40 [ 631.027875][ T1640] process_scheduled_works+0xb5d/0x1860 [ 631.033930][ T1640] worker_thread+0xa53/0xfc0 [ 631.039033][ T1640] kthread+0x388/0x470 [ 631.043614][ T1640] ret_from_fork+0x514/0xb70 [ 631.048713][ T1640] ret_from_fork_asm+0x1a/0x30 [ 631.053988][ T1640] [ 631.053988][ T1640] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 631.061626][ T1640] __mutex_lock+0x1a3/0x1550 [ 631.066735][ T1640] nbd_queue_rq+0x37b/0x1100 [ 631.071837][ T1640] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 631.077901][ T1640] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 631.084749][ T1640] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 631.091247][ T1640] blk_mq_run_hw_queue+0x348/0x4f0 [ 631.097047][ T1640] blk_mq_dispatch_list+0xd16/0xe10 [ 631.102760][ T1640] blk_mq_flush_plug_list+0x48d/0x570 [ 631.108975][ T1640] __blk_flush_plug+0x3ed/0x4d0 [ 631.114360][ T1640] __submit_bio+0x28d/0x580 [ 631.119384][ T1640] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 631.125567][ T1640] block_read_full_folio+0x599/0x830 [ 631.131369][ T1640] filemap_read_folio+0x137/0x3b0 [ 631.136911][ T1640] do_read_cache_folio+0x358/0x590 [ 631.142548][ T1640] read_part_sector+0xb6/0x2b0 [ 631.147831][ T1640] adfspart_check_ICS+0xb1/0x960 [ 631.153294][ T1640] bdev_disk_changed+0x817/0x1770 [ 631.158835][ T1640] blkdev_get_whole+0x380/0x510 [ 631.164207][ T1640] bdev_open+0x31e/0xd30 [ 631.168965][ T1640] blkdev_open+0x470/0x610 [ 631.173890][ T1640] do_dentry_open+0x785/0x14e0 [ 631.179166][ T1640] vfs_open+0x3b/0x340 [ 631.183745][ T1640] path_openat+0x2e08/0x3860 [ 631.188847][ T1640] do_file_open+0x23e/0x4a0 [ 631.193863][ T1640] do_sys_openat2+0x113/0x200 [ 631.199058][ T1640] __x64_sys_openat+0x138/0x170 [ 631.204421][ T1640] do_syscall_64+0x15f/0xf80 [ 631.209538][ T1640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.215949][ T1640] [ 631.215949][ T1640] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 631.223152][ T1640] __mutex_lock+0x1a3/0x1550 [ 631.228266][ T1640] nbd_queue_rq+0xc6/0x1100 [ 631.233285][ T1640] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 631.239361][ T1640] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 631.246205][ T1640] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 631.252702][ T1640] blk_mq_run_hw_queue+0x348/0x4f0 [ 631.258333][ T1640] blk_mq_dispatch_list+0xd16/0xe10 [ 631.264045][ T1640] blk_mq_flush_plug_list+0x48d/0x570 [ 631.269929][ T1640] __blk_flush_plug+0x3ed/0x4d0 [ 631.275298][ T1640] __submit_bio+0x28d/0x580 [ 631.280305][ T1640] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 631.286465][ T1640] block_read_full_folio+0x599/0x830 [ 631.292271][ T1640] filemap_read_folio+0x137/0x3b0 [ 631.297809][ T1640] do_read_cache_folio+0x358/0x590 [ 631.303435][ T1640] read_part_sector+0xb6/0x2b0 [ 631.308893][ T1640] adfspart_check_ICS+0xb1/0x960 [ 631.314344][ T1640] bdev_disk_changed+0x817/0x1770 [ 631.319881][ T1640] blkdev_get_whole+0x380/0x510 [ 631.325250][ T1640] bdev_open+0x31e/0xd30 [ 631.330009][ T1640] blkdev_open+0x470/0x610 [ 631.334929][ T1640] do_dentry_open+0x785/0x14e0 [ 631.340208][ T1640] vfs_open+0x3b/0x340 [ 631.344782][ T1640] path_openat+0x2e08/0x3860 [ 631.349881][ T1640] do_file_open+0x23e/0x4a0 [ 631.354902][ T1640] do_sys_openat2+0x113/0x200 [ 631.360088][ T1640] __x64_sys_openat+0x138/0x170 [ 631.365483][ T1640] do_syscall_64+0x15f/0xf80 [ 631.370597][ T1640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.377009][ T1640] [ 631.377009][ T1640] -> #3 (set->srcu){.+.+}-{0:0}: [ 631.384145][ T1640] __synchronize_srcu+0xca/0x300 [ 631.389613][ T1640] elevator_switch+0x1e8/0x7a0 [ 631.395000][ T1640] elevator_change+0x2cc/0x450 [ 631.400285][ T1640] elevator_set_default+0x36c/0x430 [ 631.406098][ T1640] blk_register_queue+0x3e9/0x4e0 [ 631.411641][ T1640] __add_disk+0x677/0xd50 [ 631.416485][ T1640] add_disk_fwnode+0xfb/0x480 [ 631.421681][ T1640] nbd_dev_add+0x72c/0xb50 [ 631.426624][ T1640] nbd_init+0x168/0x1f0 [ 631.431299][ T1640] do_one_initcall+0x250/0x870 [ 631.436583][ T1640] do_initcall_level+0x104/0x190 [ 631.442033][ T1640] do_initcalls+0x59/0xa0 [ 631.446882][ T1640] kernel_init_freeable+0x2a6/0x3e0 [ 631.452676][ T1640] kernel_init+0x1d/0x1d0 [ 631.457517][ T1640] ret_from_fork+0x514/0xb70 [ 631.462624][ T1640] ret_from_fork_asm+0x1a/0x30 [ 631.467921][ T1640] [ 631.467921][ T1640] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 631.475742][ T1640] __mutex_lock+0x1a3/0x1550 [ 631.480875][ T1640] elevator_change+0x1b3/0x450 [ 631.486162][ T1640] elevator_set_none+0xb5/0x140 [ 631.491532][ T1640] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 631.497853][ T1640] nbd_start_device+0x17f/0xb10 [ 631.503226][ T1640] nbd_genl_connect+0x165b/0x1cf0 [ 631.509233][ T1640] genl_family_rcv_msg_doit+0x22a/0x330 [ 631.515292][ T1640] genl_rcv_msg+0x61c/0x7a0 [ 631.520325][ T1640] netlink_rcv_skb+0x232/0x4b0 [ 631.525708][ T1640] genl_rcv+0x28/0x40 [ 631.530214][ T1640] netlink_unicast+0x75c/0x8e0 [ 631.535493][ T1640] netlink_sendmsg+0x813/0xb40 [ 631.540784][ T1640] ____sys_sendmsg+0x972/0x9f0 [ 631.546070][ T1640] ___sys_sendmsg+0x2a5/0x360 [ 631.551269][ T1640] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.556724][ T1640] do_syscall_64+0x15f/0xf80 [ 631.561832][ T1640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.568239][ T1640] [ 631.568239][ T1640] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 631.576840][ T1640] blk_alloc_queue+0x546/0x680 [ 631.582126][ T1640] __blk_mq_alloc_disk+0x197/0x390 [ 631.587746][ T1640] nbd_dev_add+0x499/0xb50 [ 631.592676][ T1640] nbd_init+0x168/0x1f0 [ 631.597343][ T1640] do_one_initcall+0x250/0x870 [ 631.602618][ T1640] do_initcall_level+0x104/0x190 [ 631.608065][ T1640] do_initcalls+0x59/0xa0 [ 631.612901][ T1640] kernel_init_freeable+0x2a6/0x3e0 [ 631.618607][ T1640] kernel_init+0x1d/0x1d0 [ 631.623446][ T1640] ret_from_fork+0x514/0xb70 [ 631.628544][ T1640] ret_from_fork_asm+0x1a/0x30 [ 631.633820][ T1640] [ 631.633820][ T1640] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 631.641019][ T1640] __lock_acquire+0x15a5/0x2cf0 [ 631.646382][ T1640] lock_acquire+0x106/0x350 [ 631.651395][ T1640] fs_reclaim_acquire+0x71/0x100 [ 631.656859][ T1640] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 631.663200][ T1640] __alloc_skb+0x27d/0x7d0 [ 631.668159][ T1640] tcp_send_active_reset+0x8a/0x5a0 [ 631.673877][ T1640] __tcp_close+0x4c5/0xfe0 [ 631.678806][ T1640] tcp_close+0x28/0x110 [ 631.683479][ T1640] inet_release+0x143/0x190 [ 631.688500][ T1640] sock_close+0xc3/0x240 [ 631.693246][ T1640] __fput+0x44f/0xa60 [ 631.697736][ T1640] task_work_run+0x1d9/0x270 [ 631.702836][ T1640] get_signal+0x11eb/0x1330 [ 631.707843][ T1640] arch_do_signal_or_restart+0xbc/0x830 [ 631.713902][ T1640] exit_to_user_mode_loop+0x86/0x480 [ 631.719782][ T1640] do_syscall_64+0x33e/0xf80 [ 631.724973][ T1640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.731373][ T1640] [ 631.731373][ T1640] other info that might help us debug this: [ 631.731373][ T1640] [ 631.741585][ T1640] Chain exists of: [ 631.741585][ T1640] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET [ 631.741585][ T1640] [ 631.754183][ T1640] Possible unsafe locking scenario: [ 631.754183][ T1640] [ 631.761616][ T1640] CPU0 CPU1 [ 631.766967][ T1640] ---- ---- [ 631.772311][ T1640] lock(sk_lock-AF_INET); [ 631.776716][ T1640] lock(&nsock->tx_lock); [ 631.783640][ T1640] lock(sk_lock-AF_INET); [ 631.790561][ T1640] lock(fs_reclaim); [ 631.794532][ T1640] [ 631.794532][ T1640] *** DEADLOCK *** [ 631.794532][ T1640] [ 631.802919][ T1640] 2 locks held by syz.2.12508/1640: [ 631.808094][ T1640] #0: ffff888056b45640 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 631.818285][ T1640] #1: ffff8880333d6a60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 631.827351][ T1640] [ 631.827351][ T1640] stack backtrace: [ 631.833232][ T1640] CPU: 0 UID: 0 PID: 1640 Comm: syz.2.12508 Not tainted syzkaller #0 PREEMPT(full) [ 631.833264][ T1640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.833281][ T1640] Call Trace: [ 631.833290][ T1640] [ 631.833298][ T1640] dump_stack_lvl+0xe8/0x150 [ 631.833320][ T1640] print_circular_bug+0x2e1/0x300 [ 631.833344][ T1640] check_noncircular+0x12e/0x150 [ 631.833367][ T1640] __lock_acquire+0x15a5/0x2cf0 [ 631.833386][ T1640] ? exit_to_user_mode_loop+0x86/0x480 [ 631.833401][ T1640] ? do_syscall_64+0x33e/0xf80 [ 631.833424][ T1640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.833447][ T1640] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 631.833469][ T1640] lock_acquire+0x106/0x350 [ 631.833484][ T1640] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 631.833511][ T1640] fs_reclaim_acquire+0x71/0x100 [ 631.833534][ T1640] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 631.833555][ T1640] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 631.833577][ T1640] ? __alloc_skb+0x27d/0x7d0 [ 631.833595][ T1640] ? __alloc_skb+0x186/0x7d0 [ 631.833681][ T1640] __alloc_skb+0x27d/0x7d0 [ 631.833703][ T1640] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 631.833726][ T1640] tcp_send_active_reset+0x8a/0x5a0 [ 631.833751][ T1640] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 631.833768][ T1640] __tcp_close+0x4c5/0xfe0 [ 631.833791][ T1640] tcp_close+0x28/0x110 [ 631.833808][ T1640] inet_release+0x143/0x190 [ 631.833833][ T1640] sock_close+0xc3/0x240 [ 631.833847][ T1640] ? __pfx_sock_close+0x10/0x10 [ 631.833862][ T1640] __fput+0x44f/0xa60 [ 631.833884][ T1640] task_work_run+0x1d9/0x270 [ 631.833908][ T1640] ? __pfx_task_work_run+0x10/0x10 [ 631.833929][ T1640] ? kick_process+0xeb/0x160 [ 631.833950][ T1640] ? task_work_add+0x395/0x440 [ 631.833973][ T1640] get_signal+0x11eb/0x1330 [ 631.833990][ T1640] ? __fput_deferred+0x216/0x380 [ 631.834008][ T1640] ? __pfx___fput_deferred+0x10/0x10 [ 631.834029][ T1640] arch_do_signal_or_restart+0xbc/0x830 [ 631.834054][ T1640] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 631.834077][ T1640] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 631.834106][ T1640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.834123][ T1640] exit_to_user_mode_loop+0x86/0x480 [ 631.834138][ T1640] ? rcu_is_watching+0x15/0xb0 [ 631.834157][ T1640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.834173][ T1640] do_syscall_64+0x33e/0xf80 [ 631.834196][ T1640] ? trace_irq_disable+0x3b/0x140 [ 631.834219][ T1640] ? clear_bhb_loop+0x40/0x90 [ 631.834237][ T1640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.834253][ T1640] RIP: 0033:0x7f7ac8f9cdd9 [ 631.834268][ T1640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.834282][ T1640] RSP: 002b:00007f7ac9eef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.834300][ T1640] RAX: 000000000009fd00 RBX: 00007f7ac9216090 RCX: 00007f7ac8f9cdd9 [ 631.834312][ T1640] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 631.834322][ T1640] RBP: 00007f7ac9032d69 R08: 0000000000000000 R09: 0000000000000000 [ 631.834332][ T1640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.834342][ T1640] R13: 00007f7ac9216128 R14: 00007f7ac9216090 R15: 00007fff65ec5ef8 [ 631.834360][ T1640] [ 632.169374][ T1680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12525'.